last executing test programs: 14m2.114411402s ago: executing program 3 (id=876): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="03032cbd7000000000002000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r1) 14m1.815013053s ago: executing program 3 (id=878): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) syz_open_dev$vim2m(&(0x7f0000000100), 0xb8b, 0x2) close(0x3) r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000103000000004400050020010000000000000000000000000000000000022b0000000a000000ac1e01010000000000000000000000000000000004"], 0xfc}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {0x7, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x810) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, 0x0, 0x0) syz_io_uring_setup(0x3ba7, &(0x7f0000000500)={0x0, 0x800, 0x10000, 0x1, 0x8f}, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 13m58.292413009s ago: executing program 3 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x20) write(r3, &(0x7f0000000180)="9aa4", 0x2) (async) write(r3, &(0x7f0000000180)="9aa4", 0x2) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x11, 0xfffffffffffffffa) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r5 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r6, 0x35, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r6, 0x35, 0x1, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x8, 0x400001, 0x911, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r7, &(0x7f0000000280)}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 13m56.015320796s ago: executing program 3 (id=891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000480)="3b0da4264a5f6d451ff1db47fa1748af181ad547bd34134c94dc9fb9918326d623b3c949cb048ec1e5cd8ac765f3751e9be711ad1339ccc474fb990300205b8f", 0x40, 0x0, 0x0, &(0x7f0000000300)="2f901f18821b76afa1993cb8b540a1954f6d35e48df6d921470a3e18720e58351b72e54c2a36234cfd740c1bc1fe5d8c148567f8d71e8f08589a8ddd11383b536aef96bd84cc73f4cb72d74b71cc6948def8811e79c41a8390afb165aef085fb7b28ee78605391159e7847d398a778289b2cf1858e57efbecf64684b58a6c84eae8d1b3700ef0f4792fe8fc6b6ada68c96f605912b7145416b2655726d046ac29833440741cb0582923e96fba9c4bfa25c886e9705c21a0eac03c9ba0fc91299b5165126452d9d7405e0ee004e64737329e22133de090b5cefc96e8839e21c9f61c97f1b") syz_open_dev$video4linux(0x0, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x17, 0x1, 0x1, "14a5593b595ccb9e289f1548f12ec9745f90084a013424cf6dc99d2466980300"}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x13, 0xffffffffffffffff, 0xf9cd8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000d05000100070000006b87fbb3499fe365c45e52060b811b110400b915791bff8ae664ec29"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) setuid(0xee01) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x7, 0x0, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f0000000680), 0x0) io_uring_setup(0x18e6, &(0x7f0000000040)={0x0, 0x63d1, 0xc000, 0x4, 0x20002f7}) 13m53.262265031s ago: executing program 3 (id=896): r0 = socket$inet6(0xa, 0x80003, 0x6) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) setns(0xc9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0xea5bc50b6199d77e) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) lstat(0x0, &(0x7f0000002f80)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r6, 0x1, 0x0, @val=@iter={&(0x7f0000000180)=@task={r2, r1, r6}, 0x10}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x0, 0xee, 0x8d, &(0x7f0000000400)="de340659c57cdca21b517b468922125421be0ffa48aa99907fdb812c9513826c32bfc896fa6b0467cae866eab5db9230fd85995841f519f5ee453735af1465355496be70834c1839c7cf07c4872f54dfff2c62eb522b6e0649478556cd6d35e9f67e2d82df5577f810f461d5a5c21342c7d39d3930a8e646cc232fdb2f2ad4eb22f9da4062cd53dcc770b664c35bd827b134ace2ec094fc2de13abd6846a14692e2a2dacd97fdc38f39d759306af5b428b0f59b720d99f03bf7296c1efb403c709b23670c914e94c3bcc045856f4b712a3641c0ffcc4bd5408db6ae2f57808566f501ff8bfe18f8e6df471506927", &(0x7f00000005c0)=""/141, 0xedf, 0x0, 0x3a, 0x0, &(0x7f0000000680)="ff3c7f4651894d364278784e449ef6bb4597b1d334aa0b85ac4ea1923deee20c1d18b4021cd0853771cba67db6df2fb8c796df6ba3fcb444627a", &(0x7f0000000700), 0x1, 0x0, 0xaa6}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m52.190032312s ago: executing program 3 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x6, 0x80000000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000300)=""/223) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) 13m36.437792501s ago: executing program 32 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) recvmmsg$unix(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/192, 0xc0}], 0x1, 0x6, 0x80000000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r4, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000300)=""/223) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) 6m55.384841816s ago: executing program 4 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0xc, 0x10, 0x13d, &(0x7f0000000440)}) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 6m54.972531048s ago: executing program 4 (id=1936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f"], 0x1c}}, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f00000000c0)={0x8, 0x9a, 0x2}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r5, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) 6m53.977697881s ago: executing program 4 (id=1939): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a, 0x4010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f54}]}}}]}, 0x3c}}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc/net/afs/sysname\x00', &(0x7f0000000180)='openpromfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)="2e801dc070eb3d02050b03b7b765146d6bdd78cb2c2bb145f9cbdffe4012", 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_init(0x200, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03032cbd7000000000002000000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) 6m52.535299391s ago: executing program 4 (id=1940): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e24, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x20000, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xd, 0x0, 0x7}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="01051c00100014"], 0x37) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) 6m44.390487725s ago: executing program 4 (id=1955): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) setxattr(&(0x7f0000000780)='./config\x00', &(0x7f00000007c0)=@random={'osx.', 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, &(0x7f0000000840)='fscrypt-provisioning\x00', 0x15, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582024000000000090503"], 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r10, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r2}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r9, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r7, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x1, 0x1ff, 0x3, 0x9, 0x7, 0x6, 0x8, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x7ff, 0x1, 0x2, 0x4a}}, &(0x7f0000000940)=0xb0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000880)={0x2, 0x8, 0x4, 0x10000, 0x3, {0x0, 0x2710}, {0x5, 0x8, 0x2, 0x2d, 0x7, 0xa, "4343e2f6"}, 0x7fff, 0x4, {0xffffffffffffffff}, 0x100}) close$fd_v4l2_buffer(r13) r14 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r14, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) recvmsg(r14, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4, 0x0, 0x0, 0x8dff}, 0x10001) 6m42.131125434s ago: executing program 4 (id=1960): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3a33062c005b5126051b4c17c56d4ad053acc7a07d923a16edb44728176c697f9902b3db767d28631035be43e16705c78c741830949f803a3ab7a7fe0c3e9d1800942051"]) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x9, 0x4, 0x2, 0x1, 0x202a9, 0x1, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x804, 0x8, 0x400c, 0x8, 0x9, 0x3, 0x8, 0xff, 0x5}}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) 6m26.683585657s ago: executing program 33 (id=1960): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6d706f6c3d6c6f63616c3a33062c005b5126051b4c17c56d4ad053acc7a07d923a16edb44728176c697f9902b3db767d28631035be43e16705c78c741830949f803a3ab7a7fe0c3e9d1800942051"]) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x3, 0x9, 0x4, 0x2, 0x1, 0x202a9, 0x1, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x804, 0x8, 0x400c, 0x8, 0x9, 0x3, 0x8, 0xff, 0x5}}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r7, 0x4) socket$nl_route(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000000)=""/194, 0xc2}], 0x1, 0x17f, 0x0) 2m40.835329319s ago: executing program 1 (id=2496): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000340)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r1, &(0x7f0000000c80)={0x2020}, 0x2020) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{r1, &(0x7f00000001c0)='%+#^&\x00', 0x20202, &(0x7f0000000280)={@_ha_fsid={[0x9]}, {0x10, 0x7, 0xe, 0x5}}, 0x2, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)}, 0x1, &(0x7f0000000680)=[{0x0, 0x4, &(0x7f0000000380)='rr\x00', &(0x7f0000000580)="b7487bbe3b2525d7d1fb3db9547cd0dc3ea6e15d383b6c52de36875512b59cc07757eca2cf3f5ae1c9356d08cfdaace3d404dd7e10299fdf4d02a456c5dd2f4042aa02b3030f1bc50a1581fb6309cd9e396542087d045fa36f2435d4199fd6ed0c4306715741ecb3cb7b53d501cf2fa977c6e002205de60b5398c4396c20759bf9d5586604227ed3f4a989d15d93210eb1ad6c82e3924e50e8fd4c43b8d0de3a481b14d140730fa8edc00f832141d68f74854f76c3d7a88c8abf0f923f733b9cee3d52164981455968b56ccfaa333d57abd46f2a19a7099be71390d35292d28d247ef50c15a92c", 0xe7, 0x10}]}) io_uring_register$IORING_REGISTER_QUERY(r1, 0x23, &(0x7f0000000e00)=[{&(0x7f0000000800)={&(0x7f00000003c0)={0x0, &(0x7f0000000380)="cb5121e077eb224e9b3ac03765f2f95d466b7f4f7c93ac610bda03417f8514", 0x1, 0x1f}, &(0x7f0000000740)="847ce33b6f41d2b40ecf7e9a051469190d1e891674b3f41298c200de61d22c435c53d5fada53ba3ba75904bb9f505191009a048c79725f17087c803ace52c374ebe739954d00cc409892c89724be8fc7fc2240aa408b9a39271f89c431678f283cdfd96cef4ca1788780e315a4f84b072097ba6cd0579242808734d8db9e3557500573889bee4819104a2a3f6827d33282427a83478f8f9e5f6532", 0x1, 0x9b}, &(0x7f0000000840)="f56e44d72fdddd87c81f321f80090e5cd48d8d879714e63358cebf39953d87744db0b2bbb8953f13c8b31e03500d09784f176702fedbdd76aacdb93f84997d06e3cfa3ba718f3749ea2ce2d77fcb02b40d5cb1796a649642be4ab498bab240dbcc9857f22656c547444b7056ecaf703d21fa938b3e6b57893bb6e4a6b7f423230cf9613bb1a2435b27f7d5cac49100fb0fc7368153850749b31d66aa4d27351a6726e5ae0d8b0d3ee17e529368072f15922a2a0f35", 0x2, 0xb5}, {&(0x7f0000000a80)={&(0x7f0000000a00)={0x0, &(0x7f0000000900)="94029f0d749176b402197cda960983d64c30846e943aa13a8ca981518c79c53e0e7b2e5f5e25657dc8af64db1674e8517ce7435223b6e7ce2d58867c6ef0197899761e0e63538d8c84ca55f550481bc36554329733a0f03cb45b79af6fc4786ca3cbc1e5f0300d6d4e6e8b98aeca1f148f4abb7fc1c34e91d01914e241be9608a3a116b0c94faca7418689d69761bd548e6f8321c1eccadcd72f0ef5377b9659ed247f8befa441923c004772fbc50dd7ecb14559253361824efbc0b540e7e7ed2e5565ba8af6ab88f6", 0x1, 0xc9}, &(0x7f0000000a40)="595a7df4653b9fe3f8185fcbc13275b930df99f087982fb0130b5801385ce7acfac9012f65", 0x1, 0x25}, &(0x7f0000000ac0)="85d3fcde1d053ef4117e8bf6cae5040c990bbea69b620e52f249e04676cfaf91e4d69087d8dd7350daf18c1eaa1c5619f2389e2683aadf99f3b7413d9b4b14acc2e81dbd7fd61bbadba65ef455a9bc1831a512d39e3d972784f41cac0634cebc386765dedbb27b4845e988", 0x1, 0x6b}, {&(0x7f0000000cc0)={&(0x7f0000000c40)={0x0, &(0x7f0000000b40)="0caba2a5be910b36650e5da85a06aa002b7665029c565cc405269842007ce3bc20448dd289428b8ccf022cbd4d61a8890cfdfb57381d510c0823e0843966bf477300ccd23dcfe74975bf93a447846dede67f869f08ca2d90fe4fef2d31433034c365c87aea5ba6caee9a8e97e992c6de911d7663c31b13d91ee4ef249476dcaed24cc86bc54c34ced1b3d9d2508f4873b0ad17f09d88220b65195f3a4a758f79abf62443eaee091005fb466f49dfbd354ac813a5d776cabf581a58e40cdf27276d409bd945df36bd", 0x1, 0xc8}, &(0x7f0000000c80), 0x1}, &(0x7f0000000d00)="537dd9e285dcb86425704bce14e1c5a8b1e112ce0edc870e99879d3e52938498e94c70ec1c83d1930a0d08892f1aa34a2d44aa6d7f46d55b0781d506f388e2f5a0fb7ebc92ce59cfec7f0a47753c9f9cb65064cf7049a50ee3c7d98aa65035575e55800299c6c0587507a8e1c979abefa26a2997ccb5c16e586aeb99065e050a4e240848bb7fb7999b814a89c499a2f006ddfa93dddb05eb515181bd641f7d0a11b8aa7f91bb694d8458fb96aa320b096faf831a1d410e4c10ddc11141a6be651e2b76c2aaf6ffa8d8a6dd700af9946fc5f4d46b3a02a14703e3d10d00e42b54a1ed3d44f9d42dc02b04a338fd35124a387efc67c0571e54", 0x0, 0xf8}], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x274) 2m40.336900905s ago: executing program 1 (id=2498): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2m39.23422139s ago: executing program 1 (id=2503): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000035c0), 0x5005) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=0xfffffe00, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0xaf, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000c94232dafc695411145757324a8e1795eb285b0f8ef4d1fa0cfea93eb505b796a80f0900000483a248c56cacda363817ae157d17166e0bea65da9c6d3ffe52a62d0700758a00af0f7b63d4ac4027e5b0f2a7bcba849a6cf1fb039300000000008f9d0000000000000000000000000008bb0a33ef3a016702ccd7d5c542b8bd99ca08d650c56980", @ANYRES16=r6, @ANYBLOB="01000000000200f2c8dc1b000000180001801400020073797a5f74756ef90c0002800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x9c, r6, 0x322, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 2m37.259489269s ago: executing program 1 (id=2505): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x5}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg(r2, &(0x7f0000000a40)={0x1, {&(0x7f0000000880)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/222, 0xde, 0x0, 0x3, 0x2}}, 0x48) mount(0x0, &(0x7f0000000280)='./sys/class/rfkill/rfkill0/soft\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000100)={@r2t={{0x9, 0x0, 0x18, 0xa, 0x80000000}, 0x9, 0xb877, 0x1, 0x2}, @void}, 0x80, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x101, 0x10000, 0x2}) 2m34.554983073s ago: executing program 1 (id=2512): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8000, 0x8000, 0x8f, 0x0, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x68, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=0xfffffe00, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0xaf, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000c94232dafc695411145757324a8e1795eb285b0f8ef4d1fa0cfea93eb505b796a80f0900000483a248c56cacda363817ae157d17166e0bea65da9c6d3ffe52a62d0700758a00af0f7b63d4ac4027e5b0f2a7bcba849a6cf1fb039300000000008f9d0000000000000000000000000008bb0a33ef3a016702ccd7d5c542b8bd99ca08d650c56980", @ANYRES16=r7, @ANYBLOB="01000000000200f2c8dc1b000000180001801400020073797a5f74756ef90c0002800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x9c, r7, 0x322, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 2m31.621029176s ago: executing program 1 (id=2520): openat$kvm(0xffffffffffffff9c, 0x0, 0x141040, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') setuid(0xee01) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x15) sync() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000005a80)=[{{&(0x7f0000000180)=@in6, 0x80, &(0x7f0000000a00)=[{&(0x7f0000005cc0)=""/167, 0xa7}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000003580)=""/234, 0xea}, {&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f0000000680)=""/54, 0x36}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/206, 0xce}], 0x8, &(0x7f0000000a80)}, 0x1}, {{&(0x7f0000000ac0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/32, 0x20}, {&(0x7f0000000c40)=""/246, 0xf6}, {&(0x7f0000000d40)=""/160, 0xa0}, {&(0x7f0000000e00)=""/127, 0x7f}, {&(0x7f0000000e80)=""/106, 0x6a}, {&(0x7f0000000f00)=""/100, 0x64}, {&(0x7f0000000f80)=""/90, 0x5a}, {&(0x7f0000001000)=""/23, 0x17}, {&(0x7f0000001040)=""/49, 0x31}], 0xa}, 0x3}, {{&(0x7f0000001140)=@un=@abs, 0x80, &(0x7f00000034c0)=[{&(0x7f00000011c0)=""/1, 0x1}, {&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/19, 0x13}, {&(0x7f0000002380)=""/217, 0xd9}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003540)=""/11, 0xb}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000003680)=""/178, 0xb2}, {&(0x7f0000003740)=""/164, 0xa4}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003840)=""/210, 0xd2}, {&(0x7f0000003940)=""/142, 0x8e}, {&(0x7f0000003a00)=""/141, 0x8d}, {&(0x7f0000003ac0)=""/84, 0x54}, {&(0x7f0000003b40)=""/47, 0x2f}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x6, &(0x7f0000004c00)=""/16, 0x10}, 0x7}, {{&(0x7f0000004c40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004cc0)=""/177, 0xb1}, {&(0x7f0000004d80)=""/223, 0xdf}, {&(0x7f0000004e80)=""/58, 0x3a}, {&(0x7f0000004ec0)=""/203, 0xcb}, {&(0x7f0000004fc0)=""/136, 0x88}, {&(0x7f0000005080)=""/91, 0x5b}, {&(0x7f0000005100)=""/201, 0xc9}], 0x7}, 0x5}, {{&(0x7f0000005280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000005300)=""/75, 0x4b}, {&(0x7f0000005380)=""/196, 0xc4}, {&(0x7f0000005480)=""/214, 0xd6}, {&(0x7f0000005580)=""/215, 0xd7}, {&(0x7f0000005680)=""/194, 0xc2}], 0x5, &(0x7f0000005800)=""/4, 0x4}, 0x3}, {{&(0x7f0000005840)=@nfc, 0x80, &(0x7f00000058c0)}, 0x3}, {{&(0x7f0000005900), 0x80, &(0x7f0000005a40)=[{&(0x7f0000005980)=""/169, 0xa9}], 0x1}, 0x7fffffff}], 0x9, 0x40012120, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800700, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 2m16.539929222s ago: executing program 34 (id=2520): openat$kvm(0xffffffffffffff9c, 0x0, 0x141040, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') setuid(0xee01) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000640), 0x15) sync() sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000005a80)=[{{&(0x7f0000000180)=@in6, 0x80, &(0x7f0000000a00)=[{&(0x7f0000005cc0)=""/167, 0xa7}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000003580)=""/234, 0xea}, {&(0x7f0000000600)=""/42, 0x2a}, {&(0x7f0000000680)=""/54, 0x36}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/206, 0xce}], 0x8, &(0x7f0000000a80)}, 0x1}, {{&(0x7f0000000ac0)=@sco={0x1f, @none}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b40)=""/139, 0x8b}, {&(0x7f0000000c00)=""/32, 0x20}, {&(0x7f0000000c40)=""/246, 0xf6}, {&(0x7f0000000d40)=""/160, 0xa0}, {&(0x7f0000000e00)=""/127, 0x7f}, {&(0x7f0000000e80)=""/106, 0x6a}, {&(0x7f0000000f00)=""/100, 0x64}, {&(0x7f0000000f80)=""/90, 0x5a}, {&(0x7f0000001000)=""/23, 0x17}, {&(0x7f0000001040)=""/49, 0x31}], 0xa}, 0x3}, {{&(0x7f0000001140)=@un=@abs, 0x80, &(0x7f00000034c0)=[{&(0x7f00000011c0)=""/1, 0x1}, {&(0x7f0000001200)=""/161, 0xa1}, {&(0x7f00000006c0)=""/111, 0x6f}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/19, 0x13}, {&(0x7f0000002380)=""/217, 0xd9}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003540)=""/11, 