last executing test programs: 13.476960505s ago: executing program 0 (id=262): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 13.138331528s ago: executing program 0 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000b12000/0x2000)=nil, 0x2000, 0x2000003, 0x30, 0xffffffffffffffff, 0x3e1c5000) userfaultfd(0x80001) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000616263646566676a696a6b6c6d6e6f70"], 0x18, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x100004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x0, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) 12.219495321s ago: executing program 4 (id=265): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x90, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) tkill(r1, 0xb) ptrace$peek(0x1, r1, &(0x7f0000000100)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x40) 12.172570579s ago: executing program 3 (id=266): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) 11.603500486s ago: executing program 0 (id=269): r0 = syz_usb_connect$cdc_ecm(0x4, 0x69, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/428], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x21, 0x57, {0x57, 0x0, "f80f5419ecfa782e575df3879dcfdbe874cd0dc2f45b477094d3dcb91955de7a7083930ff78c0fe41676a44847400cf6c16e1670e2532b14d7880ccea0e13bb67ae420128813963f960967216d5d5db86de56d9480"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x2, 0x0, @empty}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)={0x38, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x11, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x125, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x6b, 0x0, 0x1, [@nested={0xc, 0xfd, 0x0, 0x1, [@typed={0x4, 0x13d}, @generic="fbf08a51"]}]}]}]}, 0x38}, {&(0x7f00000012c0)={0x3f0, 0x3f, 0x200, 0x70bd27, 0x25dfdbfd, "", [@nested={0xac, 0xe3, 0x0, 0x1, [@nested={0x4, 0xa2}, @nested={0x4, 0x3c}, @nested={0x4, 0x80}, @nested={0x4, 0xad}, @nested={0x4, 0x92}, @generic="c62a780fc1773d1950be88a924c43e152e6e3b53e159ef58778a95d06601d58f4802c58b66a3f3a2adf2764ae3f94255ee737dd28e0d4922d84f93bcea5996b974141fb2a595d1d5cfb1fbd8aeadcf568228f8ea1cf00e654d284c65c95178e98da59e7b0459405eeb6a61e0d06c6c901d527312ad49722d86cb15d0fae94329efc2074b4dfa10f9edeabb8cdbf65245f0af34cb"]}, @nested={0x4, 0x147}, @nested={0x15d, 0xb5, 0x0, 0x1, [@generic="cdf12c58095918c647d722273d3600502d13be948d99c085244934683fdaa708848fbbcad2828372b27ea4057cecf10df5d02556b338901209bcd33de34d5a9c646560561ff74560fbde6003de70dceda266ee07b2aec7202682bb9887d044b6b8f8f8148ab748653f04996a393906a15cd5d351cc69f426ed31ca42543d1578f4141b9b8fb37aef7d62bab0c8496c8f1faee3f5b2220d2bd5bc9f48dc127660c581e088a9365a7508031cafcb49b687bce87739d76142d9a43a69866dfd674da60e6642552da101b59667bbc9abff6faa8c8b50e2d97bac4e9e02fd", @typed={0x4, 0xe}, @typed={0x8, 0x6, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x1f}, @generic="3619b2372cbdab906f7a5b279f5d2dd09e035fd50610c460801d0430223cd81105510b09c3fc7e2562cfad3c274ab612fb4e806d498118b12057f1d3a17e5b77086a6631e1392e9b577d6a4a726536b02fe4c40188f35b9b8ca54d38c10f8bbf7ce2b0a0d7f4a53c01", @nested={0x4, 0xe4}]}, @nested={0x116, 0x42, 0x0, 0x1, [@generic="17470d62ac3db7fa37b2b2dc2628f3e5368460fc41458c5250933d2794029e0b27effaef49207374c6c68bc5d49088ccb52b23ca1b30519a502ecf3aec6ed3f795a9d4f2a9f82043afa80db19ec3ee555d1d0a5edef0239d849e31bfe8938ffc28e3d00d495c8f1c69bd6d6e316ed97ecc3f0b5ccc6c026691e2e4f31c1adb1b340cc1026af2ae90657ec730dec6d5f9546c264ada071ebdf64570f8994671fa8dc66720530bd45a6e08c0bdfe332a57f6003fd45afb60ca4bfd63c78ae03c44c56e741852ee545eca49387f53453844fa97bf3a3a52f4e32f9f9187a96587dd43a2588e21b4e0c0d6dab6779bb794440b9e7a725a7817ee80139d349c53", @typed={0x8, 0xa1, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x8}, @typed={0x5, 0xff, 0x0, 0x0, @str='\x00'}]}, @typed={0xb7, 0xb, 0x0, 0x0, @binary="786031c5ffdb32e5a1897cf0330f573fcc1b71247802e7c80cb14463a524e89ea66959d5fb0b520d044112bc81ec1bf95a24e70ed15ef3547e086c7a43a4d19720866d39b7e7f695664378e3be0e45a7a1fb6852f18367822a9b4e17300bf46427cc3991dbde357f86e0bc092455b36c5bf943aaf1dcfa40aae86b2ede9aa5e0cc038a81c8267c406a68b0bbc85b3f1a62d9502c29bc88a3684bd40d86856867c41a5892e8bc7b52f731c37de6cac26f3e573e"}]}, 0x3f0}], 0x2, 0x0, 0x0, 0x4}, 0x0) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={r2, r9, r10}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r12 = accept$alg(r11, 0x0, 0x0) write$binfmt_script(r12, &(0x7f0000000600), 0xfec8) recvmmsg(r12, &(0x7f00000008c0)=[{{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {0x0}, {&(0x7f0000000440)=""/105, 0x69}], 0x4, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680}) 9.500374785s ago: executing program 4 (id=274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f00000000c0)=0x8fee) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$usbmon(&(0x7f0000000140), 0x7, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r11, 0x10c, 0x9, &(0x7f0000000040)=0x2b, 0x4) r12 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r12, &(0x7f0000000a40)=[{&(0x7f0000000680)='E', 0x1}], 0x1) 9.128078706s ago: executing program 3 (id=275): connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)={0x50, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004085}, 0xc815) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)={0x0, 0x23, 0x6, {0x6, 0x6, "fd06902d"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000000005b8ac4808c578e41fbe308b6a17980"], &(0x7f0000000640)=ANY=[@ANYBLOB="008e0e01d7386a848d0c91"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xe, 0x1, {0x22, 0x461}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x20, 0x10, 0xac, "99ab6708873fb095b9dd3ddf9bb16ed5a656d680a5801da9fa4107fa71e777168f5f52476235df9e9c3fb066aa75c0b48c54c9f69f58654668a42d8c1cd9a127ea4dbeed639f8547f4d026556cf39872318d51c216fd8e43dfc7bfcc7c2c819d8942fe73b0753443cac651b98f2607363cde8c98dedcb6c4e399e9ef36fb753904a7e47a9feb986512e06f4eff4d80a898efe6b494b01693c11f3a6701bb508fe84bed75c7637fac09f3555e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000540)={0x20, 0x1, 0x5a, "312b18f6c945e4d56d7269c3200cfa964a42c08ca7a150fc520317e4363fecb5d84bcd66b6fdb9cb735a515d63cfff7735358cee1b7a1c7a8229d434354b13d3f570b73a68190337783632f568eecb8da54ee16cfae6afd8955b"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r1, &(0x7f00000007c0)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB="4e5a42ac6a000230"], 0x0, &(0x7f0000000a80)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x1, [@generic={0xd4, 0x10, 0xb, "7041af7b732d2998d50b3d66c782846ce167686ab864058a438555b269b01c06a1677369154706653b1006cfd0c664267f4927ce78dd86117c222e1e6c8c2937a56cd9927f186c1a045897c9c3f478ba795c81b2e4906ab238b46a572c00311dd15dc5c00a67d89a5595e0a48d890ef2a0c56da31fe73d5b7a91c06c095733eb36a96edd71c2fb0928569d266226daa1bbd9d42b24fa6f8132df96641a4c207283637e51ced22a654a5bb35eb70a68d773c711c2ce0136c7b04308815d4c7b2e3196c003094e6a82e05f022485466c2d47"}]}}, 0x0, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.470743575s ago: executing program 0 (id=277): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121201) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"b76e82ac", 0x0, 0x5, 0x2, 0x8, 0x5, '\x00', "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r6, 0xae80, 