last executing test programs: 14.034637614s ago: executing program 0 (id=873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) getegid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x3, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c00000400458038120180341237803012"], 0x1250}}, 0xc000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) 12.514735572s ago: executing program 0 (id=875): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)}, 0x80000000}], 0x1, 0x2, 0x0) 12.377411814s ago: executing program 0 (id=876): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r3) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x1, 0x0, &(0x7f0000048000), 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000001f00009000000700000014f7ffff0900010009000000af010000a2b9000001000000100000000800000002000000"]) write$input_event(r4, &(0x7f0000000040)={{}, 0x3, 0x1, 0xffff}, 0x18) 11.395837955s ago: executing program 0 (id=878): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x28) r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000180)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000040)={r3, 0x1000, &(0x7f0000001180)=""/4096}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4004550d, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x0, 0xd, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x0, 0x5, 0x101, 0x1000, 0x9, 0x7, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x100009, 0x4, 0x7, 0x5, 0x100000, 0x102, 0x2, 0xd, 0xe, 0x2b12, 0xff, 0x6, 0x7ffffffe, 0xb, 0x7, 0xbed4, 0x8, 0x8, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x0, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x2, 0x6, 0xf7, 0x5, 0x2, 0x4, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xfffffffe, 0x400, 0x752, 0x0, 0x1005, 0x3, 0x10001, 0x0, 0x1, 0x6, 0x6, 0x9, 0xd, 0xfdfeffff, 0x2, 0x2, 0x2, 0x100, 0x0, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffe, 0xfff, 0x7fffffff, 0x5, 0xffffffcc, 0x0, 0x2, 0x2, 0x40, 0xfffffeff, 0x204, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCSBRK(r6, 0x5427) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000400200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000082665bd190000006a0000001801000020786c2500000000002020207b1af8ff00000000bfa1000000992ce6cc31a000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000005440), 0x0, 0x20000011) recvmmsg(r11, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000003000)=""/4128, 0x1020}], 0x1}}], 0x1, 0x41, 0x0) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 9.409096246s ago: executing program 4 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0}], 0x1, 0x4, 0x10003ff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) 9.009487651s ago: executing program 2 (id=883): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x2, 0xbdf, 0x400, 0xfffd}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)=0x9) r1 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0xb78b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x7fff) io_uring_setup(0x5a30, &(0x7f0000000380)={0x0, 0x3da5, 0x20, 0x3, 0xf5}) io_setup(0x1, &(0x7f0000000200)) r9 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "341347c74c840b386c5fd6e2c51cc3744e490f6e03eb0cda3aadf9a06c585a9cf2fb55ed0604db9daae64cd22c3e6869c7596ed499f3b3da6f959245a2802336", 0x3a}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r9, 0x100000000) 8.863577063s ago: executing program 4 (id=885): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=""/190) unshare(0x8040480) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x84, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r5, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000ffdbdf25180000000c009900030000007e0000000a0006000802110000000000c20b6200f8c4d497f3296c5db60ca3bcb993eb2c4806d3c6d2530ad765479ed87aaad35bbea91baf74f39439ee8a971aca7b6a639a084bb88bb5dabe85c012562d67a26c4bd689"], 0x2c}, 0x1, 0x0, 0x0, 0x240040d1}, 0x24004021) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 8.349766168s ago: executing program 2 (id=886): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) getegid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x3, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c00000400458038120180341237803012"], 0x1250}}, 0xc000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) 7.689347501s ago: executing program 3 (id=887): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x2, 0x0) 7.664118977s ago: executing program 1 (id=888): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) close(r3) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {0x3, 0x7}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8, 0x1, 0x0, &(0x7f0000048000), 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="0100000000001f00009000000700000014f7ffff0900010009000000af010000a2b9000001000000100000000800000002000000"]) write$input_event(r4, &(0x7f0000000040)={{}, 0x3, 0x1, 0xffff}, 0x18) 7.094120052s ago: executing program 3 (id=889): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xd2, &(0x7f0000001600)=""/210, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xff7ffffe}, 0x10}, 0x94) memfd_secret(0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000070904000001020d0000052406000105240000000d240f0100000000000000000006241a00000809058103000200fe000904010001020d00000904010102020d00000905820200020942f90905030210"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="9feb01f735000000000000001800ae62ef00001844000002000000000000000000000400000000002000000000001d9eae4850a2f7bc7cc1062d43976601000000"], 0x0, 0x32, 0x0, 0x1}, 0x20) r2 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000040)={0x7, @win={{0xada7, 0x2, 0x4, 0x8}, 0x1, 0x81, 0x0, 0x2005, 0x0, 0x3}}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES16=r2], &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x42, 0x8, 0x7, 0x20, 0xff}, 0x18, 0x0, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000440)={0x24, &(0x7f0000001700)=ANY=[@ANYBLOB="20054c0000004c23aafb9850df283668d251c6775e2f9c24f9d16fe831cf2c29586b18a370f58db569789a1d63aeaee4bd319b2914051ae9c7feb9e40014188ae73b6bf5c2f86af61347a38d5bb6062305800bc24adc4e5c8cd5"], &(0x7f00000002c0)=ANY=[@ANYBLOB="00030400000004031e0444067ef6b7ce9814474cfb5e5f3d2d13634e65ea438eef56cec733a660150e51182d10"], &(0x7f00000013c0)=ANY=[@ANYBLOB="0000000700009f72e0fdffad191242d65e59ca9d27a3bd"], &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x256}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="401523000000d9450fa83ba318dcaed98b5a33c63376438c696e4139e2c5465220898daf5b222183e8"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x97}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x11}, &(0x7f0000001440)=ANY=[@ANYBLOB="20017e000000452af242f6efb241b1ee94bf0a6faeaadb866ba000977624320163423619f0b1969ea48e95ac3d9a595251b8bd51c1d11616969b8f61e4dc9f69c5bb00b28e385a1bfc49201500de4d63e312c99530b910f4c7a846c18bae4c9e6a8c59c1b07d2554fb26b2485b4148f67b539da733e77bd2f0c6b0196b618bf51374c32cb31577457a0629e2974364"], &(0x7f0000000740)={0x20, 0x3, 0x1, 0x1a}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xf30, 0x2, 0xf, 0x7, 0xf, 0x40, 0x2, 0xfff, 0x7fff, 0x6, 0x5, 0x8}}, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000001500)='syzkaller\x00', 0xf, 0xa9f, &(0x7f00000003c0)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 7.084980711s ago: executing program 2 (id=890): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800"], 0x1c}}, 0x4000080) 7.050376277s ago: executing program 0 (id=891): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x36c9, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0), 0x10000ca, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000000c0)="6752d5211c", &(0x7f0000000180)=""/99}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x4084) 6.629935655s ago: executing program 2 (id=892): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x71ea87ade5feff97, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x40004046) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x36c9, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000006c0), 0x10000ca, r2}, 0x38) 6.363421176s ago: executing program 1 (id=893): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/275, 0x113}], 0x1, 0x2, 0x20000fa4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) close(0x3) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x1ff, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x412302) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000700), &(0x7f0000000740)=[{0x0, 0x1, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x2}], 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a6505"], 0xcfa4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r7}, 0x38) 5.205725492s ago: executing program 1 (id=894): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x2, 0xbdf, 0x400, 0xfffd}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)=0x9) r1 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002800128008000100736974001c00028008000100", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4001020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 3.881992883s ago: executing program 3 (id=897): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)='/dev/snd/midiC#D#\x00') 3.829854281s ago: executing program 4 (id=898): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() prlimit64(r0, 0xd, &(0x7f0000000040)={0x8, 0x40000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f3", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000000)=0xb78b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) eventfd(0x7fff) io_uring_setup(0x5a30, &(0x7f0000000380)={0x0, 0x3da5, 0x20, 0x3, 0xf5}) io_setup(0x1, &(0x7f0000000200)) r9 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "341347c74c840b386c5fd6e2c51cc3744e490f6e03eb0cda3aadf9a06c585a9cf2fb55ed0604db9daae64cd22c3e6869c7596ed499f3b3da6f959245a2802336", 0x3a}, 0x48, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r9, 0x100000000) 3.385977278s ago: executing program 1 (id=899): ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x120}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000000b40)=[{&(0x7f0000000f00)=""/46, 0x2e}], 0x1, 0x4, 0x10003ff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x4, 0x29dc5, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x28, r6, 0xf21, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x200000000000000) 2.706188278s ago: executing program 3 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2.703936875s ago: executing program 4 (id=901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) stat(&(0x7f000000a380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)) getegid() setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000380)={0x3, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000050c0)=ANY=[@ANYBLOB="5012000044000701fefffffffcdbdf25037c00000400458038120180341237803012"], 0x1250}}, 0xc000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) 2.136662666s ago: executing program 3 (id=902): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000002700090025bd7800"], 0x1c}}, 0x4000080) 1.334034457s ago: executing program 2 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001811000031d7bcb37020873f088aed002149a97f23077bf89100ae651f866374c875d75440029955a6c6f8971f71597a020fbf02bc59dfc8", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x2002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c0007800800064000000040050005000200000005"], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000090601020000000000000000000000a75cda2e6b68a2e03a52c68c21f3ecaa00"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x240008c4) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$sock(r4, 0x0, 0x0, 0x20000044) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000440)={{{@in=@empty, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000040)=0x4000802) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 897.256099ms ago: executing program 3 (id=904): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(0x0) setfsgid(0xee00) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r1, 0x2) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x8, 0x2, 0x1, 0x1, 0x80000000, 0xa, 0x9, 0x4d815746, 0x6, 0x2, 0x8, 0x40, 0xffffffff, 0x180, 0x11, 0x33, {0x7, 0x8}, 0x6, 0x5}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}], 0x1, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000000c0), 0x81, 0x0) read$msr(r7, &(0x7f0000019680)=""/102388, 0x18ff4) 164.55905ms ago: executing program 0 (id=905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x2, 0x4, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) eventfd(0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) (async) accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) landlock_create_ruleset(&(0x7f0000000340)={0x100, 0x8, 0x0, 0x28000, 0x0, 0x3}, 0x30, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$kcm(0x10, 0x2, 0x0) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000540)=""/102) (async, rerun: 64) openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) (rerun: 64) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffc) 3.211ms ago: executing program 2 (id=906): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x7c4, 0x8201) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040)=r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x20000) read$msr(r6, &(0x7f0000001740)=""/102400, 0x19000) close(r5) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x8010, r4, 0x34d76000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0], 0x1}) 0s ago: executing program 4 (id=907): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000200)={0x0, 0x0, 0x0}) sendfile(r0, r0, 0x0, 0x200000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r2, r1, 0x0, 0x8010002b) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x500}) kernel console output (not intermixed with test programs): invalid length. [ 171.627387][ T6890] FAULT_INJECTION: forcing a failure. [ 171.627387][ T6890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.642136][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.663987][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.681829][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.4.253 Not tainted syzkaller #0 PREEMPT(full) [ 171.681855][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 171.681866][ T6890] Call Trace: [ 171.681873][ T6890] [ 171.681880][ T6890] dump_stack_lvl+0x100/0x190 [ 171.681922][ T6890] should_fail_ex.cold+0x5/0xa [ 171.681945][ T6890] _copy_to_user+0x32/0xd0 [ 171.681970][ T6890] simple_read_from_buffer+0xcb/0x170 [ 171.682019][ T6890] proc_fail_nth_read+0x1af/0x230 [ 171.682048][ T6890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.682077][ T6890] ? rw_verify_area+0xce/0x6d0 [ 171.682100][ T6890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.682124][ T6890] vfs_read+0x1e4/0xb40 [ 171.682151][ T6890] ? __pfx_vfs_read+0x10/0x10 [ 171.682175][ T6890] ? __fget_files+0x215/0x3d0 [ 171.682207][ T6890] ? __fget_files+0x21f/0x3d0 [ 171.682241][ T6890] ksys_read+0x12a/0x250 [ 171.682265][ T6890] ? __pfx_ksys_read+0x10/0x10 [ 171.682297][ T6890] do_syscall_64+0x115/0x870 [ 171.682322][ T6890] ? clear_bhb_loop+0x40/0x90 [ 171.682344][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.682363][ T6890] RIP: 0033:0x7f3a07b5e68e [ 171.682381][ T6890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.682397][ T6890] RSP: 002b:00007f3a08a31fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.682414][ T6890] RAX: ffffffffffffffda RBX: 00007f3a08a326c0 RCX: 00007f3a07b5e68e [ 171.682426][ T6890] RDX: 000000000000000f RSI: 00007f3a08a320a0 RDI: 0000000000000004 [ 