0xb}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000005d80)=""/206, 0xce}, {&(0x7f0000003680)=""/178, 0xb2}, {&(0x7f0000003740)=""/164, 0xa4}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003840)=""/210, 0xd2}, {&(0x7f0000003940)=""/142, 0x8e}, {&(0x7f0000003a00)=""/141, 0x8d}, {&(0x7f0000003ac0)=""/84, 0x54}, {&(0x7f0000003b40)=""/47, 0x2f}, {&(0x7f0000003b80)=""/4096, 0x1000}], 0x6, &(0x7f0000004c00)=""/16, 0x10}, 0x7}, {{&(0x7f0000004c40)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000005200)=[{&(0x7f0000004cc0)=""/177, 0xb1}, {&(0x7f0000004d80)=""/223, 0xdf}, {&(0x7f0000004e80)=""/58, 0x3a}, {&(0x7f0000004ec0)=""/203, 0xcb}, {&(0x7f0000004fc0)=""/136, 0x88}, {&(0x7f0000005080)=""/91, 0x5b}, {&(0x7f0000005100)=""/201, 0xc9}], 0x7}, 0x5}, {{&(0x7f0000005280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000005300)=""/75, 0x4b}, {&(0x7f0000005380)=""/196, 0xc4}, {&(0x7f0000005480)=""/214, 0xd6}, {&(0x7f0000005580)=""/215, 0xd7}, {&(0x7f0000005680)=""/194, 0xc2}], 0x5, &(0x7f0000005800)=""/4, 0x4}, 0x3}, {{&(0x7f0000005840)=@nfc, 0x80, &(0x7f00000058c0)}, 0x3}, {{&(0x7f0000005900), 0x80, &(0x7f0000005a40)=[{&(0x7f0000005980)=""/169, 0xa9}], 0x1}, 0x7fffffff}], 0x9, 0x40012120, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800700, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 31.995761961s ago: executing program 2 (id=2815): r0 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000001200)={0x1, 0x4, [0x509, 0xc54, 0x7cb, 0x50]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000001240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0xd, 0x8001, 0x81c, 0xfff9, "22289e83b1297ab6e53b00ec177cb8f9b635af7d0e88149569d8cfad2db7f1e1a2a5b0b5b1fcd25240c3dabcf11eef0f0613c519f74de552b475e6cd58a748aaa9f9d7d4496c2c535bde1c46b5626a824be7df9b962a04a7012d653c0a1c05779cb35e2ae897af2c7375251ef7c55df7c3492cbca2d8fc368f6e1569ca5e52ba"}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x8040, 0x15c) unshare(0x22020400) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0xfffffffc}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_UNLOCK(0x0, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) openat$vcs(0xffffffffffffff9c, 0x0, 0x1091c1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 29.907082275s ago: executing program 2 (id=2818): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 13.874432696s ago: executing program 6 (id=2854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb0\x00', 0x1ff) setxattr(&(0x7f0000000780)='./config\x00', &(0x7f00000007c0)=@random={'osx.', 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, &(0x7f0000000840)='fscrypt-provisioning\x00', 0x15, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f01000000000000000000090582024000000000090503"], 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r10, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r2}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r9, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r7, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x1, 0x1ff, 0x3, 0x9, 0x7, 0x6, 0x8, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x7ff, 0x1, 0x2, 0x4a}}, &(0x7f0000000940)=0xb0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000880)={0x2, 0x8, 0x4, 0x10000, 0x3, {0x0, 0x2710}, {0x5, 0x8, 0x2, 0x2d, 0x7, 0xa, "4343e2f6"}, 0x7fff, 0x4, {0xffffffffffffffff}, 0x100}) close$fd_v4l2_buffer(r13) r14 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r14, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r14, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) recvmsg(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000580)=""/18, 0x12}], 0x4, 0x0, 0x0, 0x8dff}, 0x10001) 11.630294386s ago: executing program 6 (id=2859): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x161281) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) syz_open_dev$vim2m(&(0x7f0000000100), 0xb8b, 0x2) close(0x3) r1 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000103000000004400050020010000000000000000000000000000000000022b0000000a000000ac1e01010000000000000000000000000000000004"], 0xfc}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {0x0, 0x0, 0xfffffffffffffffc}, {0x7, 0x22}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) syz_usbip_server_init(0x3) syz_usbip_server_init(0x4) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x3ba7, &(0x7f0000000500)={0x0, 0x800, 0x10000, 0x1, 0x8f}, 0x0, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) 9.852257517s ago: executing program 6 (id=2861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002900)=r5, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 9.381835713s ago: executing program 7 (id=2863): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) unshare(0x2c020400) msgget$private(0x0, 0x783) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.240949553s ago: executing program 5 (id=2864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="f692", 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x4000009}, 0x1c) shutdown(r0, 0x1) 8.577016449s ago: executing program 5 (id=2865): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x8800) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000001, 0x8132, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 8.572876055s ago: executing program 7 (id=2866): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0xffffffff, 0x800, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e704, 0x800, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x4, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x300}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1582, 0x400, 0x10000001, 0x3}}], 0x1, 0x0, 0x0) 8.343832696s ago: executing program 5 (id=2867): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x5}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg(r2, &(0x7f0000000a40)={0x1, {&(0x7f0000000880)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/222, 0xde, 0x0, 0x3, 0x2}}, 0x48) mount(0x0, &(0x7f0000000280)='./sys/class/rfkill/rfkill0/soft\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000100)={@r2t={{0x9, 0x0, 0x18, 0xa, 0x80000000}, 0x9, 0xb877, 0x1, 0x2}, @void}, 0x80, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x101, 0x10000, 0x2}) 8.1439207s ago: executing program 7 (id=2868): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) 8.050111377s ago: executing program 6 (id=2869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x0, 0x0}) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x10, "d6929befcbf0e6446ecc1eacd888dcb6"}, &(0x7f00000001c0)=0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0xfffdffff, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x3, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x40000007, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x8, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0x8, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x5, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x1a2, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x9, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0x0, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0xc9, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x40, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x27, 0x4, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x6, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xa8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x4, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 7.993929131s ago: executing program 2 (id=2820): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x2}, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x4}, 0x8) memfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3415c0, 0x154) write(r6, &(0x7f0000000080)='common_pid > 0', 0xe) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x5b) syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904"], 0x0) 7.745717875s ago: executing program 7 (id=2871): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=0xfffffe00, 0x4) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x9c, r5, 0x322, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 6.890059269s ago: executing program 0 (id=2873): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.563175529s ago: executing program 6 (id=2874): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="438801ffffffff02000100", 0xb}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x5c4, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) r7 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0xd00, 0x4) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206050400000000000000000a00000005000100070000000900020073797a30000000000d000300686173683a6e6574000000000500040000000000050005000a000000a5ae6054e57ecf18d091ca351ec6366815aa3453076dd8ec340d601ba398eb3bfcb78ce3faf177615c12ba1d79e34735fa90"], 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000090605000000000000000000f2ff0400"], 0x14}}, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000700)={&(0x7f0000000000), 0x10, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000a06050000000000000000000a00000005000100070000000900020073797a30000000001c00078018000180140002400000000000000050dde7500928134aa0e79656c6ee5aee"], 0x44}}, 0x0) r10 = getuid() sendmsg$nl_netfilter(r8, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x9, 0x4, 0x201, 0x70bd2d, 0x25dfdbfc, {0x5, 0x0, 0x6}, [@nested={0xc, 0x119, 0x0, 0x1, [@nested={0x4, 0x48}, @typed={0x4, 0x76}]}, @typed={0x8, 0x80, 0x0, 0x0, @uid=r10}, @generic="199aef2f4496b9863b78d1cd8d2d36fd750ca6b8f13fe06fe2367a23dc09d04eb834e178ac3f6e8a648da0f0563722fab7d73f12e0048e4d7ee1698125b2"]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) 5.161862376s ago: executing program 0 (id=2875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=r0], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r0, @ANYRES64=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000008}, 0x40) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x420041, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, 0x0, 0x9, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x30}}, 0xc005) 5.056907372s ago: executing program 5 (id=2876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$evdev(&(0x7f0000000340), 0x1, 0x109001) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x2e05, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0x2}) shmctl$SHM_LOCK(0x0, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) unshare(0x22020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x4800) msgsnd(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000002e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2370321c6ba100b7c369032e23ccae0f9c0f60d6da9427812036d8c53729cef65a2430ba43762e1ad92ea51ee9a1971b77035"], 0xeb, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 4.968258086s ago: executing program 0 (id=2877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe97, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, r1, 0x917, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xb0}, @L2TP_ATTR_COOKIE={0x0, 0xf, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0xffffffffffffff9d}}, 0x0) 4.884931142s ago: executing program 0 (id=2878): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000003c0)={0x0, 0xffffffff, 0x800, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e704, 0x800, 0x2, 0x31e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x4, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x300}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1582, 0x400, 0x10000001, 0x3}}], 0x1, 0x0, 0x0) 4.88315061s ago: executing program 2 (id=2879): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090601020000000000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c20000000000100007"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fa, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 3.949527497s ago: executing program 7 (id=2880): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.823660853s ago: executing program 5 (id=2881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0xaf) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$video4linux(&(0x7f0000000140), 0x35c3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) 3.80628387s ago: executing program 0 (id=2882): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = socket(0x1d, 0x5, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x200e) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='1', 0x1) openat(r0, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x8100, 0x10) pipe(&(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) 1.946485595s ago: executing program 2 (id=2883): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.937834502s ago: executing program 5 (id=2884): sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xd) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0xea5bc50b6199d77e) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) lstat(0x0, &(0x7f0000002f80)) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r5, 0x1, 0x0, @val=@iter={&(0x7f0000000180)=@task={r1, r0, r5}, 0x10}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r5, 0x0, 0xee, 0x8d, &(0x7f0000000400)="de340659c57cdca21b517b468922125421be0ffa48aa99907fdb812c9513826c32bfc896fa6b0467cae866eab5db9230fd85995841f519f5ee453735af1465355496be70834c1839c7cf07c4872f54dfff2c62eb522b6e0649478556cd6d35e9f67e2d82df5577f810f461d5a5c21342c7d39d3930a8e646cc232fdb2f2ad4eb22f9da4062cd53dcc770b664c35bd827b134ace2ec094fc2de13abd6846a14692e2a2dacd97fdc38f39d759306af5b428b0f59b720d99f03bf7296c1efb403c709b23670c914e94c3bcc045856f4b712a3641c0ffcc4bd5408db6ae2f57808566f501ff8bfe18f8e6df471506927", &(0x7f00000005c0)=""/141, 0xedf, 0x0, 0x3a, 0x0, &(0x7f0000000680)="ff3c7f4651894d364278784e449ef6bb4597b1d334aa0b85ac4ea1923deee20c1d18b4021cd0853771cba67db6df2fb8c796df6ba3fcb444627a", &(0x7f0000000700), 0x1, 0x0, 0xaa6}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00012000100009045507010349020009058203"], 0x0) 1.513806531s ago: executing program 6 (id=2885): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8000, 0x8000, 0x8f, 0x0, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x68, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @multicast2, {[@generic={0x86, 0xf, "a9d91dde86c8403c2e9a1dc99a"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=0xfffffe00, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0xaf, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000c94232dafc695411145757324a8e1795eb285b0f8ef4d1fa0cfea93eb505b796a80f0900000483a248c56cacda363817ae157d17166e0bea65da9c6d3ffe52a62d0700758a00af0f7b63d4ac4027e5b0f2a7bcba849a6cf1fb039300000000008f9d0000000000000000000000000008bb0a33ef3a016702ccd7d5c542b8bd99ca08d650c56980", @ANYRES16=r7, @ANYBLOB="01000000000200f2c8dc1b000000180001801400020073797a5f74756ef90c0002800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x9c, r7, 0x322, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 1.502996024s ago: executing program 0 (id=2886): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000400)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8000, 0x8000, 0x8f, 0x0, {{0xa, 0x4, 0x3, 0x8, 0x28, 0x68, 0x0, 0xd, 0x4, 0x0, @private=0xa010101, @multicast2, {[@generic={0x86, 0xf, "a9d91dde86c8403c2e9a1dc99a"}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) setsockopt$inet_sctp_SCTP_REUSE_PORT(0xffffffffffffffff, 0x84, 0x24, &(0x7f0000000300)=0xfffffe00, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0xaf, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000c94232dafc695411145757324a8e1795eb285b0f8ef4d1fa0cfea93eb505b796a80f0900000483a248c56cacda363817ae157d17166e0bea65da9c6d3ffe52a62d0700758a00af0f7b63d4ac4027e5b0f2a7bcba849a6cf1fb039300000000008f9d0000000000000000000000000008bb0a33ef3a016702ccd7d5c542b8bd99ca08d650c56980", @ANYRES16=r7, @ANYBLOB="01000000000200f2c8dc1b000000180001801400020073797a5f74756ef90c0002800000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x9c, r7, 0x322, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) 38.494027ms ago: executing program 7 (id=2887): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x5}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg(r2, &(0x7f0000000a40)={0x1, {&(0x7f0000000880)=""/224, 0xe0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000480)=""/222, 0xde, 0x0, 0x3, 0x2}}, 0x48) mount(0x0, &(0x7f0000000280)='./sys/class/rfkill/rfkill0/soft\x00', &(0x7f0000000040)='vfat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rfkill/rfkill0/soft\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='1', 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendto$inet_nvme_of_msg(0xffffffffffffffff, &(0x7f0000000100)={@r2t={{0x9, 0x0, 0x18, 0xa, 0x80000000}, 0x9, 0xb877, 0x1, 0x2}, @void}, 0x80, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x101, 0x10000, 0x2}) 0s ago: executing program 2 (id=2888): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x2a, 0x0, @remote}, 0x10) getpeername(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in=@local}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000080000008500000053000000850000005000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, 0x0, 0x40, 0x0, 0x0, {0x1}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r8, &(0x7f0000000000)='27', 0x2) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r10, 0x2, 0x0) getdents(r10, 0x0, 0x58) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x400}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf5e216c115a523aa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x20, 0x0, 0x0, 0x0, 0x0, 0x80}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x200008c5) kernel console output (not intermixed with test programs): ][ T176] vhci_hcd vhci_hcd.0: release socket [ 1177.193770][ T176] vhci_hcd vhci_hcd.0: disconnect device [ 1177.247136][ T176] vhci_hcd vhci_hcd.0: stop threads [ 1177.247162][ T176] vhci_hcd vhci_hcd.0: release socket [ 1177.247198][ T176] vhci_hcd vhci_hcd.0: disconnect device [ 1177.511987][ T5819] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1177.663327][ T5819] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1177.665725][ T5819] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1177.665759][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.665775][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.665787][ T5819] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1177.666579][ T5819] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1177.666600][ T5819] usb 6-1: Manufacturer: syz [ 1177.668039][ T5819] usb 6-1: config 0 descriptor?? [ 1178.318587][T16046] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2560'. [ 1178.328059][T14290] Bluetooth: hci2: command tx timeout [ 