0x300) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) 7.804640852s ago: executing program 2 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'geneve0\x00', 0x1000}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 7.659650566s ago: executing program 2 (id=280): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r0, 0x4, 0x0, @val=@iter={0x0}}, 0x20) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x4, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {}, {0x0, 0x80000}], 0x10}}) bind$alg(0xffffffffffffffff, &(0x7f0000003880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x3}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0040000000000000240012800b00010067656e6576650000140002800800010001000040"], 0x58}}, 0x2040000) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054003d09ff0f0000fedbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="01830300e000000100000000000009400000000008"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="044113c9"], 0x4) 7.043825116s ago: executing program 2 (id=282): sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002900)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x2, 0xffeffc03}, &(0x7f0000000340), &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003000), 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.64224584s ago: executing program 1 (id=283): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 6.456373588s ago: executing program 1 (id=284): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffef}, {0x6, 0x10}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40804) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_getattr(r1, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04220f3b"], 0x12) 5.273090344s ago: executing program 4 (id=285): r0 = socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r7, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac02, 0xfac0b]}]]}, 0x34}}, 0x0) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="1c0000f50000000000000000241f0000000064ace260004e2f01fe880000000000000000000000000001200100000000000000000000000000000c21880b00060002584b239279b700fa07000c0086dd00100005080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a0800655800000002"], 0x88) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) 4.703765944s ago: executing program 2 (id=286): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000480)={{r0}, 0x0, 0x2, @unused=[0xd6, 0x6, 0x3, 0x6], @subvolid=0x5}) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x90, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) tkill(r1, 0xb) ptrace$peek(0x1, r1, &(0x7f0000000100)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x40) 4.690702539s ago: executing program 3 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f00000003c0)=@chain) keyctl$link(0x8, r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000240)=0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f0000000380), &(0x7f00000005c0), &(0x7f0000000400)="35514798168cb310b2caf1d7fc00acdf870e180f0b405a119f1ef8bf3e39361ae43b56d73ac7cc4427096756364d245d0f0ac30d5e6a1f103764911d65adf266b541e5679a1f213d3d7c669b4b44a4712886d973a35dd07e34433684ecca883bb932e4a933bb074888fee815a2d5f6d33b8c173a4ad5cb2f51f91526770dea24f8bc0caa11c6dcfc5b45c0240479b20a0f16676e7334c215254df8a691a8c180ca22eeb593183df07dfdf9215dd8e3904f224913a24c3b5b6ce204d9cc1b78f606", 0xc1, 0xfffffffffffffffd) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x0, @pix_mp={0x5, 0x9, 0x3031334d, 0x1, 0x7, [{0x4, 0x7fff}, {0x9, 0x7}, {0x7}, {0x8, 0x1}, {0x9, 0x401}, {0xfa, 0x712}, {0x6, 0xffff}, {0xfff, 0x80000000}], 0x7, 0x2, 0x2, 0x1, 0x7}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed", 0xfffffc5f, 0xfffffffffffffffe) r4 = epoll_create1(0x0) r5 = socket(0x2, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x20000012}) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000002c0)={0xc0000000}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 4.005809533s ago: executing program 0 (id=288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001ffffffff0000000000e000000200000000000000000000000000000000000000000000000000000000000a00200040000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00"/112], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x1, r2, &(0x7f0000000080), 0x4000000000004) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 3.958207084s ago: executing program 2 (id=289): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800b0000000000011907800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0e00"/176], 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000454b3ae92585c156000000119078000000000000000000004e22007c9078040000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48}) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3b000000010006", 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010005fba000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="80000200fbc4010008001b0000000000a921920ac9c2edff3b09a04b9944fdb8ec0450f6a0de87917ed13c3bc5d400932e84622d4a129817dd6108a8f0f99eb3f7625466723e3243642d36e9f8b7433bc6395839098809128bbf27001891de676da8cb6a34271afa7d96cafcb47392c999a64e40a068a4158d802bbd738328857d010ef8a7841d93f521e834a4dfd4af2a76d58fe8f8f7ef3faa10d7b4"], 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 3.840555066s ago: executing program 0 (id=290): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00220100000084729babebb8be32f71d700fdc192faf28821be6fa8d1639fc419b444ef36beea5cec35004d9d80dc9e2df585b42bd0af1a53f921ad345f69ef82021da7b2823964c593556d98b25fd1a305747297848450da8e4fd0e6a8840c5dee268e1f1076bb3edc3be4019c1334b15580c9a4367ab36deb025978c70a90f000f7815e0cf62b8313900adfdfd89cc0871665978b8a499fcb83095c5345077f8b107747dc0580f608d57f415a1a877213c40afbb242b8b530be7042d55ef5d16786bff9db5193cd0073306acbc8e03198d0fb60b0e91295b2796ae2c172e8b0ee739a6153919deca3092eba2c299a69f9b6240ed21a97e5189daf63de410a25a6f2ee3101386b5c29fe1af"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") r6 = syz_usb_connect$cdc_ecm(0x2, 0x7b, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x8b, 0x30, 0xee, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x78, {{0x8, 0x24, 0x6, 0x0, 0x0, "d3a037"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x9e, 0x6, 0x2, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0xf}, @ncm={0x6, 0x24, 0x1a, 0x3ff, 0x21}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x3, 0x1, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x90, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x7f, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3, 0x2, 0x5}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x9, 0xff, 0x9, 0x8, 0x3}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xc, 0x2}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io(r6, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x20, 0x2f, 0x13, {0x13, 0x7, "4dbe66cfd6aa74c481fffc001606a7d9e4"}}, &(0x7f00000005c0)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "9578b82ed49be87b34083ae8808ce1427abd3c9b8fd9eac1044f6341751e80e1ef9db5ccb00e33018e05ae1d056b1029c1fa5478bb3f6d1cd75477fe89edde9d0e611ed3a28c66e0c75e08434c6c616fe44c9e3cf384e6c7384aacbf80f9527574fdd2ef5a655152f651f02bab23d0727a9253aa8e57bd58b8ab404826a678f55eb4bbbbb250552bc23187498236f8b8608a473bf1e370902113e1dc26fc3ac93ed0e1c8eee0eabf9423a2e530513a5bcb690ab6c6d0486f6564efdd081f53d6ae"}}, &(0x7f00000006c0)={0x0, 