171.682437][ T6890] RBP: 00007f3a08a32090 R08: 0000000000000000 R09: 0000000000000000 [ 171.682450][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.682460][ T6890] R13: 00007f3a07e26038 R14: 00007f3a07e25fa0 R15: 00007ffdc8ec2c48 [ 171.682484][ T6890] [ 171.697268][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.995369][ T30] audit: type=1400 audit(1784006945.950:426): avc: denied { setopt } for pid=6894 comm="syz.0.255" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.071354][ T5713] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 172.259789][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.366714][ T30] audit: type=1400 audit(1784006946.050:427): avc: denied { create } for pid=6894 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 172.677365][ T30] audit: type=1400 audit(1784006946.050:428): avc: denied { bind } for pid=6894 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.053582][ T5713] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.532660][ T5713] usb 3-1: config 179 has no interface number 0 [ 173.538969][ T5713] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 173.572515][ T5713] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 173.602115][ T5713] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 173.621752][ T5713] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 173.642194][ T5713] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.782191][ T5713] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 173.792135][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.811720][ T6893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.819850][ T6893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.636821][ T30] audit: type=1400 audit(1784006948.600:429): avc: denied { map } for pid=6916 comm="syz.1.262" path="/dev/ublkc4" dev="devtmpfs" ino=2865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.852732][ T6281] usb 3-1: USB disconnect, device number 11 [ 174.852811][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 174.867580][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 175.006240][ T6922] use of bytesused == 0 is deprecated and will be removed in the future, [ 175.015165][ T6922] use the actual size instead. [ 175.877281][ T6938] xt_connbytes: Forcing CT accounting to be enabled [ 175.962190][ T6938] Cannot find set identified by id 0 to match [ 177.380227][ T6961] netlink: 'syz.4.269': attribute type 4 has an invalid length. [ 177.560088][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.963490][ T30] audit: type=1400 audit(1784006951.920:430): avc: denied { write } for pid=6939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.268350][ T6974] netlink: 'syz.2.273': attribute type 21 has an invalid length. [ 178.282194][ T6974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.273'. [ 178.497856][ T30] audit: type=1400 audit(1784006952.460:431): avc: denied { write } for pid=6977 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.902826][ T5721] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 179.088852][ T5721] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.126177][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.159111][ T5721] usb 3-1: Product: syz [ 179.181438][ T5721] usb 3-1: Manufacturer: syz [ 179.183309][ T30] audit: type=1400 audit(1784006953.140:432): avc: denied { append } for pid=6992 comm="syz.1.276" name="pfkey" dev="proc" ino=4026533487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.197945][ T5721] usb 3-1: SerialNumber: syz [ 179.490164][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 179.518123][ T30] audit: type=1400 audit(1784006953.480:433): avc: denied { getopt } for pid=6978 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 179.526677][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 179.765433][ T30] audit: type=1400 audit(1784006953.520:434): avc: denied { setopt } for pid=6978 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.801883][ T5721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 180.506911][ T30] audit: type=1400 audit(1784006953.520:435): avc: denied { accept } for pid=6978 comm="syz.3.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.526686][ T30] audit: type=1400 audit(1784006953.730:436): avc: denied { write } for pid=6985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.550436][ T30] audit: type=1400 audit(1784006953.970:437): avc: denied { write } for pid=7002 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 180.653450][ T5721] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 180.760577][ T5721] usb 3-1: USB disconnect, device number 12 [ 180.791738][ T30] audit: type=1400 audit(1784006954.750:438): avc: denied { ioctl } for pid=7014 comm="syz.4.280" path="socket:[14736]" dev="sockfs" ino=14736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.920375][ T30] audit: type=1400 audit(1784006954.750:439): avc: denied { write } for pid=7014 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.332774][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 181.891565][ T7026] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 181.906410][ T7026] Error validating options; rc = [-22] [ 182.861501][ T6277] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.104414][ T6277] usb 2-1: unable to get BOS descriptor or descriptor too short [ 183.121525][ T6277] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 183.145172][ T6277] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 183.158158][ T6277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.181494][ T6277] usb 2-1: Product: syz [ 183.683676][ T6277] usb 2-1: Manufacturer: syz [ 183.688321][ T6277] usb 2-1: SerialNumber: syz [ 183.715463][ T7044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.891655][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 183.891670][ T30] audit: type=1400 audit(1784006957.840:443): avc: denied { create } for pid=7032 comm="syz.3.283" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.001442][ T30] audit: type=1400 audit(1784006957.850:444): avc: denied { write } for pid=7032 comm="syz.3.283" name="file0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 184.050940][ T30] audit: type=1400 audit(1784006957.850:445): avc: denied { open } for pid=7032 comm="syz.3.283" path="/58/file0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 185.507580][ T30] audit: type=1400 audit(1784006957.950:446): avc: denied { bind } for pid=7031 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.671797][ T6277] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 185.683262][ T6277] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 185.693755][ T6277] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 185.703138][ T30] audit: type=1400 audit(1784006958.060:447): avc: denied { sqpoll } for pid=7046 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 186.112631][ T6277] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 186.247694][ T30] audit: type=1400 audit(1784006960.210:448): avc: denied { unlink } for pid=5615 comm="syz-executor" name="file0" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.033749][ T6277] usb 2-1: USB disconnect, device number 7 [ 187.518777][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.557791][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 187.611354][ T5699] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 187.820966][ T6277] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.982855][ T6277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 188.221290][ T5713] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 188.340754][ T6277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 188.352156][ T6277] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 188.361666][ T6277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.383668][ T6277] usb 2-1: config 0 descriptor?? [ 188.410884][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 188.418224][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.429666][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 188.429940][ T5699] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.437828][ T5713] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 188.452514][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.463806][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.465444][ T5699] usb 3-1: config 0 descriptor?? [ 188.508339][ T5713] pvrusb2: Hardware description: Terratec Grabster AV400 [ 188.516161][ T5713] pvrusb2: ********** [ 188.520204][ T5713] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 188.530485][ T5713] pvrusb2: Important functionality might not be entirely working. [ 188.538409][ T5713] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 188.551827][ T5713] pvrusb2: ********** [ 188.770814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.253898][ T7083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.267967][ T7083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.060815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 190.129749][ T30] audit: type=1400 audit(1784006962.700:449): avc: denied { bind } for pid=7078 comm="syz.0.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.276596][ T2362] pvrusb2: Invalid write control endpoint [ 190.401589][ T5713] usb 1-1: USB disconnect, device number 4 [ 190.468835][ T6277] usbhid 2-1:0.0: can't add hid device: -71 [ 190.475749][ T6277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 190.507846][ T5699] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 190.562715][ T6277] usb 2-1: USB disconnect, device number 8 [ 190.590312][ T30] audit: type=1400 audit(1784006964.550:450): avc: denied { setopt } for pid=7087 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.700639][ T5699] usb 3-1: USB disconnect, device number 13 [ 190.763523][ T2362] pvrusb2: Invalid write control endpoint [ 190.787212][ T7091] netlink: 'syz.3.298': attribute type 4 has an invalid length. [ 190.799241][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 190.964876][ T7091] netlink: 17 bytes leftover after parsing attributes in process `syz.3.298'. [ 191.073836][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.171797][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.193753][ T2362] pvrusb2: Device being rendered inoperable [ 191.236233][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.284722][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 191.330843][ T2362] pvrusb2: Attached sub-driver cx25840 [ 191.349723][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.386338][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 191.575400][ T7101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.670632][ T30] audit: type=1400 audit(1784006966.630:451): avc: denied { getopt } for pid=7111 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.744803][ T30] audit: type=1400 audit(1784006966.660:452): avc: denied { write } for pid=7111 comm="syz.3.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.781405][ T7092] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 192.895547][ T7092] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 192.998569][ T7116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.296'. [ 193.789105][ T30] audit: type=1400 audit(1784006967.750:453): avc: denied { connect } for pid=7128 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.821255][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 193.960387][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.967169][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.981782][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 195.797977][ T7145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.313'. [ 198.298664][ T7166] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 198.313416][ T7166] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 198.330544][ T7166] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 198.435668][ T7166] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 198.969179][ T7166] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 199.424478][ T7163] afs: Unknown parameter '18446744073709551615' [ 199.525088][ T7176] overlayfs: failed to clone upperpath [ 200.276104][ T7173] loop9: detected capacity change from 0 to 1 [ 200.315429][ T7173] Dev loop9: unable to read RDB block 1 [ 200.342544][ T7173] loop9: unable to read partition table [ 200.361333][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.368658][ T7173] loop9: partition table beyond EOD, truncated [ 200.419473][ T7173] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 200.535354][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 200.661070][ T30] audit: type=1400 audit(1784006974.590:454): avc: denied { ioctl } for pid=7191 comm="syz.2.330" path="socket:[14154]" dev="sockfs" ino=14154 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 200.672007][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 200.723362][ T10] usb 2-1: config 0 has no interface number 0 [ 200.723413][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 200.729500][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 200.729529][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.729551][ T10] usb 2-1: Product: syz [ 200.729568][ T10] usb 2-1: Manufacturer: syz [ 200.729584][ T10] usb 2-1: SerialNumber: syz [ 200.733118][ T10] usb 2-1: config 0 descriptor?? [ 201.834200][ T30] audit: type=1326 audit(1784006975.780:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz.3.333" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4999de59 code=0x0 [ 202.665903][ T30] audit: type=1400 audit(1784006976.630:456): avc: denied { read } for pid=7183 comm="syz.1.326" path="socket:[14192]" dev="sockfs" ino=14192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 203.193178][ T7218] FAULT_INJECTION: forcing a failure. [ 203.193178][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.285777][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.4.335 Not tainted syzkaller #0 PREEMPT(full) [ 203.285807][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 203.285820][ T7218] Call Trace: [ 203.285826][ T7218] [ 203.285834][ T7218] dump_stack_lvl+0x100/0x190 [ 203.285868][ T7218] should_fail_ex.cold+0x5/0xa [ 203.285895][ T7218] _copy_from_iter+0x1f4/0x1690 [ 203.285924][ T7218] ? __asan_memset+0x23/0x50 [ 203.285955][ T7218] ? __pfx__copy_from_iter+0x10/0x10 [ 203.285979][ T7218] ? __pfx___alloc_skb+0x10/0x10 [ 203.286010][ T7218] netlink_sendmsg+0x808/0xda0 [ 203.286045][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.286077][ T7218] ? selinux_socket_sendmsg+0x198/0x2f0 [ 203.286109][ T7218] ____sys_sendmsg+0xa4d/0xbe0 [ 203.286134][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.286179][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.286219][ T7218] ___sys_sendmsg+0x190/0x1e0 [ 203.286247][ T7218] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.286272][ T7218] ? __lock_acquire+0x49f/0x1a40 [ 203.286296][ T7218] ? get_pid_task+0x106/0x250 [ 203.286358][ T7218] __sys_sendmsg+0x160/0x210 [ 203.286380][ T7218] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.286417][ T7218] do_syscall_64+0x115/0x870 [ 203.286446][ T7218] ? clear_bhb_loop+0x40/0x90 [ 203.286472][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.286498][ T7218] RIP: 0033:0x7f3a07b9de59 [ 203.286515][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.286535][ T7218] RSP: 002b:00007f3a08a32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.286555][ T7218] RAX: ffffffffffffffda RBX: 00007f3a07e25fa0 RCX: 00007f3a07b9de59 [ 203.286569][ T7218] RDX: 0000000000000000 RSI: 0000200000003880 RDI: 0000000000000003 [ 203.286582][ T7218] RBP: 00007f3a08a32090 R08: 0000000000000000 R09: 0000000000000000 [ 203.286594][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.286606][ T7218] R13: 00007f3a07e26038 R14: 00007f3a07e25fa0 R15: 00007ffdc8ec2c48 [ 203.286635][ T7218] [ 203.499012][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 203.506769][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -32 [ 203.514118][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 203.522203][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -32 [ 204.072031][ T30] audit: type=1400 audit(1784006977.940:457): avc: denied { map } for pid=7225 comm="syz.4.339" path="socket:[14212]" dev="sockfs" ino=14212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 204.218826][ T30] audit: type=1400 audit(1784006977.950:458): avc: denied { accept } for pid=7225 comm="syz.4.