1179.655235][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.656219][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.656292][T16006] bridge_slave_0: entered allmulticast mode [ 1179.660440][T16006] bridge_slave_0: entered promiscuous mode [ 1179.705865][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.706050][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.706142][T16006] bridge_slave_1: entered allmulticast mode [ 1179.732112][T16006] bridge_slave_1: entered promiscuous mode [ 1179.745093][T16055] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2562'. [ 1179.771772][ T7020] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1179.922132][ T7020] usb 1-1: Using ep0 maxpacket: 32 [ 1179.922660][ T7020] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1179.923790][ T7020] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 1179.923832][ T7020] usb 1-1: config 32 has no interface number 0 [ 1179.923851][ T7020] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1179.923865][ T7020] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1179.923880][ T7020] usb 1-1: config 32 interface 85 has no altsetting 0 [ 1179.926135][ T7020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.926149][ T7020] usb 1-1: Product: syz [ 1179.926166][ T7020] usb 1-1: Manufacturer: syz [ 1179.926178][ T7020] usb 1-1: SerialNumber: syz [ 1179.928276][T16052] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1180.041476][ T5819] usbhid 6-1:0.0: can't add hid device: -71 [ 1180.041570][ T5819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1180.117977][ T5819] usb 6-1: USB disconnect, device number 60 [ 1180.169642][T16006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.188157][T16006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.311113][T16006] team0: Port device team_slave_0 added [ 1180.320554][T16006] team0: Port device team_slave_1 added [ 1180.391774][T14290] Bluetooth: hci2: command tx timeout [ 1180.399534][T16006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.399545][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.399558][T16006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.459671][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2565'. [ 1180.459692][T16066] nbd: must specify an index to disconnect [ 1180.479968][T16065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1180.479995][T16065] netlink: 'syz.2.2566': attribute type 7 has an invalid length. [ 1180.480009][T16065] netlink: 'syz.2.2566': attribute type 8 has an invalid length. [ 1180.480019][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1180.532740][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1180.532767][T16067] netlink: 'syz.2.2566': attribute type 7 has an invalid length. [ 1180.532779][T16067] netlink: 'syz.2.2566': attribute type 8 has an invalid length. [ 1180.532790][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'. [ 1180.537228][T16006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.537241][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.537263][T16006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.662797][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1180.662812][ T30] audit: type=1326 audit(1791353651.136:15856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16064 comm="syz.2.2566" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f815839e199 code=0x0 [ 1180.725438][T16006] hsr_slave_0: entered promiscuous mode [ 1180.727701][T16006] hsr_slave_1: entered promiscuous mode [ 1181.183911][ T7020] appletouch 1-1:32.85: Failed to read mode from device. [ 1181.183999][ T7020] appletouch 1-1:32.85: probe with driver appletouch failed with error -5 [ 1181.228684][ T7020] usb 1-1: USB disconnect, device number 4 [ 1182.225297][ T25] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1182.380932][T16006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1182.428048][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.431806][T16006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1182.459374][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1182.459738][T16006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1182.471757][T14290] Bluetooth: hci2: command tx timeout [ 1182.483056][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1182.500894][T16006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1182.538926][T16006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1182.777141][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2574'. [ 1182.919413][T16006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1182.969921][T16006] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.984976][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.985113][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.010344][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.010387][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.052016][ T5721] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1183.204836][ T5721] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1183.205748][ T5721] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1183.205772][ T5721] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1183.205785][ T5721] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1183.207386][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1183.207410][ T5721] usb 6-1: Product: syz [ 1183.207425][ T5721] usb 6-1: Manufacturer: syz [ 1183.207439][ T5721] usb 6-1: SerialNumber: syz [ 1183.229985][ T30] audit: type=1400 audit(1791353653.696:15857): avc: denied { write } for pid=16102 comm="syz.0.2569" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1183.240783][ T5721] usb 6-1: config 0 descriptor?? [ 1184.270404][ T5721] hub 6-1:0.0: bad descriptor, ignoring hub [ 1184.270425][ T5721] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1184.293355][ T5721] usb 6-1: selecting invalid altsetting 0 [ 1184.551765][T14290] Bluetooth: hci2: command tx timeout [ 1184.713641][ T5721] usb 6-1: USB disconnect, device number 61 [ 1184.769766][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1184.841743][ T5742] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1184.992503][ T5742] usb 1-1: Using ep0 maxpacket: 32 [ 1184.993062][ T5742] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1184.996916][ T5742] usb 1-1: config 32 has an invalid interface number: 85 but max is 0 [ 1184.996938][ T5742] usb 1-1: config 32 has no interface number 0 [ 1184.996970][ T5742] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1184.996997][ T5742] usb 1-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1184.997022][ T5742] usb 1-1: config 32 interface 85 has no altsetting 0 [ 1185.000195][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.000216][ T5742] usb 1-1: Product: syz [ 1185.000229][ T5742] usb 1-1: Manufacturer: syz [ 1185.000244][ T5742] usb 1-1: SerialNumber: syz [ 1185.090843][T16107] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1185.943676][T16006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.240999][ T30] audit: type=1400 audit(1791353656.706:15858): avc: denied { write } for pid=16133 comm="syz.2.2580" name="nullb" dev="configfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.242828][ T30] audit: type=1400 audit(1791353656.716:15859): avc: denied { write } for pid=16133 comm="syz.2.2580" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1186.352164][ T5742] appletouch 1-1:32.85: Failed to read mode from device. [ 1186.352311][ T5742] appletouch 1-1:32.85: probe with driver appletouch failed with error -5 [ 1186.388830][ T5742] usb 1-1: USB disconnect, device number 5 [ 1186.462348][T16139] netlink: 900 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1187.327452][ T25] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1187.621969][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1187.622680][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1187.623444][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1187.623460][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1187.623472][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1187.625174][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.625188][ T25] usb 3-1: Product: syz [ 1187.625196][ T25] usb 3-1: Manufacturer: syz [ 1187.625205][ T25] usb 3-1: SerialNumber: syz [ 1187.627461][T16134] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1187.702048][T16006] veth0_vlan: entered promiscuous mode [ 1187.726235][ T25] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1187.740451][ T25] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1187.740485][ T25] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1187.754203][T16006] veth1_vlan: entered promiscuous mode [ 1188.326554][T16006] veth0_macvtap: entered promiscuous mode [ 1188.348890][T16006] veth1_macvtap: entered promiscuous mode [ 1188.350822][ T5721] usb 3-1: USB disconnect, device number 120 [ 1188.379996][T16006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.405168][T16006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.416480][ T1530] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.416601][ T1530] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.416637][ T1530] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.455439][ T1392] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.487439][ T30] audit: type=1400 audit(1791353658.956:15860): avc: denied { create } for pid=16148 comm="syz.6.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1188.578273][ T56] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1188.757603][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.757623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.811703][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 1189.136701][T16157] lo: entered allmulticast mode [ 1189.143901][ T56] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1189.145394][ T56] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 1189.145417][ T56] usb 6-1: config 32 has no interface number 0 [ 1189.145450][ T56] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1189.145475][ T56] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1189.145499][ T56] usb 6-1: config 32 interface 85 has no altsetting 0 [ 1189.150273][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.150295][ T56] usb 6-1: Product: syz [ 1189.150309][ T56] usb 6-1: Manufacturer: syz [ 1189.150324][ T56] usb 6-1: SerialNumber: syz [ 1189.200844][T16145] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1189.295276][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.295294][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.320173][ T30] audit: type=1400 audit(1791353659.786:15861): avc: denied { mounton } for pid=16006 comm="syz-executor" path="/root/syzkaller.MpNkY6/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1189.331716][ T30] audit: type=1400 audit(1791353659.796:15862): avc: denied { mounton } for pid=16006 comm="syz-executor" path="/root/syzkaller.MpNkY6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1189.331756][ T30] audit: type=1400 audit(1791353659.796:15863): avc: denied { mounton } for pid=16006 comm="syz-executor" path="/root/syzkaller.MpNkY6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1189.349096][ T30] audit: type=1400 audit(1791353659.816:15864): avc: denied { mounton } for pid=16006 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1189.417719][ T30] audit: type=1400 audit(1791353659.886:15865): avc: denied { mount } for pid=16006 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1189.422067][ T30] audit: type=1400 audit(1791353659.896:15866): avc: denied { mounton } for pid=16006 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1189.493178][T16153] lo: left allmulticast mode [ 1189.561302][ T56] appletouch 6-1:32.85: Failed to read mode from device. [ 1189.561457][ T56] appletouch 6-1:32.85: probe with driver appletouch failed with error -5 [ 1189.589251][ T56] usb 6-1: USB disconnect, device number 62 [ 1192.434784][ T30] audit: type=1400 audit(1791353662.906:15867): avc: denied { execute } for pid=16199 comm="syz.0.2596" name="file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1192.435945][ T30] audit: type=1400 audit(1791353662.906:15868): avc: denied { setopt } for pid=16194 comm="syz.2.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1192.438059][ T30] audit: type=1400 audit(1791353662.906:15869): avc: denied { execute_no_trans } for pid=16199 comm="syz.0.2596" path="/495/file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1192.663381][T11656] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1192.822039][T11656] usb 6-1: Using ep0 maxpacket: 32 [ 1192.842897][T11656] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1192.843090][T11656] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1192.846203][T11656] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1192.846231][T11656] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1192.846258][T11656] usb 6-1: config 14 has no interface number 0 [ 1192.846300][T11656] usb 6-1: config 14 has no interface number 1 [ 1192.846475][T11656] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1192.846546][T11656] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1192.846669][T11656] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1192.846796][T11656] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1192.846826][T11656] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1192.846853][T11656] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1192.846881][T11656] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1192.846945][T11656] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1192.850483][ T30] audit: type=1400 audit(1791353663.316:15870): avc: denied { write } for pid=16206 comm="syz.7.2595" name="nullb" dev="configfs" ino=2850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1193.057559][T11656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.057612][T11656] usb 6-1: Product: syz [ 1193.057651][T11656] usb 6-1: Manufacturer: syz [ 1193.057687][T11656] usb 6-1: SerialNumber: syz [ 1193.076095][ T30] audit: type=1400 audit(1791353663.526:15871): avc: denied { write } for pid=16206 comm="syz.7.2595" name="/" dev="configfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1193.228685][T16212] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.279997][ T30] audit: type=1400 audit(1791353663.746:15872): avc: denied { connect } for pid=16211 comm="syz.2.2598" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.371980][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1193.433475][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1193.521762][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 1193.523999][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1193.527236][ T25] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1193.527311][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1193.527361][ T25] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1193.537790][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.537892][ T25] usb 8-1: Product: syz [ 1193.537936][ T25] usb 8-1: Manufacturer: syz [ 1193.537979][ T25] usb 8-1: SerialNumber: syz [ 1193.932851][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 1194.251787][T11656] legousbtower 6-1:14.57: interrupt endpoints not found [ 1194.253558][ T5721] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1194.254732][ T5721] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.254762][ T5721] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.254788][ T5721] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1194.254815][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.259241][ T5721] usb 1-1: config 0 descriptor?? [ 1194.311096][T16207] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1194.319702][T11656] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 1194.329754][ T25] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1194.338681][ T25] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1194.338732][ T25] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1194.355138][T11656] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1194.424448][T16226] netlink: zone id is out of range [ 1194.424457][T16226] netlink: zone id is out of range [ 1194.424461][T16226] netlink: zone id is out of range [ 1194.424465][T16226] netlink: zone id is out of range [ 1194.519775][T16210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.520182][T16210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.588359][T11656] usb 8-1: USB disconnect, device number 2 [ 1194.721788][ T5742] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1195.836926][ T5721] usbhid 1-1:0.0: can't add hid device: -71 [ 1195.837010][ T5721] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1195.841763][ T5721] usb 1-1: USB disconnect, device number 6 [ 1195.974847][ T7020] usb 6-1: USB disconnect, device number 63 [ 1196.026322][ T7020] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1196.042851][ T5742] usb 7-1: Using ep0 maxpacket: 8 [ 1196.077085][T16236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=16236 comm=syz.2.2605 [ 1196.334199][ T5742] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1196.352167][ T5742] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1196.352197][ T5742] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1196.352384][ T5742] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.387804][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.387825][ T5742] usb 7-1: Product: syz [ 1196.387838][ T5742] usb 7-1: Manufacturer: syz [ 1196.387851][ T5742] usb 7-1: SerialNumber: syz [ 1196.719667][T16228] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1196.727722][ T5742] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1196.731428][ T5742] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1196.731703][ T5742] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1197.439267][T16249] FAULT_INJECTION: forcing a failure. [ 1197.439267][T16249] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.439298][T16249] CPU: 1 UID: 0 PID: 16249 Comm: syz.2.2608 Tainted: G L syzkaller #0 PREEMPT(full) [ 1197.439321][T16249] Tainted: [L]=SOFTLOCKUP [ 1197.439328][T16249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1197.439338][T16249] Call Trace: [ 1197.439344][T16249] [ 1197.439351][T16249] dump_stack_lvl+0x100/0x190 [ 1197.439381][T16249] should_fail_ex.cold+0x5/0xa [ 1197.439407][T16249] should_failslab+0xc2/0x120 [ 1197.439433][T16249] __kmalloc_noprof+0xfc/0x840 [ 1197.439453][T16249] ? rcu_is_watching+0x13/0xc0 [ 1197.439480][T16249] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1197.439513][T16249] tomoyo_realpath_from_path+0xb6/0x690 [ 