0xf, 0x53, {0x5, 0xf, 0x53, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "1f3c07f9783ec1192935677707b3aa44"}, @ssp_cap={0x14, 0x10, 0xa, 0xf8, 0x2, 0x1, 0xf000, 0xa6, [0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x6, 0x4, 0x6, 0x6b}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x5, 0x4, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x5, 0x5, 0x8, 0x6}, @generic={0x9, 0x10, 0x2, "8450237ac58c"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa2, 0x80, 0xe, 0x8, "975eea9c", "9a4733ed"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x2, 0x6, 0x9, 0x0, 0x4, 0x100}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000780)={0x0, 0x1, 0x3a, "94aef50db3e4ac07bb7c9b8b7628f3194a765db48c348f8765549a2df00d96db92dae2e1191d86690c447644ab637ceca1ba0e40673b354e4496"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x80, 0x16ac9795b48c37, [0xf0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000940)={0x40, 0xb, 0x2, "8304"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0xa}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @random="eeac8d0a4888"}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @random="984e74e570fa"}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "ebb2"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x60}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4e}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x8}}) 3.647166983s ago: executing program 3 (id=291): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x260800, 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802f4fffdffffff0800000000000000180100002025b1990b7b1af8ff00000000bfa100000000000007010000f2ffffffb702000008000000b70300006fbd00008500000006000000850000007d0000bc2cbfd36221c8efe8968448ba449b566bf755af612e4860426ac013f018db7264903eeac2aea82f002d36eab9e064074a12857783e65cba21a8f36bc338b25d499b2ce4d3418a222f9b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) recvfrom(r6, 0x0, 0x0, 0x12000, 0x0, 0x0) 3.329797825s ago: executing program 1 (id=292): syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x2d9b, 0x100, 0x200001, 0x40000333}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.140636328s ago: executing program 4 (id=293): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x232, 0x7d, 0x1, {{0x500, 0xf1, 0x0, 0x400, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000000)="5365a26a82d939767334eb17c4fcc2b7ee0d48f676ceb62fe2"}) 3.140335369s ago: executing program 1 (id=294): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r2, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.031790026s ago: executing program 3 (id=295): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0xa00000, &(0x7f0000000140)='grpquota') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x418, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x40, &(0x7f0000000100)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10181, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000d06010300000000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x24028004}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000001c0)={0xf0f026, 0x7fff}) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) 1.271672768s ago: executing program 4 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000003880)=ANY=[@ANYBLOB="1805000000000000", @ANYRES64, @ANYBLOB="0000000000000000020000000000000001800000000000004600000000000000ff000000020000000600000000000000a80f000000000000f9ffffffffffffffff0f00000000000002000000000000000300000000000000040000000000000007ed000000a0000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd55000001000080000000000000000000000000030000000000000006000000050000007663616e30000000060000000000000000000000000000000500000000000000c0ffffffffffffff030000000002000003000000000000000200000000000000050000000000000001ffffffffffffff0f000000000000000700000000000000ffff00000200000001feffff0030000002000000", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYBLOB="008000000080ff01000000000100000000000000a9d00000000000000a0000005e9a00002f6465762f6375736500000000000000060000000000000002000000000000005f0000000000000004000000000000000400000001000000000000000000000007000000000000000010000000000000f9ffffffffffffff018000000000000000000000000000000008000000000080830b000000c0000001000080", @ANYRES32, @ANYRES32, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000800b000000000000000200000000000000080000000000000001000000a200000028000000000000000200000000000000010000000000000009000000000000000600000000000000f8ffffffff7f0000050000000000000001000000000000000c000000000000000a00000000000000060000000000000006000000000000000300000006000000070000000080000008000000", @ANYRES32, @ANYRES32, @ANYBLOB="0500000003000000000000000300000000000000020000000000000001000000090000002c0000000000000005000000000000000100000000000000ff0700000000000004000000000000003d0000007f0000000600000000000000070000000000000005000000000000000300000000000000ec590000000000000500000000000000040000006c0f0000000000800040000080000000", @ANYRES32, @ANYRES8=r0, @ANYRESHEX, @ANYBLOB="01000000e262000000000000020000000000000001010000000000000100000003000000ad00000000000000"], 0x518) read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000) capget(0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x6, 0x44, 0x401, 0x800}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000008000000010000007f00000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005f10000000000026000000000f00000000000000000000003886eddab5585d6963895f16a0edfde250c48cf26401aeaffebd15b6a9bce9e11b03f8ea0b406ec897862eef616589e7d8d5336ab6c546b66f76fc223fb586e1076b0ec9fc0cbed92cad7691ae455c63603330c130a719c3f0a36f12f6b073a727"], 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000001000)={0x2020}, 0x2020) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x529400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in=@local}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xeb000000000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x80, 0x24d457e6, 0x301a, 0x5, 0x9, 0xf, 0x2, 0x4}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r2, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r8, 0xab09, 0x523c8930) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x0, 0x1012) 1.158474093s ago: executing program 1 (id=297): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x1036, &(0x7f0000001480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x1, 0xfff}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x1024, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@rr={0x7, 0x3, 0xd7}]}}, {0x4e22, 0x0, 0x100c, 0x0, @gue={{0x1, 0x0, 0x0, 0x20, 0x0, @void}, "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"}}}}}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000742f00000000"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x109000, 0x0) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000280)) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x40) setpriority(0x2, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) 1.156439723s ago: executing program 2 (id=298): mkdir(&(0x7f0000000400)='./file0\x00', 0x54) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x7d6f, &(0x7f0000000280)={0x0, 