last executing test programs: 43.907851336s ago: executing program 1 (id=2): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="8580f83288e1", @random="0e4595e265ab", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x30, 0x64, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x14, 0x81, 0x0, @remote, "d048ffcf373b87b13d4ae7b785e7986748ccfd2d"}}}}}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000aaa000/0xe000)=nil, 0xe0fe}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xd4, 0xfffffc00, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x40, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x2f, 0x0, 0x5, 0x4, 0xc, @local, @mcast2, 0x40, 0x10, 0xec, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 42.675780338s ago: executing program 1 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r2, 0x401, 0x0) (fail_nth: 2) 42.138300303s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b181a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x32100dc, &(0x7f0000000000)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f00000000c0)=0x80000000, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) madvise(&(0x7f0000268000/0x2000)=nil, 0x2000, 0x16) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00001a6000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2, 0x2}) 41.042454644s ago: executing program 1 (id=15): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fcfff1ff00000000de83bc8e85000000ce360000f384000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x400) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1ff, 0x10}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_secret(0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x83}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x7fff, 0x5a, &(0x7f0000000200)=""/90, 0x41000, 0x12, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540), &(0x7f0000000580)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x2, 0x6}, {0x5, 0x1, 0xe, 0x6}, {0x3, 0x2, 0xf, 0xb}, {0x3, 0x3, 0xb, 0xa}, {0x4, 0x4, 0x6, 0x2}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x4, 0xa, 0x5}], 0x10, 0x42}, 0x94) syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0xda8d) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) 40.517924172s ago: executing program 1 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000340)={0x0, "4bb7e0d336cbca0b7cdc3730b28f1a039d16d029766b6d73195069b429d4da3aebe9241a7d1c3c445d8e69664d4405e59878df7920efeab14b9738de9d13096d", 0x3f}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x37, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b7", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 39.866360183s ago: executing program 32 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000340)={0x0, "4bb7e0d336cbca0b7cdc3730b28f1a039d16d029766b6d73195069b429d4da3aebe9241a7d1c3c445d8e69664d4405e59878df7920efeab14b9738de9d13096d", 0x3f}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x37, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b7", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 15.783190551s ago: executing program 0 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "4bb7e0d336cbca0b7cdc3730b28f1a039d16d029766b6d73195069b429d4da3aebe9241a7d1c3c445d8e69664d4405e59878df7920efeab14b9738de9d13096d", 0x3f}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x37, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b7", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 11.346790842s ago: executing program 0 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000340)={0x0, "4bb7e0d336cbca0b7cdc3730b28f1a039d16d029766b6d73195069b429d4da3aebe9241a7d1c3c445d8e69664d4405e59878df7920efeab14b9738de9d13096d", 0x3f}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x37, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b7", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 9.751156192s ago: executing program 0 (id=94): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0xe2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000000500)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, 0x0, r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 8.980402849s ago: executing program 4 (id=97): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) (fail_nth: 2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x20004004) 7.944872s ago: executing program 3 (id=99): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f00000002c0)) 7.797858789s ago: executing program 2 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f000000f900)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x40}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x305000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x24, &(0x7f0000000740)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 6.957355587s ago: executing program 2 (id=102): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 3) 6.927976301s ago: executing program 0 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) prlimit64(r1, 0xe, &(0x7f0000000140)={0xc4f2, 0xb31}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x222000, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000240)={0x17}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 6.798189857s ago: executing program 2 (id=104): r0 = socket$kcm(0x10, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b1b, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) 6.454016485s ago: executing program 0 (id=105): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xfffffffffffffffb, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x6, 0x7, 0xae02, r1, 0x3, '\x00', 0x0, r2, 0x0, 0x0, 0x3, 0x4, @value=r1}, 0x50) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000280)="1f8a4ee498c239942e76feca433dad4012d34a7ac7564c4b9391bb07585a968dc599c96686ac557255d169c03214dbdd5c6bf8f4c5e450efd66ab7b7ddc00e327bde2a2bf48932fdc0835a2d2b774d27ad5ad69f6f8548d414e580cb77a0cae8504a17e632507449c47b4de3a0f45e43b116c3", 0x73, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 5.966992088s ago: executing program 4 (id=106): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xc, "012720dcfe14c639a500ba17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 5.719546263s ago: executing program 5 (id=107): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x4094642f, &(0x7f0000000080)={'pcl816\x00', [0x9, 0x80008000, 0x1, 0xe, 0x0, 0x0, 0x5, 0xf, 0x0, 0x1, 0x101, 0x5, 0x6, 0x4, 0x10000, 0x6, 0x1, 0x8, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x7fd, 0xe2df, 0x9, 0x4e, 0x4, 0x6b, 0x7, 0x5, 0x9]}) 5.667497932s ago: executing program 2 (id=108): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000300001"], 0x44}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e000100000000000010000004"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.581538842s ago: executing program 5 (id=109): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0xe) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = eventfd(0x200003) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,ro=\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x34, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x45}, 0x20004004) 4.607846541s ago: executing program 3 (id=110): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndctrl(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000180)={@initdev, @empty, @remote}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0xd0, 0x24, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0x4, 0xffe0}, {0xfff1, 0x6}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x1, 0x7, 0x8, 0x2, 0x1000, 0x5, 0x8}}, {0x14, 0x2, [0x1ff, 0x5, 0x3, 0x0, 0xa3, 0x1, 0x800, 0x7]}}, {{0x1c, 0x1, {0x9, 0x7, 0xcc2, 0x2f418a36, 0x0, 0xe1, 0xf0ec, 0x7}}, {0x12, 0x2, [0x7, 0x6, 0xc7, 0x6, 0x3, 0x0, 0x6]}}, {{0x1c, 0x1, {0x6, 0x6, 0x5, 0x4, 0x2, 0xf7d2, 0x8, 0x6}}, {0x10, 0x2, [0x8, 0xfffe, 0x6, 0x80, 0x2, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4044}, 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c000000051400012cbd70000000000008000100020000000800030000000000730d96dc037d8d7ca81f972af7d2ebcd8d3ddb01da63ffed3c135089c1ef8d45d6a14d41bc0f53cfbba82a223cf485e807c51c9a9f6d0cdc33c94bbc6d28a05154ce6a2f105d3f106727ac6cda19b8488835c530a96af72ac1bd5ef75552a68a086577eadb4296a8b9d9b6b52a01771540b9fbe2caaf6dcd4dda17dce386b9a5f6dbd2ef6d9d7850471f"], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4040084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000003c0)=0xc7a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 4.60449934s ago: executing program 5 (id=111): r0 = socket(0x11, 0xa, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='ext4_collapse_range\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) mq_open(0x0, 0x42, 0x80, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000300)="da9019d02404e49cf90a0a4363d1", 0xe, 0x8800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 4.069470097s ago: executing program 2 (id=112): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xfffffffffffffffb, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x6, 0x7, 0xae02, r1, 0x3, '\x00', 0x0, r2, 0x0, 0x0, 0x3, 0x4, @value=r1}, 0x50) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000280)="1f8a4ee498c239942e76feca433dad4012d34a7ac7564c4b9391bb07585a968dc599c96686ac557255d169c03214dbdd5c6bf8f4c5e450efd66ab7b7ddc00e327bde2a2bf48932fdc0835a2d2b774d27ad5ad69f6f8548d414e580cb77a0cae8504a17e632507449c47b4de3a0f45e43b116c3", 0x73, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 3.974012764s ago: executing program 5 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r6 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x80ff, 0x0, 0x0, 0x250}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x49, 0x0, 0xc7, 0x3, 0x0, 0x2, 0x0, 0x1, {0x1}}) io_uring_enter(r6, 0x47bc, 0x37e5, 0x42, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0xfc, 0x4}}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) close(r1) 3.91682127s ago: executing program 3 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x37, 0x0, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b7", 0x0, 0xf0}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005940)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0xfff1, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x3}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x404d090}, 0x0) 2.919692566s ago: executing program 3 (id=115): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x8) prlimit64(r1, 0xe, &(0x7f0000000140)={0xc4f2, 0xb31}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x222000, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000240)={0x17}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2.29880674s ago: executing program 3 (id=116): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0xe2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000000500)='./file1\x00', 0xc000, 0x0) chdir(0x0) linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 2.236854812s ago: executing program 5 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x6, 0x2}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newchain={0x23, 0x64, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0xf}, {0xfff2, 0x9}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x44851}, 0x20040054) 2.091532232s ago: executing program 0 (id=118): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000019880)=""/102380, 0x18feb}, {0x0, 0x1d}, {&(0x7f0000000e40)=""/190}, {&(0x7f0000000f00)=""/244}, {&(0x7f0000001000)=""/219}, {&(0x7f0000001100)=""/217}, {&(0x7f0000001380)=""/224}], 0x2, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000700)={0x0, 0x0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) epoll_create1(0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r6}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x0, r6}) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x1a1502) syz_usb_connect$cdc_ecm(0x3, 0x85, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x1, 0x1, 0x4, 0x60, 0xad, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "b1b30f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x10, 0x6, 0xff}, [@mbim={0xc, 0x24, 0x1b, 0x9, 0x3, 0x6, 0x6, 0x0, 0x3b}, @mdlm_detail={0x11, 0x24, 0x13, 0x6, "e70a10f050df307209d0f8849d"}, @mbim={0xc, 0x24, 0x1b, 0x10, 0x3, 0x80, 0xc6, 0x1, 0x8}, @mbim={0xc, 0x24, 0x1b, 0xfffa, 0x3, 0xfd, 0x8, 0xd5b0, 0xfa}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xa, 0x7, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x7, 0x10}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x2, 0x7f, 0x7, 0x40, 0xa}, 0x143, &(0x7f0000000280)={0x5, 0xf, 0x143, 0x6, [@ptm_cap={0x3}, @generic={0x6c, 0x10, 0x1, "439b2e00f0e0482f3e94f46373025a24dc0ccdbf0e4a8957dc625354ef3c51f9b08cdc2ce0a966f580da8d88914c81a5a3bae4eb2099015813ae23b9d095abcbf4a23d5b58f3d0a748e6a26ec538792af5f64d7c2655236837cd113793fe36068892eb72a900ec95b9"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "ad0f77bfeff49ef0958d5cf260837af0"}, @generic={0xa6, 0x10, 0xa, "df516a7291818e331d142f721e2a1aada314ce6dbf87233aede677fce174dd6baaff4e0f9073b7893056ee902eeb44a5d82addf355db5e7742649d84e8dd53c075e84b8f8d90e4834d5b16930f4eb6f42e8582253740249cba651febc4aa846b35abbb30ddc9fd24eca3bfe54c40e67db996d9627fd48680d2a97166ea343e753f4b0ffc8c17b26e02f95f0129e49b2e2d8fac8f9e3c99dc2adf47bd1cefb271244260"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc, 0xb, 0x7, 0xf94}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x5, 0x9}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x500a}}, {0xa1, &(0x7f0000000480)=@string={0xa1, 0x3, "c87596bfeaf018701a844f4dc3ab53e47344834a3e8fdeddfd1513fd0ee5188d4f47f259293a0afe824541778f80a7d711ba540c6a694058ec0bd14b0aec1ca07ef2a112bed8e0a7d6b4f256e103f6bad8726a4b4cd7c86b472f8d5e718aebd05a12ca6496d64ebfa253dd56933ee0dc3bc9cb958167b66a0e35b8263953d2f8577cb61edee80ee92711d3c830689f209f38c29ff512cbb2af2841131b54f3"}}, {0x70, &(0x7f0000000540)=@string={0x70, 0x3, "0174b3cc140c4dc7d4de3548b3d805d125838852dbaf865eeccba82d7c51d8238fe74db66d1d1b6980bc1c2a4ed951df32c0dc3ca9d7df041c82e5731f977c6095ed913e8efa4af4cc44bab640b64a14a260c5fc85b2fa69d256e89447d290d7131a38437a2419e8fe07fb7b9be9"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x810}}]}) ioctl$EVIOCRMFF(r7, 