1197.439545][T16249] tomoyo_mount_acl+0x1b6/0x8b0 [ 1197.439568][T16249] ? is_bpf_text_address+0x8a/0x1a0 [ 1197.439593][T16249] ? is_bpf_text_address+0x8a/0x1a0 [ 1197.439619][T16249] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1197.439642][T16249] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1197.439663][T16249] ? kernel_text_address+0x8d/0x100 [ 1197.439691][T16249] ? unwind_get_return_address+0x59/0xa0 [ 1197.439717][T16249] ? arch_stack_walk+0xa6/0xf0 [ 1197.439743][T16249] ? __lock_acquire+0x5c0/0x1f40 [ 1197.439774][T16249] ? tomoyo_mount_permission+0x1f6/0x460 [ 1197.439801][T16249] ? tomoyo_domain+0xb2/0x150 [ 1197.439818][T16249] ? tomoyo_profile+0x47/0x60 [ 1197.439837][T16249] tomoyo_mount_permission+0x214/0x460 [ 1197.439860][T16249] ? tomoyo_mount_permission+0x1f6/0x460 [ 1197.439886][T16249] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1197.439923][T16249] security_sb_mount+0xdd/0x270 [ 1197.439947][T16249] path_mount+0x158/0x24c0 [ 1197.439969][T16249] ? __pfx_path_mount+0x10/0x10 [ 1197.439984][T16249] ? lockdep_hardirqs_on+0x7d/0x110 [ 1197.440007][T16249] ? putname+0xb1/0x110 [ 1197.440030][T16249] ? kmem_cache_free+0x127/0x6c0 [ 1197.440055][T16249] ? __x64_sys_mount+0x293/0x310 [ 1197.440071][T16249] __x64_sys_mount+0x293/0x310 [ 1197.440094][T16249] ? __pfx___x64_sys_mount+0x10/0x10 [ 1197.440118][T16249] do_syscall_64+0x123/0x790 [ 1197.440140][T16249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.440158][T16249] RIP: 0033:0x7f815839e199 [ 1197.440175][T16249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.440193][T16249] RSP: 002b:00007f815931b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1197.440213][T16249] RAX: ffffffffffffffda RBX: 00007f8158626090 RCX: 00007f815839e199 [ 1197.440225][T16249] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 1197.440237][T16249] RBP: 00007f815931b090 R08: 0000000000000000 R09: 0000000000000000 [ 1197.440249][T16249] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.440261][T16249] R13: 00007f8158626128 R14: 00007f8158626090 R15: 00007fff0b4db1e8 [ 1197.440288][T16249] [ 1197.440296][T16249] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1197.514125][T16251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2609'. [ 1197.535556][ T30] audit: type=1400 audit(1791353668.006:15873): avc: denied { mount } for pid=16252 comm="syz.2.2611" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1198.087180][ T30] audit: type=1400 audit(1791353668.226:15874): avc: denied { read write } for pid=16255 comm="syz.5.2610" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.087352][ T30] audit: type=1400 audit(1791353668.236:15875): avc: denied { open } for pid=16255 comm="syz.5.2610" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1198.160560][ T30] audit: type=1400 audit(1791353668.586:15876): avc: denied { ioctl } for pid=16255 comm="syz.5.2610" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64288 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1198.454297][ T30] audit: type=1400 audit(1791353668.926:15877): avc: denied { append } for pid=16255 comm="syz.5.2610" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1199.111619][ T5742] usb 7-1: USB disconnect, device number 13 [ 1199.230223][ T30] audit: type=1400 audit(1791353669.696:15878): avc: denied { accept } for pid=16265 comm="syz.6.2614" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1199.337554][T16267] netlink: 'syz.6.2614': attribute type 1 has an invalid length. [ 1199.337571][T16267] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2614'. [ 1199.339797][T16266] netlink: 'syz.6.2614': attribute type 1 has an invalid length. [ 1199.339807][T16266] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2614'. [ 1199.367120][ T30] audit: type=1400 audit(1791353669.836:15879): avc: denied { write } for pid=16265 comm="syz.6.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1200.775676][T11656] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1200.950915][T11656] usb 8-1: Using ep0 maxpacket: 32 [ 1200.953682][T11656] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1200.957227][T11656] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 1200.957257][T11656] usb 8-1: config 32 has no interface number 0 [ 1200.957378][T11656] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1200.957439][T11656] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1200.957472][T11656] usb 8-1: config 32 interface 85 has no altsetting 0 [ 1200.962929][T11656] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.962956][T11656] usb 8-1: Product: syz [ 1200.962997][T11656] usb 8-1: Manufacturer: syz [ 1200.963034][T11656] usb 8-1: SerialNumber: syz [ 1201.107796][T16281] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1201.181734][ T7020] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1202.277008][ T7020] usb 1-1: Using ep0 maxpacket: 8 [ 1202.289046][ T7020] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1202.317855][ T7020] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1202.317885][ T7020] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1202.317906][ T7020] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.583089][ T7020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.583116][ T7020] usb 1-1: Product: syz [ 1202.583131][ T7020] usb 1-1: Manufacturer: syz [ 1202.583145][ T7020] usb 1-1: SerialNumber: syz [ 1202.691197][T16285] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1202.711477][ T7020] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1202.721436][ T7020] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1202.721497][ T7020] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1202.939550][T11656] appletouch 8-1:32.85: Failed to read mode from device. [ 1202.939709][T11656] appletouch 8-1:32.85: probe with driver appletouch failed with error -5 [ 1202.956720][T11656] usb 8-1: USB disconnect, device number 3 [ 1203.694446][ T56] usb 1-1: USB disconnect, device number 7 [ 1203.903997][ T5728] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1204.061111][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 1204.067107][ T5728] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1204.068099][ T5728] usb 7-1: config 32 has an invalid interface number: 85 but max is 0 [ 1204.068113][ T5728] usb 7-1: config 32 has no interface number 0 [ 1204.068131][ T5728] usb 7-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1204.068146][ T5728] usb 7-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1204.068161][ T5728] usb 7-1: config 32 interface 85 has no altsetting 0 [ 1204.069952][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.069965][ T5728] usb 7-1: Product: syz [ 1204.069974][ T5728] usb 7-1: Manufacturer: syz [ 1204.069983][ T5728] usb 7-1: SerialNumber: syz [ 1204.147963][T16299] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1204.215599][ T56] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1204.312132][ T8587] block nbd6: Possible stuck request ffff888028bd0000: control (read@0,1024B). Runtime 150 seconds [ 1204.312165][ T8587] block nbd6: Possible stuck request ffff888028bd01c0: control (read@1024,1024B). Runtime 150 seconds [ 1204.312187][ T8587] block nbd6: Possible stuck request ffff888028bd0380: control (read@2048,1024B). Runtime 150 seconds [ 1204.312209][ T8587] block nbd6: Possible stuck request ffff888028bd0540: control (read@3072,1024B). Runtime 150 seconds [ 1204.391937][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 1204.392442][ T56] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1204.393652][ T56] usb 3-1: config 32 has an invalid interface number: 85 but max is 0 [ 1204.393665][ T56] usb 3-1: config 32 has no interface number 0 [ 1204.393690][ T56] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.393714][ T56] usb 3-1: config 32 interface 85 has no altsetting 0 [ 1204.395246][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.395259][ T56] usb 3-1: Product: syz [ 1204.395267][ T56] usb 3-1: Manufacturer: syz [ 1204.395275][ T56] usb 3-1: SerialNumber: syz [ 1204.837882][ T30] audit: type=1400 audit(1791353675.306:15880): avc: denied { create } for pid=16307 comm="syz.5.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1204.864522][ T30] audit: type=1400 audit(1791353675.336:15881): avc: denied { bind } for pid=16307 comm="syz.5.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1204.919418][ T30] audit: type=1400 audit(1791353675.386:15882): avc: denied { listen } for pid=16307 comm="syz.5.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1206.179115][ T56] appletouch 3-1:32.85: Geyser mode initialized. [ 1206.180873][ T56] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.85/input/input78 [ 1206.183824][ T5728] appletouch 7-1:32.85: Failed to read mode from device. [ 1206.183986][ T5728] appletouch 7-1:32.85: probe with driver appletouch failed with error -5 [ 1206.194159][ C0] appletouch 3-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1206.195321][ T30] audit: type=1400 audit(1791353676.656:15883): avc: denied { read } for pid=4960 comm="acpid" name="mouse1" dev="devtmpfs" ino=4758 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1206.195357][ T30] audit: type=1400 audit(1791353676.656:15884): avc: denied { open } for pid=4960 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4758 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1206.203773][ T30] audit: type=1400 audit(1791353676.676:15885): avc: denied { ioctl } for pid=4960 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4758 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1206.302395][ T5728] usb 7-1: USB disconnect, device number 14 [ 1206.601797][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 145 (since boot) is 1027 jiffies old. [ 1206.757127][T16303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.757319][T16303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.781731][ T30] audit: type=1400 audit(1791353677.246:15886): avc: denied { search } for pid=16302 comm="syz.2.2624" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1206.781770][ T30] audit: type=1400 audit(1791353677.246:15887): avc: denied { write } for pid=16302 comm="syz.2.2624" name="error_log" dev="tracefs" ino=4125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1206.787594][ T30] audit: type=1400 audit(1791353677.256:15888): avc: denied { open } for pid=16302 comm="syz.2.2624" path="/561/trace/error_log" dev="tracefs" ino=4125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1206.922858][ T5728] usb 3-1: USB disconnect, device number 121 [ 1206.952266][ T5728] appletouch 3-1:32.85: input: appletouch disconnected [ 1207.349926][ T30] audit: type=1326 audit(1791353677.816:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16327 comm="syz.0.2631" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259b59e199 code=0x7ffc0000 [ 1209.506540][T16344] FAULT_INJECTION: forcing a failure. [ 1209.506540][T16344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.506562][T16344] CPU: 1 UID: 0 PID: 16344 Comm: syz.5.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.506578][T16344] Tainted: [L]=SOFTLOCKUP [ 1209.506582][T16344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1209.506588][T16344] Call Trace: [ 1209.506592][T16344] [ 1209.506597][T16344] dump_stack_lvl+0x100/0x190 [ 1209.506618][T16344] should_fail_ex.cold+0x5/0xa [ 1209.506634][T16344] _copy_from_user+0x2e/0xd0 [ 1209.506649][T16344] core_sys_select+0x2d0/0xbb0 [ 1209.506668][T16344] ? get_pid_task+0x2a/0x250 [ 1209.506684][T16344] ? __pfx_core_sys_select+0x10/0x10 [ 1209.506698][T16344] ? find_held_lock+0x2b/0x80 [ 1209.506715][T16344] ? get_pid_task+0xfc/0x250 [ 1209.506742][T16344] ? __pfx_set_user_sigmask+0x10/0x10 [ 1209.506754][T16344] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1209.506770][T16344] do_pselect.constprop.0+0x238/0x270 [ 1209.506788][T16344] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1209.506805][T16344] ? ksys_write+0x1ac/0x250 [ 1209.506820][T16344] __x64_sys_pselect6+0x149/0x1c0 [ 1209.506838][T16344] do_syscall_64+0x123/0x790 [ 1209.506851][T16344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.506863][T16344] RIP: 0033:0x7fed3b19e199 [ 1209.506872][T16344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.506883][T16344] RSP: 002b:00007fed3c04c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1209.506894][T16344] RAX: ffffffffffffffda RBX: 00007fed3b426090 RCX: 00007fed3b19e199 [ 1209.506905][T16344] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1209.506916][T16344] RBP: 00007fed3c04c090 R08: 0000000000000000 R09: 0000000000000000 [ 1209.506926][T16344] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1209.506937][T16344] R13: 00007fed3b426128 R14: 00007fed3b426090 R15: 00007fffa97fa9a8 [ 1209.506960][T16344] [ 1210.141099][ T30] kauditd_printk_skb: 300 callbacks suppressed [ 1210.141120][ T30] audit: type=1400 audit(1791353680.436:16190): avc: denied { read } for pid=16345 comm="syz.0.2636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1210.532454][T16358] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1211.581894][T11656] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1212.151876][T11656] usb 8-1: Using ep0 maxpacket: 32 [ 1212.152857][T11656] usb 8-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 1212.155894][T11656] usb 8-1: config 2 has an invalid interface number: 51 but max is 0 [ 1212.155923][T11656] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.155949][T11656] usb 8-1: config 2 has no interface number 0 [ 1212.156311][T11656] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1212.156342][T11656] usb 8-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1212.156368][T11656] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1212.156395][T11656] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1212.156424][T11656] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1212.156830][T11656] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1212.156858][T11656] usb 8-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1212.156886][T11656] usb 8-1: config 2 interface 51 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 1212.156914][T11656] usb 8-1: config 2 interface 51 altsetting 255 has an endpoint descriptor with address 0xB4, changing to 0x84 [ 1212.157173][T11656] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1212.157270][T11656] usb 8-1: config 2 interface 51 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1212.157476][T11656] usb 8-1: config 2 interface 51 altsetting 255 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 1212.157639][T11656] usb 8-1: config 2 interface 51 has no altsetting 0 [ 1212.378581][T11656] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.378612][T11656] usb 8-1: Product: syz [ 1212.378713][T11656] usb 8-1: Manufacturer: syz [ 1212.378825][T11656] usb 8-1: SerialNumber: syz [ 1212.479337][T16372] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1212.786336][T16374] FAULT_INJECTION: forcing a failure. [ 1212.786336][T16374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.786408][T16374] CPU: 1 UID: 0 PID: 16374 Comm: syz.5.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1212.786436][T16374] Tainted: [L]=SOFTLOCKUP [ 1212.786443][T16374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1212.786454][T16374] Call Trace: [ 1212.786462][T16374] [ 1212.786470][T16374] dump_stack_lvl+0x100/0x190 [ 1212.786502][T16374] should_fail_ex.cold+0x5/0xa [ 1212.786535][T16374] _copy_to_user+0x32/0xd0 [ 1212.786562][T16374] simple_read_from_buffer+0xcb/0x170 [ 1212.786592][T16374] proc_fail_nth_read+0x1af/0x230 [ 1212.786620][T16374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.786648][T16374] ? rw_verify_area+0xce/0x6d0 [ 1212.786668][T16374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1212.786694][T16374] vfs_read+0x1e4/0xb40 [ 1212.786717][T16374] ? lock_acquire+0x1d1/0x380 [ 1212.786739][T16374] ? __fget_files+0x34/0x3d0 [ 1212.786764][T16374] ? __pfx_vfs_read+0x10/0x10 [ 1212.786784][T16374] ? find_held_lock+0x2b/0x80 [ 1212.786812][T16374] ? __fget_files+0x215/0x3d0 [ 1212.786842][T16374] ? __fget_files+0x21f/0x3d0 [ 1212.786875][T16374] ksys_read+0x12a/0x250 [ 1212.786897][T16374] ? __pfx_ksys_read+0x10/0x10 [ 1212.786926][T16374] do_syscall_64+0x123/0x790 [ 1212.786951][T16374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.786971][T16374] RIP: 0033:0x7fed3b15e9ce [ 1212.786987][T16374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1212.787005][T16374] RSP: 002b:00007fed3c06cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1212.787023][T16374] RAX: ffffffffffffffda RBX: 00007fed3c06d6c0 RCX: 00007fed3b15e9ce [ 1212.787035][T16374] RDX: 000000000000000f RSI: 00007fed3c06d0a0 RDI: 0000000000000004 [ 1212.787047][T16374] RBP: 00007fed3c06d090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.787058][T16374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.787069][T16374] R13: 00007fed3b426038 R14: 00007fed3b425fa0 R15: 00007fffa97fa9a8 [ 1212.787096][T16374] [ 1213.586224][T11656] keyspan_pda 8-1:2.51: Keyspan PDA converter detected [ 1213.605709][ T30] audit: type=1400 audit(1791353684.056:16191): avc: denied { accept } for pid=16379 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1213.605749][ T30] audit: type=1400 audit(1791353684.056:16192): avc: denied { write } for pid=16379 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1213.606572][T11656] usb 8-1: Keyspan PDA converter now attached to ttyUSB0 [ 1214.326887][T11656] usb 8-1: USB disconnect, device number 4 [ 1214.518621][ T30] audit: type=1400 audit(1791353684.986:16193): avc: denied { create } for pid=16386 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1214.651255][T11656] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 1214.664327][T11656] keyspan_pda 8-1:2.51: device disconnected [ 1214.847863][T16396] netlink: 900 bytes leftover after parsing attributes in process `syz.2.2649'. [ 1216.428295][ T30] audit: type=1400 audit(1791353686.896:16194): avc: denied { read } for pid=16401 comm="syz.2.2650" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1216.428540][ T30] audit: type=1400 audit(1791353686.896:16195): avc: denied { open } for pid=16401 comm="syz.2.2650" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1219.624780][T16412] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1221.503879][T16435] netlink: zone id is out of range [ 1221.504053][T16435] netlink: zone id is out of range [ 1221.504254][T16434] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1221.507451][T16435] netlink: zone id is out of range [ 1221.507684][T16435] netlink: zone id is out of range [ 1221.508000][T16435] netlink: zone id is out of range [ 1221.508133][T16435] netlink: zone id is out of range [ 1221.508164][T16435] netlink: zone id is out of range [ 1221.508385][T16435] netlink: zone id is out of range [ 1221.508474][T16435] netlink: zone id is out of range [ 1221.508637][T16435] netlink: zone id is out of range [ 1221.678970][ T30] audit: type=1326 audit(1791353692.146:16196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.679160][ T30] audit: type=1326 audit(1791353692.146:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.679473][ T30] audit: type=1326 audit(1791353692.146:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.679639][ T30] audit: type=1326 audit(1791353692.146:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.681329][ T30] audit: type=1326 audit(1791353692.146:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.681499][ T30] audit: type=1326 audit(1791353692.146:16201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.848115][ T30] audit: type=1326 audit(1791353692.146:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.850228][ T30] audit: type=1326 audit(1791353692.326:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.850337][ T30] audit: type=1326 audit(1791353692.326:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1221.879334][ T30] audit: type=1326 audit(1791353692.326:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16436 comm="syz.5.2662" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fed3b19e199 code=0x7ffc0000 [ 1222.084974][T16440] netlink: 75 bytes leftover after parsing attributes in process `syz.7.2663'. [ 1224.773339][ T5799] hid_parser_main: 5 callbacks suppressed [ 1224.773595][ T5799] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1225.344729][T16461] netlink: 75 bytes leftover after parsing attributes in process `syz.6.2669'. [ 1226.102438][ T5799] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1226.161892][T16472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1226.219002][T16471] fido_id[16471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1226.446872][T16483] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2672'. [ 1226.753344][T16487] netlink: 75 bytes leftover after parsing attributes in process `syz.6.2675'. [ 1228.000068][T16496] net_ratelimit: 15 callbacks suppressed [ 1228.000092][T16496] netlink: zone id is out of range [ 1228.000125][T16496] netlink: zone id is out of range [ 1228.000159][T16496] netlink: zone id is out of range [ 1228.000228][T16496] netlink: zone id is out of range [ 1228.000280][T16496] netlink: zone id is out of range [ 1228.000315][T16496] netlink: zone id is out of range [ 1228.834082][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 1228.834100][ T30] audit: type=1400 audit(1791353699.306:16378): avc: denied { map } for pid=16499 comm="syz.0.2681" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1228.834208][ T30] audit: type=1400 audit(1791353699.306:16379): avc: denied { execute } for pid=16499 comm="syz.0.2681" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1229.871758][ T5742] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1230.021787][ T5742] usb 8-1: Using ep0 maxpacket: 8 [ 1230.022359][ T5742] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1230.023223][ T5742] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.023287][ T5742] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1230.023310][ T5742] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1230.025170][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.025191][ T5742] usb 8-1: Product: syz [ 1230.025205][ T5742] usb 8-1: Manufacturer: syz [ 1230.025220][ T5742] usb 8-1: SerialNumber: syz [ 1230.028040][T16513] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1230.029733][ T5742] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1230.030473][ T5742] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1230.030531][ T5742] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1230.689892][ T5742] usb 8-1: USB disconnect, device number 5 [ 1233.113555][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.201800][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1233.352178][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 1233.352963][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1233.353831][ T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1233.353858][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1233.353879][ T56] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1233.355602][ T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.355625][ T56] usb 8-1: Product: syz [ 1233.355639][ T56] usb 8-1: Manufacturer: syz [ 1233.355653][ T56] usb 8-1: SerialNumber: syz [ 1233.358678][T16533] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1233.361841][ T5742] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1233.455202][ T56] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1233.470424][ T56] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1233.470483][ T56] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1233.521712][ T5742] usb 7-1: Using ep0 maxpacket: 8 [ 1233.522239][ T5742] usb 7-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1233.523150][ T5742] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1233.523179][ T5742] usb 7-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1233.523204][ T5742] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1233.523232][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.525365][ T5742] usb 7-1: config 0 descriptor?? [ 1233.804610][T16538] netlink: 75 bytes leftover after parsing attributes in process `syz.5.2688'. [ 1234.007442][T16538] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1234.667963][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.668368][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.669730][ T8587] block nbd6: Possible stuck request ffff888028bd0000: control (read@0,1024B). Runtime 180 seconds [ 1234.669763][ T8587] block nbd6: Possible stuck request ffff888028bd01c0: control (read@1024,1024B). Runtime 180 seconds [ 1234.669785][ T8587] block nbd6: Possible stuck request ffff888028bd0380: control (read@2048,1024B). Runtime 180 seconds [ 1234.669808][ T8587] block nbd6: Possible stuck request ffff888028bd0540: control (read@3072,1024B). Runtime 180 seconds [ 1235.965866][ T5742] usbhid 7-1:0.0: can't add hid device: -71 [ 1235.966262][ T5742] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1236.022081][ T5742] usb 7-1: USB disconnect, device number 15 [ 1236.124352][ T7020] usb 8-1: USB disconnect, device number 6 [ 1236.395827][ T30] audit: type=1400 audit(1791353706.866:16380): avc: denied { ioctl } for pid=16553 comm="syz.7.2697" path="socket:[66860]" dev="sockfs" ino=66860 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1236.398145][ T30] audit: type=1400 audit(1791353706.866:16381): avc: denied { ioctl } for pid=16553 comm="syz.7.2697" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1236.402058][T16547] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1236.402232][T16547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1236.402382][T16547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1236.402453][T16547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1236.524069][T16547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1236.552436][ T5799] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1236.712116][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 1236.712664][ T5799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1236.713538][ T5799] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1236.713565][ T5799] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1236.715268][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.715288][ T5799] usb 3-1: Product: syz [ 1236.715302][ T5799] usb 3-1: Manufacturer: syz [ 1236.715317][ T5799] usb 3-1: SerialNumber: syz [ 1236.718537][T16550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1236.727247][ T5799] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1236.727850][ T5799] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1236.732578][ T5799] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1236.948765][ T5799] usb 3-1: USB disconnect, device number 122 [ 1238.474752][ T5617] Bluetooth: hci3: command 0x0c1a tx timeout [ 1238.474784][ T5617] Bluetooth: hci5: command 0x0c1a tx timeout [ 1238.474824][T14290] Bluetooth: hci2: command 0x0c1a tx timeout [ 1238.703579][ T7020] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1238.989375][ T7020] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1239.062969][ T7020] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1239.063112][ T7020] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1239.063232][ T7020] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1239.109352][ T7020] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1239.109382][ T7020] usb 6-1: Product: syz [ 1239.109489][ T7020] usb 6-1: Manufacturer: syz [ 1239.109553][ T7020] usb 6-1: SerialNumber: syz [ 1239.170451][ T7020] usb 6-1: config 0 descriptor?? [ 1239.215854][ T7020] hub 6-1:0.0: bad descriptor, ignoring hub [ 1239.216049][ T7020] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1239.334429][ T7020] usb 6-1: selecting invalid altsetting 0 [ 1239.678270][ T7020] usb 6-1: USB disconnect, device number 64 [ 1239.681773][ T5742] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1239.851800][ T5742] usb 1-1: Using ep0 maxpacket: 8 [ 1239.853774][ T5742] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1239.859616][ T5742] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1239.859647][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.859673][ T5742] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.958110][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.958133][ T5742] usb 1-1: Product: syz [ 1239.958148][ T5742] usb 1-1: Manufacturer: syz [ 1239.958163][ T5742] usb 1-1: SerialNumber: syz [ 1239.998979][T14332] udevd[14332]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.020471][T16585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1240.030883][ T5742] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1240.048520][ T5742] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1240.048579][ T5742] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1240.374332][ T30] audit: type=1400 audit(1791353710.846:16382): avc: denied { open } for pid=16586 comm="syz.2.2706" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1240.438856][ T30] audit: type=1400 audit(1791353710.906:16383): avc: denied { bind } for pid=16586 comm="syz.2.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1240.674279][T16575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1241.454960][ T30] audit: type=1400 audit(1791353711.926:16384): avc: denied { read } for pid=16597 comm="syz.5.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1242.446594][ T30] audit: type=1400 audit(1791353712.916:16385): avc: denied { listen } for pid=16602 comm="syz.2.2710" lport=58279 faddr=fe88::3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1242.447094][ T30] audit: type=1400 audit(1791353712.916:16386): avc: denied { accept } for pid=16602 comm="syz.2.2710" lport=58279 faddr=fe88::3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1242.448528][ T5799] usb 1-1: USB disconnect, device number 8 [ 1242.511609][T16609] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2710'. [ 1242.766112][T16575] Bluetooth: hci2: command 0x0c1a tx timeout [ 1243.022323][ T5799] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1243.544243][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 1243.642630][ T5799] usb 3-1: unable to get BOS descriptor set [ 1243.642685][ T5799] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 1243.841183][ T5799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.841211][ T5799] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1243.951443][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.951471][ T5799] usb 3-1: Product: syz [ 1243.951485][ T5799] usb 3-1: Manufacturer: syz [ 1243.951499][ T5799] usb 3-1: SerialNumber: syz [ 1245.944007][ T5721] usb 3-1: USB disconnect, device number 123 [ 1246.082832][T16641] netlink: 828 bytes leftover after parsing attributes in process `syz.2.2721'. [ 1247.809045][ T7020] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1247.951679][ T7020] usb 8-1: Using ep0 maxpacket: 32 [ 1247.952228][ T7020] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1247.953220][ T7020] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 1247.953243][ T7020] usb 8-1: config 32 has no interface number 0 [ 1247.953276][ T7020] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1247.953302][ T7020] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1247.953328][ T7020] usb 8-1: config 32 interface 85 has no altsetting 0 [ 1247.955381][ T7020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.955404][ T7020] usb 8-1: Product: syz [ 1247.955418][ T7020] usb 8-1: Manufacturer: syz [ 1247.955432][ T7020] usb 8-1: SerialNumber: syz [ 1247.963179][T16633] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1248.051573][T16646] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1248.051870][T16646] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1248.051941][T16646] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1248.061914][ T56] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1248.064829][T16646] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1248.111960][ T7020] appletouch 8-1:32.85: Failed to read mode from device. [ 1248.112095][ T7020] appletouch 8-1:32.85: probe with driver appletouch failed with error -5 [ 1248.128321][ T7020] usb 8-1: USB disconnect, device number 7 [ 1248.211752][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 1248.212228][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1248.213179][ T56] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1248.213205][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1248.213226][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.214969][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.214990][ T56] usb 1-1: Product: syz [ 1248.215005][ T56] usb 1-1: Manufacturer: syz [ 1248.215019][ T56] usb 1-1: SerialNumber: syz [ 1248.219508][T16648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1248.229062][ T56] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1248.229693][ T56] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1248.229741][ T56] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1248.470301][ T7020] usb 1-1: USB disconnect, device number 9 [ 1248.621745][ T25] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1248.782080][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1248.782639][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1248.784770][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1248.784805][ T25] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1248.788729][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.788752][ T25] usb 6-1: Product: syz [ 1248.788766][ T25] usb 6-1: Manufacturer: syz [ 1248.788781][ T25] usb 6-1: SerialNumber: syz [ 1249.150196][ T5799] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1249.281756][T16652] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1249.736329][ T25] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1249.749642][ T25] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1249.782346][ T25] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1249.882765][ T5799] usb 3-1: Using ep0 maxpacket: 8 [ 1249.884004][ T5799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1249.885305][ T5799] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1249.885330][ T5799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1249.885350][ T5799] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.890189][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.890210][ T5799] usb 3-1: Product: syz [ 1249.890223][ T5799] usb 3-1: Manufacturer: syz [ 1249.890237][ T5799] usb 3-1: SerialNumber: syz [ 1249.966542][T16657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1249.986081][ T5799] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1249.986495][ T5799] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 1249.986525][ T5799] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 1250.050705][ T7020] usb 6-1: USB disconnect, device number 65 [ 1250.072151][T16575] Bluetooth: hci3: command 0x0c1a tx timeout [ 1250.072180][T16575] Bluetooth: hci5: command 0x0c1a tx timeout [ 1250.072251][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1251.733131][ T5721] usb 3-1: USB disconnect, device number 124 [ 1252.012022][ T56] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1252.154683][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1252.163525][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 1252.165396][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1252.199183][ T56] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1252.199219][ T56] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1252.199246][ T56] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1252.260417][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.260446][ T56] usb 7-1: Product: syz [ 1252.260487][ T56] usb 7-1: Manufacturer: syz [ 1252.260526][ T56] usb 7-1: SerialNumber: syz [ 1252.383944][T16689] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1252.424870][ T56] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1252.475271][ T56] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1252.475550][ T56] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1252.825409][ T5742] usb 7-1: USB disconnect, device number 16 [ 1252.855130][ T30] audit: type=1400 audit(1791353723.326:16387): avc: denied { ioctl } for pid=16683 comm="syz.0.2734" path="socket:[67678]" dev="sockfs" ino=67678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1253.481754][ T5742] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1253.512201][ T56] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1253.636491][ T5742] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1253.639181][ T5742] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1253.639609][ T5742] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1253.639641][ T5742] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1253.682011][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1253.682165][ T5742] usb 8-1: Product: syz [ 1253.682278][ T5742] usb 8-1: Manufacturer: syz [ 1253.682380][ T5742] usb 8-1: SerialNumber: syz [ 1253.700338][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 1253.717209][ T56] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1253.734562][ T56] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1253.734593][ T56] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.734663][ T56] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1253.740034][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.740061][ T56] usb 1-1: Product: syz [ 1253.740102][ T56] usb 1-1: Manufacturer: syz [ 1253.740138][ T56] usb 1-1: SerialNumber: syz [ 1253.833059][ T5742] usb 8-1: config 0 descriptor?? [ 1253.854915][T16707] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1253.904613][ T5742] hub 8-1:0.0: bad descriptor, ignoring hub [ 1253.905060][ T5742] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1253.906554][ T56] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1253.957026][ T56] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1253.970725][ T56] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1254.003796][ T5742] usb 8-1: selecting invalid altsetting 0 [ 1254.272510][ T5742] usb 8-1: USB disconnect, device number 8 [ 1254.274295][ T5721] usb 1-1: USB disconnect, device number 10 [ 1255.173658][ T5721] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1256.409468][ T5721] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1256.428837][ T5721] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.428866][ T5721] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.428885][ T5721] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1256.468805][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.468826][ T5721] usb 7-1: Product: syz [ 1256.468834][ T5721] usb 7-1: Manufacturer: syz [ 1256.468843][ T5721] usb 7-1: SerialNumber: syz [ 1256.807913][ T56] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1256.879693][ T5742] kernel write not supported for file /amidi2 (pid: 5742 comm: kworker/0:4) [ 1256.896779][T16739] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1256.985631][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 1257.001561][ T56] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1257.010057][ T56] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1257.010089][ T56] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1257.010116][ T56] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.081208][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.081262][ T56] usb 6-1: Product: syz [ 1257.081350][ T56] usb 6-1: Manufacturer: syz [ 1257.081365][ T56] usb 6-1: SerialNumber: syz [ 1257.141529][T16718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.143202][T16718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.163335][ T5742] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1257.254704][T16733] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1257.280670][ T56] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1257.291488][ T56] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1257.291931][ T56] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1257.406735][ T5742] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 1257.445299][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1257.445441][ T5742] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1257.445471][ T5742] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1257.445498][ T5742] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1257.445616][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.506660][T16739] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1258.001942][ T5721] cdc_ncm 7-1:1.0: bind() failure [ 1258.005714][ T5721] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1258.005750][ T5721] cdc_ncm 7-1:1.1: bind() failure [ 1258.059194][ T5721] usb 6-1: USB disconnect, device number 66 [ 1258.100381][ T5742] ims_pcu 1-1:1.0: Failed to set line coding, error: -71 [ 1258.101799][ C0] ims_pcu 1-1:1.0: ims_pcu_irq - usb_submit_urb failed with result -1 [ 1258.101942][ T5742] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -71 [ 1258.115908][ T9] usb 7-1: USB disconnect, device number 17 [ 1258.183006][ T5742] usb 1-1: USB disconnect, device number 11 [ 1258.675763][ T30] audit: type=1400 audit(1791353729.146:16388): avc: denied { mount } for pid=16749 comm="syz.7.2754" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1259.367137][T11656] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1259.531812][T11656] usb 1-1: Using ep0 maxpacket: 8 [ 1259.533584][T11656] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1259.536645][T11656] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1259.536770][T11656] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1259.536884][T11656] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.594255][T11656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.594278][T11656] usb 1-1: Product: syz [ 1259.594293][T11656] usb 1-1: Manufacturer: syz [ 1259.594306][T11656] usb 1-1: SerialNumber: syz [ 1259.598426][T16764] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1259.600365][T11656] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1259.600767][T11656] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1259.600806][T11656] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1261.171388][ T30] audit: type=1400 audit(1791353731.046:16389): avc: denied { recv } for pid=16769 comm="syz.5.2762" saddr=10.128.0.169 src=41478 daddr=10.128.1.4 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1261.729797][ T56] usb 1-1: USB disconnect, device number 12 [ 1261.834084][T16790] Bluetooth: MGMT ver 1.23 [ 1261.890308][ T30] audit: type=1400 audit(1791353732.356:16390): avc: denied { setopt } for pid=16789 comm="syz.2.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1262.624731][ T5742] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1263.021708][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1263.031809][ T5742] usb 7-1: Using ep0 maxpacket: 8 [ 1263.039714][ T5742] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 1263.045537][ T5742] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.045572][ T5742] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 1263.045592][ T5742] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1263.045623][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.048452][T16792] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1263.053034][ T5742] mdc800 7-1:1.0: probe fails -> wrong Interface [ 1263.262506][T16792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.296149][ T5742] usb 7-1: USB disconnect, device number 18 [ 1263.302227][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1263.310912][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1263.314867][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1263.314890][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1263.314908][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.348712][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.348732][ T9] usb 6-1: Product: syz [ 1263.348745][ T9] usb 6-1: Manufacturer: syz [ 1263.348757][ T9] usb 6-1: SerialNumber: syz [ 1263.369137][T16796] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1263.381076][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1263.386948][ T9] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1263.386998][ T9] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1264.380658][T16811] netlink: 75 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1264.539887][ T5799] usb 6-1: USB disconnect, device number 67 [ 1264.641006][T16823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2774'. [ 1264.929932][T16827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1265.115831][ T8587] block nbd6: Possible stuck request ffff888028bd0000: control (read@0,1024B). Runtime 210 seconds [ 1265.115865][ T8587] block nbd6: Possible stuck request ffff888028bd01c0: control (read@1024,1024B). Runtime 210 seconds [ 1265.115887][ T8587] block nbd6: Possible stuck request ffff888028bd0380: control (read@2048,1024B). Runtime 210 seconds [ 1265.115909][ T8587] block nbd6: Possible stuck request ffff888028bd0540: control (read@3072,1024B). Runtime 210 seconds [ 1265.303871][T16818] nvme nvme0: failed to connect socket: -512 [ 1265.363108][ T5799] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 1265.675023][ T5799] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1265.704875][T16820] nvme_fabrics: unknown parameter or missing value 'G' in ctrl creation request [ 1265.753545][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1265.753575][ T5799] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.753597][ T5799] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1265.753633][ T5799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.020552][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1266.029743][ T5799] usb 8-1: config 0 descriptor?? [ 1266.127250][ T30] audit: type=1400 audit(1791353736.596:16391): avc: denied { listen } for pid=16839 comm="syz.2.2775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1266.165003][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2775'. [ 1266.193248][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1266.194104][ T9] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1266.194142][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1266.194164][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1266.195923][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1266.195944][ T9] usb 7-1: Product: syz [ 1266.195957][ T9] usb 7-1: Manufacturer: syz [ 1266.195972][ T9] usb 7-1: SerialNumber: syz [ 1266.360955][ T9] usb 7-1: config 0 descriptor?? [ 1266.479135][ T5721] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1267.594387][ T5721] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1267.648359][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.648385][ T5721] usb 3-1: Product: syz [ 1267.648400][ T5721] usb 3-1: Manufacturer: syz [ 1267.648414][ T5721] usb 3-1: SerialNumber: syz [ 1267.717368][ T5721] ums-karma 3-1:1.0: USB Mass Storage device detected [ 1267.722438][ T9] hub 7-1:0.0: bad descriptor, ignoring hub [ 1267.722457][ T9] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1267.726183][ T9] usb 7-1: selecting invalid altsetting 0 [ 1267.759683][ T5721] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1267.759683][ T5721] Please send a copy of this message to and [ 1267.760188][ T5799] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1267.844949][ T9] usb 7-1: USB disconnect, device number 19 [ 1267.916591][T16853] udevd[16853]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1267.972668][ T56] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1267.975551][ T5721] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 1268.677658][ T5721] usb 3-1: USB disconnect, device number 125 [ 1268.731839][ T56] usb 6-1: Using ep0 maxpacket: 32 [ 1268.732405][ T56] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1268.733488][ T56] usb 6-1: config 32 has an invalid interface number: 85 but max is 0 [ 1268.733511][ T56] usb 6-1: config 32 has no interface number 0 [ 1268.733543][ T56] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1268.733589][ T56] usb 6-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1268.733614][ T56] usb 6-1: config 32 interface 85 has no altsetting 0 [ 1268.735742][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.735768][ T56] usb 6-1: Product: syz [ 1268.735782][ T56] usb 6-1: Manufacturer: syz [ 1268.735797][ T56] usb 6-1: SerialNumber: syz [ 1268.739663][T16848] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1269.352064][ T5721] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1269.542753][ T5721] usb 1-1: Using ep0 maxpacket: 8 [ 1269.543200][ T5721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1269.544008][ T5721] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1269.544032][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1269.544045][ T5721] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1269.545720][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.545749][ T5721] usb 1-1: Product: syz [ 1269.545762][ T5721] usb 1-1: Manufacturer: syz [ 1269.545771][ T5721] usb 1-1: SerialNumber: syz [ 1269.551281][T16860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1269.633650][ T5721] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1269.634461][ T5721] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1269.634517][ T5721] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 1269.678347][T16870] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1269.714144][ T9] usb 8-1: USB disconnect, device number 9 [ 1269.795227][ T5742] usb 1-1: USB disconnect, device number 13 [ 1270.013418][ T56] appletouch 6-1:32.85: Failed to read mode from device. [ 1270.013505][ T56] appletouch 6-1:32.85: probe with driver appletouch failed with error -5 [ 1270.035389][ T56] usb 6-1: USB disconnect, device number 68 [ 1270.195987][ T30] audit: type=1400 audit(1791353740.666:16392): avc: denied { setopt } for pid=16861 comm="syz.2.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1270.326553][ T5742] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1270.442269][ T30] audit: type=1400 audit(1791353740.916:16393): avc: denied { read } for pid=16881 comm="syz.0.2791" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1270.473916][ T5742] usb 8-1: Using ep0 maxpacket: 8 [ 1270.484943][ T5742] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1270.499238][ T5742] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1270.499263][ T5742] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1270.499284][ T5742] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1270.504911][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.504930][ T5742] usb 8-1: Product: syz [ 1270.504943][ T5742] usb 8-1: Manufacturer: syz [ 1270.504955][ T5742] usb 8-1: SerialNumber: syz [ 1270.507386][T16875] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1270.509348][ T5742] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1270.516159][ T5742] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 1270.516208][ T5742] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 1271.103102][ T5721] usb 8-1: USB disconnect, device number 10 [ 1271.775429][ T30] audit: type=1326 audit(1791353742.246:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776030][ T30] audit: type=1326 audit(1791353742.246:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776332][ T30] audit: type=1326 audit(1791353742.246:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776568][ T30] audit: type=1326 audit(1791353742.246:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776607][ T30] audit: type=1326 audit(1791353742.246:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776759][ T30] audit: type=1326 audit(1791353742.246:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.776871][ T30] audit: type=1326 audit(1791353742.246:16400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.778471][ T30] audit: type=1326 audit(1791353742.246:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.778512][ T30] audit: type=1326 audit(1791353742.246:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1271.778550][ T30] audit: type=1326 audit(1791353742.246:16403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16900 comm="syz.7.2796" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be1f9e199 code=0x7ffc0000 [ 1273.405577][T16908] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1273.405743][T16908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1273.405801][T16908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1273.409027][T16908] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1273.646956][T16923] fuse: Unknown parameter '–d' [ 1273.683496][ T56] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1273.771714][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1273.771819][ T5799] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1273.833612][ T56] usb 8-1: Using ep0 maxpacket: 32 [ 1273.834072][ T56] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1273.834867][ T56] usb 8-1: config 0 has an invalid interface number: 48 but max is 0 [ 1273.834879][ T56] usb 8-1: config 0 has no interface number 0 [ 1273.834892][ T56] usb 8-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1273.834910][ T56] usb 8-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1273.834923][ T56] usb 8-1: config 0 interface 48 has no altsetting 0 [ 1273.834938][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.836663][ T56] usb 8-1: config 0 descriptor?? [ 1273.901782][ T9] usb 7-1: device descriptor read/64, error -71 [ 1273.909339][T11656] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1273.941680][ T5799] usb 6-1: Using ep0 maxpacket: 8 [ 1273.942113][ T5799] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1273.942958][ T5799] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1273.942982][ T5799] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1273.943002][ T5799] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.944645][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.944664][ T5799] usb 6-1: Product: syz [ 1273.944678][ T5799] usb 6-1: Manufacturer: syz [ 1273.944692][ T5799] usb 6-1: SerialNumber: syz [ 1273.946947][T16921] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1273.949003][ T5799] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1273.950715][ T5799] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 1273.950790][ T5799] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 1274.768591][T16925] netlink: 75 bytes leftover after parsing attributes in process `syz.0.2803'. [ 1274.831019][T14290] Bluetooth: hci5: command 0x0c1a tx timeout [ 1274.853496][T11656] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1274.854425][T11656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 15869, setting to 64 [ 1274.854462][T11656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.859355][T11656] usb 3-1: config 0 descriptor?? [ 1274.866561][T16923] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1274.879601][ T5721] usb 6-1: USB disconnect, device number 69 [ 1274.911339][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1274.960135][T16930] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1275.025674][T16928] IPVS: stopping backup sync thread 16930 ... [ 1275.051765][ T9] usb 7-1: device descriptor read/64, error -71 [ 1275.162032][ T9] usb usb7-port1: attempt power cycle [ 1275.432136][T14290] Bluetooth: hci2: command 0x0c1a tx timeout [ 1275.432143][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1275.477382][T16923] fuse: Bad value for 'user_id' [ 1275.477398][T16923] fuse: Bad value for 'user_id' [ 