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 204.254010][ T5713] usb 2-1: USB disconnect, device number 9 [ 204.413317][ T30] audit: type=1400 audit(1784006978.210:459): avc: denied { append } for pid=7227 comm="syz.2.340" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.770900][ T5713] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 204.973907][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 205.000608][ T5713] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 205.096610][ T5713] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 205.114005][ T7238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 205.144737][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.159022][ T7238] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 205.206099][ T5713] usb 2-1: Product: syz [ 205.221032][ T5713] usb 2-1: Manufacturer: syz [ 205.234924][ T5713] usb 2-1: SerialNumber: syz [ 206.330810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.693114][ T30] audit: type=1400 audit(1784006981.330:460): avc: denied { module_request } for pid=7249 comm="syz.3.345" kmod="ipt_ipvs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 208.907718][ T5713] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.127096][ T5713] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 209.161395][ T5713] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 209.467085][ T5713] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 209.700609][ T5713] usb 2-1: USB disconnect, device number 10 [ 209.858520][ T7289] xt_hashlimit: overflow, try lower: 6/0 [ 211.708873][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.795920][ T7299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.357'. [ 212.303154][ T6277] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.983173][ T6277] usb 5-1: unable to get BOS descriptor or descriptor too short [ 213.004863][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.019517][ T6277] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 213.129397][ T6277] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 213.152455][ T6277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.170339][ T6277] usb 5-1: Product: syz [ 213.181635][ T6277] usb 5-1: Manufacturer: syz [ 213.186281][ T6277] usb 5-1: SerialNumber: syz [ 213.277943][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.726997][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.938707][ T6277] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 214.974647][ T6277] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 214.991368][ T7322] set match dimension is over the limit! [ 215.026776][ T6277] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 215.085605][ T6277] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 215.101583][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.107022][ T30] audit: type=1400 audit(1784006989.050:461): avc: denied { ioctl } for pid=7328 comm="syz-executor" path="socket:[16506]" dev="sockfs" ino=16506 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.138086][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.148154][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.164040][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.176116][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.375081][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.408760][ T30] audit: type=1400 audit(1784006989.370:462): avc: denied { setopt } for pid=7326 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.541338][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.574599][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.627511][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.629704][ T60] Bluetooth: Error in BCSP hdr checksum [ 215.664400][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.688252][ T30] audit: type=1400 audit(1784006989.650:463): avc: denied { connect } for pid=7326 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.713679][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.721904][ T12] Bluetooth: Error in BCSP hdr checksum [ 215.770686][ T6277] usb 5-1: USB disconnect, device number 7 [ 215.821839][ T30] audit: type=1400 audit(1784006989.650:464): avc: denied { write } for pid=7326 comm="syz.4.365" path="socket:[16517]" dev="sockfs" ino=16517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 215.887936][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.929116][ T30] audit: type=1400 audit(1784006989.710:465): avc: denied { append } for pid=7326 comm="syz.4.365" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 215.971166][ T12] Bluetooth: Error in BCSP hdr checksum [ 216.231061][ T6277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 216.231338][ T12] Bluetooth: Error in BCSP hdr checksum [ 216.246162][ T7344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.367'. [ 216.395583][ T6277] usb 5-1: device descriptor read/64, error -71 [ 216.462255][ T13] bridge_slave_1: left allmulticast mode [ 216.468692][ T13] bridge_slave_1: left promiscuous mode [ 216.475492][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.489674][ T13] bridge_slave_0: left allmulticast mode [ 216.496053][ T13] bridge_slave_0: left promiscuous mode [ 216.496255][ T12] Bluetooth: Error in BCSP hdr checksum [ 216.501831][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.617971][ T30] audit: type=1400 audit(1784006990.560:466): avc: denied { create } for pid=7343 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.993761][ T36] Bluetooth: Error in BCSP hdr checksum [ 217.077949][ T6277] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.222507][ T48] Bluetooth: Error in BCSP hdr checksum [ 217.231055][ T5625] Bluetooth: hci5: command 0x1003 tx timeout [ 217.231439][ T6277] usb 5-1: device descriptor read/64, error -71 [ 217.244649][ T5617] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 217.430818][ T6277] usb usb5-port1: attempt power cycle [ 217.485115][ T60] Bluetooth: Error in BCSP hdr checksum [ 217.715210][ T30] audit: type=1400 audit(1784006991.670:467): avc: denied { write } for pid=7348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 217.743710][ T36] Bluetooth: Error in BCSP hdr checksum [ 217.772975][ T6277] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 217.794995][ T5617] Bluetooth: hci0: command tx timeout [ 217.802533][ T6277] usb 5-1: device descriptor read/8, error -71 [ 217.973051][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.001516][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.012918][ T36] Bluetooth: Error in BCSP hdr checksum [ 218.020636][ T13] bond0 (unregistering): Released all slaves [ 218.048259][ T6277] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 218.075987][ T7350] netlink: 84 bytes leftover after parsing attributes in process `syz.2.367'. [ 218.085301][ T7350] netlink: 84 bytes leftover after parsing attributes in process `syz.2.367'. [ 218.099699][ T6277] usb 5-1: device descriptor read/8, error -71 [ 218.211139][ T6277] usb usb5-port1: unable to enumerate USB device [ 218.263576][ T30] audit: type=1400 audit(1784006992.230:468): avc: denied { write } for pid=7363 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 218.562894][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 218.600178][ T7369] : renamed from dummy0 (while UP) [ 218.766951][ T7372] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.005961][ T13] hsr_slave_0: left promiscuous mode [ 219.028966][ T13] hsr_slave_1: left promiscuous mode [ 219.035517][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.045620][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.064341][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.097978][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.262993][ T7383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.372'. [ 219.293181][ T13] veth1_macvtap: left promiscuous mode [ 219.310327][ T13] veth0_macvtap: left promiscuous mode [ 219.340891][ T6281] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 219.505982][ T6281] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.544352][ T6281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.568575][ T30] audit: type=1400 audit(1784006993.530:469): avc: denied { write } for pid=7378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.578960][ T6281] usb 5-1: Product: syz [ 219.629259][ T6281] usb 5-1: Manufacturer: syz [ 219.643502][ T6281] usb 5-1: SerialNumber: syz [ 219.667091][ T6281] usb 5-1: config 0 descriptor?? [ 219.780524][ T30] audit: type=1400 audit(1784006993.740:470): avc: denied { write } for pid=7397 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.871429][ T5617] Bluetooth: hci0: command tx timeout [ 219.878994][ T13] team0 (unregistering): Port device team_slave_1 removed [ 219.898257][ T13] team0 (unregistering): Port device team_slave_0 removed [ 219.909574][ T6281] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 220.302705][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 220.921113][ T5713] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 221.133461][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 221.147620][ T5713] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 221.181610][ T5713] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 221.197901][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.232564][ T5713] usb 2-1: Product: syz [ 221.241385][ T5713] usb 2-1: Manufacturer: syz [ 221.255454][ T5713] usb 2-1: SerialNumber: syz [ 221.288283][ T7417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7417 comm=syz.3.377 [ 221.610907][ T805] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 221.903805][ T805] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 221.960883][ T5617] Bluetooth: hci0: command tx timeout [ 221.985540][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 222.056262][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 222.193290][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 222.265197][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.319124][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 222.375242][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.474665][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 222.514771][ T7328] bridge_slave_0: entered allmulticast mode [ 222.726252][ T6281] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 222.920114][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 223.233310][ T7328] bridge_slave_0: entered promiscuous mode [ 223.298687][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 223.388075][ T805] usb 3-1: config 7 interface 0 has no altsetting 0 [ 223.401294][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.442775][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.471240][ T805] usb 3-1: New USB device found, idVendor=1199, idProduct=8f61, bcdDevice=18.49 [ 223.506075][ T7328] bridge_slave_1: entered allmulticast mode [ 223.515676][ T5713] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 223.524501][ T30] audit: type=1400 audit(1784006997.470:471): avc: denied { write } for pid=7413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.560548][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.575428][ T5613] usb 5-1: USB disconnect, device number 12 [ 223.585360][ T5713] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 223.600897][ T7328] bridge_slave_1: entered promiscuous mode [ 223.606789][ T805] usb 3-1: Product: syz [ 223.621018][ T805] usb 3-1: Manufacturer: syz [ 223.632749][ T5713] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 223.649944][ T805] usb 3-1: SerialNumber: syz [ 223.672212][ T5713] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 223.770196][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.786668][ T30] audit: type=1400 audit(1784006997.750:472): avc: denied { write } for pid=7446 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 223.814353][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.1.383'. [ 223.840286][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.870510][ T5713] usb 2-1: USB disconnect, device number 11 [ 223.987563][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 224.013362][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.032197][ T5617] Bluetooth: hci0: command tx timeout [ 224.156819][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.208971][ T7328] team0: Port device team_slave_0 added [ 224.244356][ T7328] team0: Port device team_slave_1 added [ 224.856457][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 225.316375][ T7453] SELinux: ebitmap: truncated map [ 225.323586][ T7453] SELinux: invalid class [ 225.574813][ T7453] SELinux: failed to load policy [ 225.616730][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.635905][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.696153][ T7328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.738207][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.753931][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.802168][ T7328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.868796][ T7328] hsr_slave_0: entered promiscuous mode [ 225.876354][ T7328] hsr_slave_1: entered promiscuous mode [ 226.101674][ T805] usb 3-1: USB disconnect, device number 14 [ 226.773882][ T30] audit: type=1400 audit(1784007000.730:473): avc: denied { write } for pid=7461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.881251][ T30] audit: type=1400 audit(1784007000.850:474): avc: denied { execute } for pid=7474 comm="syz.2.387" path=2F6D656D66643A14A3BB07202864656C6574656429 dev="hugetlbfs" ino=16827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 226.966600][ T30] audit: type=1400 audit(1784007000.930:475): avc: denied { setopt } for pid=7488 comm="syz.3.