0xfd73, 0x8000, 0x2, 0x196}, &(0x7f0000000180), &(0x7f0000000300)=0x0) fallocate(r0, 0x42, 0x6, 0x7) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x40, 0x15}, 0x18) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x57a0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) dup2(r0, r0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r1, &(0x7f0000000480)=@IORING_OP_LINKAT={0x27, 0x68, 0x0, r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0\x00', r3, 0x1c00, 0x0, {0x0, r5}}) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="184100528c0a2350924596b400000000ea29ddef88b83884015cd6825cd257bca0d519bddeedf2365e88318a20841b8f3a91e25b251648e08e16286f6e96356635d4437d1fa23a503b4446f54a9a1ea8f01ebab46ea05738ef66bfe6e41285"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe25}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x100010, r3, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r11 = syz_open_dev$usbfs(0x0, 0x7fffffffffffffff, 0x2040) ioctl$USBDEVFS_REAPURBNDELAY(r11, 0x4008550d, &(0x7f0000000380)) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) ioprio_set$pid(0x1, 0x0, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x400000, 0x40) 734.532692ms ago: executing program 3 (id=299): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000001e0000000000"], 0x48) socket(0x1c, 0x5, 0x8000) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x9}, {0xa, 0x0, 0x9, @mcast1}, r6}}, 0x48) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x40000333}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x7, 0x0, 0x5, 0x7}, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='exfat\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0x8008551c, &(0x7f0000000000)={0xd616, 0x1, [{0x1, 0x1}]}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x40}, &(0x7f0000000080)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) 117.332812ms ago: executing program 4 (id=300): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(r4, 0x7fffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4044801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r6}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0xa0363159, 0x7, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, 0x0, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, 0xffffffffffffffff, 0x0, 0x578410eb) r10 = getpid() process_vm_readv(r10, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x3c, r1, 0xb97534d5fe9704cf, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 1 (id=301): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000480)={{r0}, 0x0, 0x2, @unused=[0xd6, 0x6, 0x3, 0x6], @subvolid=0x5}) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x90, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) tkill(r1, 0xb) ptrace$peek(0x1, r1, &(0x7f0000000100)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x40) kernel console output (not intermixed with test programs): isabled state [ 70.678373][ T5842] bridge_slave_0: entered allmulticast mode [ 70.685380][ T5842] bridge_slave_0: entered promiscuous mode [ 70.693837][ T5851] team0: Port device team_slave_0 added [ 70.699747][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.707636][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.715103][ T5842] bridge_slave_1: entered allmulticast mode [ 70.722034][ T5842] bridge_slave_1: entered promiscuous mode [ 70.739648][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.759312][ T5851] team0: Port device team_slave_1 added [ 70.784862][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.794266][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.802020][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.809124][ T5847] bridge_slave_0: entered allmulticast mode [ 70.816149][ T5847] bridge_slave_0: entered promiscuous mode [ 70.843285][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.867212][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.874835][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.882679][ T5847] bridge_slave_1: entered allmulticast mode [ 70.889334][ T5847] bridge_slave_1: entered promiscuous mode [ 70.921029][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.935246][ T5853] hsr_slave_0: entered promiscuous mode [ 70.941657][ T5853] hsr_slave_1: entered promiscuous mode [ 70.948853][ T5856] team0: Port device team_slave_0 added [ 70.962674][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.969622][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.995829][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.007561][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.014978][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.041003][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.066581][ T5856] team0: Port device team_slave_1 added [ 71.074651][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.099271][ T5842] team0: Port device team_slave_0 added [ 71.115397][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.146009][ T5842] team0: Port device team_slave_1 added [ 71.201519][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.208479][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.236372][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.248967][ T5847] team0: Port device team_slave_0 added [ 71.255083][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.261701][ T5851] hsr_slave_0: entered promiscuous mode [ 71.261943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.267920][ T5851] hsr_slave_1: entered promiscuous mode [ 71.279689][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 71.285566][ T5851] Cannot create hsr debugfs directory [ 71.295687][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.302955][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.329213][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.341633][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.348583][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.374652][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.386700][ T5847] team0: Port device team_slave_1 added [ 71.397303][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.404422][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.430511][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.491145][ T50] Bluetooth: hci3: command tx timeout [ 71.491245][ T5855] Bluetooth: hci1: command tx timeout [ 71.504180][ T5169] Bluetooth: hci2: command tx timeout [ 71.529669][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.536808][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.562753][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.580606][ T5855] Bluetooth: hci4: command tx timeout [ 71.586348][ T5169] Bluetooth: hci0: command tx timeout [ 71.604812][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.611995][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.638545][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.681195][ T5842] hsr_slave_0: entered promiscuous mode [ 71.687252][ T5842] hsr_slave_1: entered promiscuous mode [ 71.693347][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 71.699075][ T5842] Cannot create hsr debugfs directory [ 71.713388][ T5856] hsr_slave_0: entered promiscuous mode [ 71.719445][ T5856] hsr_slave_1: entered promiscuous