0x83c0550b, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x42, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0xc]}}}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 1.874070989s ago: executing program 4 (id=119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r5, 0x0, 0x100000000000000}, 0x38) io_setup(0xd6, &(0x7f0000000200)) (async) io_setup(0xd6, &(0x7f0000000200)=0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x2020}]) (async) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="01", 0x2020}]) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x8001, 0x10) pwrite64(r10, &(0x7f0000000140)='2', 0x1, 0x0) 1.785952222s ago: executing program 5 (id=120): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0xfffff262, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x4, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xffffffff, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x4, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000008, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x10001, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x1, 0xdd67, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x3, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdf, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0x100, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xc504, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x80000000, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x2, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x0, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x4, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x6, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x3ffffff, 0x8003, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x400005, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x0, 0x4, 0x4004, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0x9, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400150018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x3, 0x3e3}, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_create(0x10001) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 1.229054412s ago: executing program 4 (id=121): fspick(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_open_procfs(0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=default:']) 160.20535ms ago: executing program 2 (id=122): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fcfff1ff00000000de83bc8e85000000ce360000f384000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x400) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x1ff, 0x10}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = memfd_secret(0x80000) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x83}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @exit, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x7fff, 0x5a, &(0x7f0000000200)=""/90, 0x41000, 0x12, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[r2, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000580)=[{0x0, 0x2, 0x8, 0x3}, {0x1, 0x5, 0x2, 0x6}, {0x5, 0x1, 0xe, 0x6}, {0x3, 0x2, 0xf, 0xb}, {0x3, 0x3, 0xb, 0xa}, {0x4, 0x4, 0x6, 0x2}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x4, 0xa, 0x5}], 0x10, 0x42}, 0x94) syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0xda8d) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) 50.399178ms ago: executing program 4 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) (fail_nth: 4) 0s ago: executing program 3 (id=124): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001dc00)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0x2, 0x80805, 0x0) dup(0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000be80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.27' (ED25519) to the list of known hosts. [ 60.605426][ T30] audit: type=1400 audit(1760094081.616:62): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.628989][ T30] audit: type=1400 audit(1760094081.636:63): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.631371][ T5798] cgroup: Unknown subsys name 'net' [ 60.657594][ T30] audit: type=1400 audit(1760094081.666:64): avc: denied { unmount } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.803299][ T5798] cgroup: Unknown subsys name 'cpuset' [ 60.811364][ T5798] cgroup: Unknown subsys name 'rlimit' [ 60.946682][ T30] audit: type=1400 audit(1760094081.956:65): avc: denied { setattr } for pid=5798 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.978178][ T30] audit: type=1400 audit(1760094081.956:66): avc: denied { create } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.000856][ T30] audit: type=1400 audit(1760094081.956:67): avc: denied { write } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.022200][ T30] audit: type=1400 audit(1760094081.956:68): avc: denied { read } for pid=5798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.042512][ T30] audit: type=1400 audit(1760094081.966:69): avc: denied { mounton } for pid=5798 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.067326][ T30] audit: type=1400 audit(1760094081.966:70): avc: denied { mount } for pid=5798 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 61.090745][ T30] audit: type=1400 audit(1760094082.006:71): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 61.093661][ T5800] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 62.069871][ T5798] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.134013][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.151148][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.158673][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.166633][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.174233][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.287705][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.325020][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.333024][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.342084][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.356035][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.371882][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.391151][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.397596][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.404968][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.405787][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.412832][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.419920][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.427524][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.441425][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.441989][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.448550][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.456932][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.470606][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.471121][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.494450][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.600507][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 64.781558][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.788730][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.796448][ T5808] bridge_slave_0: entered allmulticast mode [ 64.803346][ T5808] bridge_slave_0: entered promiscuous mode [ 64.824264][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.831510][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.838623][ T5808] bridge_slave_1: entered allmulticast mode [ 64.845680][ T5808] bridge_slave_1: entered promiscuous mode [ 64.965013][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.013708][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.086734][ T5808] team0: Port device team_slave_0 added [ 65.094502][ T5808] team0: Port device team_slave_1 added [ 65.100488][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 65.109995][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 65.152694][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 65.206850][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.213971][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.240031][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.252002][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 65.279381][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.286369][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.312337][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.408952][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.416168][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.423622][ T5821] bridge_slave_0: entered allmulticast mode [ 65.430256][ T5821] bridge_slave_0: entered promiscuous mode [ 65.454582][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.461735][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.468809][ T5813] bridge_slave_0: entered allmulticast mode [ 65.475538][ T5813] bridge_slave_0: entered promiscuous mode [ 65.482756][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.489852][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.497056][ T5821] bridge_slave_1: entered allmulticast mode [ 65.504166][ T5821] bridge_slave_1: entered promiscuous mode [ 65.519946][ T5808] hsr_slave_0: entered promiscuous mode [ 65.526107][ T5808] hsr_slave_1: entered promiscuous mode [ 65.535645][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.542743][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.549809][ T5813] bridge_slave_1: entered allmulticast mode [ 65.556701][ T5813] bridge_slave_1: entered promiscuous mode [ 65.580288][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.587392][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.595011][ T5814] bridge_slave_0: entered allmulticast mode [ 65.601694][ T5814] bridge_slave_0: entered promiscuous mode [ 65.608890][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.616227][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.623385][ T5814] bridge_slave_1: entered allmulticast mode [ 65.629965][ T5814] bridge_slave_1: entered promiscuous mode [ 65.690568][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.697727][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.705111][ T5818] bridge_slave_0: entered allmulticast mode [ 65.712317][ T5818] bridge_slave_0: entered promiscuous mode [ 65.719672][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.726806][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.733927][ T5818] bridge_slave_1: entered allmulticast mode [ 65.740547][ T5818] bridge_slave_1: entered promiscuous mode [ 65.748726][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.759664][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.775185][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.786110][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.804390][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.835717][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.878727][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.889180][ T5813] team0: Port device team_slave_0 added [ 65.896554][ T5821] team0: Port device team_slave_0 added [ 65.915377][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.925692][ T5813] team0: Port device team_slave_1 added [ 65.932695][ T5821] team0: Port device team_slave_1 added [ 65.952238][ T5814] team0: Port device team_slave_0 added [ 65.984566][ T5814] team0: Port device team_slave_1 added [ 66.014559][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.021626][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.048699][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.071875][ T5818] team0: Port device team_slave_0 added [ 66.078205][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.085301][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.111221][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.122672][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.129603][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.155628][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.166917][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.174535][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.200809][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.211558][ T5824] Bluetooth: hci0: command tx timeout [ 66.221123][ T5818] team0: Port device team_slave_1 added [ 66.227228][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.234319][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.260281][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.271630][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.278551][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.304862][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.350090][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.357099][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.383494][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.395602][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.402569][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.428549][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.501699][ T5821] hsr_slave_0: entered promiscuous mode [ 66.507862][ T5821] hsr_slave_1: entered promiscuous mode [ 66.514275][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 66.520022][ T5821] Cannot create hsr debugfs directory [ 66.530867][ T5824] Bluetooth: hci4: command tx timeout [ 66.530932][ T5136] Bluetooth: hci2: command tx timeout [ 66.536363][ T5824] Bluetooth: hci3: command tx timeout [ 66.544302][ T5820] Bluetooth: hci1: command tx timeout [ 66.556369][ T5813] hsr_slave_0: entered promiscuous mode [ 66.562425][ T5813] hsr_slave_1: entered promiscuous mode [ 66.568260][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 66.574064][ T5813] Cannot create hsr debugfs directory [ 66.603572][ T5814] hsr_slave_0: entered promiscuous mode [ 66.609685][ T5814] hsr_slave_1: entered promiscuous mode [ 66.615854][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 66.621582][ T5814] Cannot create hsr debugfs directory [ 66.673978][ T5818] hsr_slave_0: entered promiscuous mode [ 66.680016][ T5818] hsr_slave_1: entered promiscuous mode [ 66.686620][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 66.692556][ T5818] Cannot create hsr debugfs directory [ 66.783486][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.798493][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.825391][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.847913][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.029988][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.045711][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.065403][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.074973][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.124674][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.134921][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.144287][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.155305][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.211723][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.240544][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.249919][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.269627][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.277315][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.288307][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.325348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.332523][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.342613][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.349688][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.450333][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.459696][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.469770][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.482367][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.503000][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.532632][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.543071][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 67.543084][ T30] audit: type=1400 audit(1760094088.556:86): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.608373][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.623611][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.657451][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.664601][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.695512][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.702588][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.742518][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.755233][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.769136][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.776259][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.796630][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.808882][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.815992][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.872115][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.925752][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.932899][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.944556][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.951712][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.974543][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.993317][ T5808] veth0_vlan: entered promiscuous mode [ 68.035830][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.049692][ T5808] veth1_vlan: entered promiscuous mode [ 68.120460][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.170746][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.177901][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.195175][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.202322][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.232345][ T5808] veth0_macvtap: entered promiscuous mode [ 68.243932][ T5808] veth1_macvtap: entered promiscuous mode [ 68.291873][ T5820] Bluetooth: hci0: command tx timeout [ 68.305445][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.322007][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.343573][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.397636][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.417888][ T5814] veth0_vlan: entered promiscuous mode [ 68.427632][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.465429][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.474174][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.483505][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.494572][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.541452][ T5814] veth1_vlan: entered promiscuous mode [ 68.612239][ T5820] Bluetooth: hci3: command tx timeout [ 68.612410][ T5821] veth0_vlan: entered promiscuous mode [ 68.617643][ T5820] Bluetooth: hci1: command tx timeout [ 68.623665][ T5824] Bluetooth: hci2: command tx timeout [ 68.628535][ T5820] Bluetooth: hci4: command tx timeout [ 68.640212][ T5821] veth1_vlan: entered promiscuous mode [ 68.648471][ T5813] veth0_vlan: entered promiscuous mode [ 68.665380][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.672978][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.687852][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.725629][ T5814] veth0_macvtap: entered promiscuous mode [ 68.734644][ T5813] veth1_vlan: entered promiscuous mode [ 68.758723][ T5814] veth1_macvtap: entered promiscuous mode [ 68.782686][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.790526][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.819486][ T5821] veth0_macvtap: entered promiscuous mode [ 68.838756][ T5821] veth1_macvtap: entered promiscuous mode [ 68.857433][ T30] audit: type=1400 audit(1760094089.866:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.BzozeD/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.879981][ T5813] veth0_macvtap: entered promiscuous mode [ 68.890342][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.908878][ T30] audit: type=1400 audit(1760094089.896:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.922367][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.942038][ T30] audit: type=1400 audit(1760094089.896:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.BzozeD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.977461][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.980368][ T5813] veth1_macvtap: entered promiscuous mode [ 68.998473][ T30] audit: type=1400 audit(1760094089.896:90): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.018368][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.031241][ T30] audit: type=1400 audit(1760094089.896:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.BzozeD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.045033][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.065290][ T30] audit: type=1400 audit(1760094089.896:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.BzozeD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.094131][ T30] audit: type=1400 audit(1760094089.916:93): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.116992][ T30] audit: type=1400 audit(1760094089.946:94): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.141815][ T30] audit: type=1400 audit(1760094089.946:95): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="gadgetfs" ino=8232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 69.208157][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.217150][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.245346][ T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.257103][ T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.273595][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.288603][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.316106][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.326012][ T5928] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 69.326220][ T5818] veth0_vlan: entered promiscuous mode [ 69.358202][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.388271][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.400409][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.424427][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.433624][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.442885][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.451763][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.453083][ T5818] veth1_vlan: entered promiscuous mode [ 69.475681][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.486843][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504596][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.515904][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.555876][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.564272][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.597244][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.602704][ T5818] veth0_macvtap: entered promiscuous mode [ 69.611392][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.612747][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.700165][ T5818] veth1_macvtap: entered promiscuous mode [ 69.754453][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.770821][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.780980][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 69.798157][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 69.822012][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.863308][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.874041][ T5866] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 69.874594][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.885970][ T5866] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 69.901474][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.915281][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.931250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.932848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.949879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 69.961103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.969557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.012542][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.058133][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.070364][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.085433][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.094337][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.120892][ T5866] usb 1-1: Product: syz [ 70.125142][ T5866] usb 1-1: Manufacturer: syz [ 70.129708][ T5866] usb 1-1: SerialNumber: syz [ 70.190363][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.363470][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.373735][ T5820] Bluetooth: hci0: command tx timeout [ 70.387783][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.441880][ T5946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.446960][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.464555][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.535023][ T5866] cdc_ncm 1-1:1.0: bind() failure [ 70.561294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.570799][ T5866] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 70.610241][ T5866] cdc_ncm 1-1:1.1: bind() failure [ 70.679450][ T5866] usb 1-1: USB disconnect, device number 2 [ 70.692415][ T5820] Bluetooth: hci2: command tx timeout [ 70.697852][ T52] Bluetooth: hci1: command tx timeout [ 70.697909][ T5824] Bluetooth: hci3: command tx timeout [ 70.703777][ T52] Bluetooth: hci4: command tx timeout [ 70.939155][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.948663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.071161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.387763][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8'. [ 71.480949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.628906][ T5962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 71.731375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.785727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.310858][ T5976] ======================================================= [ 72.310858][ T5976] WARNING: The mand mount option has been deprecated and [ 72.310858][ T5976] and is ignored by this kernel. Remove the mand [ 72.310858][ T5976] option from the mount to silence this warning. [ 72.310858][ T5976] ======================================================= [ 72.451763][ T5976] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 72.467698][ T52] Bluetooth: hci0: command tx timeout [ 72.473210][ T5976] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 72.540948][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.581105][ T5920] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.677888][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 72.677898][ T30] audit: type=1400 audit(1760094093.686:132): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.691614][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 72.722627][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.762727][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.773694][ T52] Bluetooth: hci3: command tx timeout [ 72.773729][ T52] Bluetooth: hci1: command tx timeout [ 72.785198][ T5866] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 72.785894][ T5820] Bluetooth: hci4: command tx timeout [ 72.800659][ T5820] Bluetooth: hci2: command tx timeout [ 72.810856][ T934] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.821326][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 72.839221][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 72.857694][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.878962][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.890001][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.890379][ T5866] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 72.900774][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.928477][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.929253][ T30] audit: type=1400 audit(1760094093.936:133): avc: denied { create } for