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.065891][ T30] audit: type=1400 audit(1784007000.930:476): avc: denied { write } for pid=7486 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.360980][ T805] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 227.515918][ T805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.525565][ T805] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 227.560347][ T805] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 227.585417][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.615972][ T805] usb 5-1: Product: syz [ 227.625553][ T7328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.636915][ T805] usb 5-1: Manufacturer: syz [ 227.646572][ T805] usb 5-1: SerialNumber: syz [ 227.682762][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.698102][ T7328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.719884][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.729846][ T7328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.845453][ T7513] Cannot find set identified by id 0 to match [ 227.856946][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.086853][ T7518] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 229.260674][ T7328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.299882][ T805] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 229.311445][ T805] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 229.320183][ T805] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 229.329785][ T805] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 229.349814][ T7328] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 229.384496][ T805] usb 5-1: USB disconnect, device number 13 [ 229.429614][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.150066][ T30] audit: type=1400 audit(1784007004.110:477): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.191618][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.215517][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.239279][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.246471][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.326936][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.334050][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.607180][ T30] audit: type=1400 audit(1784007004.570:478): avc: denied { write } for pid=7542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.632098][ T5713] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 230.815536][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 230.847119][ T5713] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 230.882766][ T5713] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 230.905001][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.951687][ T5713] usb 2-1: config 0 descriptor?? [ 231.183965][ T30] audit: type=1400 audit(1784007005.150:479): avc: denied { read } for pid=7539 comm="syz.1.398" path="socket:[17153]" dev="sockfs" ino=17153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 231.382261][ T7579] macsec0: entered promiscuous mode [ 231.388409][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 231.547967][ T7579] veth1_macvtap: left promiscuous mode [ 231.589621][ T7579] macsec0 (unregistering): left promiscuous mode [ 231.658908][ T7587] netlink: 132 bytes leftover after parsing attributes in process `syz.3.405'. [ 231.662949][ T7328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.758108][ T30] audit: type=1400 audit(1784007005.720:480): avc: denied { write } for pid=7564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.766335][ T7328] veth0_vlan: entered promiscuous mode [ 231.818492][ T7591] overlayfs: failed to clone upperpath [ 231.827602][ T7328] veth1_vlan: entered promiscuous mode [ 231.885289][ T7328] veth0_macvtap: entered promiscuous mode [ 231.902967][ T7328] veth1_macvtap: entered promiscuous mode [ 231.952905][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.979566][ T30] audit: type=1400 audit(1784007005.940:481): avc: denied { write } for pid=7592 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.018837][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.071805][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.084726][ T7595] macsec0: entered promiscuous mode [ 232.101630][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.122140][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 232.131144][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.143550][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.154674][ T7595] macsec0 (unregistering): left promiscuous mode [ 232.378982][ T5815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.407000][ T5815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.507835][ T5817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.541730][ T5817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.581777][ T30] audit: type=1400 audit(1784007006.540:482): avc: denied { mounton } for pid=7328 comm="syz-executor" path="/root/syzkaller.8clWa8/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 232.638558][ T30] audit: type=1400 audit(1784007006.550:483): avc: denied { mounton } for pid=7328 comm="syz-executor" path="/root/syzkaller.8clWa8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 232.711284][ T30] audit: type=1400 audit(1784007006.560:484): avc: denied { mounton } for pid=7328 comm="syz-executor" path="/root/syzkaller.8clWa8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 232.774640][ T30] audit: type=1400 audit(1784007006.580:485): avc: denied { mounton } for pid=7328 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 233.098341][ T30] audit: type=1400 audit(1784007006.890:486): avc: denied { create } for pid=7602 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.394698][ T5713] usbhid 2-1:0.0: can't add hid device: -71 [ 233.414850][ T5713] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 233.453626][ T5713] usb 2-1: USB disconnect, device number 12 [ 233.572676][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 234.529853][ T5713] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.693052][ T5713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.703545][ T5713] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.715906][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.726922][ T5713] usb 1-1: config 0 descriptor?? [ 234.736869][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 234.826895][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 235.002812][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 235.019828][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 235.043554][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 235.056982][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.074451][ T24] usb 5-1: Product: syz [ 235.086845][ T24] usb 5-1: Manufacturer: syz [ 235.094572][ T24] usb 5-1: SerialNumber: syz [ 235.171650][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 235.186871][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 235.272235][ T6277] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.321843][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 235.321859][ T30] audit: type=1400 audit(1784007009.290:495): avc: denied { write } for pid=7651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.461232][ T30] audit: type=1400 audit(1784007009.410:496): avc: denied { getopt } for pid=7624 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.490613][ T6277] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 61 [ 235.526903][ T6277] usb 2-1: config 0 interface 0 has no altsetting 0 [ 235.704461][ T5713] pwc: recv_control_msg error -71 req 04 val 1000 [ 235.708263][ T6277] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.776815][ T6277] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.806804][ T6277] usb 2-1: Product: syz [ 235.823184][ T6277] usb 2-1: Manufacturer: syz [ 235.860101][ T6277] usb 2-1: SerialNumber: syz [ 235.985210][ T6277] usb 2-1: config 0 descriptor?? [ 236.044548][ T7657] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 236.695124][ T6277] usb 2-1: selecting invalid altsetting 0 [ 237.090733][ T5713] pwc: recv_control_msg error -71 req 04 val 1300 [ 237.097619][ T5713] pwc: recv_control_msg error -71 req 04 val 1400 [ 237.104473][ T5713] pwc: recv_control_msg error -71 req 02 val 2000 [ 237.113715][ T5713] pwc: recv_control_msg error -71 req 02 val 2100 [ 237.120602][ T5713] pwc: recv_control_msg error -71 req 04 val 1500 [ 237.129492][ T5713] pwc: recv_control_msg error -71 req 02 val 2500 [ 237.136406][ T5713] pwc: recv_control_msg error -71 req 02 val 2400 [ 237.145899][ T5713] pwc: recv_control_msg error -71 req 02 val 2600 [ 237.153219][ T5713] pwc: recv_control_msg error -71 req 02 val 2900 [ 237.163296][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 237.171254][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.179713][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.196974][ T5713] pwc: Registered as video103. [ 237.208895][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 237.235032][ T30] audit: type=1400 audit(1784007011.200:497): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.242069][ T5713] usb 1-1: USB disconnect, device number 5 [ 237.328451][ T30] audit: type=1400 audit(1784007011.200:498): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2922 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.408077][ T24] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 237.416242][ T24] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 237.424872][ T24] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 237.436154][ T24] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 237.437175][ T6277] usb 2-1: USB disconnect, device number 13 [ 237.644470][ T30] audit: type=1400 audit(1784007011.200:499): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2922 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.714050][ T24] usb 5-1: USB disconnect, device number 14 [ 237.793760][ T7686] bridge0: port 3(veth1_to_hsr) entered blocking state [ 237.801088][ T7686] bridge0: port 3(veth1_to_hsr) entered disabled state [ 237.811033][ T7686] veth1_to_hsr: entered allmulticast mode [ 238.219324][ T7686] veth1_to_hsr: entered promiscuous mode [ 238.225806][ T7686] bridge0: port 3(veth1_to_hsr) entered blocking state [ 238.233397][ T7686] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 238.434425][ T30] audit: type=1400 audit(1784007012.400:500): avc: denied { write } for pid=7682 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.622580][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.629324][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 238.832734][ T7697] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 239.708892][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'. [ 239.938165][ T7697] geneve2: entered promiscuous mode [ 239.958504][ T7697] geneve2: entered allmulticast mode [ 240.353143][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 240.421078][ T30] audit: type=1400 audit(1784007014.340:501): avc: denied { mount } for pid=7712 comm="syz.1.425" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 240.526583][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 240.559187][ T7718] macsec0: entered promiscuous mode [ 240.586737][ T7721] veth1_macvtap: left promiscuous mode [ 240.615622][ T7721] macsec0 (unregistering): left promiscuous mode [ 241.719297][ T7725] syz.4.424 (7725): drop_caches: 2 [ 241.783278][ T5699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 241.832754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 241.866480][ T30] audit: type=1400 audit(1784007015.820:502): avc: denied { watch } for pid=7745 comm="syz.3.429" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="hugetlbfs" ino=16370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 241.913932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.942730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 242.012525][ T5699] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.022335][ T5699] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 242.050988][ T30] audit: type=1400 audit(1784007016.010:503): avc: denied { write } for pid=7707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.104768][ T5699] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 242.132516][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.158978][ T5699] usb 2-1: Product: syz [ 242.169615][ T5699] usb 2-1: Manufacturer: syz [ 242.182871][ T5699] usb 2-1: SerialNumber: syz [ 242.263549][ T30] audit: type=1400 audit(1784007016.230:504): avc: denied { write } for pid=7751 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.330533][ T7758] netlink: 132 bytes leftover after parsing attributes in process `syz.0.431'. [ 243.341020][ T5699] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 243.348150][ T5699] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 243.419393][ T5699] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 243.430602][ T5699] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 243.479770][ T7763] netlink: 132 bytes leftover after parsing attributes in process `syz.3.432'. [ 244.023996][ T7766] overlayfs: failed to clone upperpath [ 244.734329][ T5699] usb 2-1: USB disconnect, device number 14 [ 244.890922][ T6276] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 245.037209][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.071151][ T6276] usb 3-1: Using ep0 maxpacket: 8 [ 245.077996][ T6276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.845780][ T6276] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 245.854887][ T6276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.863556][ T6276] usb 3-1: Product: syz [ 245.870459][ T6276] usb 3-1: Manufacturer: syz [ 245.875795][ T6276] usb 3-1: SerialNumber: syz [ 246.006807][ T7782] set match dimension is over the limit! [ 246.136919][ T6276] usb 3-1: selecting invalid altsetting 1 [ 246.185533][ T7788] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 246.307693][ T6276] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.357380][ T6276] usb 3-1: USB disconnect, device number 15 [ 246.418215][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.180964][ T5699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.258843][ T7814] tmpfs: Bad value for 'mpol' [ 249.363167][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.400604][ T5699] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 249.532053][ T7820] macsec0: entered promiscuous mode [ 249.537880][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 249.554577][ T5699] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 249.564249][ T7820] veth1_macvtap: left promiscuous mode [ 249.580192][ T7820] macsec0 (unregistering): left promiscuous mode [ 250.014269][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.023505][ T5699] usb 5-1: Product: syz [ 250.031819][ T5699] usb 5-1: Manufacturer: syz [ 250.036978][ T5699] usb 5-1: SerialNumber: syz [ 251.629191][ T5699] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 251.637476][ T5699] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 252.142354][ T5699] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 252.165550][ T5699] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 252.264878][ T5699] usb 5-1: USB disconnect, device number 15 [ 255.392494][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.399404][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.635524][ T30] audit: type=1400 audit(1784007032.603:505): avc: denied { read } for pid=7860 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 255.855302][ T7870] xt_connbytes: Forcing CT accounting to be enabled [ 255.901160][ T7870] set match dimension is over the limit! [ 256.171605][ T30] audit: type=1400 audit(1784007033.133:506): avc: denied { setopt } for pid=7865 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 256.323558][ T7875] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 256.640532][ T7884] bond1: option arp_validate: invalid value (18446744073709551615) [ 256.676802][ T7884] bond1 (unregistering): Released all slaves [ 256.895805][ T7888] bridge_slave_0: left allmulticast mode [ 256.940941][ T6276] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 256.970189][ T7888] bridge_slave_0: left promiscuous mode [ 257.111094][ T6276] usb 3-1: Using ep0 maxpacket: 32 [ 257.126901][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.174732][ T6276] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.205276][ T6276] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 257.236301][ T6276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.271686][ T6276] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 257.277612][ T7888] bridge_slave_1: left allmulticast mode [ 257.321914][ T6276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.342642][ T7888] bridge_slave_1: left promiscuous mode [ 257.363748][ T6276] usb 3-1: Product: syz [ 257.376177][ T6276] usb 3-1: Manufacturer: syz [ 257.392059][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.400644][ T6276] usb 3-1: SerialNumber: syz [ 257.426258][ T6276] usb 3-1: config 0 descriptor?? [ 257.508447][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 258.906053][ T7888] bond0: (slave bond_slave_0): Releasing backup interface [ 258.916147][ T6276] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 258.969872][ T7888] bond0: (slave bond_slave_1): Releasing backup interface [ 259.023403][ T7888] team0: Port device team_slave_0 removed [ 259.036938][ T7888] team0: Port device team_slave_1 removed [ 259.045596][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.053586][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.065865][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.074100][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.085253][ T7888] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.190948][ T805] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 259.272100][ T7884] bridge0: port 1(syz_tun) entered blocking state [ 259.306003][ T7884] bridge0: port 1(syz_tun) entered disabled state [ 259.317354][ T6276] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 259.321018][ T7884] syz_tun: entered allmulticast mode [ 259.359855][ T6276] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 259.369115][ T7884] syz_tun: entered promiscuous mode [ 259.379789][ T805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 259.395373][ T7884] bridge0: port 1(syz_tun) entered blocking state [ 259.401940][ T7884] bridge0: port 1(syz_tun) entered forwarding state [ 259.424589][ T805] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 259.483575][ T805] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 259.528381][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.716124][ T7910] FAULT_INJECTION: forcing a failure. [ 259.716124][ T7910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.724825][ T805] usb 5-1: Product: syz [ 259.759572][ T805] usb 5-1: Manufacturer: syz [ 259.770944][ T7910] CPU: 1 UID: 0 PID: 7910 Comm: syz.1.468 Not tainted syzkaller #0 PREEMPT(full) [ 259.770971][ T7910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 259.770987][ T7910] Call Trace: [ 259.770994][ T7910] [ 259.771002][ T7910] dump_stack_lvl+0x100/0x190 [ 259.771035][ T7910] should_fail_ex.cold+0x5/0xa [ 259.771061][ T7910] core_sys_select+0x938/0xbb0 [ 259.771099][ T7910] ? __pfx_core_sys_select+0x10/0x10 [ 259.771128][ T7910] ? find_held_lock+0x2b/0x80 [ 259.771157][ T7910] ? get_pid_task+0xfc/0x250 [ 259.771215][ T7910] ? __pfx_set_user_sigmask+0x10/0x10 [ 259.771239][ T7910] ? __mutex_unlock_slowpath+0x35d/0x930 [ 259.771276][ T7910] do_pselect.constprop.0+0x238/0x270 [ 259.771311][ T7910] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 259.771348][ T7910] ? ksys_write+0x1ac/0x250 [ 259.771380][ T7910] __x64_sys_pselect6+0x149/0x1c0 [ 259.771415][ T7910] do_syscall_64+0x115/0x870 [ 259.771444][ T7910] ? clear_bhb_loop+0x40/0x90 [ 259.771469][ T7910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.771490][ T7910] RIP: 0033:0x7f9f9f99de59 [ 259.771507][ T7910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.771532][ T7910] RSP: 002b:00007f9f9dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 259.771555][ T7910] RAX: ffffffffffffffda RBX: 00007f9f9fc26090 RCX: 00007f9f9f99de59 [ 259.771569][ T7910] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040 [ 259.771582][ T7910] RBP: 00007f9f9dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.771594][ T7910] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 259.771606][ T7910] R13: 00007f9f9fc26128 R14: 00007f9f9fc26090 R15: 00007fff4f4889d8 [ 259.771635][ T7910] [ 260.140836][ T805] usb 5-1: SerialNumber: syz [ 260.292224][ T5713] usb 3-1: USB disconnect, device number 16 [ 260.376372][ T7919] loop9: detected capacity change from 0 to 1 [ 260.479399][ T7919] Dev loop9: unable to read RDB block 1 [ 260.485132][ T7919] loop9: unable to read partition table [ 260.491548][ T7919] loop9: partition table beyond EOD, truncated [ 260.497754][ T7919] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 262.588471][ T805] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 262.592005][ T7925] fuse: Unknown parameter 'fd%0x0000000000000004' [ 262.601170][ T805] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 262.622713][ T805] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 262.641241][ T805] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 262.788112][ T805] usb 5-1: USB disconnect, device number 16 [ 262.854126][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.944277][ T30] audit: type=1400 audit(1784007040.913:507): avc: denied { read } for pid=7940 comm="syz.4.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.031907][ T30] audit: type=1400 audit(1784007040.973:508): avc: denied { map } for pid=7940 comm="syz.4.475" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.059101][ T7952] binder_alloc: binder_alloc_mmap_handler: 7940 200000ffe000-200001000000 already mapped failed -16 [ 265.174513][ T30] audit: type=1400 audit(1784007042.143:509): avc: denied { map } for pid=7938 comm="syz.1.474" path="socket:[18115]" dev="sockfs" ino=18115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.560963][ T30] audit: type=1400 audit(1784007042.163:510): avc: denied { read } for pid=7938 comm="syz.1.474" path="socket:[18115]" dev="sockfs" ino=18115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.972566][ T30] audit: type=1400 audit(1784007042.903:511): avc: denied { bind } for pid=7959 comm="syz.0.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.212961][ T30] audit: type=1326 audit(1784007043.183:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07b9de59 code=0x7ffc0000 [ 266.339264][ T30] audit: type=1326 audit(1784007043.213:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3a07b9de59 code=0x7ffc0000 [ 266.429673][ T30] audit: type=1326 audit(1784007043.213:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07b9de59 code=0x7ffc0000 [ 266.531932][ T30] audit: type=1326 audit(1784007043.213:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a07b9de59 code=0x7ffc0000 [ 266.623929][ T30] audit: type=1326 audit(1784007043.213:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7965 comm="syz.4.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3a07b9de59 code=0x7ffc0000 [ 267.120899][ T189] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 267.284659][ T189] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.321205][ T189] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 267.364058][ T189] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 267.403991][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.433778][ T189] usb 1-1: Product: syz [ 267.449137][ T189] usb 1-1: Manufacturer: syz [ 267.466150][ T189] usb 1-1: SerialNumber: syz [ 270.007002][ T189] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.026309][ T189] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 270.043833][ T189] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 270.065289][ T189] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 270.457706][ T189] usb 1-1: USB disconnect, device number 6 [ 270.678700][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.845063][ T7998] ALSA: seq fatal error: cannot create timer (-19) [ 271.064374][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 271.457464][ T7998] ======================================================= [ 271.457464][ T7998] WARNING: The mand mount option has been deprecated and [ 271.457464][ T7998] and is ignored by this kernel. Remove the mand [ 271.457464][ T7998] option from the mount to silence this warning. [ 271.457464][ T7998] ======================================================= [ 271.836638][ T6276] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 271.875164][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 271.875176][ T30] audit: type=1400 audit(1784007048.843:540): avc: denied { unmount } for pid=7328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 272.099778][ T6276] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.163143][ T6276] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.285331][ T6276] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.348196][ T6276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.444365][ T8018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 272.519983][ T6276] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.970476][ T6276] usb 2-1: USB disconnect, device number 15 [ 274.884729][ T6276] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 275.130733][ T8042] netlink: 'syz.3.501': attribute type 4 has an invalid length. [ 276.666974][ T6276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.893538][ T6276] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 276.947269][ T6276] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 276.987571][ T8046] set match dimension is over the limit! [ 277.037270][ T6276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.050738][ T6276] usb 1-1: Product: syz [ 277.055186][ T6276] usb 1-1: Manufacturer: syz [ 277.060642][ T6276] usb 1-1: SerialNumber: syz [ 277.661766][ T6276] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 277.697072][ T6276] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 277.727658][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.736638][ T6276] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 277.763065][ T6276] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 278.027283][ T6276] usb 1-1: USB disconnect, device number 7 [ 278.177105][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.711182][ T6276] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 281.073670][ T6276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 281.085577][ T6276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 281.099606][ T6276] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 281.109272][ T6276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.125682][ T6276] usb 3-1: config 0 descriptor?? [ 281.182497][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 283.373640][ T8118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=8118 comm=syz.1.524 [ 283.407098][ T6276] usbhid 3-1:0.0: can't add hid device: -71 [ 283.426192][ T6276] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.457920][ T6276] usb 3-1: USB disconnect, device number 17 [ 283.508176][ T30] audit: type=1326 audit(1784007060.473:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8120 comm="syz.2.525" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbed5d9de59 code=0x0 [ 288.346426][ T8150] overlayfs: failed to clone upperpath [ 288.954079][ T8162] loop5: detected capacity change from 0 to 7 [ 289.017040][ T8164] lo speed is unknown, defaulting to 1000 [ 289.026727][ T8164] lo speed is unknown, defaulting to 1000 [ 289.053513][ T8164] lo speed is unknown, defaulting to 1000 [ 289.131262][ T8172] netlink: 'syz.4.536': attribute type 13 has an invalid length. [ 289.730870][ T5713] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 289.735717][ T8172] gretap0: refused to change device tx_queue_len [ 289.746120][ T8172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 289.888448][ T30] audit: type=1400 audit(1784007066.853:542): avc: denied { create } for pid=8181 comm="syz.2.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 289.942711][ T8162] Dev loop5: unable to read RDB block 7 [ 289.950558][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 289.960611][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 289.998532][ T8162] loop5: unable to read partition table [ 290.021381][ T8162] loop5: partition table beyond EOD, truncated [ 290.046949][ T8162] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 290.167792][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 290.178850][ T5713] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 290.190037][ T5713] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 290.215515][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.226580][ T5713] usb 1-1: config 0 descriptor?? [ 290.253177][ T8164] infiniband syz2: set active [ 290.258139][ T5613] lo speed is unknown, defaulting to 1000 [ 290.264654][ T8164] infiniband syz2: added lo [ 290.363976][ T5613] syz2: Port: 1 Link ACTIVE [ 290.766276][ T8164] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 290.887786][ T8164] infiniband syz2: Couldn't open port 1 [ 290.982269][ T8164] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 291.079626][ T8164] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 291.686200][ T8164] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 292.029492][ T8164] RDS/IB: syz2: added [ 292.054531][ T8201] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 292.066345][ T8164] smc: adding ib device syz2 with port count 1 [ 292.096884][ T8164] smc: ib device syz2 port 1 has no pnetid [ 292.155420][ T8201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.208908][ T5613] lo speed is unknown, defaulting to 1000 [ 292.254643][ T8164] lo speed is unknown, defaulting to 1000 [ 292.308703][ T5713] usbhid 1-1:0.0: can't add hid device: -71 [ 292.337111][ T5713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 292.392888][ T5713] usb 1-1: USB disconnect, device number 8 [ 293.451170][ T30] audit: type=1326 audit(1784007070.413:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8218 comm="syz.3.548" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4999de59 code=0x0 [ 293.747263][ T8164] lo speed is unknown, defaulting to 1000 [ 294.020174][ T30] audit: type=1400 audit(1784007070.983:544): avc: denied { read } for pid=8204 comm="syz.2.544" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 294.458542][ T8164] lo speed is unknown, defaulting to 1000 [ 295.838546][ T8164] lo speed is unknown, defaulting to 1000 [ 296.395010][ T8250] netlink: 'syz.0.552': attribute type 4 has an invalid length. [ 296.768562][ T30] audit: type=1400 audit(1784007073.733:545): avc: denied { read append } for pid=8247 comm="syz.2.556" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 296.795899][ T8164] lo speed is unknown, defaulting to 1000 [ 296.833317][ T30] audit: type=1400 audit(1784007073.763:546): avc: denied { open } for pid=8247 comm="syz.2.556" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 298.263685][ T8242] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 298.270729][ T30] audit: type=1400 audit(1784007075.233:547): avc: denied { read } for pid=8241 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.588218][ T8274] tipc: Started in network mode [ 298.594287][ T8274] tipc: Node identity 4, cluster identity 4711 [ 298.600500][ T8274] tipc: Node number set to 4 [ 299.472490][ T30] audit: type=1400 audit(1784007076.253:548): avc: denied { append } for pid=8283 comm="syz.4.564" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.233331][ T5713] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 300.604131][ T5713] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 300.625158][ T5713] usb 2-1: config 179 has no interface number 0 [ 300.643858][ T5713] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 300.774407][ T805] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 300.789364][ T5713] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 300.812698][ T5713] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 301.421640][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 301.594807][ T5713] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 301.611019][ T5713] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 301.629191][ T805] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 301.640828][ T805] usb 5-1: config 0 has no interface number 0 [ 301.665235][ T5713] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 301.666667][ T30] audit: type=1326 audit(1784007078.633:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8323 comm="syz.2.574" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbed5d9de59 code=0x0 [ 301.906948][ T805] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.968263][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.976569][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.027340][ T805] usb 5-1: Product: syz [ 302.045360][ T8295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.056208][ T805] usb 5-1: Manufacturer: syz [ 302.070829][ T5713] xpad 2-1:179.65: probe with driver xpad failed with error -5 [ 302.081738][ T805] usb 5-1: SerialNumber: syz [ 302.100448][ T805] usb 5-1: config 0 descriptor?? [ 302.128747][ T805] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 302.277319][ T5790] usb 2-1: USB disconnect, device number 16 [ 302.389409][ T805] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 302.427746][ T805] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 302.566095][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 302.766782][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 302.771655][ T6279] usb 5-1: USB disconnect, device number 17 [ 302.812220][ T6279] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 302.859226][ T6279] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 302.902161][ T6279] quatech2 5-1:0.51: device disconnected [ 303.005862][ T30] audit: type=1400 audit(1784007079.973:550): avc: denied { map } for pid=8330 comm="syz.1.575" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 303.986719][ T8341] overlayfs: failed to resolve './cgroup': -2 [ 306.102767][ T8349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 306.110350][ T8349] UDF-fs: Scanning with blocksize 512 failed [ 306.128258][ T8349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 306.136002][ T8349] UDF-fs: Scanning with blocksize 1024 failed [ 306.154879][ T8349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 306.162448][ T8349] UDF-fs: Scanning with blocksize 2048 failed [ 306.174874][ T8349] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 306.182551][ T8349] UDF-fs: Scanning with blocksize 4096 failed [ 306.849037][ T30] audit: type=1400 audit(1784007083.793:551): avc: denied { create } for pid=8358 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 307.641567][ T8315] syz.0.572 (8315): drop_caches: 2 [ 309.184124][ T8378] rdma_rxe: rxe_newlink: failed to add lo [ 309.611616][ T5790] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.801094][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 309.826180][ T5790] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 309.837282][ T5790] usb 5-1: config 0 has no interface number 0 [ 309.846657][ T5790] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 309.856941][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.866427][ T5790] usb 5-1: Product: syz [ 309.871820][ T5790] usb 5-1: Manufacturer: syz [ 309.877166][ T5790] usb 5-1: SerialNumber: syz [ 309.911281][ T5790] usb 5-1: config 0 descriptor?? [ 309.926112][ T30] audit: type=1400 audit(1784007086.893:552): avc: denied { map } for pid=8400 comm="syz.0.593" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 309.950407][ T5790] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 310.134622][ T5790] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 311.110538][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 311.563202][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 312.751569][ T5790] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 313.172222][ T5790] usb 5-1: USB disconnect, device number 18 [ 313.387616][ T5790] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 313.604955][ T5790] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 314.176355][ T5790] quatech2 5-1:0.51: device disconnected [ 314.437832][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 314.472310][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.496587][ T8432] batadv_slave_1: entered promiscuous mode [ 317.518860][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.140326][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.195494][ T8474] netlink: 798 bytes leftover after parsing attributes in process `syz.3.613'. [ 319.425590][ T30] audit: type=1400 audit(1784007096.393:553): avc: denied { ioctl } for pid=8471 comm="syz.3.613" path="socket:[20135]" dev="sockfs" ino=20135 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.860900][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 320.114040][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 320.125782][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 320.274228][ T24] usb 5-1: config 179 has no interface number 0 [ 320.291650][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 320.809891][ T6279] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 320.884550][ T24] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 320.925641][ T24] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 320.976248][ T24] usb 5-1: config 179 interface 65 has no altsetting 0 [ 321.021002][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 321.022343][ T6279] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 321.053092][ T6279] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 321.057209][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.100101][ T8495] Cannot find set identified by id 0 to match [ 321.111190][ T6279] usb 3-1: config 128 has no interface number 0 [ 321.130158][ T6279] usb 3-1: config 128 interface 148 has no altsetting 0 [ 321.249470][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input9 [ 321.250963][ T6279] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 321.332812][ T4961] input input9: unable to receive magic message: -110 [ 321.349282][ T6279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.386136][ T6279] usb 3-1: Product: syz [ 321.403389][ T6279] usb 3-1: Manufacturer: syz [ 321.419349][ T6279] usb 3-1: SerialNumber: syz [ 321.427099][ T4961] input input9: unable to receive magic message: -32 [ 321.542003][ T4961] input input9: unable to receive magic message: -32 [ 321.588674][ T4961] input input9: unable to receive magic message: -32 [ 321.612626][ T8482] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.644394][ T8482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.651656][ T8482] IPv6: NLM_F_CREATE should be set when creating new route [ 321.669600][ T8505] fuse: fd is not a fuse device [ 321.687928][ T24] usb 5-1: USB disconnect, device number 19 [ 321.687963][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.758323][ T8507] netlink: 44 bytes leftover after parsing attributes in process `syz.2.616'. [ 321.805791][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.616'. [ 323.196726][ T8520] fuse: fd is not a fuse device [ 324.003716][ T805] usb 3-1: USB disconnect, device number 18 [ 324.351798][ T8534] fuse: fd is not a fuse device [ 326.068891][ T30] audit: type=1400 audit(1784007103.033:554): avc: denied { create } for pid=8549 comm="syz.3.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 327.946145][ T8578] FAULT_INJECTION: forcing a failure. [ 327.946145][ T8578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.001981][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz.2.645 Not tainted syzkaller #0 PREEMPT(full) [ 328.002011][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 328.002023][ T8578] Call Trace: [ 328.002030][ T8578] [ 328.002038][ T8578] dump_stack_lvl+0x100/0x190 [ 328.002069][ T8578] should_fail_ex.cold+0x5/0xa [ 328.002095][ T8578] _copy_from_iter+0x1f4/0x1690 [ 328.002123][ T8578] ? __asan_memset+0x23/0x50 [ 328.002153][ T8578] ? __pfx__copy_from_iter+0x10/0x10 [ 328.002175][ T8578] ? __pfx___alloc_skb+0x10/0x10 [ 328.002203][ T8578] netlink_sendmsg+0x808/0xda0 [ 328.002239][ T8578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.002270][ T8578] ? selinux_socket_sendmsg+0x198/0x2f0 [ 328.002301][ T8578] ____sys_sendmsg+0xa4d/0xbe0 [ 328.002326][ T8578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.002356][ T8578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.002393][ T8578] ___sys_sendmsg+0x190/0x1e0 [ 328.002419][ T8578] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.002449][ T8578] ? __lock_acquire+0x49f/0x1a40 [ 328.002472][ T8578] ? get_pid_task+0x106/0x250 [ 328.002531][ T8578] __sys_sendmsg+0x160/0x210 [ 328.002552][ T8578] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.002587][ T8578] do_syscall_64+0x115/0x870 [ 328.002616][ T8578] ? clear_bhb_loop+0x40/0x90 [ 328.002640][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.002659][ T8578] RIP: 0033:0x7fbed5d9de59 [ 328.002677][ T8578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.002697][ T8578] RSP: 002b:00007fbed6cdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.002717][ T8578] RAX: ffffffffffffffda RBX: 00007fbed6025fa0 RCX: 00007fbed5d9de59 [ 328.002731][ T8578] RDX: 0000000000000810 RSI: 0000200000000280 RDI: 0000000000000003 [ 328.002743][ T8578] RBP: 00007fbed6cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 328.002756][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.002768][ T8578] R13: 00007fbed6026038 R14: 00007fbed6025fa0 R15: 00007ffd0f79de58 [ 328.002797][ T8578] [ 331.058922][ T30] audit: type=1400 audit(1784007108.013:555): avc: denied { setopt } for pid=8612 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.287146][ T30] audit: type=1400 audit(1784007109.253:556): avc: denied { ioctl } for pid=8631 comm="syz.1.660" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x700b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 332.322296][ T8626] nvme_fabrics: missing parameter 'transport=%s' [ 332.340446][ T8626] nvme_fabrics: missing parameter 'nqn=%s' [ 332.375215][ T30] audit: type=1400 audit(1784007109.253:557): avc: denied { read write } for pid=8631 comm="syz.1.660" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.466479][ T30] audit: type=1400 audit(1784007109.253:558): avc: denied { open } for pid=8631 comm="syz.1.660" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 335.113268][ T8656] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 335.150660][ T8656] SELinux: failed to load policy [ 335.311155][ T5790] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 335.622484][ T30] audit: type=1400 audit(1784007112.583:559): avc: denied { create } for pid=8661 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.670450][ T5790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.687740][ T5790] usb 5-1: not running at top speed; connect to a high speed hub [ 335.710755][ T5790] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 335.732103][ T5790] usb 5-1: New USB device found, idVendor=0499, idProduct=1028, bcdDevice= 0.40 [ 335.769967][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.815878][ T5790] usb 5-1: Product: syz [ 335.840218][ T5790] usb 5-1: Manufacturer: syz [ 335.846611][ T5790] usb 5-1: SerialNumber: syz [ 336.789752][ T5790] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.306603][ T8692] x_tables: duplicate underflow at hook 1 [ 337.396881][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.678'. [ 337.443156][ T8691] xt_connbytes: Forcing CT accounting to be enabled [ 337.505571][ T8691] Cannot find set identified by id 0 to match [ 337.676179][ T5790] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 338.078934][ T5790] usb 5-1: USB disconnect, device number 20 [ 338.315636][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.487827][ T5625] Bluetooth: hci0: command 0x0406 tx timeout [ 341.983484][ T30] audit: type=1326 audit(1784007118.953:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.0.693" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f021679de59 code=0x0 [ 342.935986][ T8768] Cannot find set identified by id 0 to match [ 343.866221][ T8775] netlink: zone id is out of range [ 343.876237][ T8775] netlink: get zone limit has 4 unknown bytes [ 345.362445][ T8797] tmpfs: Bad value for 'mpol' [ 345.466012][ T8797] netlink: 'syz.0.706': attribute type 2 has an invalid length. [ 345.680877][ T805] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 346.167360][ T805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.196829][ T805] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 346.235796][ T805] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 346.267054][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.285964][ T30] audit: type=1326 audit(1784007123.253:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8807 comm="syz.3.709" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4999de59 code=0x0 [ 346.311828][ T805] usb 2-1: Product: syz [ 346.315989][ T805] usb 2-1: Manufacturer: syz [ 346.320556][ T805] usb 2-1: SerialNumber: syz [ 348.247585][ T805] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 348.259995][ T805] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 348.279450][ T805] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 348.294952][ T805] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 348.445954][ T805] usb 2-1: USB disconnect, device number 17 [ 348.610711][ T8819] Cannot find set identified by id 0 to match [ 348.699516][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 350.227727][ T8824] netlink: 'syz.1.714': attribute type 3 has an invalid length. [ 350.303688][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 351.285927][ T8824] macsec0: entered promiscuous mode [ 351.374188][ T8824] virt_wifi0: entered promiscuous mode [ 352.208714][ T30] audit: type=1326 audit(1784007129.173:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a07b9de59 code=0x0 [ 352.235786][ T8845] rdma_rxe: rxe_newlink: failed to add lo [ 352.385616][ T8853] netlink: zone id is out of range [ 352.394870][ T8853] netlink: get zone limit has 4 unknown bytes [ 353.008377][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 354.954773][ T8861] syz.0.724 (8861): drop_caches: 2 [ 356.674823][ T8876] set match dimension is over the limit! [ 358.494440][ T30] audit: type=1400 audit(1784007135.443:563): avc: denied { write } for pid=8889 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 358.959439][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.732'. [ 358.996530][ T30] audit: type=1400 audit(1784007135.453:564): avc: denied { listen } for pid=8889 comm="syz.2.