1275.482604][T16923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.482963][T16923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.487021][T11656] usb 3-1: string descriptor 0 read error: -71 [ 1275.487672][T11656] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #200: -71 [ 1275.487713][T11656] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 1275.487727][T11656] uclogic 0003:256C:006D.0014: failed probing pen v2 parameters: -71 [ 1275.487764][T11656] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 1275.487834][T11656] uclogic 0003:256C:006D.0014: probe with driver uclogic failed with error -71 [ 1275.498960][T11656] usb 3-1: USB disconnect, device number 126 [ 1275.517406][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1275.567476][ T9] usb 7-1: device descriptor read/8, error -71 [ 1275.597763][T16937] netlink: 828 bytes leftover after parsing attributes in process `syz.5.2805'. [ 1276.999136][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1277.012045][ T9] usb 7-1: device descriptor read/8, error -71 [ 1277.173117][ T9] usb usb7-port1: unable to enumerate USB device [ 1277.196514][ T56] usb 8-1: string descriptor 0 read error: -71 [ 1277.211450][ T56] as10x_usb: device has been detected [ 1277.213205][ T56] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1277.249087][ T56] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1277.331826][ T5721] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1277.491740][ T5721] usb 6-1: Using ep0 maxpacket: 16 [ 1277.495976][ T5721] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 1277.498083][ T5721] usb 6-1: config 0 has an invalid interface number: 99 but max is 0 [ 1277.498106][ T5721] usb 6-1: config 0 has no interface number 0 [ 1277.498137][ T5721] usb 6-1: config 0 interface 99 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1277.498161][ T5721] usb 6-1: config 0 interface 99 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1277.516463][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 1277.584139][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.584172][ T5721] usb 6-1: Product: syz [ 1277.584187][ T5721] usb 6-1: Manufacturer: syz [ 1277.584243][ T5721] usb 6-1: SerialNumber: syz [ 1277.657227][ T5721] usb 6-1: config 0 descriptor?? [ 1277.670354][ T5721] usbtest 6-1:0.99: usb test device [ 1277.670436][ T5721] usbtest 6-1:0.99: high-speed {control in/out iso-out} tests (+alt) [ 1277.910429][T16944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1277.911683][T16944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.993648][ T5721] usb 6-1: USB disconnect, device number 70 [ 1278.996079][ T56] as10x_usb: error during firmware upload part1 [ 1278.996108][ T56] Registered device nBox DVB-T Dongle [ 1278.996190][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 1278.996200][ T30] audit: type=1400 audit(1791353749.466:16724): avc: denied { firmware_load } for pid=56 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1279.062801][ T56] usb 8-1: USB disconnect, device number 11 [ 1279.073668][ T56] Unregistered device nBox DVB-T Dongle [ 1279.083307][ T56] as10x_usb: device has been disconnected [ 1279.401868][ T56] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1279.592336][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 1279.592832][ T56] usb 8-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1279.593852][ T56] usb 8-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1279.593880][ T56] usb 8-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1279.593903][ T56] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1279.593930][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.688886][T16959] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1279.692161][T16959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1279.718556][T16959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1279.813477][ T56] usb 8-1: config 0 descriptor?? [ 1280.963290][ T56] usbhid 8-1:0.0: can't add hid device: -71 [ 1280.963343][ T56] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1280.968018][ T56] usb 8-1: USB disconnect, device number 12 [ 1282.024609][T14290] Bluetooth: hci2: command 0x0c1a tx timeout [ 1282.024644][T14290] Bluetooth: hci3: command 0x0c1a tx timeout [ 1282.024690][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1283.431750][ T5799] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 1283.581770][ T5799] usb 8-1: device descriptor read/64, error -71 [ 1283.602178][T16575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1283.618905][T16575] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1283.627757][T16575] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1283.635283][T16575] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1283.635775][T16575] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1283.823553][ T30] audit: type=1326 audit(1791353754.286:16725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823607][ T30] audit: type=1326 audit(1791353754.286:16726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823646][ T30] audit: type=1326 audit(1791353754.286:16727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823690][ T30] audit: type=1326 audit(1791353754.286:16728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823729][ T30] audit: type=1326 audit(1791353754.286:16729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823768][ T30] audit: type=1326 audit(1791353754.286:16730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823807][ T30] audit: type=1326 audit(1791353754.286:16731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823846][ T30] audit: type=1326 audit(1791353754.286:16732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.823885][ T30] audit: type=1326 audit(1791353754.286:16733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1283.956585][ T5799] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 1284.011709][T17004] sctp: [Deprecated]: syz.5.2823 (pid 17004) Use of int in max_burst socket option deprecated. [ 1284.011709][T17004] Use struct sctp_assoc_value instead [ 1284.012041][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1284.012072][ T30] audit: type=1326 audit(1791353754.406:16735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012204][ T30] audit: type=1326 audit(1791353754.406:16736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012326][ T30] audit: type=1326 audit(1791353754.426:16737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012447][ T30] audit: type=1326 audit(1791353754.456:16738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012552][ T30] audit: type=1326 audit(1791353754.456:16739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012673][ T30] audit: type=1326 audit(1791353754.456:16740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012790][ T30] audit: type=1326 audit(1791353754.456:16741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.012894][ T30] audit: type=1326 audit(1791353754.456:16742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.013000][ T30] audit: type=1326 audit(1791353754.456:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.013105][ T30] audit: type=1326 audit(1791353754.456:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17001 comm="syz.6.2824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3da179e199 code=0x7ffc0000 [ 1284.276258][ T5799] usb 8-1: device descriptor read/64, error -71 [ 1284.387695][ T5799] usb usb8-port1: attempt power cycle [ 1284.731723][ T5799] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 1284.752652][ T5799] usb 8-1: device descriptor read/8, error -71 [ 1284.848819][ T5609] tipc: Resetting bearer [ 1284.848850][ T5609] batman_adv: batadv0: Interface deactivated: syz_tun [ 1284.950176][ T5609] tipc: Disabling bearer [ 1284.970709][ T5609] batman_adv: batadv0: Removing interface: syz_tun [ 1284.991716][ T5799] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 1285.012191][ T5799] usb 8-1: device descriptor read/8, error -71 [ 1285.122106][ T5799] usb usb8-port1: unable to enumerate USB device [ 1285.681871][T16575] Bluetooth: hci6: command tx timeout [ 1286.847438][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2828'. [ 1287.752183][T16575] Bluetooth: hci6: command tx timeout [ 1288.231227][T16995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.241738][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.241813][T16995] bridge_slave_0: entered allmulticast mode [ 1288.247117][T16995] bridge_slave_0: entered promiscuous mode [ 1288.269935][T16995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.279444][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.280981][T16995] bridge_slave_1: entered allmulticast mode [ 1288.298047][T16995] bridge_slave_1: entered promiscuous mode [ 1288.378806][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.397221][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.464979][T16995] team0: Port device team_slave_0 added [ 1288.477457][T16995] team0: Port device team_slave_1 added [ 1288.556270][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.556280][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.556293][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.557549][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.557562][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1288.557583][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.883127][T16995] hsr_slave_0: entered promiscuous mode [ 1288.886063][T16995] hsr_slave_1: entered promiscuous mode [ 1288.886609][T16995] debugfs: 'hsr0' already exists in 'hsr' [ 1288.886626][T16995] Cannot create hsr debugfs directory [ 1289.578519][ T4975] udevd[4975]: worker [14517] /devices/virtual/block/nbd6 timeout; kill it [ 1289.578565][ T4975] udevd[4975]: seq 20602 '/devices/virtual/block/nbd6' killed [ 1289.831991][T16575] Bluetooth: hci6: command tx timeout [ 1291.566741][T16995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.566779][T16995] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.912179][T16575] Bluetooth: hci6: command tx timeout [ 1293.357717][T11656] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1293.940274][T11656] usb 6-1: Using ep0 maxpacket: 32 [ 1293.942002][T11656] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1293.943667][T11656] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.943699][T11656] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1293.943720][T11656] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1293.943742][T11656] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1293.948887][T11656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.948909][T11656] usb 6-1: Product: syz [ 1293.948923][T11656] usb 6-1: Manufacturer: syz [ 1293.948937][T11656] usb 6-1: SerialNumber: syz [ 1293.991680][ T5742] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1294.078581][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1294.198962][T11656] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input81 [ 1294.207399][ T5742] usb 8-1: Using ep0 maxpacket: 32 [ 1294.227020][ T5742] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1294.298822][ T5742] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 1294.298849][ T5742] usb 8-1: config 32 has no interface number 0 [ 1294.298884][ T5742] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 113, changing to 10 [ 1294.298910][ T5742] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 58477, setting to 1024 [ 1294.298934][ T5742] usb 8-1: config 32 interface 85 has no altsetting 0 [ 1294.434865][ T5742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.434892][ T5742] usb 8-1: Product: syz [ 1294.434907][ T5742] usb 8-1: Manufacturer: syz [ 1294.434922][ T5742] usb 8-1: SerialNumber: syz [ 1294.590499][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.620587][T17091] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1295.767415][ T8587] block nbd6: Possible stuck request ffff888028bd0000: control (read@0,1024B). Runtime 240 seconds [ 1295.767452][ T8587] block nbd6: Possible stuck request ffff888028bd01c0: control (read@1024,1024B). Runtime 240 seconds [ 1295.767475][ T8587] block nbd6: Possible stuck request ffff888028bd0380: control (read@2048,1024B). Runtime 240 seconds [ 1295.767496][ T8587] block nbd6: Possible stuck request ffff888028bd0540: control (read@3072,1024B). Runtime 240 seconds [ 1295.919647][T11656] imon:send_packet: packet tx failed (-71) [ 1295.931962][T11656] imon 6-1:155.0: panel buttons/knobs setup failed [ 1295.931981][T11656] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1295.931993][T11656] (id 0x00) [ 1296.047113][T17108] FAULT_INJECTION: forcing a failure. [ 1296.047113][T17108] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.047134][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.6.2850 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.047149][T17108] Tainted: [L]=SOFTLOCKUP [ 1296.047155][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1296.047162][T17108] Call Trace: [ 1296.047166][T17108] [ 1296.047171][T17108] dump_stack_lvl+0x100/0x190 [ 1296.047192][T17108] should_fail_ex.cold+0x5/0xa [ 1296.047208][T17108] should_failslab+0xc2/0x120 [ 1296.047225][T17108] __kmalloc_cache_noprof+0x91/0x6d0 [ 1296.047237][T17108] ? io_uring_setup.cold+0x6c/0x1cde [ 1296.047252][T17108] io_uring_setup.cold+0x6c/0x1cde [ 1296.047264][T17108] ? lock_acquire+0x1d1/0x380 [ 1296.047277][T17108] ? avc_has_perm_noaudit+0x56/0x470 [ 1296.047288][T17108] ? __pfx_io_uring_setup+0x10/0x10 [ 1296.047303][T17108] ? find_held_lock+0x2b/0x80 [ 1296.047319][T17108] ? avc_has_perm_noaudit+0x11e/0x470 [ 1296.047329][T17108] ? avc_has_perm_noaudit+0x11e/0x470 [ 1296.047348][T17108] ? ksys_write+0x1ac/0x250 [ 1296.047362][T17108] ? __pfx_ksys_write+0x10/0x10 [ 1296.047378][T17108] __x64_sys_io_uring_setup+0xc2/0x170 [ 1296.047395][T17108] do_syscall_64+0x123/0x790 [ 1296.047409][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.047421][T17108] RIP: 0033:0x7f3da179e199 [ 1296.047431][T17108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.047441][T17108] RSP: 002b:00007f3da262fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1296.047452][T17108] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3da179e199 [ 1296.047459][T17108] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1296.047466][T17108] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1296.047473][T17108] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1296.047479][T17108] R13: 0000200000000b10 R14: 00007f3da262ffd8 R15: 0000000000000000 [ 1296.047493][T17108] [ 1296.140891][ T5742] appletouch 8-1:32.85: Failed to read mode from device. [ 1296.141482][ T5742] appletouch 8-1:32.85: probe with driver appletouch failed with error -5 [ 1296.196462][ T5742] usb 8-1: USB disconnect, device number 17 [ 1296.749044][T16995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.749146][T16995] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.771686][T11656] rc_core: IR keymap rc-imon-pad not found [ 1296.771699][T11656] Registered IR keymap rc-empty [ 1296.771750][T11656] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1296.771765][T11656] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1296.786988][T11656] imon:send_packet: packet tx failed (-71) [ 1296.811749][T11656] imon 6-1:155.0: remote input dev register failed [ 1296.811858][T11656] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 1297.980198][T16995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1297.987646][T16995] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.162789][T11656] imon 6-1:155.0: unable to initialize intf0, err 0 [ 1298.162810][T11656] imon:imon_probe: failed to initialize context! [ 1298.162822][T11656] imon 6-1:155.0: unable to register, err -19 [ 1298.166845][T11656] usb 6-1: USB disconnect, device number 71 [ 1298.170091][T14284] udevd[14284]: setting mode of /dev/bus/usb/006/071 to 020664 failed: No such file or directory [ 1298.170181][T14284] udevd[14284]: setting owner of /dev/bus/usb/006/071 to uid=0, gid=0 failed: No such file or directory [ 1298.336695][T16995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1298.336716][T16995] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.496975][ T56] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1298.651759][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 1298.652254][ T56] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1298.653133][ T56] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1298.653158][ T56] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1298.653182][ T56] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1298.656655][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.656677][ T56] usb 7-1: Product: syz [ 1298.656690][ T56] usb 7-1: Manufacturer: syz [ 1298.656702][ T56] usb 7-1: SerialNumber: syz [ 1298.666193][T16995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1298.742844][T17115] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1298.744072][ T56] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1298.745437][ T56] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1298.745494][ T56] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1298.745780][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1298.752576][T16995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1298.770507][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1298.772975][T16995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1298.814316][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1298.818942][T16995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1298.870019][T16995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1299.215208][T16995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.760694][T16995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.809979][ T56] usb 7-1: USB disconnect, device number 24 [ 1299.840559][ T1392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.840643][ T1392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.849744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.849813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.845222][T17153] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 1300.845247][T17153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1300.845354][T17153] vhci_hcd vhci_hcd.0: Device attached [ 1300.889124][T17156] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 1300.889146][T17156] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1300.889213][T17156] vhci_hcd vhci_hcd.0: Device attached [ 1301.122481][ T25] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 1301.465716][T17154] vhci_hcd: connection reset by peer [ 1301.466839][T12856] vhci_hcd vhci_hcd.6: stop threads [ 