pid=5980 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 72.937881][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.972756][ T934] usb 4-1: Using ep0 maxpacket: 8 [ 73.002573][ T5866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.013356][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.024261][ T5866] usb 1-1: Product: syz [ 73.028438][ T5866] usb 1-1: Manufacturer: syz [ 73.033096][ T934] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 73.033136][ T934] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.051152][ T5866] usb 1-1: SerialNumber: syz [ 73.075858][ T934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.118825][ T934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.144945][ T3456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.290851][ T30] audit: type=1326 audit(1760094094.276:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5980 comm="syz.2.16" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37c198eec9 code=0x0 [ 73.316413][ T934] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.372079][ T934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.385853][ T5920] usb 5-1: usb_control_msg returned -32 [ 73.391518][ T5866] cdc_ncm 1-1:1.0: bind() failure [ 73.395195][ T5866] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 73.406275][ T934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.415085][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 73.419490][ T30] audit: type=1400 audit(1760094094.356:135): avc: denied { create } for pid=5980 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.441031][ T5866] cdc_ncm 1-1:1.1: bind() failure [ 73.495531][ T5866] usb 1-1: USB disconnect, device number 3 [ 73.561553][ T30] audit: type=1400 audit(1760094094.356:136): avc: denied { setopt } for pid=5980 comm="syz.2.16" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.607610][ T30] audit: type=1400 audit(1760094094.356:137): avc: denied { map_create } for pid=5980 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.647349][ T3456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.676180][ T30] audit: type=1400 audit(1760094094.366:138): avc: denied { connect } for pid=5980 comm="syz.2.16" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.727040][ T30] audit: type=1400 audit(1760094094.366:139): avc: denied { write } for pid=5980 comm="syz.2.16" laddr=fe80::78b6:e5ff:fe2b:d7d9 lport=60 faddr=ff02::1 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.807342][ T3456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.887896][ T3456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.984602][ T30] audit: type=1400 audit(1760094094.996:140): avc: denied { append } for pid=5987 comm="syz.2.19" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.031055][ T30] audit: type=1400 audit(1760094094.996:141): avc: denied { open } for pid=5987 comm="syz.2.19" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.094682][ T5965] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_OUT returned 9 [ 74.175462][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.187385][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.197064][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.236320][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.246570][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.273611][ T5996] FAULT_INJECTION: forcing a failure. [ 74.273611][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.292559][ T3456] bridge_slave_1: left allmulticast mode [ 74.332743][ T3456] bridge_slave_1: left promiscuous mode [ 74.340583][ T5996] CPU: 0 UID: 0 PID: 5996 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 74.340604][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.340613][ T5996] Call Trace: [ 74.340619][ T5996] [ 74.340625][ T5996] dump_stack_lvl+0x16c/0x1f0 [ 74.340654][ T5996] should_fail_ex+0x512/0x640 [ 74.340683][ T5996] _copy_to_user+0x32/0xd0 [ 74.340700][ T5996] simple_read_from_buffer+0xcb/0x170 [ 74.340728][ T5996] proc_fail_nth_read+0x197/0x240 [ 74.340747][ T5996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.340772][ T5996] ? rw_verify_area+0xcf/0x6c0 [ 74.340796][ T5996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.340814][ T5996] vfs_read+0x1e4/0xcf0 [ 74.340831][ T5996] ? __pfx___mutex_lock+0x10/0x10 [ 74.340848][ T5996] ? __pfx_vfs_read+0x10/0x10 [ 74.340879][ T5996] ? __fget_files+0x20e/0x3c0 [ 74.340900][ T5996] ksys_read+0x12a/0x250 [ 74.340909][ T5996] ? __pfx_ksys_read+0x10/0x10 [ 74.340923][ T5996] do_syscall_64+0xcd/0xfa0 [ 74.340941][ T5996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.340952][ T5996] RIP: 0033:0x7f368198d8dc [ 74.340961][ T5996] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.340971][ T5996] RSP: 002b:00007f36828c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.340981][ T5996] RAX: ffffffffffffffda RBX: 00007f3681be5fa0 RCX: 00007f368198d8dc [ 74.340988][ T5996] RDX: 000000000000000f RSI: 00007f36828c10a0 RDI: 0000000000000004 [ 74.340994][ T5996] RBP: 00007f36828c1090 R08: 0000000000000000 R09: 0000000000000000 [ 74.341000][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.341006][ T5996] R13: 00007f3681be6038 R14: 00007f3681be5fa0 R15: 00007ffe400b8e78 [ 74.341020][ T5996] [ 74.403033][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.542774][ T3456] bridge_slave_0: left allmulticast mode [ 74.571401][ T3456] bridge_slave_0: left promiscuous mode [ 74.582906][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.769005][ T6000] FAULT_INJECTION: forcing a failure. [ 74.769005][ T6000] name failslab, interval 1, probability 0, space 0, times 0 [ 74.790128][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 74.790152][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.790162][ T6000] Call Trace: [ 74.790168][ T6000] [ 74.790175][ T6000] dump_stack_lvl+0x16c/0x1f0 [ 74.790207][ T6000] should_fail_ex+0x512/0x640 [ 74.790234][ T6000] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 74.790264][ T6000] should_failslab+0xc2/0x120 [ 74.790283][ T6000] kmem_cache_alloc_node_noprof+0x78/0x770 [ 74.790308][ T6000] ? __alloc_skb+0x2b2/0x380 [ 74.790337][ T6000] ? __alloc_skb+0x2b2/0x380 [ 74.790357][ T6000] ? __pfx_netlink_insert+0x10/0x10 [ 74.790382][ T6000] __alloc_skb+0x2b2/0x380 [ 74.790405][ T6000] ? __pfx___alloc_skb+0x10/0x10 [ 74.790429][ T6000] ? netlink_autobind.isra.0+0x158/0x370 [ 74.790462][ T6000] netlink_alloc_large_skb+0x69/0x140 [ 74.790480][ T6000] netlink_sendmsg+0x698/0xdd0 [ 74.790500][ T6000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.790525][ T6000] ____sys_sendmsg+0xa95/0xc70 [ 74.790546][ T6000] ? copy_msghdr_from_user+0x10a/0x160 [ 74.790571][ T6000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.790601][ T6000] ___sys_sendmsg+0x134/0x1d0 [ 74.790627][ T6000] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.790682][ T6000] __sys_sendmsg+0x16d/0x220 [ 74.790707][ T6000] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.790743][ T6000] do_syscall_64+0xcd/0xfa0 [ 74.790770][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.790788][ T6000] RIP: 0033:0x7f368198eec9 [ 74.790802][ T6000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.790816][ T6000] RSP: 002b:00007f36828a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.790826][ T6000] RAX: ffffffffffffffda RBX: 00007f3681be6090 RCX: 00007f368198eec9 [ 74.790833][ T6000] RDX: 0000000020040814 RSI: 0000200000000180 RDI: 0000000000000006 [ 74.790839][ T6000] RBP: 00007f36828a0090 R08: 0000000000000000 R09: 0000000000000000 [ 74.790845][ T6000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.790851][ T6000] R13: 00007f3681be6128 R14: 00007f3681be6090 R15: 00007ffe400b8e78 [ 74.790865][ T6000] [ 75.166702][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.184405][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.196371][ T3456] bond0 (unregistering): Released all slaves [ 75.333645][ T5874] usb 5-1: USB disconnect, device number 2 [ 75.459681][ T5987] ALSA: mixer_oss: invalid OSS volume '' [ 75.542371][ T5874] usb 4-1: USB disconnect, device number 2 [ 76.294094][ T5820] Bluetooth: hci4: command tx timeout [ 76.900878][ T3456] hsr_slave_0: left promiscuous mode [ 76.921085][ T3456] hsr_slave_1: left promiscuous mode [ 76.937738][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.959509][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.031650][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.061497][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.203638][ T3456] veth1_macvtap: left promiscuous mode [ 78.209254][ T3456] veth0_macvtap: left promiscuous mode [ 78.229889][ T3456] veth1_vlan: left promiscuous mode [ 78.238874][ T3456] veth0_vlan: left promiscuous mode [ 78.265884][ T6035] FAULT_INJECTION: forcing a failure. [ 78.265884][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 78.315562][ T6035] CPU: 0 UID: 0 PID: 6035 Comm: syz.2.26 Not tainted syzkaller #0 PREEMPT(full) [ 78.315587][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.315596][ T6035] Call Trace: [ 78.315601][ T6035] [ 78.315607][ T6035] dump_stack_lvl+0x16c/0x1f0 [ 78.315638][ T6035] should_fail_ex+0x512/0x640 [ 78.315663][ T6035] ? fs_reclaim_acquire+0xae/0x150 [ 78.315684][ T6035] should_failslab+0xc2/0x120 [ 78.315704][ T6035] __kmalloc_noprof+0xdd/0x880 [ 78.315728][ T6035] ? tomoyo_encode2+0x100/0x3e0 [ 78.315749][ T6035] ? tomoyo_encode2+0x100/0x3e0 [ 78.315765][ T6035] tomoyo_encode2+0x100/0x3e0 [ 78.315785][ T6035] tomoyo_encode+0x29/0x50 [ 78.315802][ T6035] tomoyo_realpath_from_path+0x18f/0x6e0 [ 78.315828][ T6035] tomoyo_path_number_perm+0x245/0x580 [ 78.315852][ T6035] ? tomoyo_path_number_perm+0x237/0x580 [ 78.315878][ T6035] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 78.315904][ T6035] ? find_held_lock+0x2b/0x80 [ 78.315949][ T6035] ? find_held_lock+0x2b/0x80 [ 78.315968][ T6035] ? hook_file_ioctl_common+0x145/0x410 [ 78.315993][ T6035] ? __fget_files+0x20e/0x3c0 [ 78.316014][ T6035] security_file_ioctl+0x9b/0x240 [ 78.316034][ T6035] __x64_sys_ioctl+0xb7/0x210 [ 78.316059][ T6035] do_syscall_64+0xcd/0xfa0 [ 78.316085][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.316103][ T6035] RIP: 0033:0x7f37c198eec9 [ 78.316116][ T6035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.316132][ T6035] RSP: 002b:00007f37c286d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.316149][ T6035] RAX: ffffffffffffffda RBX: 00007f37c1be5fa0 RCX: 00007f37c198eec9 [ 78.316165][ T6035] RDX: 0000200000000040 RSI: 0000000040204706 RDI: 0000000000000004 [ 78.316176][ T6035] RBP: 00007f37c286d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.316185][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.316194][ T6035] R13: 00007f37c1be6038 R14: 00007f37c1be5fa0 R15: 00007fffebdfe128 [ 78.316219][ T6035] [ 78.316236][ T6035] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.442079][ T5820] Bluetooth: hci4: command tx timeout [ 78.740277][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 78.740292][ T30] audit: type=1400 audit(1760094099.746:182): avc: denied { unlink } for pid=6036 comm="syz.4.27" name="#1" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.768208][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.780692][ T30] audit: type=1400 audit(1760094099.756:183): avc: denied { mount } for pid=6036 comm="syz.4.27" name="/" dev="overlay" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.239212][ T6045] netlink: 'syz.2.29': attribute type 72 has an invalid length. [ 79.247136][ T6045] netlink: 'syz.2.29': attribute type 8 has an invalid length. [ 79.445636][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 79.456006][ T6047] netlink: 5 bytes leftover after parsing attributes in process `syz.3.30'. [ 79.617336][ T30] audit: type=1400 audit(1760094100.626:184): avc: denied { create } for pid=6048 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.706406][ T30] audit: type=1400 audit(1760094100.706:185): avc: denied { setopt } for pid=6048 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.825648][ T30] audit: type=1400 audit(1760094100.716:186): avc: denied { write } for pid=6048 comm="syz.2.31" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 79.848512][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.459445][ T30] audit: type=1400 audit(1760094100.956:187): avc: denied { read write } for pid=6048 comm="syz.2.31" dev="sockfs" ino=7927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.511240][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 80.540897][ T934] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.610989][ T5820] Bluetooth: hci4: command tx timeout [ 80.910923][ T934] usb 5-1: Using ep0 maxpacket: 8 [ 81.078631][ T934] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.087281][ T934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.097343][ T934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.117776][ T934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.127904][ T934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.128477][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 81.141080][ T934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.158030][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.200131][ T9] cfg80211: failed to load regulatory.db [ 81.369846][ T6058] ALSA: mixer_oss: invalid OSS volume '' [ 82.114647][ T934] libceph: connect (1)[c::]:6789 error -101 [ 82.151581][ T934] libceph: mon0 (1)[c::]:6789 connect error [ 82.343485][ T5991] chnl_net:caif_netlink_parms(): no params data found [ 82.481184][ T6067] ceph: No mds server is up or the cluster is laggy [ 82.493659][ T934] libceph: connect (1)[c::]:6789 error -101 [ 82.516931][ T934] libceph: mon0 (1)[c::]:6789 connect error [ 82.940885][ T30] audit: type=1400 audit(1760094103.586:188): avc: denied { bind } for pid=6078 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 82.965336][ T5820] Bluetooth: hci4: command tx timeout [ 83.001015][ T30] audit: type=1400 audit(1760094103.596:189): avc: denied { setopt } for pid=6078 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.024145][ T30] audit: type=1400 audit(1760094103.596:190): avc: denied { accept } for pid=6078 comm="syz.2.