mode [ 71.725482][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 71.731332][ T5856] Cannot create hsr debugfs directory [ 71.797864][ T5847] hsr_slave_0: entered promiscuous mode [ 71.805050][ T5847] hsr_slave_1: entered promiscuous mode [ 71.812070][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 71.817793][ T5847] Cannot create hsr debugfs directory [ 72.035684][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.047370][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.086979][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.098538][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.178533][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.193787][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.208641][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.223280][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.291683][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.302863][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.316455][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.337942][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.404631][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.416331][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.431082][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.441888][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.451756][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.481914][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.519552][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.526779][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.552528][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.559637][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.597156][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.607640][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.628170][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.645818][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.656204][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.704666][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.728153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.735318][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.745876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.753030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.761856][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.761869][ T30] audit: type=1400 audit(1754651993.583:86): avc: denied { sys_module } for pid=5853 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.872639][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.954439][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.976380][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.996253][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.017133][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.024275][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.040194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.047371][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.060082][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.073480][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.086848][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.093975][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.126478][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.133641][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.183279][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.203041][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.210114][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.247226][ T1316] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.254340][ T1316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.297122][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.369084][ T5853] veth0_vlan: entered promiscuous mode [ 73.413324][ T5853] veth1_vlan: entered promiscuous mode [ 73.523465][ T5853] veth0_macvtap: entered promiscuous mode [ 73.536630][ T5851] veth0_vlan: entered promiscuous mode [ 73.548617][ T5853] veth1_macvtap: entered promiscuous mode [ 73.575237][ T5169] Bluetooth: hci3: command tx timeout [ 73.581605][ T5169] Bluetooth: hci2: command tx timeout [ 73.587007][ T5169] Bluetooth: hci1: command tx timeout [ 73.608480][ T5851] veth1_vlan: entered promiscuous mode [ 73.641519][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.653401][ T5169] Bluetooth: hci0: command tx timeout [ 73.653873][ T50] Bluetooth: hci4: command tx timeout [ 73.685554][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.706811][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.729524][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.748514][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.758612][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.772686][ T5851] veth0_macvtap: entered promiscuous mode [ 73.783924][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.805192][ T5851] veth1_macvtap: entered promiscuous mode [ 73.820230][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.832503][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.897381][ T5842] veth0_vlan: entered promiscuous mode [ 73.922751][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.962710][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.974058][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.983499][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.011051][ T5842] veth1_vlan: entered promiscuous mode [ 74.026928][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.037736][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.056961][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.075061][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086507][ T5847] veth0_vlan: entered promiscuous mode [ 74.113534][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.122822][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.132683][ T5847] veth1_vlan: entered promiscuous mode [ 74.157123][ T30] audit: type=1400 audit(1754651994.983:87): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.3eOBno/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 74.181823][ T30] audit: type=1400 audit(1754651994.983:88): avc: denied { mount } for pid=5853 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.186181][ T5842] veth0_macvtap: entered promiscuous mode [ 74.207512][ T30] audit: type=1400 audit(1754651994.983:89): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.3eOBno/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.238637][ T30] audit: type=1400 audit(1754651994.993:90): avc: denied { mount } for pid=5853 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.264219][ T30] audit: type=1400 audit(1754651994.993:91): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.3eOBno/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.293312][ T5842] veth1_macvtap: entered promiscuous mode [ 74.319126][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.323776][ T30] audit: type=1400 audit(1754651994.993:92): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/root/syzkaller.3eOBno/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.361651][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.408909][ T5847] veth0_macvtap: entered