1301.466910][T12856] vhci_hcd vhci_hcd.6: release socket [ 1301.466976][T12856] vhci_hcd vhci_hcd.6: disconnect device [ 1301.470655][T17158] vhci_hcd: connection closed [ 1301.471017][ T6265] vhci_hcd vhci_hcd.6: stop threads [ 1301.471062][ T6265] vhci_hcd vhci_hcd.6: release socket [ 1301.471221][ T6265] vhci_hcd vhci_hcd.6: disconnect device [ 1301.497433][T16995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.623589][T16995] veth0_vlan: entered promiscuous mode [ 1302.740209][T16995] veth1_vlan: entered promiscuous mode [ 1302.918973][T17165] netlink: 83 bytes leftover after parsing attributes in process `syz.6.2861'. [ 1303.377211][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 1303.377223][ T30] audit: type=1400 audit(1791353773.846:16893): avc: denied { name_bind } for pid=17170 comm="syz.5.2864" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1303.389850][T16995] veth0_macvtap: entered promiscuous mode [ 1303.401849][T16995] veth1_macvtap: entered promiscuous mode [ 1303.439795][T16995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.466954][T16995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.565362][ T1392] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.565386][ T1392] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.565403][ T1392] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.565419][ T1392] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.889371][T12856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.889392][T12856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.960519][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.960537][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.291717][ T5728] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1304.472188][ T5728] usb 6-1: device descriptor read/64, error -71 [ 1304.651809][ T5799] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1304.741790][ T5728] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1304.813551][ T5799] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1304.820908][ T5799] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.820951][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.854138][ T5799] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1304.881806][ T5728] usb 6-1: device descriptor read/64, error -71 [ 1305.002106][ T5728] usb usb6-port1: attempt power cycle [ 1305.761794][ T5728] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1305.950470][ T5728] usb 6-1: device descriptor read/8, error -71 [ 1306.222030][ T25] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1306.458340][ T5728] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1306.525466][ T5728] usb 6-1: device descriptor read/8, error -71 [ 1306.675106][ T5728] usb usb6-port1: unable to enumerate USB device [ 1307.013990][ T30] audit: type=1400 audit(1791353777.486:16894): avc: denied { write } for pid=17208 comm="syz.6.2874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1307.026139][T17212] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.128992][T11656] usb 3-1: USB disconnect, device number 127 [ 1312.070384][ T30] audit: type=1400 audit(1791353782.536:16895): avc: denied { connect } for pid=17247 comm="syz.2.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1312.235066][T17249] FAULT_INJECTION: forcing a failure. [ 1312.235066][T17249] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.235089][T17249] CPU: 0 UID: 0 PID: 17249 Comm: syz.2.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.235104][T17249] Tainted: [L]=SOFTLOCKUP [ 1312.235108][T17249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1312.235114][T17249] Call Trace: [ 1312.235119][T17249] [ 1312.235123][T17249] dump_stack_lvl+0x100/0x190 [ 1312.235144][T17249] should_fail_ex.cold+0x5/0xa [ 1312.235161][T17249] should_failslab+0xc2/0x120 [ 1312.235178][T17249] __kmalloc_cache_noprof+0x91/0x6d0 [ 1312.235191][T17249] ? io_manage_buffers_legacy+0x415/0xf50 [ 1312.235212][T17249] io_manage_buffers_legacy+0x415/0xf50 [ 1312.235233][T17249] __io_issue_sqe+0xe8/0x7a0 [ 1312.235249][T17249] io_issue_sqe+0x88/0x1540 [ 1312.235264][T17249] ? io_provide_buffers_prep+0x373/0x430 [ 1312.235285][T17249] io_submit_sqes+0xb17/0x2480 [ 1312.235307][T17249] __do_sys_io_uring_enter+0xa88/0x1b10 [ 1312.235324][T17249] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1312.235339][T17249] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1312.235355][T17249] ? __x64_sys_futex+0x34f/0x4d0 [ 1312.235371][T17249] ? __x64_sys_futex+0x358/0x4d0 [ 1312.235388][T17249] ? xfd_validate_state+0x129/0x190 [ 1312.235406][T17249] do_syscall_64+0x123/0x790 [ 1312.235420][T17249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.235432][T17249] RIP: 0033:0x7fd7b919e199 [ 1312.235442][T17249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.235453][T17249] RSP: 002b:00007fd7ba019028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1312.235464][T17249] RAX: ffffffffffffffda RBX: 00007fd7b9426090 RCX: 00007fd7b919e199 [ 1312.235471][T17249] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000006 [ 1312.235478][T17249] RBP: 00007fd7b92358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.235485][T17249] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1312.235491][T17249] R13: 00007fd7b9426128 R14: 00007fd7b9426090 R15: 00007ffd49b1dd18 [ 1312.235507][T17249] [ 1312.297668][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1312.297687][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x2f76 instead [ 1312.297700][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x3161 instead [ 1312.297712][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0xcc7d instead [ 1312.297725][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0x4de3 instead [ 1312.297737][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xe396 instead [ 1312.297750][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xa230 instead [ 1312.297762][T ** replaying previous printk message ** [ 1312.297762][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x1bde instead [ 1312.297775][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xfc6c instead [ 1312.297788][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0x1c63 instead [ 1312.297801][T17249] jffs2: Further such events for this erase block will not be printed [ 1312.298187][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001440: 0x2f2e instead [ 1312.298201][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001444: 0x0076 instead [ 1312.298230][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001540: 0x6564 instead [ 1312.298243][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001544: 0x706d instead [ 1312.298328][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1312.298341][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1312.298354][T17249] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1312.428618][ T25] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1312.476625][ T31] INFO: task syz.1.2520:15881 blocked for more than 143 seconds. [ 1312.476640][ T31] Tainted: G L syzkaller #0 [ 1312.476647][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1312.476651][ T31] task:syz.1.2520 state:D stack:25640 pid:15881 tgid:15880 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 1312.476682][ T31] Call Trace: [ 1312.476686][ T31] [ 1312.476693][ T31] __schedule+0x1259/0x6920 [ 1312.476709][ T31] ? __lock_acquire+0x5c0/0x1f40 [ 1312.476725][ T31] ? do_raw_spin_lock+0x128/0x260 [ 1312.476745][ T31] ? __pfx___schedule+0x10/0x10 [ 1312.476755][ T31] ? find_held_lock+0x2b/0x80 [ 1312.476772][ T31] ? schedule+0x225/0x2c0 [ 1312.476785][ T31] schedule+0xdd/0x2c0 [ 1312.476796][ T31] schedule_preempt_disabled+0x13/0x30 [ 1312.476807][ T31] __mutex_lock+0xccb/0x1bd0 [ 1312.476821][ T31] ? sync_bdevs+0x153/0x480 [ 1312.476836][ T31] ? sync_bdevs+0x1ff/0x480 [ 1312.476850][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1312.476869][ T31] ? iput.part.0+0x1a0/0x1050 [ 1312.476881][ T31] ? sync_bdevs+0xc7/0x480 [ 1312.476897][ T31] ? sync_bdevs+0x153/0x480 [ 1312.476909][ T31] sync_bdevs+0x153/0x480 [ 1312.476925][ T31] ksys_sync+0xb0/0xf0 [ 1312.476937][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1312.476951][ T31] ? do_syscall_64+0xae/0x790 [ 1312.476963][ T31] __do_sys_sync+0xe/0x20 [ 1312.476974][ T31] do_syscall_64+0x123/0x790 [ 1312.476988][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.477001][ T31] RIP: 0033:0x7f762d19e199 [ 1312.477011][ T31] RSP: 002b:00007f762e11a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1312.477022][ T31] RAX: ffffffffffffffda RBX: 00007f762d425fa0 RCX: 00007f762d19e199 [ 1312.477029][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.477036][ T31] RBP: 00007f762d425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1312.477043][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1312.477050][ T31] R13: 00007f762d426038 R14: 00007f762d425fa0 R15: 00007fff1c434838 [ 1312.477069][ T31] [ 1312.477083][ T31] [ 1312.477083][ T31] Showing all locks held in the system: [ 1312.477088][ T31] locks held by pr/ttyS0/16: 1, last CPU#1: [ 1312.477096][ T31] #0: ffffffff8edd88b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1312.477126][ T31] locks held by kworker/1:0/25: 6, on CPU#1: [ 1312.477134][ T31] #0: ffff888021eb8d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1312.477166][ T31] #1: ffffc900001f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1312.477198][ T31] #2: ffff88802b5f81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 1312.477222][ T31] #3: ffff88802b623568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 1312.477246][ T31] #4: ffff88802b72f060 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 1312.477269][ T31] #5: ffffffff902835a8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x1a1/0x1bd0 [ 1312.477300][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1312.477316][ T31] #0: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1312.477356][ T31] locks held by kworker/u8:12/1439: 4, last CPU#0: [ 1312.477364][ T31] #0: ffff8880216da940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1312.477395][ T31] #1: ffffc90005b9fd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1312.477428][ T31] #2: ffff888035bc60e8 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x21/0xf0 [ 1312.477459][ T31] #3: ffff888035bc4c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 1312.477497][ T31] locks held by getty/5364: 2, on CPU#1: [ 1312.477505][ T31] #0: ffff8880383c40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1312.477533][ T31] #1: ffffc9000321e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1312.477577][ T31] locks held by syz-executor/9505: 2, last CPU#0: [ 1312.477586][ T31] #0: ffff888079044460 (sb_writers#6){.+.+}-{0:0}, at: filename_unlinkat+0x1ad/0x730 [ 1312.477618][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1312.477652][ T31] locks held by udevd/14517: 1, on CPU#0: [ 1312.477660][ T31] #0: ffff8880279bf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1312.477687][ T31] locks held by syz.1.2520/15881: 1, on CPU#0: [ 1312.477695][ T31] #0: ffff8880279bf350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 1312.477723][ T31] locks held by syz.0.2886/17243: 4, on CPU#0: [ 1312.477731][ T31] #0: ffff88802d7c7430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1312.477760][ T31] #1: ffff888030484460 (sb_writers#11){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1312.477789][ T31] #2: ffff888057016480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1312.477817][ T31] #3: ffff88807ebe8698 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1312.477846][ T31] locks held by syz.6.2885/17240: 2, last CPU#0: [ 1312.477854][ T31] #0: ffff8880778f0340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1312.477881][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1312.477908][ T31] locks held by syz.6.2885/17242: 1, on CPU#1: [ 1312.477916][ T31] #0: ffff8880778f0340 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x160/0x6f0 [ 1312.477951][ T31] locks held by syz.6.2885/17244: 3, last CPU#0: [ 1312.478032][ T31] #0: ffff88805714da58 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_open+0x59/0xd50 [ 1312.478082][ T31] #1: ffff88814044c170 (&kernfs_locks->node_mutex[count]){+.+.}-{4:4}, at: kernfs_fop_open+0x6c9/0xd50 [ 1312.478122][ T31] #2: ffffffff8effd758 (remove_cache_srcu){.+.+}-{0:0}, at: kasan_quarantine_reduce+0x8a/0x1f0 [ 1312.478163][ T31] locks held by syz.2.2888/17247: 2, last CPU#0: [ 1312.478175][ T31] #0: ffff88807d1e0340 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 1312.478214][ T31] #1: ffffffff8edec5a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1312.478253][ T31] locks held by syz.2.2888/17249: 1, last CPU#0: [ 1312.478264][ T31] #0: ffff888037c300e8 (&type->s_umount_key#72/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f70 [ 1312.478311][ T31] [ 1312.478315][ T31] ============================================= [ 1312.478315][ T31] [ 1312.478322][ T31] NMI backtrace for cpu 0 [ 1312.478333][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.478354][ T31] Tainted: [L]=SOFTLOCKUP [ 1312.478360][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1312.478369][ T31] Call Trace: [ 1312.478376][ T31] [ 1312.478382][ T31] dump_stack_lvl+0x100/0x190 [ 1312.478406][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1312.478431][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1312.478450][ T31] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1312.478476][ T31] sys_info+0x141/0x190 [ 1312.478496][ T31] watchdog+0xcb1/0x1030 [ 1312.478521][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1312.478538][ T31] ? __pfx_watchdog+0x10/0x10 [ 1312.478558][ T31] ? __kthread_parkme+0x18f/0x230 [ 1312.478581][ T31] ? kthread+0x13a/0x450 [ 1312.478602][ T31] ? __pfx_watchdog+0x10/0x10 [ 1312.478620][ T31] kthread+0x373/0x450 [ 1312.478642][ T31] ? __pfx_kthread+0x10/0x10 [ 1312.478665][ T31] ret_from_fork+0x730/0xd60 [ 1312.478684][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1312.478704][ T31] ? __switch_to+0x800/0x10f0 [ 1312.478726][ T31] ? __pfx_kthread+0x10/0x10 [ 1312.478749][ T31] ret_from_fork_asm+0x1a/0x30 [ 1312.478776][ T31] [ 1312.478783][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1312.478802][ C1] NMI backtrace for cpu 1 [ 1312.478814][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1312.478833][ C1] Tainted: [L]=SOFTLOCKUP [ 1312.478838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1312.478845][ C1] RIP: 0010:delay_tsc+0x30/0xc0 [ 1312.478865][ C1] Code: 49 89 fd bf 01 00 00 00 41 54 55 53 e8 f9 98 05 f6 e8 24 7f 01 00 41 89 c4 0f 01 f9 66 90 48 c1 e2 20 48 09 c2 48 89 d5 eb 16 90 bf 01 00 00 00 e8 d4 98 05 f6 e8 ff 7e 01 00 44 39 e0 75 36 [ 1312.478879][ C1] RSP: 0018:ffffc90000157950 EFLAGS: 00000082 [ 1312.478891][ C1] RAX: 8000000000000002 RBX: 0000035cb48e1910 RCX: 0000000000000000 [ 1312.478901][ C1] RDX: 0000000000000004 RSI: ffffffff8c623a00 RDI: 0000000000000001 [ 1312.478910][ C1] RBP: 0000035cb48e1686 R08: 0000000000000005 R09: 0000000000000000 [ 1312.478919][ C1] R10: 00000000000007b9 R11: 205d393432373154 R12: 0000000000000001 [ 1312.478928][ C1] R13: 0000000000000af1 R14: fffffbfff378ee49 R15: dffffc0000000000 [ 1312.478938][ C1] FS: 0000000000000000(0000) GS:ffff888123c4e000(0000) knlGS:0000000000000000 [ 1312.478952][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1312.478961][ C1] CR2: 0000200000022000 CR3: 00000000643a7000 CR4: 00000000003526f0 [ 1312.478971][ C1] Call Trace: [ 1312.478975][ C1] [ 1312.478981][ C1] wait_for_lsr+0xf3/0x210 [ 1312.479002][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1312.479023][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1312.479041][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1312.479061][ C1] serial8250_console_write+0x1108/0x14f0 [ 1312.479079][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1312.479093][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1312.479109][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1312.479127][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1312.479144][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1312.479158][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1312.479172][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 1312.479193][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1312.479211][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1312.479232][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1312.479245][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1312.479262][ C1] nbcon_kthread_func+0x613/0x7d0 [ 1312.479278][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1312.479295][ C1] ? __kthread_parkme+0x18f/0x230 [ 1312.479312][ C1] ? kthread+0x13a/0x450 [ 1312.479329][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1312.479343][ C1] kthread+0x373/0x450 [ 1312.479360][ C1] ? __pfx_kthread+0x10/0x10 [ 1312.479379][ C1] ret_from_fork+0x730/0xd60 [ 1312.479394][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1312.479413][ C1] ? __switch_to+0x800/0x10f0 [ 1312.479431][ C1] ? __pfx_kthread+0x10/0x10 [ 1312.479450][ C1] ret_from_fork_asm+0x1a/0x30 [ 1312.479469][ C1] [ 1312.555989][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1313.700718][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.711363][ T31] Tainted: [L]=SOFTLOCKUP [ 1313.715657][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1313.725684][ T31] Call Trace: [ 1313.728939][ T31] [ 1313.731846][ T31] dump_stack_lvl+0x100/0x190 [ 1313.736519][ T31] vpanic+0x553/0x970 [ 1313.740477][ T31] ? __pfx_vpanic+0x10/0x10 [ 1313.744978][ T31] panic+0xd1/0xe0 [ 1313.748672][ T31] ? __pfx_panic+0x10/0x10 [ 1313.753064][ T31] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1313.759205][ T31] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1313.765347][ T31] ? watchdog.cold+0x1ec/0x234 [ 1313.770090][ T31] watchdog.cold+0x1fd/0x234 [ 1313.774657][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1313.780435][ T31] ? __pfx_watchdog+0x10/0x10 [ 1313.785085][ T31] ? __kthread_parkme+0x18f/0x230 [ 1313.790085][ T31] ? kthread+0x13a/0x450 [ 1313.794304][ T31] ? __pfx_watchdog+0x10/0x10 [ 1313.798956][ T31] kthread+0x373/0x450 [ 1313.803003][ T31] ? __pfx_kthread+0x10/0x10 [ 1313.807580][ T31] ret_from_fork+0x730/0xd60 [ 1313.812143][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1313.817230][ T31] ? __switch_to+0x800/0x10f0 [ 1313.821885][ T31] ? __pfx_kthread+0x10/0x10 [ 1313.826464][ T31] ret_from_fork_asm+0x1a/0x30 [ 1313.831210][ T31] [ 1313.834395][ T31] Kernel Offset: disabled [ 1313.838693][ T31] Rebooting in 86400 seconds..