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 83.260919][ T30] audit: type=1400 audit(1760094104.186:191): avc: denied { read } for pid=6081 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.287388][ T24] usb 5-1: USB disconnect, device number 3 [ 83.775829][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 83.775849][ T30] audit: type=1400 audit(1760094104.776:196): avc: denied { read write } for pid=6093 comm="syz.4.38" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 83.826844][ T30] audit: type=1400 audit(1760094104.776:197): avc: denied { open } for pid=6093 comm="syz.4.38" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.073527][ T30] audit: type=1400 audit(1760094104.866:198): avc: denied { write } for pid=6089 comm="syz.2.37" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.126846][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 84.163125][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.184263][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.200937][ T5991] bridge_slave_0: entered allmulticast mode [ 84.210031][ T5991] bridge_slave_0: entered promiscuous mode [ 84.225676][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.243825][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.257459][ T5991] bridge_slave_1: entered allmulticast mode [ 84.266782][ T5991] bridge_slave_1: entered promiscuous mode [ 84.490321][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.508392][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.792904][ T5991] team0: Port device team_slave_0 added [ 84.840615][ T5991] team0: Port device team_slave_1 added [ 84.962374][ T30] audit: type=1400 audit(1760094105.976:199): avc: denied { create } for pid=6117 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.980888][ T977] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.072349][ T6120] FAULT_INJECTION: forcing a failure. [ 85.072349][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 85.085446][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(full) [ 85.085469][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.085478][ T6120] Call Trace: [ 85.085485][ T6120] [ 85.085491][ T6120] dump_stack_lvl+0x16c/0x1f0 [ 85.085523][ T6120] should_fail_ex+0x512/0x640 [ 85.085549][ T6120] ? fs_reclaim_acquire+0xae/0x150 [ 85.085570][ T6120] should_failslab+0xc2/0x120 [ 85.085590][ T6120] __kmalloc_noprof+0xdd/0x880 [ 85.085614][ T6120] ? tomoyo_encode2+0x100/0x3e0 [ 85.085636][ T6120] ? tomoyo_encode2+0x100/0x3e0 [ 85.085652][ T6120] tomoyo_encode2+0x100/0x3e0 [ 85.085673][ T6120] tomoyo_encode+0x29/0x50 [ 85.085690][ T6120] tomoyo_realpath_from_path+0x18f/0x6e0 [ 85.085710][ T6120] ? tomoyo_profile+0x47/0x60 [ 85.085732][ T6120] tomoyo_path_number_perm+0x245/0x580 [ 85.085755][ T6120] ? tomoyo_path_number_perm+0x237/0x580 [ 85.085780][ T6120] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.085829][ T6120] ? find_held_lock+0x2b/0x80 [ 85.085850][ T6120] ? hook_file_ioctl_common+0x145/0x410 [ 85.085882][ T6120] ? __fget_files+0x20e/0x3c0 [ 85.085903][ T6120] security_file_ioctl+0x9b/0x240 [ 85.085923][ T6120] __x64_sys_ioctl+0xb7/0x210 [ 85.085948][ T6120] do_syscall_64+0xcd/0xfa0 [ 85.085975][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.085992][ T6120] RIP: 0033:0x7f37c198eec9 [ 85.086006][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.086022][ T6120] RSP: 002b:00007f37c284c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.086039][ T6120] RAX: ffffffffffffffda RBX: 00007f37c1be6090 RCX: 00007f37c198eec9 [ 85.086051][ T6120] RDX: 0000200000000040 RSI: 00000000c028aa03 RDI: 0000000000000008 [ 85.086061][ T6120] RBP: 00007f37c284c090 R08: 0000000000000000 R09: 0000000000000000 [ 85.086071][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.086081][ T6120] R13: 00007f37c1be6128 R14: 00007f37c1be6090 R15: 00007fffebdfe128 [ 85.086104][ T6120] [ 85.086482][ T6120] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.106112][ T30] audit: type=1400 audit(1760094106.066:200): avc: denied { create } for pid=6117 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.556443][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.591283][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.700822][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 85.709243][ T977] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 85.722707][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.728743][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.757105][ T977] usb 1-1: Product: syz [ 85.761781][ T977] usb 1-1: Manufacturer: syz [ 85.766385][ T977] usb 1-1: SerialNumber: syz [ 85.945313][ T30] audit: type=1400 audit(1760094106.956:201): avc: denied { ioctl } for pid=6123 comm="syz.4.43" path="socket:[8028]" dev="sockfs" ino=8028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.104390][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.112341][ T977] usb 1-1: config 0 descriptor?? [ 86.130277][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.162199][ T977] gspca_main: se401-2.14.0 probing 047d:5003 [ 86.237544][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.329810][ T30] audit: type=1400 audit(1760094107.336:202): avc: denied { create } for pid=6127 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.354221][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 86.397291][ T30] audit: type=1400 audit(1760094107.336:203): avc: denied { write } for pid=6127 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.431333][ T6133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.44'. [ 86.449347][ T5991] hsr_slave_0: entered promiscuous mode [ 86.455116][ T6133] netlink: 43 bytes leftover after parsing attributes in process `syz.2.44'. [ 86.464151][ T30] audit: type=1400 audit(1760094107.436:204): avc: denied { ioctl } for pid=6127 comm="syz.2.44" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.491567][ T5991] hsr_slave_1: entered promiscuous mode [ 86.495931][ T6134] FAULT_INJECTION: forcing a failure. [ 86.495931][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 86.497431][ T6133] netlink: 'syz.2.44': attribute type 6 has an invalid length. [ 86.519083][ T5991] debugfs: 'hsr0' already exists in 'hsr' [ 86.525164][ T5991] Cannot create hsr debugfs directory [ 86.529732][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 86.529752][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 86.529760][ T6134] Call Trace: [ 86.529765][ T6134] [ 86.529771][ T6134] dump_stack_lvl+0x16c/0x1f0 [ 86.529800][ T6134] should_fail_ex+0x512/0x640 [ 86.529825][ T6134] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 86.529851][ T6134] should_failslab+0xc2/0x120 [ 86.529868][ T6134] kmem_cache_alloc_node_noprof+0x78/0x770 [ 86.529890][ T6134] ? __alloc_skb+0x2b2/0x380 [ 86.529916][ T6134] ? __alloc_skb+0x2b2/0x380 [ 86.529934][ T6134] ? __pfx_netlink_insert+0x10/0x10 [ 86.529955][ T6134] __alloc_skb+0x2b2/0x380 [ 86.529976][ T6134] ? __pfx___alloc_skb+0x10/0x10 [ 86.529996][ T6134] ? netlink_autobind.isra.0+0x158/0x370 [ 86.530025][ T6134] netlink_alloc_large_skb+0x69/0x140 [ 86.530041][ T6134] netlink_sendmsg+0x698/0xdd0 [ 86.530059][ T6134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.530082][ T6134] ____sys_sendmsg+0xa95/0xc70 [ 86.530100][ T6134] ? copy_msghdr_from_user+0x10a/0x160 [ 86.530121][ T6134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.530154][ T6134] ___sys_sendmsg+0x134/0x1d0 [ 86.530178][ T6134] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.530233][ T6134] __sys_sendmsg+0x16d/0x220 [ 86.530256][ T6134] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.530295][ T6134] do_syscall_64+0xcd/0xfa0 [ 86.530320][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.530335][ T6134] RIP: 0033:0x7f1f5898eec9 [ 86.530347][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.530361][ T6134] RSP: 002b:00007f1f597ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.530376][ T6134] RAX: ffffffffffffffda RBX: 00007f1f58be6090 RCX: 00007f1f5898eec9 [ 86.530386][ T6134] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000007 [ 86.530395][ T6134] RBP: 00007f1f597ca090 R08: 0000000000000000 R09: 0000000000000000 [ 86.530403][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.530412][ T6134] R13: 00007f1f58be6128 R14: 00007f1f58be6090 R15: 00007ffce90634c8 [ 86.530433][ T6134] [ 86.703391][ T6111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.773600][ T6133] netlink: 43 bytes leftover after parsing attributes in process `syz.2.44'. [ 86.861273][ T30] audit: type=1400 audit(1760094107.876:205): avc: denied { read append } for pid=6110 comm="syz.0.41" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.885960][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.899865][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.909804][ T6128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.926198][ T6111] tmpfs: Bad value for 'mpol' [ 86.934851][ T977] gspca_se401: Bayer format not supported! [ 87.021933][ T6128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.070859][ T5866] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.086345][ T6128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.138670][ T934] usb 1-1: USB disconnect, device number 4 [ 87.193587][ T6128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.237349][ T5991] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.270460][ T5991] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.292811][ T5991] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.325417][ T3422] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.334877][ T5866] usb 5-1: Using ep0 maxpacket: 8 [ 87.348367][ T5991] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.354695][ T5866] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 87.373529][ T5866] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.410394][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.430611][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.466582][ T5866] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.483104][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.495920][ T5866] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.496129][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.556573][ T5866] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.605302][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.103507][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.189192][ T6160] bond1: option ad_actor_sys_prio: invalid value (0) [ 88.197664][ T6160] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 88.211027][ T6160] bond1 (unregistering): Released all slaves [ 88.559550][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.695369][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.702487][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.749637][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.756737][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.799526][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 88.799541][ T30] audit: type=1400 audit(1760094109.806:210): avc: denied { sys_module } for pid=6165 comm="syz.2.50" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 89.023129][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.333300][ T6186] netlink: 892 bytes leftover after parsing attributes in process `syz.2.53'. [ 89.669400][ T6189] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 89.906282][ T5866] usb 5-1: USB disconnect, device number 4 [ 90.102870][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.422768][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 90.504072][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 90.712638][ T30] audit: type=1400 audit(1760094111.706:211): avc: denied { create } for pid=6202 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 90.910872][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.963579][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.310348][ T30] audit: type=1400 audit(1760094111.706:212): avc: denied { connect } for pid=6202 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 91.504902][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 91.549990][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.570872][ T9] usb 4-1: config 0 has no interface number 0 [ 91.589549][ T30] audit: type=1400 audit(1760094112.596:213): avc: denied { bind } for pid=6217 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.594899][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 92.050168][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 92.066941][ T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 92.080797][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.088799][ T9] usb 4-1: Product: syz [ 92.108612][ T9] usb 4-1: Manufacturer: syz [ 92.115805][ T30] audit: type=1400 audit(1760094113.126:214): avc: denied { ioctl } for pid=6231 comm="syz.2.63" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.145362][ T30] audit: type=1400 audit(1760094113.126:215): avc: denied { write } for pid=6231 comm="syz.2.63" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.150939][ T9] usb 4-1: SerialNumber: syz [ 92.290721][ T9] usb 4-1: config 0 descriptor?? [ 92.311748][ T30] audit: type=1400 audit(1760094113.326:216): avc: denied { mount } for pid=6219 comm="syz.0.62" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 92.340586][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 92.389503][ T5991] veth0_vlan: entered promiscuous mode [ 92.436106][ T5991] veth1_vlan: entered promiscuous mode [ 92.558565][ T30] audit: type=1400 audit(1760094113.356:217): avc: denied { remount } for pid=6219 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 92.571378][ T5991] veth0_macvtap: entered promiscuous mode [ 93.121251][ T5991] veth1_macvtap: entered promiscuous mode [ 93.196875][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.250241][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.340659][ T30] audit: type=1400 audit(1760094114.346:218): avc: denied { read write } for pid=6253 comm="syz.4.65" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.368449][ T3422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.377543][ T30] audit: type=1400 audit(1760094114.346:219): avc: denied { open } for pid=6253 comm="syz.4.65" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.446696][ T3422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.464717][ T6254] netlink: 256 bytes leftover after parsing attributes in process `syz.4.65'. [ 93.484514][ T3422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500860][ T6254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.65'. [ 93.534187][ T3422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.627234][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.641061][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.673428][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.700825][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.710814][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.844439][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 93.899653][ T5920] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 93.932759][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 93.932797][ T30] audit: type=1400 audit(1760094114.946:221): avc: denied { mount } for pid=5991 comm="syz-executor" name="/" dev="gadgetfs" ino=8232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 93.973644][ T5920] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.994982][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.006615][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.016662][ T5920] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.029952][ T5920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.039078][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.344296][ T30] audit: type=1400 audit(1760094115.356:222): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 94.557856][ T6272] tmpfs: Bad value for 'mpol' [ 95.421470][ T6281] process 'syz.5.70' launched './file1' with NULL argv: empty string added [ 95.432556][ T30] audit: type=1400 audit(1760094116.426:223): avc: denied { execute } for pid=6274 comm="syz.5.70" name="file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.486621][ T42] usb 4-1: USB disconnect, device number 3 [ 95.523176][ T30] audit: type=1400 audit(1760094116.476:224): avc: denied { execute_no_trans } for pid=6274 comm="syz.5.70" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.190941][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.213527][ T6288] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.237359][ T30] audit: type=1400 audit(1760094117.246:225): avc: denied { ioctl } for pid=6274 comm="syz.5.70" path="socket:[10584]" dev="sockfs" ino=10584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.263611][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.424863][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 96.432461][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 96.440593][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 96.454670][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.467588][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 96.491114][ T30] audit: type=1400 audit(1760094117.496:226): avc: denied { read } for pid=6291 comm="syz.3.74" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.513760][ C0] vkms_vblank_simulate: vblank timer overrun [ 96.522407][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 96.534480][ T30] audit: type=1400 audit(1760094117.496:227): avc: denied { open } for pid=6291 comm="syz.3.74" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.558126][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.572795][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.583524][ T30] audit: type=1400 audit(1760094117.496:228): avc: denied { ioctl } for pid=6291 comm="syz.3.74" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.608752][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.618911][ T977] usb 3-1: USB disconnect, device number 2 [ 96.786636][ T6300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 96.850693][ T9] usb 1-1: usb_control_msg returned -32 [ 96.874330][ T9] usbtmc 1-1:16.0: can't read capabilities [ 96.936036][ T9] usb 1-1: USB disconnect, device number 5 [ 97.270865][ T5866] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.446803][ T5866] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 97.456899][ T5866] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 97.838859][ T5866] usb 5-1: config 1 interface 0 has no altsetting 0 [ 97.889372][ T6308] EXT4-fs (nbd3): unable to read superblock [ 97.892768][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.920870][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.935812][ T5866] usb 5-1: Product: 痈뾖瀘萚䵏ꯃ䑳䪃輾ᗽﴓ贘䝏姲㨩︊䖂睁肏힧먑౔楪塀௬䯑ꀜኡ꟠듖囲ϡ뫶狘䭪흌毈⽇庍話탫ቚ擊횖뽎厢囝㺓줻闋极檶㔎⚸匹籗Ặᄧ죓栰₟㢟鿂ድ닋⢯ፁ君 [ 97.961423][ T5866] usb 5-1: Manufacturer: 倊 [ 97.973857][ T6295] ALSA: mixer_oss: invalid OSS volume '' [ 98.215109][ T5866] usb 5-1: SerialNumber: 琁첳ఔ읍䠵턅茥劈꿛庆쯬ⶨ兼⏘뙍ᵭ椛벀⨜񣭑쀲㳜힩ӟ舜珥霟恼㺑搜䓌뚺뙀ᑊ悢ﳅ늅槺囒铨퉇힐ᨓ䌸⑺߾篻 [ 98.306333][ T6298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.332457][ T6298] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.520246][ T30] audit: type=1400 audit(1760094119.516:229): avc: denied { mounton } for pid=6313 comm="syz.0.80" path="/15/bus" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.615741][ T6298] tmpfs: Bad value for 'mpol' [ 98.623428][ T5866] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.761757][ T6322] tmpfs: Bad value for 'mpol' [ 101.281025][ T5866] usb 5-1: USB disconnect, device number 5 [ 101.399743][ T30] audit: type=1400 audit(1760094122.396:230): avc: denied { append } for pid=6327 comm="syz.3.84" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.714251][ T6335] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 101.830910][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.380872][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 102.392116][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 102.410878][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.421427][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.441122][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.452272][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.472403][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.488071][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.530850][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.706825][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 102.730432][ T5874] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.959239][ T5874] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.018423][ T5874] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 103.070555][ T5874] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 103.082478][ T5874] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.270543][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.448191][ T5874] usb 5-1: Product: syz [ 103.469390][ T5874] usb 5-1: Manufacturer: syz [ 103.733969][ T5874] usb 5-1: SerialNumber: syz [ 103.898178][ T30] audit: type=1400 audit(1760094124.906:231): avc: denied { write } for pid=6364 comm="syz.2.93" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 103.982565][ T30] audit: type=1400 audit(1760094124.936:232): avc: denied { open } for pid=6364 comm="syz.2.93" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 104.035067][ T5874] cdc_ncm 5-1:1.0: bind() failure [ 104.037474][ T30] audit: type=1400 audit(1760094124.946:233): avc: denied { append } for pid=6364 comm="syz.2.93" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.045638][ T5874] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 104.066059][ T30] audit: type=1400 audit(1760094124.946:234): avc: denied { connect } for pid=6364 comm="syz.2.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.208622][ T5874] cdc_ncm 5-1:1.1: bind() failure [ 104.228720][ T5874] usb 5-1: USB disconnect, device number 6 [ 104.544138][ T30] audit: type=1400 audit(1760094125.556:235): avc: denied { relabelfrom } for pid=6372 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 104.548365][ T6373] FAULT_INJECTION: forcing a failure. [ 104.548365][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 104.587002][ T5874] usb 6-1: USB disconnect, device number 2 [ 104.616990][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.3.95 Not tainted syzkaller #0 PREEMPT(full) [ 104.617013][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 104.617022][ T6373] Call Trace: [ 104.617028][ T6373] [ 104.617034][ T6373] dump_stack_lvl+0x16c/0x1f0 [ 104.617065][ T6373] should_fail_ex+0x512/0x640 [ 104.617090][ T6373] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 104.617119][ T6373] should_failslab+0xc2/0x120 [ 104.617138][ T6373] kmem_cache_alloc_node_noprof+0x78/0x770 [ 104.617162][ T6373] ? __alloc_skb+0x2b2/0x380 [ 104.617191][ T6373] ? __alloc_skb+0x2b2/0x380 [ 104.617212][ T6373] __alloc_skb+0x2b2/0x380 [ 104.617234][ T6373] ? __pfx___alloc_skb+0x10/0x10 [ 104.617260][ T6373] ? if_nlmsg_size+0x475/0xaf0 [ 104.617287][ T6373] rtmsg_ifinfo_build_skb+0x81/0x280 [ 104.617309][ T6373] rtnetlink_event+0xf3/0x1f0 [ 104.617328][ T6373] notifier_call_chain+0xbc/0x410 [ 104.617353][ T6373] ? __pfx_rtnetlink_event+0x10/0x10 [ 104.617375][ T6373] call_netdevice_notifiers_info+0xbe/0x140 [ 104.617396][ T6373] netif_change_tx_queue_len+0x129/0x1e0 [ 104.617421][ T6373] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 104.617448][ T6373] ? full_name_hash+0xbc/0x110 [ 104.617472][ T6373] dev_change_tx_queue_len+0xb2/0x260 [ 104.617490][ T6373] dev_ifsioc+0x13f1/0x1f70 [ 104.617520][ T6373] ? __pfx_dev_ifsioc+0x10/0x10 [ 104.617543][ T6373] ? __pfx___mutex_lock+0x10/0x10 [ 104.617568][ T6373] ? dev_load+0x8e/0x240 [ 104.617595][ T6373] dev_ioctl+0x223/0x10e0 [ 104.617622][ T6373] sock_do_ioctl+0x19d/0x280 [ 104.617641][ T6373] ? __pfx_sock_do_ioctl+0x10/0x10 [ 104.617665][ T6373] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 104.617688][ T6373] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 104.617717][ T6373] sock_ioctl+0x227/0x6b0 [ 104.617736][ T6373] ? __pfx_sock_ioctl+0x10/0x10 [ 104.617754][ T6373] ? hook_file_ioctl_common+0x145/0x410 [ 104.617780][ T6373] ? selinux_file_ioctl+0x180/0x270 [ 104.617796][ T6373] ? selinux_file_ioctl+0xb4/0x270 [ 104.617815][ T6373] ? __pfx_sock_ioctl+0x10/0x10 [ 104.617836][ T6373] __x64_sys_ioctl+0x18e/0x210 [ 104.617862][ T6373] do_syscall_64+0xcd/0xfa0 [ 104.617890][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.617907][ T6373] RIP: 0033:0x7f1f5898eec9 [ 104.617921][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.617937][ T6373] RSP: 002b:00007f1f597eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.617953][ T6373] RAX: ffffffffffffffda RBX: 00007f1f58be5fa0 RCX: 00007f1f5898eec9 [ 104.617964][ T6373] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 104.617974][ T6373] RBP: 00007f1f597eb090 R08: 0000000000000000 R09: 0000000000000000 [ 104.617984][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.617994][ T6373] R13: 00007f1f58be6038 R14: 00007f1f58be5fa0 R15: 00007ffce90634c8 [ 104.618019][ T6373] [ 104.619000][ T30] audit: type=1400 audit(1760094125.556:236): avc: denied { relabelto } for pid=6372 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 105.246176][ T6381] FAULT_INJECTION: forcing a failure. [ 105.246176][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.259435][ T6381] CPU: 1 UID: 0 PID: 6381 Comm: syz.4.97 Not tainted syzkaller #0 PREEMPT(full) [ 105.259457][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.259467][ T6381] Call Trace: [ 105.259473][ T6381] [ 105.259480][ T6381] dump_stack_lvl+0x16c/0x1f0 [ 105.259511][ T6381] should_fail_ex+0x512/0x640 [ 105.259541][ T6381] _copy_from_user+0x2e/0xd0 [ 105.259560][ T6381] sctp_setsockopt+0x2045/0xb870 [ 105.259582][ T6381] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 105.259606][ T6381] ? __pfx_sctp_setsockopt+0x10/0x10 [ 105.259626][ T6381] ? find_held_lock+0x2b/0x80 [ 105.259652][ T6381] ? selinux_socket_setsockopt+0x6a/0x80 [ 105.259677][ T6381] ? sock_common_setsockopt+0x2e/0xf0 [ 105.259695][ T6381] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 105.259721][ T6381] do_sock_setsockopt+0xf0/0x1d0 [ 105.259742][ T6381] __sys_setsockopt+0x1a0/0x230 [ 105.259771][ T6381] __x64_sys_setsockopt+0xbd/0x160 [ 105.259795][ T6381] ? do_syscall_64+0x91/0xfa0 [ 105.259820][ T6381] ? lockdep_hardirqs_on+0x7c/0x110 [ 105.259844][ T6381] do_syscall_64+0xcd/0xfa0 [ 105.259870][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.259889][ T6381] RIP: 0033:0x7f1501d8eec9 [ 105.259904][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.259919][ T6381] RSP: 002b:00007f1502be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.259936][ T6381] RAX: ffffffffffffffda RBX: 00007f1501fe6180 RCX: 00007f1501d8eec9 [ 105.259947][ T6381] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 105.259957][ T6381] RBP: 00007f1502be3090 R08: 000000000000009c R09: 0000000000000000 [ 105.259967][ T6381] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 105.259977][ T6381] R13: 00007f1501fe6218 R14: 00007f1501fe6180 R15: 00007fffb76a5d48 [ 105.260000][ T6381] [ 105.391353][ T30] audit: type=1400 audit(1760094126.196:237): avc: denied { write } for pid=6376 comm="syz.4.97" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.469849][ T6380] Zero length message leads to an empty skb [ 105.472209][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.920838][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 106.351739][ T6392] Invalid source name [ 106.355789][ T6392] UBIFS error (pid: 6392): cannot open "./file0", error -22 [ 106.356175][ T42] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 106.372942][ T30] audit: type=1400 audit(1760094127.296:239): avc: denied { lock } for pid=6385 comm="syz.4.100" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.481948][ T24] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 106.518428][ T30] audit: type=1400 audit(1760094127.296:238): avc: denied { create } for pid=6385 comm="syz.4.100" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.539173][ T24] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 106.549689][ T30] audit: type=1400 audit(1760094127.356:240): avc: denied { ioctl } for pid=6385 comm="syz.4.100" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 106.549729][ T30] audit: type=1400 audit(1760094127.356:241): avc: denied { listen } for pid=6385 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 106.549758][ T30] audit: type=1400 audit(1760094127.366:242): avc: denied { mounton } for pid=6385 comm="syz.4.100" path="/20/file0" dev="tmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.621835][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 106.647892][ T30] audit: type=1400 audit(1760094127.646:243): avc: denied { open } for pid=6390 comm="syz.2.101" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 106.648215][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.723621][ T30] audit: type=1400 audit(1760094127.646:244): avc: denied { ioctl } for pid=6390 comm="syz.2.101" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 106.778885][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.787409][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 106.820212][ T42] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 106.828447][ T42] usb 4-1: config 0 has no interface number 0 [ 106.849549][ T24] usb 6-1: Product: 痈뾖瀘萚䵏ꯃ䑳䪃輾ᗽﴓ贘䝏姲㨩︊䖂睁肏힧먑౔楪塀௬䯑ꀜኡ꟠듖囲ϡ뫶狘䭪흌毈⽇庍話탫ቚ擊횖뽎厢囝㺓줻闋极檶㔎⚸匹籗Ặᄧ죓栰₟㢟鿂ድ닋⢯ፁ君 [ 106.890272][ T42] usb 4-1: config 0 interface 12 has no altsetting 0 [ 107.237489][ T30] audit: type=1400 audit(1760094128.246:245): avc: denied { sqpoll } for pid=6402 comm="syz.2.