promiscuous mode [ 74.426345][ T30] audit: type=1400 audit(1754651995.003:93): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.466544][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.478725][ T5847] veth1_macvtap: entered promiscuous mode [ 74.485396][ T30] audit: type=1400 audit(1754651995.093:94): avc: denied { mounton } for pid=5853 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.505264][ T5856] veth0_vlan: entered promiscuous mode [ 74.526859][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.537208][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.539087][ T30] audit: type=1400 audit(1754651995.093:95): avc: denied { mount } for pid=5853 comm="syz-executor" name="/" dev="gadgetfs" ino=5948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.544776][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.576624][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604555][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.628501][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.659341][ T5856] veth1_vlan: entered promiscuous mode [ 74.671677][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.686584][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.702903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.711567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.742873][ T1316] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.753564][ T1316] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.788809][ T1316] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.831529][ T1316] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.841956][ T5856] veth0_macvtap: entered promiscuous mode [ 74.892321][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.907343][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.937473][ T5856] veth1_macvtap: entered promiscuous mode [ 74.979504][ T5966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6'. [ 74.989523][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.998324][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.005988][ T5966] unsupported nlmsg_type 40 [ 75.153569][ T5970] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 75.220874][ T5970] sctp: [Deprecated]: syz.0.1 (pid 5970) Use of int in max_burst socket option. [ 75.220874][ T5970] Use struct sctp_assoc_value instead [ 75.375973][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.378120][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.394281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.455255][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.478822][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.494175][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.510499][ T3564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.521743][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.529289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.557659][ T3564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.588097][ T3564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.638439][ T3564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.653875][ T5169] Bluetooth: hci3: command tx timeout [ 75.653941][ T5855] Bluetooth: hci1: command tx timeout [ 75.660008][ T50] Bluetooth: hci2: command tx timeout [ 75.713471][ T5974] usb usb8: usbfs: process 5974 (syz.3.7) did not claim interface 0 before use [ 75.733388][ T50] Bluetooth: hci4: command tx timeout [ 75.738906][ T5855] Bluetooth: hci0: command tx timeout [ 75.850564][ T5986] syz.1.2: attempt to access beyond end of device [ 75.850564][ T5986] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 75.864544][ T5986] FAT-fs (loop1): unable to read boot sector [ 75.868775][ T5976] syz.1.2: attempt to access beyond end of device [ 75.868775][ T5976] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 75.930730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.098670][ T5976] XFS (nbd1): SB validate failed with error -5. [ 76.280596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.362864][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.394975][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.397527][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.462787][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.491315][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.595875][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.617989][ T5997] netlink: del zone limit has 4 unknown bytes [ 76.646865][ T5925] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.681382][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.810738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.845609][ T5925] usb 1-1: config 0 descriptor?? [ 77.010927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.267319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.370542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 77.472399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.472616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.575748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.576928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.733666][ T5855] Bluetooth: hci1: command tx timeout [ 77.741914][ T5855] Bluetooth: hci2: command tx timeout [ 77.747377][ T50] Bluetooth: hci3: command tx timeout [ 77.810976][ T5855] Bluetooth: hci0: command tx timeout [ 77.816443][ T5169] Bluetooth: hci4: command tx timeout [ 78.112562][ T5925] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 78.187829][ T6001] block nbd4: shutting down sockets [ 78.222220][ T5925] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 78.358562][ T6009] block nbd3: shutting down sockets [ 78.398303][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 78.398319][ T30] audit: type=1400 audit(1754651999.223:149): avc: denied { ioctl } for pid=6014 comm="syz.4.13" path="socket:[8500]" dev="sockfs" ino=8500 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.400497][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.431637][ T30] audit: type=1400 audit(1754651999.233:150): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.474351][ T5925] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 78.552927][ T6015] Zero length message leads to an empty skb [ 78.618038][ T30] audit: type=1400 audit(1754651999.233:151): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2788 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.704235][ T30] audit: type=1400 audit(1754651999.233:152): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2788 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.757683][ C1] Mem-Info: [ 78.757770][ C1] active_anon:9916 inactive_anon:0 isolated_anon:0 [ 78.757770][ C1] active_file:1294 inactive_file:40559 isolated_file:0 [ 78.757770][ C1] unevictable:768 dirty:1789 writeback:0 [ 78.757770][ C1] slab_reclaimable:11577 slab_unreclaimable:95987 [ 78.757770][ C1] mapped:30226 shmem:4226 pagetables:1176 [ 78.757770][ C1] sec_pagetables:0 bounce:0 [ 78.757770][ C1] kernel_misc_reclaimable:0 [ 78.757770][ C1] free:1315829 free_pcp:20972 free_cma:0 [ 78.757827][ C1] Node 0 active_anon:39664kB inactive_anon:0kB active_file:5176kB inactive_file:162036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120904kB dirty:7140kB writeback:0kB