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 360.544620][ T30] audit: type=1400 audit(1784007137.513:565): avc: denied { read } for pid=8907 comm="syz.0.736" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 360.651150][ T30] audit: type=1400 audit(1784007137.513:566): avc: denied { open } for pid=8907 comm="syz.0.736" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 360.795665][ T30] audit: type=1326 audit(1784007137.753:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8910 comm="syz.4.737" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a07b9de59 code=0x0 [ 361.385963][ T8916] syz.2.738 (8916): drop_caches: 2 [ 363.037300][ T8923] loop9: detected capacity change from 0 to 1 [ 363.132915][ T8923] Dev loop9: unable to read RDB block 1 [ 363.138730][ T8923] loop9: unable to read partition table [ 363.145479][ T8923] loop9: partition table beyond EOD, truncated [ 363.151990][ T8923] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 363.168584][ T30] audit: type=1400 audit(1784007140.103:568): avc: denied { recv } for pid=8919 comm="syz.0.739" saddr=10.128.0.169 src=34558 daddr=10.128.1.107 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 363.511097][ T8927] xt_connbytes: Forcing CT accounting to be enabled [ 363.544025][ T8927] set match dimension is over the limit! [ 364.847297][ T8939] rdma_rxe: rxe_newlink: failed to add lo [ 365.205067][ T8939] netlink: 'syz.1.744': attribute type 13 has an invalid length. [ 365.277643][ T8939] gretap0: refused to change device tx_queue_len [ 365.310751][ T8939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 365.625816][ T8948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.747'. [ 367.172525][ T8963] syz2: rxe_newlink: already configured on lo [ 367.222010][ T8958] syz.0.750 (8958): drop_caches: 2 [ 367.534550][ T30] audit: type=1400 audit(1784007144.503:569): avc: denied { append } for pid=8964 comm="syz.2.753" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 367.572806][ T8965] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 367.617189][ T8965] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.990996][ T8973] loop9: detected capacity change from 0 to 1 [ 368.024839][ T8973] Dev loop9: unable to read RDB block 1 [ 368.030589][ T8973] loop9: unable to read partition table [ 368.038446][ T8973] loop9: partition table beyond EOD, truncated [ 368.045191][ T8973] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 368.386794][ T8966] vivid-000: ================= START STATUS ================= [ 368.401972][ T8966] vivid-000: Test Pattern: 75% Colorbar [ 368.452832][ T8976] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 368.477971][ T8966] vivid-000: Fill Percentage of Frame: 100 [ 368.486852][ T5713] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 368.534963][ T8966] vivid-000: Horizontal Movement: Move Left [ 368.700888][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 368.716191][ T8966] vivid-000: Vertical Movement: No Movement [ 368.758533][ T5713] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.872536][ T8976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.908931][ T8966] vivid-000: OSD Text Mode: All [ 368.979844][ T5713] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 369.498473][ T8966] vivid-000: Show Border: false [ 369.516081][ T5713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 369.543375][ T8966] vivid-000: Show Square: false [ 369.566610][ T5713] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 369.623082][ T8966] vivid-000: Sensor Flipped Horizontally: false [ 369.632579][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.661830][ T5713] usb 1-1: Product: syz [ 369.795807][ T8966] vivid-000: Sensor Flipped Vertically: false [ 369.805721][ T5713] usb 1-1: Manufacturer: syz [ 369.819218][ T8966] vivid-000: Insert SAV Code in Image: false [ 369.826090][ T5713] usb 1-1: SerialNumber: syz [ 369.839113][ T8966] vivid-000: Insert EAV Code in Image: false [ 369.853640][ T5713] usb 1-1: config 0 descriptor?? [ 369.865974][ T8966] vivid-000: Insert Video Guard Band: false [ 369.899829][ T8966] vivid-000: Reduced Framerate: false [ 369.920508][ T8966] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 369.951168][ T8966] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 369.989297][ T8966] vivid-000: Enable Capture Cropping: true grabbed [ 370.018538][ T8966] vivid-000: Enable Capture Composing: true grabbed [ 370.051232][ T8966] vivid-000: Enable Capture Scaler: true grabbed [ 370.082853][ T8966] vivid-000: Timestamp Source: End of Frame [ 370.134765][ T8966] vivid-000: Colorspace: sRGB [ 370.153209][ T8966] vivid-000: Transfer Function: Default [ 370.211536][ T8966] vivid-000: Y'CbCr Encoding: Default [ 370.236599][ T8966] vivid-000: HSV Encoding: Hue 0-179 [ 370.256543][ T8966] vivid-000: Quantization: Default [ 370.281987][ T8966] vivid-000: Apply Alpha To Red Only: false [ 370.302221][ T5713] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 370.304547][ T8966] vivid-000: Standard Aspect Ratio: 4x3 [ 370.365051][ T8966] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 370.400163][ T8966] vivid-000: DV Timings: 640x480p59 inactive [ 370.418549][ T8966] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 370.456480][ T8966] vivid-000: Maximum EDID Blocks: 2 [ 370.470892][ T8966] vivid-000: Limited RGB Range (16-235): false [ 370.491756][ T8966] vivid-000: Rx RGB Quantization Range: Automatic [ 370.530233][ T8966] vivid-000: Power Present: 0x00000001 [ 370.578835][ T8966] tpg source WxH: 320x240 (Y'CbCr) [ 370.611197][ T8966] tpg field: 1 [ 370.626194][ T8966] tpg crop: (0,0)/320x240 [ 370.640532][ T8966] tpg compose: (0,0)/320x240 [ 370.660818][ T8966] tpg colorspace: 8 [ 370.677520][ T8966] tpg transfer function: 0/2 [ 370.693336][ T8966] tpg Y'CbCr encoding: 0/1 [ 370.710161][ T8966] tpg quantization: 0/2 [ 370.734975][ T8966] tpg RGB range: 0/2 [ 370.748643][ T8966] vivid-000: ================== END STATUS ================== [ 370.953687][ T30] audit: type=1400 audit(1784007147.923:570): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 371.215229][ T8968] kvm: pic: single mode not supported [ 372.191460][ T8968] kvm: pic: level sensitive irq not supported [ 372.230456][ T8968] kvm: pic: level sensitive irq not supported [ 372.656422][ T6276] usb 1-1: USB disconnect, device number 9 [ 372.793362][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.759'. [ 374.097549][ T6276] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 374.547003][ T6276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 374.569879][ T6276] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 374.597405][ T6276] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 374.612914][ T6276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.709178][ T6276] usb 1-1: Product: syz [ 374.713807][ T6276] usb 1-1: Manufacturer: syz [ 374.718442][ T6276] usb 1-1: SerialNumber: syz [ 374.862743][ T30] audit: type=1400 audit(1784007151.823:571): avc: denied { write } for pid=9019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.975292][ T9032] syz.2.764 (9032): drop_caches: 2 [ 376.460891][ T30] audit: type=1400 audit(1784007153.423:572): avc: denied { write } for pid=9044 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.462483][ T6276] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 376.583844][ T6276] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 376.654566][ T6276] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 376.706054][ T6276] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 376.896194][ T6276] usb 1-1: USB disconnect, device number 10 [ 377.054894][ T6332] udevd[6332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.532138][ T30] audit: type=1400 audit(1784007155.123:573): avc: denied { create } for pid=9062 comm="syz.3.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 378.532519][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.563949][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.710748][ T30] audit: type=1400 audit(1784007155.123:574): avc: denied { ioctl } for pid=9062 comm="syz.3.769" path="socket:[22809]" dev="sockfs" ino=22809 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 380.042377][ T9084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.774'. [ 381.761915][ T30] audit: type=1400 audit(1784007158.733:575): avc: denied { write } for pid=9054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.312474][ T30] audit: type=1400 audit(1784007159.273:576): avc: denied { write } for pid=9097 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.671449][ T9128] Bluetooth: MGMT ver 1.23 [ 387.429944][ T9143] syz.1.788 (9143): drop_caches: 2 [ 387.470902][ T5713] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 387.640904][ T5713] usb 1-1: Using ep0 maxpacket: 32 [ 387.675192][ T5713] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 387.689603][ T5713] usb 1-1: config 0 has no interface number 0 [ 387.715807][ T5713] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 387.763061][ T9157] vivid-000: ================= START STATUS ================= [ 387.771814][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.788160][ T5713] usb 1-1: Product: syz [ 387.792868][ T9157] vivid-000: Test Pattern: 75% Colorbar [ 387.803081][ T5713] usb 1-1: Manufacturer: syz [ 387.812837][ T9157] vivid-000: Fill Percentage of Frame: 100 [ 387.821970][ T5713] usb 1-1: SerialNumber: syz [ 387.849076][ T5713] usb 1-1: config 0 descriptor?? [ 387.868766][ T9157] vivid-000: Horizontal Movement: Move Left [ 387.967354][ T5713] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 387.989867][ T9158] netlink: 'syz.4.792': attribute type 1 has an invalid length. [ 387.999755][ T9157] vivid-000: Vertical Movement: No Movement [ 388.067511][ T9157] vivid-000: OSD Text Mode: All [ 388.093186][ T9157] vivid-000: Show Border: false [ 388.100904][ T9157] vivid-000: Show Square: false [ 388.105933][ T9157] vivid-000: Sensor Flipped Horizontally: false [ 388.181483][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.181546][ T9157] vivid-000: Sensor Flipped Vertically: [ 388.190345][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.198250][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 388.243952][ T5713] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 388.263421][ T5713] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 388.324652][ T9157] false [ 388.325309][ T9167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.793'. [ 388.330777][ T9157] vivid-000: Insert SAV Code in Image: false [ 388.436716][ T9158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.537072][ T9157] vivid-000: Insert EAV Code in Image: false [ 388.652732][ T9170] loop9: detected capacity change from 0 to 1 [ 388.735582][ T9170] Dev loop9: unable to read RDB block 1 [ 388.741383][ T9170] loop9: unable to read partition table [ 388.747754][ T9170] loop9: partition table beyond EOD, truncated [ 388.754028][ T9170] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 389.122244][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 389.130406][ T9157] vivid-000: Insert Video Guard Band: false [ 389.228914][ T5734] usb 1-1: USB disconnect, device number 11 [ 389.229363][ T9157] vivid-000: Reduced Framerate: [ 389.288314][ T5734] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 389.301610][ T9157] false [ 389.394881][ T5734] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 389.403706][ T9157] vivid-000: HDMI 000-0 Is Connected To: [ 389.585748][ T5734] quatech2 1-1:0.51: device disconnected [ 389.652165][ T9157] Test Pattern Generator [ 390.121302][ T9157] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 390.189713][ T9157] vivid-000: Enable Capture Cropping: true grabbed [ 390.259088][ T9157] vivid-000: Enable Capture Composing: true grabbed [ 390.361053][ T9157] vivid-000: Enable Capture Scaler: true grabbed [ 390.388813][ T9157] vivid-000: Timestamp Source: End of Frame [ 390.510861][ T9157] vivid-000: Colorspace: sRGB [ 390.538111][ T9157] vivid-000: Transfer Function: Default [ 390.566624][ T9187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.799'. [ 390.580824][ T9157] vivid-000: Y'CbCr Encoding: Default [ 390.619836][ T9157] vivid-000: HSV Encoding: Hue 0-179 [ 390.678077][ T9157] vivid-000: Quantization: Default [ 390.733481][ T9157] vivid-000: Apply Alpha To Red Only: false [ 390.777935][ T9157] vivid-000: Standard Aspect Ratio: 4x3 [ 390.840689][ T9157] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 391.428475][ T9157] vivid-000: DV Timings: 640x480p59 inactive [ 391.515207][ T9157] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 391.595844][ T9157] vivid-000: Maximum EDID Blocks: 2 [ 391.601717][ T9157] vivid-000: Limited RGB Range (16-235): false [ 391.608090][ T9157] vivid-000: Rx RGB Quantization Range: Automatic [ 391.617744][ T9157] vivid-000: Power Present: 0x00000001 [ 391.647996][ T9157] tpg source WxH: 320x240 (Y'CbCr) [ 391.690056][ T9157] tpg field: 1 [ 391.727331][ T9157] tpg crop: (0,0)/320x240 [ 391.741141][ T9157] tpg compose: (0,0)/320x240 [ 391.791603][ T9157] tpg colorspace: 8 [ 391.825851][ T9157] tpg transfer function: 0/2 [ 391.844866][ T9157] tpg Y'CbCr encoding: 0/1 [ 391.866875][ T9157] tpg quantization: 0/2 [ 391.881137][ T9157] tpg RGB range: 0/2 [ 392.465760][ T9157] vivid-000: ================== END STATUS ================== [ 393.104071][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 393.131392][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 394.197636][ T9231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.810'. [ 395.994030][ T9245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.814'. [ 396.176509][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.819'. [ 396.670095][ T9254] syz.4.818 (9254): drop_caches: 2 [ 398.644827][ T9275] loop9: detected capacity change from 0 to 1 [ 398.937524][ T9275] Dev loop9: unable to read RDB block 1 [ 398.943166][ T9275] loop9: unable to read partition table [ 398.948902][ T9275] loop9: partition table beyond EOD, truncated [ 398.955060][ T9275] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 399.121831][ T9278] rdma_rxe: rxe_newlink: failed to add lo [ 399.182733][ T9278] netlink: 'syz.1.826': attribute type 13 has an invalid length. [ 399.275342][ T9278] gretap0: refused to change device tx_queue_len [ 399.291300][ T9278] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 401.531074][ T30] audit: type=1326 audit(1784007178.463:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9308 comm="syz.4.834" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a07b9de59 code=0x0 [ 402.688982][ T9355] Cannot find set identified by id 0 to match [ 406.045263][ T9385] Cannot find set identified by id 0 to match [ 407.420104][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 407.497450][ T9390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.845'. [ 407.898209][ T9397] netlink: 252 bytes leftover after parsing attributes in process `syz.3.848'. [ 408.052829][ T5713] IPVS: starting estimator thread 0... [ 408.210173][ T9402] IPVS: using max 37 ests per chain, 88800 per kthread [ 408.241998][ T30] audit: type=1326 audit(1784007185.203:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.4.851" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a07b9de59 code=0x0 [ 408.496513][ T9407] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 408.797225][ T30] audit: type=1400 audit(1784007185.393:579): avc: denied { watch } for pid=9401 comm="syz.1.850" path="/166/file5" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.168660][ T9418] netlink: 'syz.3.852': attribute type 4 has an invalid length. [ 409.502132][ T30] audit: type=1400 audit(1784007185.393:580): avc: denied { watch_sb watch_reads } for pid=9401 comm="syz.1.850" path="/166/file5" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 409.757734][ T30] audit: type=1400 audit(1784007185.393:581): avc: denied { watch_mount } for pid=9401 comm="syz.1.850" path="/166/file5" dev="tmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.358471][ T9430] syz.1.856 (9430): drop_caches: 2 [ 411.709327][ T9442] netlink: 'syz.3.857': attribute type 4 has an invalid length. [ 412.100878][ T6276] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 412.300912][ T6276] usb 1-1: Using ep0 maxpacket: 32 [ 412.323206][ T6276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.350720][ T6279] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 