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.299612][ T42] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 107.370023][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.381018][ T24] usb 6-1: Manufacturer: 倊 [ 107.438582][ T24] usb 6-1: SerialNumber: 琁첳ఔ읍䠵턅茥劈꿛庆쯬ⶨ兼⏘뙍ᵭ椛벀⨜񣭑쀲㳜힩ӟ舜珥霟恼㺑搜䓌뚺뙀ᑊ悢ﳅ늅槺囒铨퉇힐ᨓ䌸⑺߾篻 [ 107.564679][ T42] usb 4-1: Product: syz [ 107.738176][ T42] usb 4-1: Manufacturer: syz [ 107.775958][ T6403] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 107.783780][ T6403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.792988][ T6403] ipvlan1: entered promiscuous mode [ 107.798176][ T6403] ipvlan1: entered allmulticast mode [ 107.803520][ T6403] veth0_vlan: entered allmulticast mode [ 107.810666][ T6403] bridge0: port 3(ipvlan1) entered blocking state [ 107.817202][ T6403] bridge0: port 3(ipvlan1) entered disabled state [ 107.825002][ T6403] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 107.916332][ T42] usb 4-1: SerialNumber: syz [ 108.098330][ T6421] netlink: 'syz.2.108': attribute type 1 has an invalid length. [ 108.122457][ T6421] netlink: 208 bytes leftover after parsing attributes in process `syz.2.108'. [ 108.152565][ T42] usb 4-1: config 0 descriptor?? [ 108.188089][ T6425] 9pnet_fd: Insufficient options for proto=fd [ 108.310811][ T5874] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.342121][ T24] usb 6-1: can't set config #1, error -71 [ 108.377139][ T24] usb 6-1: USB disconnect, device number 3 [ 108.750836][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 108.767567][ T5874] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 108.967325][ T5874] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.983274][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.031750][ T42] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 109.121210][ T42] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 109.128537][ T42] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 109.384538][ T5874] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.412448][ T42] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 109.552217][ T5874] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.585323][ T30] audit: type=1400 audit(1760094130.596:246): avc: denied { write } for pid=6433 comm="syz.5.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.595030][ T42] usb 4-1: USB disconnect, device number 4 [ 109.620953][ T5874] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.637236][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.221096][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 110.227163][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 110.571982][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 110.591003][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 110.704208][ T6442] ceph: No mds server is up or the cluster is laggy [ 111.834703][ T9] usb 5-1: USB disconnect, device number 7 [ 112.021380][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.670819][ T24] usb 1-1: device descriptor read/64, error -71 [ 112.937404][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.985622][ T6492] tmpfs: Bad value for 'mpol' [ 113.405297][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.120'. [ 113.490929][ T24] usb 1-1: device descriptor read/64, error -71 [ 113.660330][ T24] usb usb1-port1: attempt power cycle [ 114.020966][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.059593][ T6506] FAULT_INJECTION: forcing a failure. [ 114.059593][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.059927][ T6506] [ 114.059932][ T6506] ====================================================== [ 114.059938][ T6506] WARNING: possible circular locking dependency detected [ 114.059944][ T6506] syzkaller #0 Not tainted [ 114.059952][ T6506] ------------------------------------------------------ [ 114.059957][ T6506] syz.4.123/6506 is trying to acquire lock: [ 114.059965][ T6506] ffffffff8e2d16c0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 114.060009][ T6506] [ 114.060009][ T6506] but task is already holding lock: [ 114.060014][ T6506] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 114.060051][ T6506] [ 114.060051][ T6506] which lock already depends on the new lock. [ 114.060051][ T6506] [ 114.060056][ T6506] [ 114.060056][ T6506] the existing dependency chain (in reverse order) is: [ 114.060061][ T6506] [ 114.060061][ T6506] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 114.060081][ T6506] _raw_spin_lock_nested+0x31/0x40 [ 114.060102][ T6506] raw_spin_rq_lock_nested+0x29/0x130 [ 114.060120][ T6506] task_rq_lock+0xcf/0x490 [ 114.060139][ T6506] cgroup_move_task+0x81/0x2a0 [ 114.060160][ T6506] css_set_move_task+0x288/0x5f0 [ 114.060175][ T6506] cgroup_post_fork+0x201/0x9d0 [ 114.060195][ T6506] copy_process+0x602d/0x76a0 [ 114.060214][ T6506] kernel_clone+0xfc/0x930 [ 114.060233][ T6506] user_mode_thread+0xc8/0x110 [ 114.060252][ T6506] rest_init+0x23/0x2b0 [ 114.060268][ T6506] start_kernel+0x3f3/0x4e0 [ 114.060290][ T6506] x86_64_start_reservations+0x18/0x30 [ 114.060312][ T6506] x86_64_start_kernel+0x130/0x190 [ 114.060334][ T6506] common_startup_64+0x13e/0x148 [ 114.060350][ T6506] [ 114.060350][ T6506] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 114.060371][ T6506] _raw_spin_lock_irqsave+0x3a/0x60 [ 114.060391][ T6506] try_to_wake_up+0xb7/0x1870 [ 114.060409][ T6506] __wake_up_common+0x135/0x1f0 [ 114.060433][ T6506] __wake_up+0x31/0x60 [ 114.060453][ T6506] tty_port_default_wakeup+0x47/0x60 [ 114.060473][ T6506] serial8250_tx_chars+0x68e/0x860 [ 114.060494][ T6506] serial8250_handle_irq+0x761/0xcb0 [ 114.060515][ T6506] serial8250_default_handle_irq+0x9e/0x270 [ 114.060536][ T6506] serial8250_interrupt+0xf5/0x1d0 [ 114.060558][ T6506] __handle_irq_event_percpu+0x236/0x920 [ 114.060578][ T6506] handle_irq_event+0xab/0x1e0 [ 114.060597][ T6506] handle_edge_irq+0x3ca/0x9e0 [ 114.060614][ T6506] __common_interrupt+0xcd/0x2f0 [ 114.060633][ T6506] common_interrupt+0xba/0xe0 [ 114.060650][ T6506] asm_common_interrupt+0x26/0x40 [ 114.060665][ T6506] pv_native_safe_halt+0xf/0x20 [ 114.060686][ T6506] default_idle+0x13/0x20 [ 114.060700][ T6506] default_idle_call+0x6c/0xb0 [ 114.060715][ T6506] do_idle+0x38d/0x500 [ 114.060732][ T6506] cpu_startup_entry+0x4f/0x60 [ 114.060754][ T6506] start_secondary+0x21d/0x2b0 [ 114.060772][ T6506] common_startup_64+0x13e/0x148 [ 114.060784][ T6506] [ 114.060784][ T6506] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 114.060800][ T6506] _raw_spin_lock_irqsave+0x3a/0x60 [ 114.060816][ T6506] __wake_up+0x1c/0x60 [ 114.060832][ T6506] tty_port_default_wakeup+0x47/0x60 [ 114.060846][ T6506] serial8250_tx_chars+0x68e/0x860 [ 114.060861][ T6506] serial8250_handle_irq+0x761/0xcb0 [ 114.060877][ T6506] serial8250_default_handle_irq+0x9e/0x270 [ 114.060899][ T6506] serial8250_interrupt+0xf5/0x1d0 [ 114.060916][ T6506] __handle_irq_event_percpu+0x236/0x920 [ 114.060931][ T6506] handle_irq_event+0xab/0x1e0 [ 114.060946][ T6506] handle_edge_irq+0x3ca/0x9e0 [ 114.060959][ T6506] __common_interrupt+0xcd/0x2f0 [ 114.060974][ T6506] common_interrupt+0xba/0xe0 [ 114.060987][ T6506] asm_common_interrupt+0x26/0x40 [ 114.060999][ T6506] pv_native_safe_halt+0xf/0x20 [ 114.061016][ T6506] default_idle+0x13/0x20 [ 114.061027][ T6506] default_idle_call+0x6c/0xb0 [ 114.061039][ T6506] do_idle+0x38d/0x500 [ 114.061053][ T6506] cpu_startup_entry+0x4f/0x60 [ 114.061067][ T6506] start_secondary+0x21d/0x2b0 [ 114.061084][ T6506] common_startup_64+0x13e/0x148 [ 114.061096][ T6506] [ 114.061096][ T6506] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 114.061111][ T6506] _raw_spin_lock_irqsave+0x3a/0x60 [ 114.061127][ T6506] serial8250_console_write+0x181/0x1890 [ 114.061145][ T6506] console_flush_all+0x801/0xc60 [ 114.061159][ T6506] console_unlock+0xd8/0x210 [ 114.061172][ T6506] vprintk_emit+0x3d7/0x680 [ 114.061187][ T6506] _printk+0xc7/0x100 [ 114.061197][ T6506] register_console+0xc2d/0x11b0 [ 114.061212][ T6506] univ8250_console_init+0x5f/0x90 [ 114.061232][ T6506] console_init+0x14f/0x680 [ 114.061250][ T6506] start_kernel+0x29f/0x4e0 [ 114.061266][ T6506] x86_64_start_reservations+0x18/0x30 [ 114.061284][ T6506] x86_64_start_kernel+0x130/0x190 [ 114.061301][ T6506] common_startup_64+0x13e/0x148 [ 114.061313][ T6506] [ 114.061313][ T6506] -> #0 (console_owner){-...}-{0:0}: [ 114.061328][ T6506] __lock_acquire+0x12a6/0x1ce0 [ 114.061348][ T6506] lock_acquire+0x179/0x350 [ 114.061357][ T6506] console_lock_spinning_enable+0x72/0x80 [ 114.061373][ T6506] console_flush_all+0x7aa/0xc60 [ 114.061386][ T6506] console_unlock+0xd8/0x210 [ 114.061396][ T6506] vprintk_emit+0x3d7/0x680 [ 114.061408][ T6506] _printk+0xc7/0x100 [ 114.061416][ T6506] should_fail_ex+0x4e7/0x640 [ 114.061431][ T6506] strncpy_from_user+0x3b/0x2e0 [ 114.061444][ T6506] strncpy_from_user_nofault+0x7f/0x180 [ 114.061460][ T6506] bpf_probe_read_compat_str+0xe8/0x180 [ 114.061471][ T6506] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 114.061479][ T6506] bpf_trace_run4+0x24f/0x5b0 [ 114.061490][ T6506] __bpf_trace_sched_switch+0x145/0x190 [ 114.061501][ T6506] __traceiter_sched_switch+0x6c/0xc0 [ 114.061512][ T6506] __schedule+0x183b/0x5de0 [ 114.061525][ T6506] schedule+0xe7/0x3a0 [ 114.061537][ T6506] synchronize_rcu_expedited+0x390/0x460 [ 114.061547][ T6506] bpf_local_storage_map_free+0xaa/0x630 [ 114.061563][ T6506] map_create+0xf14/0x27e0 [ 114.061575][ T6506] __sys_bpf+0x3d9d/0x4980 [ 114.061589][ T6506] __x64_sys_bpf+0x78/0xc0 [ 114.061603][ T6506] do_syscall_64+0xcd/0xfa0 [ 114.061618][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.061627][ T6506] [ 114.061627][ T6506] other info that might help us debug this: [ 114.061627][ T6506] [ 114.061630][ T6506] Chain exists of: [ 114.061630][ T6506] console_owner --> &p->pi_lock --> &rq->__lock [ 114.061630][ T6506] [ 114.061645][ T6506] Possible unsafe locking scenario: [ 114.061645][ T6506] [ 114.061648][ T6506] CPU0 CPU1 [ 114.061650][ T6506] ---- ---- [ 114.061653][ T6506] lock(&rq->__lock); [ 114.061658][ T6506] lock(&p->pi_lock); [ 114.061664][ T6506] lock(&rq->__lock); [ 114.061671][ T6506] lock(console_owner); [ 114.061676][ T6506] [ 114.061676][ T6506] *** DEADLOCK *** [ 114.061676][ T6506] [ 114.061678][ T6506] 5 locks held by syz.4.123/6506: [ 114.061684][ T6506] #0: ffffffff8e3cfa38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 114.061705][ T6506] #1: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 114.061730][ T6506] #2: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 114.061753][ T6506] #3: ffffffff8e3b1b00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 114.061774][ T6506] #4: ffffffff8e3b1b70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 114.061798][ T6506] [ 114.061798][ T6506] stack backtrace: [ 114.061802][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 114.061814][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.061820][ T6506] Call Trace: [ 114.061823][ T6506] [ 114.061827][ T6506] dump_stack_lvl+0x116/0x1f0 [ 114.061843][ T6506] print_circular_bug+0x275/0x350 [ 114.061859][ T6506] check_noncircular+0x14c/0x170 [ 114.061876][ T6506] __lock_acquire+0x12a6/0x1ce0 [ 114.061898][ T6506] lock_acquire+0x179/0x350 [ 114.061907][ T6506] ? console_lock_spinning_enable+0x61/0x80 [ 114.061919][ T6506] ? console_lock_spinning_enable+0x4a/0x80 [ 114.061933][ T6506] console_lock_spinning_enable+0x72/0x80 [ 114.061945][ T6506] ? console_lock_spinning_enable+0x61/0x80 [ 114.061957][ T6506] console_flush_all+0x7aa/0xc60 [ 114.061971][ T6506] ? __pfx_console_flush_all+0x10/0x10 [ 114.061985][ T6506] ? is_printk_cpu_sync_owner+0x32/0x40 [ 114.062000][ T6506] console_unlock+0xd8/0x210 [ 114.062012][ T6506] ? __pfx_console_unlock+0x10/0x10 [ 114.062024][ T6506] ? do_raw_spin_unlock+0xe0/0x230 [ 114.062035][ T6506] ? _printk+0xc7/0x100 [ 114.062044][ T6506] ? __down_trylock_console_sem+0xb0/0x140 [ 114.062055][ T6506] vprintk_emit+0x3d7/0x680 [ 114.062068][ T6506] ? __pfx_vprintk_emit+0x10/0x10 [ 114.062081][ T6506] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 114.062097][ T6506] _printk+0xc7/0x100 [ 114.062106][ T6506] ? __pfx__printk+0x10/0x10 [ 114.062116][ T6506] ? __pfx____ratelimit+0x10/0x10 [ 114.062129][ T6506] ? __lock_acquire+0x62e/0x1ce0 [ 114.062146][ T6506] should_fail_ex+0x4e7/0x640 [ 114.062162][ T6506] strncpy_from_user+0x3b/0x2e0 [ 