shmem:15368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11868kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.757883][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.757933][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.757992][ C1] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 78.758031][ C1] Node 0 DMA32 free:1358804kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39640kB inactive_anon:0kB active_file:5176kB inactive_file:160728kB unevictable:1536kB writepending:7132kB present:3129332kB managed:2539444kB mlocked:0kB bounce:0kB free_pcp:66016kB local_pcp:49156kB free_cma:0kB [ 78.758092][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 78.758129][ C1] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:8kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 78.758183][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 78.758228][ C1] Node 1 Normal free:3889132kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17836kB local_pcp:9292kB free_cma:0kB [ 78.758287][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 78.758324][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.758467][ C1] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 2*32kB (ME) 3*64kB (UME) 2*128kB (ME) 1*256kB (M) 2*512kB (ME) 3*1024kB (UME) 1*2048kB (U) 330*4096kB (M) = 1358644kB [ 78.758637][ C1] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 78.758754][ C1] Node 1 Normal: 130*4kB (UME) 44*8kB (UME) 33*16kB (UME) 50*32kB (UME) 24*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3889208kB [ 78.758920][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.758936][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.758950][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.758966][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.758981][ C1] 46075 total pagecache pages [ 78.758988][ C1] 0 pages in swap cache [ 78.758995][ C1] Free swap = 124996kB [ 78.759002][ C1] Total swap = 124996kB [ 78.759009][ C1] 2097051 pages RAM [ 78.759015][ C1] 0 pages HighMem/MovableOnly [ 78.759021][ C1] 430228 pages reserved [ 78.759027][ C1] 0 pages cma reserved [ 78.764328][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.764375][ T5843] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 78.764395][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.839070][ T5843] usb 2-1: config 0 descriptor?? [ 78.960608][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.166360][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.166595][ T54] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.166659][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.206304][ T54] usb 4-1: config 0 descriptor?? [ 79.383168][ T6021] block nbd4: shutting down sockets [ 79.660230][ T54] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 79.668123][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 79.770774][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.830808][ T30] audit: type=1400 audit(1754652000.573:153): avc: denied { connect } for pid=6026 comm="syz.4.17" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.940628][ T5903] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 79.940765][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.940840][ T5903] usb 3-1: Product: syz [ 79.940935][ T5903] usb 3-1: Manufacturer: syz [ 79.940984][ T5903] usb 3-1: SerialNumber: syz [ 80.001195][ T5903] usb 3-1: config 0 descriptor?? [ 80.100155][ T54] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 80.574786][ T6032] kAFS: No cell specified [ 80.662660][ T30] audit: type=1400 audit(1754652001.423:154): avc: denied { create } for pid=6017 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.723741][ T30] audit: type=1400 audit(1754652001.423:155): avc: denied { setopt } for pid=6017 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.831650][ T24] usb 1-1: USB disconnect, device number 2 [ 80.891602][ T5925] usb 3-1: USB disconnect, device number 2 [ 81.050290][ T6038] usb usb8: usbfs: process 6038 (syz.0.19) did not claim interface 0 before use [ 81.116973][ T1205] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.413687][ T30] audit: type=1400 audit(1754652002.243:156): avc: denied { read write } for pid=6044 comm="syz.0.21" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.438886][ T30] audit: type=1400 audit(1754652002.243:157): avc: denied { open } for pid=6044 comm="syz.0.21" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.452085][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.474285][ T1205] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.604564][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.646579][ T6047] vxlan0: entered promiscuous mode [ 82.346326][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.352371][ T975] cfg80211: failed to load regulatory.db [ 82.362980][ T1205] usb 5-1: config 0 descriptor?? [ 82.368061][ T30] audit: type=1400 audit(1754652002.363:158): avc: denied { write } for pid=6044 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.390219][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.401347][ T5925] usb 4-1: USB disconnect, device number 2 [ 82.424951][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.438427][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.451880][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.570292][ T5843] usbhid 2-1:0.0: can't add hid device: -71 [ 82.578859][ T5843] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 82.623560][ T5843] usb 2-1: USB disconnect, device number 2 [ 82.668308][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 82.684906][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 82.701940][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 82.709272][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 82.908392][ T1205] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 83.453229][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 83.479098][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 83.479138][ T30] audit: type=1400 audit(1754652004.053:161): avc: denied { write } for pid=6059 comm="syz.2.24" name="cgroup.subtree_control" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.658122][ T6065] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 83.775925][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 83.925919][ T1205] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input7 [ 83.957172][ T30] audit: type=1400 audit(1754652004.063:162): avc: denied { open } for pid=6059 comm="syz.2.24" path="" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.962903][ T6051] ceph: No mds server is up or the cluster is laggy [ 84.118428][ T1205] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 84.389660][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 84.414394][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 84.596113][ T30] audit: type=1400 audit(1754652005.423:163): avc: denied { create } for pid=6075 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.638664][ T6074] block nbd1: shutting down sockets [ 84.900753][ T30] audit: type=1400 audit(1754652005.453:164): avc: denied { connect } for pid=6075 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.900797][ T30] audit: type=1400 audit(1754652005.543:165): avc: denied { read } for