412.362998][ T6276] usb 1-1: config 0 has no interfaces? [ 412.383691][ T6276] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 412.408448][ T6276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.430692][ T6276] usb 1-1: Product: syz [ 412.453779][ T6276] usb 1-1: Manufacturer: syz [ 412.477107][ T6276] usb 1-1: SerialNumber: syz [ 412.511119][ T6276] usb 1-1: config 0 descriptor?? [ 412.527896][ T6279] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 412.582456][ T6279] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 412.599666][ T6279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.615986][ T9448] fuse: fd is not a fuse device [ 412.618752][ T30] audit: type=1400 audit(1784007189.583:582): avc: denied { mounton } for pid=9447 comm="syz.3.862" path="/217/file0" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 412.669532][ T6279] usb 3-1: Product: syz [ 412.678923][ T6279] usb 3-1: Manufacturer: syz [ 412.687415][ T6279] usb 3-1: SerialNumber: syz [ 412.740058][ T6279] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 412.774836][ T6279] dvb-usb: bulk message failed: -22 (3/0) [ 412.876074][ T6279] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 413.086913][ T6279] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 413.139035][ T6279] usb 3-1: media controller created [ 413.190777][ T6279] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 413.542328][ T6279] DVB: Unable to find symbol mt352_attach() [ 413.548244][ T6279] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 413.575295][ T6279] dvb-usb: bulk message failed: -22 (3/0) [ 413.661287][ T6279] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 413.694895][ T6279] usb 3-1: USB disconnect, device number 19 [ 414.218342][ T9466] netlink: 'syz.4.865': attribute type 4 has an invalid length. [ 415.106281][ T6276] lo speed is unknown, defaulting to 1000 [ 415.112145][ T6276] syz2: Port: 1 Link DOWN [ 415.118046][ T6276] lo speed is unknown, defaulting to 1000 [ 415.136244][ T6279] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 415.213662][ T9470] set match dimension is over the limit! [ 415.240092][ T5790] usb 1-1: USB disconnect, device number 12 [ 416.616964][ T9497] netlink: 'syz.4.872': attribute type 4 has an invalid length. [ 416.943899][ T9489] Cannot find set identified by id 0 to match [ 417.154383][ T9498] netlink: zone id is out of range [ 417.166590][ T9498] netlink: get zone limit has 4 unknown bytes [ 417.844041][ T9505] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 418.577112][ T9514] netlink: 'syz.4.877': attribute type 4 has an invalid length. [ 418.999965][ T9516] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 419.033612][ T9516] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 419.627226][ T9522] syz.4.879 (9522): drop_caches: 2 [ 420.847557][ T9517] vivid-000: ================= START STATUS ================= [ 420.892463][ T9517] vivid-000: Test Pattern: 75% Colorbar [ 420.923734][ T9524] netlink: 'syz.0.878': attribute type 1 has an invalid length. [ 420.961318][ T9517] vivid-000: Fill Percentage of Frame: 100 [ 420.990509][ T9517] vivid-000: Horizontal Movement: Move Left [ 421.356471][ T9517] vivid-000: Vertical Movement: No Movement [ 421.404079][ T9535] rdma_rxe: rxe_newlink: failed to add lo [ 421.433342][ T9517] vivid-000: OSD Text Mode: All [ 421.475332][ T9535] netlink: 'syz.2.883': attribute type 13 has an invalid length. [ 421.483137][ T9517] vivid-000: Show Border: false [ 421.483168][ T9517] vivid-000: Show Square: false [ 421.483192][ T9517] vivid-000: Sensor Flipped Horizontally: false [ 421.483216][ T9517] vivid-000: Sensor Flipped Vertically: false [ 421.483239][ T9517] vivid-000: Insert SAV Code in Image: false [ 421.483261][ T9517] vivid-000: Insert EAV Code in Image: false [ 421.483284][ T9517] vivid-000: Insert Video Guard Band: false [ 421.483306][ T9517] vivid-000: Reduced Framerate: false [ 421.537083][ T9517] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 421.554790][ T9517] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 421.563235][ T9517] vivid-000: Enable Capture Cropping: true grabbed [ 421.587446][ T9517] vivid-000: Enable Capture Composing: true grabbed [ 421.673728][ T9543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.884'. [ 421.718142][ T9524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.755691][ T9517] vivid-000: Enable Capture Scaler: true grabbed [ 421.782843][ T9517] vivid-000: Timestamp Source: End of Frame [ 421.799610][ T9535] gretap0: refused to change device tx_queue_len [ 421.807921][ T9535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 421.826486][ T9517] vivid-000: Colorspace: sRGB [ 421.848870][ T9517] vivid-000: Transfer Function: Default [ 421.877271][ T9517] vivid-000: Y'CbCr Encoding: Default [ 421.894674][ T9517] vivid-000: HSV Encoding: Hue 0-179 [ 421.909023][ T9517] vivid-000: Quantization: Default [ 421.926290][ T9517] vivid-000: Apply Alpha To Red Only: false [ 421.943015][ T9517] vivid-000: Standard Aspect Ratio: 4x3 [ 421.989040][ T9517] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 422.015983][ T9517] vivid-000: DV Timings: 640x480p59 inactive [ 422.035552][ T9517] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 422.059690][ T9517] vivid-000: Maximum EDID Blocks: 2 [ 422.074064][ T9517] vivid-000: Limited RGB Range (16-235): false [ 422.095340][ T9517] vivid-000: Rx RGB Quantization Range: Automatic [ 422.119438][ T9517] vivid-000: Power Present: 0x00000001 [ 422.136115][ T9517] tpg source WxH: 320x240 (Y'CbCr) [ 422.516317][ T9517] tpg field: 1 [ 422.530202][ T9551] netlink: zone id is out of range [ 422.542215][ T9551] netlink: get zone limit has 4 unknown bytes [ 422.568141][ T9517] tpg crop: (0,0)/320x240 [ 422.611152][ T9517] tpg compose: (0,0)/320x240 [ 422.694658][ T9517] tpg colorspace: 8 [ 422.757240][ T9517] tpg transfer function: 0/2 [ 422.814521][ T9517] tpg Y'CbCr encoding: 0/1 [ 422.891131][ T9517] tpg quantization: 0/2 [ 422.951729][ T9517] tpg RGB range: 0/2 [ 422.987784][ T9517] vivid-000: ================== END STATUS ================== [ 424.009020][ T9567] syz.0.891 (9567): drop_caches: 2 [ 425.268126][ T9577] rdma_rxe: rxe_newlink: failed to add lo [ 425.279436][ T9577] netlink: 'syz.1.894': attribute type 13 has an invalid length. [ 425.334671][ T9577] gretap0: refused to change device tx_queue_len [ 425.360370][ T9577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 426.313147][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 426.883003][ T9589] netlink: 44 bytes leftover after parsing attributes in process `syz.4.898'. [ 428.352747][ T9599] netlink: zone id is out of range [ 428.361734][ T9599] netlink: get zone limit has 4 unknown bytes [ 430.614368][ T30] audit: type=1326 audit(1784007207.583:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9618 comm="syz.3.904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4999de59 code=0x0 [ 536.180798][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 536.187780][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9331/1:b..l [ 536.196125][ C0] rcu: (detected by 0, t=10504 jiffies, g=44585, q=413 ncpus=2) [ 536.203828][ C0] task:kworker/u8:10 state:R running task stack:24312 pid:9331 tgid:9331 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 536.218142][ C0] Workqueue: events_unbound bpf_map_free_deferred [ 536.224579][ C0] Call Trace: [ 536.227845][ C0] [ 536.230768][ C0] __schedule+0x125c/0x6730 [ 536.235273][ C0] ? __schedule+0x31d8/0x6730 [ 536.239963][ C0] ? __pfx___schedule+0x10/0x10 [ 536.244814][ C0] ? mark_held_locks+0x40/0x70 [ 536.249574][ C0] preempt_schedule_irq+0x50/0x90 [ 536.254601][ C0] irqentry_exit+0x205/0xa00 [ 536.259196][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.265169][ C0] RIP: 0010:unwind_next_frame+0x182/0x2090 [ 536.270978][ C0] Code: f2 83 e2 07 38 d0 7f 08 84 c0 0f 85 24 0a 00 00 48 89 e9 41 0f b6 45 35 48 ba 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 11 00 <0f> 85 01 18 00 00 4d 8b 7d 48 3c 01 49 83 df 00 4d 85 ff 0f 84 f0 [ 536.290574][ C0] RSP: 0000:ffffc90004d4f6a8 EFLAGS: 00000246 [ 536.296631][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffff920009a9eec [ 536.304587][ C0] RDX: dffffc0000000000 RSI: ffffffff8c400f00 RDI: ffffffff8e46b928 [ 536.312545][ C0] RBP: ffffc90004d4f760 R08: 0000000032d46002 R09: 0000000000000007 [ 536.320503][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: ffffc90004d4f768 [ 536.328462][ C0] R13: ffffc90004d4f718 R14: ffffc90004d4f74d R15: ffff888045850000 [ 536.336439][ C0] ? unwind_next_frame+0x6fa/0x2090 [ 536.341641][ C0] ? kthread+0x370/0x450 [ 536.345887][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.352044][ C0] arch_stack_walk+0x94/0xf0 [ 536.356639][ C0] ? kthread+0x370/0x450 [ 536.360888][ C0] ? free_all.isra.0+0x68/0x150 [ 536.365731][ C0] stack_trace_save+0x8e/0xc0 [ 536.370409][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 536.375785][ C0] ? __lock_acquire+0x49f/0x1a40 [ 536.380715][ C0] ? free_all.isra.0+0x68/0x150 [ 536.385558][ C0] kasan_save_stack+0x30/0x50 [ 536.390226][ C0] ? kasan_save_stack+0x30/0x50 [ 536.395065][ C0] ? kasan_save_track+0x14/0x30 [ 536.399905][ C0] ? kasan_save_free_info+0x3b/0x70 [ 536.405098][ C0] ? __kasan_slab_free+0x5f/0x80 [ 536.410026][ C0] ? kfree+0x22b/0x6c0 [ 536.414092][ C0] ? free_all.isra.0+0x68/0x150 [ 536.418932][ C0] ? drain_mem_cache+0x136/0x1d0 [ 536.423946][ C0] ? bpf_mem_alloc_destroy+0x15b/0x670 [ 536.429397][ C0] ? trie_free+0xdb/0x120 [ 536.433714][ C0] ? bpf_map_free_deferred+0x23e/0x810 [ 536.439167][ C0] ? process_one_work+0xa23/0x1940 [ 536.444269][ C0] ? worker_thread+0x5ef/0xe50 [ 536.449022][ C0] ? kthread+0x370/0x450 [ 536.453302][ C0] kasan_save_track+0x14/0x30 [ 536.457976][ C0] kasan_save_free_info+0x3b/0x70 [ 536.463002][ C0] __kasan_slab_free+0x5f/0x80 [ 536.467758][ C0] ? free_all.isra.0+0x10/0x150 [ 536.472601][ C0] kfree+0x22b/0x6c0 [ 536.476502][ C0] free_all.isra.0+0x68/0x150 [ 536.481187][ C0] drain_mem_cache+0x136/0x1d0 [ 536.485948][ C0] bpf_mem_alloc_destroy+0x15b/0x670 [ 536.491238][ C0] trie_free+0xdb/0x120 [ 536.495389][ C0] bpf_map_free_deferred+0x23e/0x810 [ 536.500675][ C0] process_one_work+0xa23/0x1940 [ 536.505615][ C0] ? __pfx_process_one_work+0x10/0x10 [ 536.510985][ C0] ? __pfx_bpf_map_free_deferred+0x10/0x10 [ 536.516793][ C0] worker_thread+0x5ef/0xe50 [ 536.521387][ C0] ? kthread+0x13a/0x450 [ 536.525626][ C0] ? __pfx_worker_thread+0x10/0x10 [ 536.530728][ C0] kthread+0x370/0x450 [ 536.534797][ C0] ? __pfx_kthread+0x10/0x10 [ 536.539390][ C0] ret_from_fork+0x72b/0xd50 [ 536.543985][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 536.549093][ C0] ? __switch_to+0x800/0x10f0 [ 536.553772][ C0] ? __pfx_kthread+0x10/0x10 [ 536.558367][ C0] ret_from_fork_asm+0x1a/0x30 [ 536.563146][ C0] [ 536.566169][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g44585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 536.577349][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 536.587303][ C0] rcu: RCU grace-period kthread stack dump: [ 536.593170][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 536.606661][ C0] Call Trace: [ 536.609925][ C0] [ 536.612851][ C0] __schedule+0x125c/0x6730 [ 536.617380][ C0] ? __pfx___schedule+0x10/0x10 [ 536.622230][ C0] ? find_held_lock+0x2b/0x80 [ 536.626914][ C0] ? schedule+0x225/0x2c0 [ 536.631246][ C0] schedule+0xdd/0x2c0 [ 536.635310][ C0] schedule_timeout+0x127/0x280 [ 536.640157][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 536.645523][ C0] ? __pfx_process_timeout+0x10/0x10 [ 536.650818][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 536.656620][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 536.662076][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 536.666846][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 536.672123][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 536.677056][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 536.682251][ C0] rcu_gp_kthread+0x179/0x230 [ 536.686921][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.692120][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.697927][ C0] ? __kthread_parkme+0x18c/0x230 [ 536.702949][ C0] ? kthread+0x13a/0x450 [ 536.707189][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 536.712376][ C0] kthread+0x370/0x450 [ 536.716452][ C0] ? __pfx_kthread+0x10/0x10 [ 536.721044][ C0] ret_from_fork+0x72b/0xd50 [ 536.725631][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 536.730741][ C0] ? __switch_to+0x800/0x10f0 [ 536.735421][ C0] ? __pfx_kthread+0x10/0x10 [ 536.740013][ C0] ret_from_fork_asm+0x1a/0x30 [ 536.744794][ C0] [ 536.747798][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 536.754107][ C0] CPU: 0 UID: 0 PID: 9624 Comm: syz.4.907 Not tainted syzkaller #0 PREEMPT(full) [ 536.763291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 536.773341][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xf/0x70 [ 536.779402][ C0] Code: 00 00 00 5b e9 32 5a 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 85 a3 59 12 48 8b 34 24 <65> 48 8b 15 61 a3 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 [ 536.798997][ C0] RSP: 0018:ffffc900069cfb38 EFLAGS: 00000202 [ 536.805053][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81fd46fd [ 536.813010][ C0] RDX: 0000000000000001 RSI: ffffffff81fd46d7 RDI: ffff88807dc88000 [ 536.820966][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 536.828925][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 536.836879][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 536.844839][ C0] FS: 00007f3a08a326c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 536.853757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.860333][ C0] CR2: 0000001b33423ffc CR3: 0000000039341000 CR4: 00000000003526f0 [ 536.868295][ C0] Call Trace: [ 536.871564][ C0] [ 536.874483][ C0] smp_call_function_many_cond+0x587/0x16c0 [ 536.880376][ C0] ? __pfx_retrigger_next_event+0x10/0x10 [ 536.886100][ C0] ? clock_was_set+0x1c3/0x850 [ 536.890863][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 536.897190][ C0] ? mark_held_locks+0x40/0x70 [ 536.901951][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.907759][ C0] clock_was_set+0x61c/0x850 [ 536.912354][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 536.917468][ C0] ? rcu_is_watching+0x12/0xc0 [ 536.922229][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 536.928035][ C0] do_settimeofday64+0x330/0x4d0 [ 536.932967][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 536.938415][ C0] ? security_capable+0x80/0x260 [ 536.943342][ C0] ? rdma_disconnect+0x72f/0x870 [ 536.948275][ C0] ? capable+0xd3/0xf0 [ 536.952341][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 536.957622][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 536.963083][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 536.969072][ C0] do_syscall_64+0x115/0x870 [ 536.973664][ C0] ? clear_bhb_loop+0x40/0x90 [ 536.978339][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.984220][ C0] RIP: 0033:0x7f3a07b9de59 [ 536.988626][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.008221][ C0] RSP: 002b:00007f3a08a32028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 537.016624][ C0] RAX: ffffffffffffffda RBX: 00007f3a07e25fa0 RCX: 00007f3a07b9de59 [ 537.024581][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 537.032538][ C0] RBP: 00007f3a07c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 537.040494][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.048450][ C0] R13: 00007f3a07e26038 R14: 00007f3a07e25fa0 R15: 00007ffdc8ec2c48 [ 537.056426][ C0]