114.062177][ T6506] strncpy_from_user_nofault+0x7f/0x180 [ 114.062194][ T6506] bpf_probe_read_compat_str+0xe8/0x180 [ 114.062206][ T6506] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 114.062214][ T6506] bpf_trace_run4+0x24f/0x5b0 [ 114.062226][ T6506] ? __pfx_bpf_trace_run4+0x10/0x10 [ 114.062239][ T6506] ? __lock_acquire+0xb97/0x1ce0 [ 114.062256][ T6506] __bpf_trace_sched_switch+0x145/0x190 [ 114.062268][ T6506] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 114.062281][ T6506] ? psi_group_change+0x460/0xbe0 [ 114.062297][ T6506] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 114.062313][ T6506] __traceiter_sched_switch+0x6c/0xc0 [ 114.062324][ T6506] __schedule+0x183b/0x5de0 [ 114.062340][ T6506] ? __lock_acquire+0x62e/0x1ce0 [ 114.062357][ T6506] ? __pfx___schedule+0x10/0x10 [ 114.062372][ T6506] ? find_held_lock+0x2b/0x80 [ 114.062385][ T6506] ? schedule+0x2d7/0x3a0 [ 114.062399][ T6506] schedule+0xe7/0x3a0 [ 114.062413][ T6506] synchronize_rcu_expedited+0x390/0x460 [ 114.062423][ T6506] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 114.062435][ T6506] ? __pfx_autoremove_wake_function+0x10/0x10 [ 114.062450][ T6506] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 114.062462][ T6506] bpf_local_storage_map_free+0xaa/0x630 [ 114.062480][ T6506] map_create+0xf14/0x27e0 [ 114.062495][ T6506] ? __pfx_map_create+0x10/0x10 [ 114.062508][ T6506] ? __might_fault+0xe3/0x190 [ 114.062523][ T6506] ? __might_fault+0xe3/0x190 [ 114.062537][ T6506] ? __might_fault+0x13b/0x190 [ 114.062552][ T6506] ? selinux_bpf+0xde/0x130 [ 114.062566][ T6506] __sys_bpf+0x3d9d/0x4980 [ 114.062582][ T6506] ? __pfx___sys_bpf+0x10/0x10 [ 114.062597][ T6506] ? find_held_lock+0x2b/0x80 [ 114.062610][ T6506] ? find_held_lock+0x2b/0x80 [ 114.062624][ T6506] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 114.062638][ T6506] ? fput+0x9b/0xd0 [ 114.062651][ T6506] ? ksys_write+0x1ac/0x250 [ 114.062660][ T6506] ? __pfx_ksys_write+0x10/0x10 [ 114.062670][ T6506] __x64_sys_bpf+0x78/0xc0 [ 114.062685][ T6506] ? lockdep_hardirqs_on+0x7c/0x110 [ 114.062700][ T6506] do_syscall_64+0xcd/0xfa0 [ 114.062715][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.062725][ T6506] RIP: 0033:0x7f1501d8eec9 [ 114.062733][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.062743][ T6506] RSP: 002b:00007f1502c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.062752][ T6506] RAX: ffffffffffffffda RBX: 00007f1501fe5fa0 RCX: 00007f1501d8eec9 [ 114.062759][ T6506] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0300000000000000 [ 114.062765][ T6506] RBP: 00007f1502c25090 R08: 0000000000000000 R09: 0000000000000000 [ 114.062771][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.062777][ T6506] R13: 00007f1501fe6038 R14: 00007f1501fe5fa0 R15: 00007fffb76a5d48 [ 114.062787][ T6506] [ 115.250013][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 115.250028][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.250035][ T6506] Call Trace: [ 115.250041][ T6506] [ 115.250045][ T6506] dump_stack_lvl+0x116/0x1f0 [ 115.250066][ T6506] should_fail_ex+0x512/0x640 [ 115.250083][ T6506] strncpy_from_user+0x3b/0x2e0 [ 115.250099][ T6506] strncpy_from_user_nofault+0x7f/0x180 [ 115.250117][ T6506] bpf_probe_read_compat_str+0xe8/0x180 [ 115.250130][ T6506] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 115.250139][ T6506] bpf_trace_run4+0x24f/0x5b0 [ 115.250151][ T6506] ? __pfx_bpf_trace_run4+0x10/0x10 [ 115.250165][ T6506] ? __lock_acquire+0xb97/0x1ce0 [ 115.250183][ T6506] __bpf_trace_sched_switch+0x145/0x190 [ 115.250196][ T6506] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 115.250209][ T6506] ? psi_group_change+0x460/0xbe0 [ 115.250226][ T6506] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 115.250241][ T6506] __traceiter_sched_switch+0x6c/0xc0 [ 115.250254][ T6506] __schedule+0x183b/0x5de0 [ 115.250270][ T6506] ? __lock_acquire+0x62e/0x1ce0 [ 115.250287][ T6506] ? __pfx___schedule+0x10/0x10 [ 115.250302][ T6506] ? find_held_lock+0x2b/0x80 [ 115.250315][ T6506] ? schedule+0x2d7/0x3a0 [ 115.250330][ T6506] schedule+0xe7/0x3a0 [ 115.250343][ T6506] synchronize_rcu_expedited+0x390/0x460 [ 115.250355][ T6506] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 115.250366][ T6506] ? __pfx_autoremove_wake_function+0x10/0x10 [ 115.250382][ T6506] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 115.250394][ T6506] bpf_local_storage_map_free+0xaa/0x630 [ 115.250413][ T6506] map_create+0xf14/0x27e0 [ 115.250429][ T6506] ? __pfx_map_create+0x10/0x10 [ 115.250442][ T6506] ? __might_fault+0xe3/0x190 [ 115.250457][ T6506] ? __might_fault+0xe3/0x190 [ 115.250471][ T6506] ? __might_fault+0x13b/0x190 [ 115.250486][ T6506] ? selinux_bpf+0xde/0x130 [ 115.250500][ T6506] __sys_bpf+0x3d9d/0x4980 [ 115.250516][ T6506] ? __pfx___sys_bpf+0x10/0x10 [ 115.250531][ T6506] ? find_held_lock+0x2b/0x80 [ 115.250544][ T6506] ? find_held_lock+0x2b/0x80 [ 115.250558][ T6506] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 115.250570][ T6506] ? fput+0x9b/0xd0 [ 115.250583][ T6506] ? ksys_write+0x1ac/0x250 [ 115.250591][ T6506] ? __pfx_ksys_write+0x10/0x10 [ 115.250602][ T6506] __x64_sys_bpf+0x78/0xc0 [ 115.250617][ T6506] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.250633][ T6506] do_syscall_64+0xcd/0xfa0 [ 115.250649][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.250660][ T6506] RIP: 0033:0x7f1501d8eec9 [ 115.250669][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.250679][ T6506] RSP: 002b:00007f1502c25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 115.250690][ T6506] RAX: ffffffffffffffda RBX: 00007f1501fe5fa0 RCX: 00007f1501d8eec9 [ 115.250696][ T6506] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 0300000000000000 [ 115.250703][ T6506] RBP: 00007f1502c25090 R08: 0000000000000000 R09: 0000000000000000 [ 115.250709][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.250715][ T6506] R13: 00007f1501fe6038 R14: 00007f1501fe5fa0 R15: 00007fffb76a5d48 [ 115.250724][ T6506] [ 115.566944][ T24] usb 1-1: device descriptor read/8, error -71 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 115.699846][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 115.771174][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 115.811229][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 116.007292][ T24] usb 1-1: device descriptor read/8, error -71 [ 116.133398][ T24] usb usb1-port1: unable to enumerate USB device [ 116.639253][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.762991][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.824105][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.883893][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.950172][ T50] bridge_slave_1: left allmulticast mode [ 116.955906][ T50] bridge_slave_1: left promiscuous mode [ 116.963482][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.972806][ T50] bridge_slave_0: left allmulticast mode [ 116.978440][ T50] bridge_slave_0: left promiscuous mode [ 116.986220][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.102228][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.114478][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.123948][ T50] bond0 (unregistering): Released all slaves [ 117.274523][ T50] hsr_slave_0: left promiscuous mode [ 117.280166][ T50] hsr_slave_1: left promiscuous mode [ 117.287025][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.294566][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.303903][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.311513][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.321471][ T50] veth1_macvtap: left promiscuous mode [ 117.326954][ T50] veth0_macvtap: left promiscuous mode [ 117.333592][ T50] veth1_vlan: left promiscuous mode [ 117.338970][ T50] veth0_vlan: left promiscuous mode [ 117.417187][ T50] team0 (unregistering): Port device team_slave_1 removed [ 117.432547][ T50] team0 (unregistering): Port device team_slave_0 removed [ 117.709451][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.740115][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.801174][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.892696][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.962571][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.005985][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.065901][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.114454][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.224767][ T50] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.263030][ T50] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.303998][ T50] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.344363][ T50] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.455338][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.509342][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.576198][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.616780][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.719069][ T50] bridge_slave_1: left allmulticast mode [ 118.726980][ T50] bridge_slave_1: left promiscuous mode [ 118.735184][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.744539][ T50] bridge_slave_0: left allmulticast mode [ 118.750165][ T50] bridge_slave_0: left promiscuous mode [ 118.756103][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.764340][ T50] bridge_slave_1: left allmulticast mode [ 118.769950][ T50] bridge_slave_1: left promiscuous mode [ 118.775635][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.783313][ T50] bridge_slave_0: left allmulticast mode [ 118.789008][ T50] bridge_slave_0: left promiscuous mode [ 118.795181][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.803568][ T50] bridge_slave_1: left allmulticast mode [ 118.809176][ T50] bridge_slave_1: left promiscuous mode [ 118.814851][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.822507][ T50] bridge_slave_0: left allmulticast mode [ 118.828122][ T50] bridge_slave_0: left promiscuous mode [ 118.834252][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.842288][ T50] bridge_slave_1: left allmulticast mode [ 118.847895][ T50] bridge_slave_1: left promiscuous mode [ 118.853593][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.861464][ T50] bridge_slave_0: left allmulticast mode [ 118.867071][ T50] bridge_slave_0: left promiscuous mode [ 118.872698][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.966662][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.976188][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.985382][ T50] bond0 (unregistering): Released all slaves [ 119.046310][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.055682][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.064885][ T50] bond0 (unregistering): Released all slaves [ 119.134760][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.144012][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.153928][ T50] bond0 (unregistering): Released all slaves [ 119.204615][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.213843][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.222961][ T50] bond0 (unregistering): Released all slaves [ 119.691229][ T50] hsr_slave_0: left promiscuous mode [ 119.696861][ T50] hsr_slave_1: left promiscuous mode [ 119.702514][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.709916][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.719262][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.727944][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.737790][ T50] hsr_slave_0: left promiscuous mode [ 119.748742][ T50] hsr_slave_1: left promiscuous mode [ 119.754448][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.762182][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.769687][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.777095][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.786691][ T50] hsr_slave_0: left promiscuous mode [ 119.792558][ T50] hsr_slave_1: left promiscuous mode [ 119.798170][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.806426][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.814090][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.822176][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.832719][ T50] hsr_slave_0: left promiscuous mode [ 119.838180][ T50] hsr_slave_1: left promiscuous mode [ 119.844069][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.851649][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.859174][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.866591][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.878941][ T50] veth1_macvtap: left promiscuous mode [ 119.884447][ T50] veth0_macvtap: left promiscuous mode [ 119.889930][ T50] veth1_vlan: left promiscuous mode [ 119.895278][ T50] veth0_vlan: left promiscuous mode [ 119.901154][ T50] veth1_macvtap: left promiscuous mode [ 119.906604][ T50] veth0_macvtap: left promiscuous mode [ 119.912578][ T50] veth1_vlan: left promiscuous mode [ 119.917780][ T50] veth0_vlan: left promiscuous mode [ 119.923459][ T50] veth1_macvtap: left promiscuous mode [ 119.928901][ T50] veth0_macvtap: left promiscuous mode [ 119.934594][ T50] veth1_vlan: left promiscuous mode [ 119.939802][ T50] veth0_vlan: left promiscuous mode [ 119.945536][ T50] veth1_macvtap: left promiscuous mode [ 119.951065][ T50] veth0_macvtap: left promiscuous mode [ 119.956545][ T50] veth1_vlan: left promiscuous mode [ 119.962002][ T50] veth0_vlan: left promiscuous mode [ 120.109442][ T50] team0 (unregistering): Port device team_slave_1 removed [ 120.126864][ T50] team0 (unregistering): Port device team_slave_0 removed [ 120.204636][ T50] team0 (unregistering): Port device team_slave_1 removed [ 120.218113][ T50] team0 (unregistering): Port device team_slave_0 removed [ 120.306507][ T50] team0 (unregistering): Port device team_slave_1 removed [ 120.320718][ T50] team0 (unregistering): Port device team_slave_0 removed [ 120.402972][ T50] team0 (unregistering): Port device team_slave_1 removed [ 120.417420][ T50] team0 (unregistering): Port device team_slave_0 removed