pid=6075 comm="syz.0.28" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.900831][ T30] audit: type=1400 audit(1754652005.543:166): avc: denied { open } for pid=6075 comm="syz.0.28" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 86.259959][ T24] usb 5-1: USB disconnect, device number 2 [ 86.972704][ T6098] tipc: Started in network mode [ 86.980939][ T6098] tipc: Node identity ac14140f, cluster identity 4711 [ 86.990894][ T6098] tipc: New replicast peer: 255.255.255.255 [ 86.999739][ T6098] tipc: Enabled bearer , priority 10 [ 87.074540][ T50] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 87.640576][ T1205] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.654146][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.811104][ T1205] usb 1-1: Using ep0 maxpacket: 8 [ 87.820032][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.835335][ T54] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.847314][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.858949][ T1205] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 87.868250][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.878373][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.909125][ T54] usb 2-1: config 0 descriptor?? [ 87.914947][ T1205] usb 1-1: config 0 descriptor?? [ 88.090609][ T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.122169][ T24] tipc: Node number set to 2886997007 [ 88.250576][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 88.260083][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.270615][ T975] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 88.279725][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.291544][ T975] usb 4-1: config 0 descriptor?? [ 88.337941][ T54] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 88.549707][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input8 [ 88.841050][ T30] audit: type=1400 audit(1754652009.473:167): avc: denied { create } for pid=6102 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.214884][ T54] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 89.270143][ T30] audit: type=1400 audit(1754652009.483:168): avc: denied { setopt } for pid=6102 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.817443][ T30] audit: type=1400 audit(1754652010.633:169): avc: denied { read } for pid=6126 comm="syz.4.39" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 89.902461][ T30] audit: type=1400 audit(1754652010.643:170): avc: denied { open } for pid=6126 comm="syz.4.39" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.193354][ T30] audit: type=1400 audit(1754652010.643:171): avc: denied { block_suspend } for pid=6126 comm="syz.4.39" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.308572][ T30] audit: type=1400 audit(1754652011.133:172): avc: denied { ioctl } for pid=6130 comm="syz.2.40" path="socket:[8101]" dev="sockfs" ino=8101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.337726][ T30] audit: type=1400 audit(1754652011.133:173): avc: denied { write } for pid=6130 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.456900][ T1205] usbhid 1-1:0.0: can't add hid device: -71 [ 90.466972][ T1205] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 90.481202][ T1205] usb 1-1: USB disconnect, device number 3 [ 90.532633][ T6133] FAULT_INJECTION: forcing a failure. [ 90.532633][ T6133] name failslab, interval 1, probability 0, space 0, times 1 [ 90.557964][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.0.41 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 90.557992][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.558005][ T6133] Call Trace: [ 90.558011][ T6133] [ 90.558018][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 90.558050][ T6133] should_fail_ex+0x512/0x640 [ 90.558064][ T6133] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 90.558084][ T6133] should_failslab+0xc2/0x120 [ 90.558103][ T6133] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 90.558119][ T6133] ? __alloc_skb+0x2b2/0x380 [ 90.558146][ T6133] __alloc_skb+0x2b2/0x380 [ 90.558167][ T6133] ? __pfx___alloc_skb+0x10/0x10 [ 90.558185][ T6133] ? __bfs+0x148/0x290 [ 90.558212][ T6133] alloc_skb_with_frags+0xe0/0x860 [ 90.558234][ T6133] sock_alloc_send_pskb+0x7fb/0x990 [ 90.558256][ T6133] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 90.558278][ T6133] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 90.558300][ T6133] ? find_held_lock+0x2b/0x80 [ 90.558319][ T6133] ? dev_get_by_index+0x17c/0x380 [ 90.558347][ T6133] packet_sendmsg+0x2054/0x5850 [ 90.558384][ T6133] ? sock_has_perm+0x259/0x2f0 [ 90.558401][ T6133] ? __pfx_sock_has_perm+0x10/0x10 [ 90.558420][ T6133] ? __pfx_packet_sendmsg+0x10/0x10 [ 90.558454][ T6133] __sys_sendto+0x4a3/0x520 [ 90.558478][ T6133] ? __pfx___sys_sendto+0x10/0x10 [ 90.558518][ T6133] ? ksys_write+0x1ac/0x250 [ 90.558537][ T6133] ? __pfx_ksys_write+0x10/0x10 [ 90.558556][ T6133] __x64_sys_sendto+0xe0/0x1c0 [ 90.558578][ T6133] ? do_syscall_64+0x91/0x4c0 [ 90.558593][ T6133] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.558617][ T6133] do_syscall_64+0xcd/0x4c0 [ 90.558632][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.558648][ T6133] RIP: 0033:0x7fcb4458ebe9 [ 90.558663][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.558678][ T6133] RSP: 002b:00007fcb45473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.558696][ T6133] RAX: ffffffffffffffda RBX: 00007fcb447b5fa0 RCX: 00007fcb4458ebe9 [ 90.558705][ T6133] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 90.558714][ T6133] RBP: 00007fcb45473090 R08: 0000200000000200 R09: 0000000000000014 [ 90.558724][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.558732][ T6133] R13: 00007fcb447b6038 R14: 00007fcb447b5fa0 R15: 00007ffe5c3d15c8 [ 90.558750][ T6133] [ 90.892586][ T54] usb 2-1: USB disconnect, device number 3 [ 91.783690][ T975] usbhid 4-1:0.0: can't add hid device: -71 [ 92.022315][ T975] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 92.103658][ T975] usb 4-1: USB disconnect, device number 3 [ 92.650637][ T30] audit: type=1400 audit(1754652013.433:174): avc: denied { create } for pid=6156 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.798502][ T30] audit: type=1400 audit(1754652013.433:175): avc: denied { setopt } for pid=6156 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.000610][ T5964] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 93.240536][ T30] audit: type=1400 audit(1754652013.433:176): avc: denied { write } for pid=6156 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.635363][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.662692][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.674176][ T5964] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 93.690854][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.757479][ T6175] tipc: Started in network mode [ 93.762619][ T6175] tipc: Node identity ac14140f, cluster identity 4711 [ 93.772291][ T6175] tipc: New replicast peer: 255.255.255.255 [ 93.780174][ T6175] tipc: Enabled bearer , priority 10 [ 94.140676][ T50] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 94.183566][ T5964] usb 2-1: config 0 descriptor?? [ 94.406207][ T6162] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.421325][ T6162] netlink: 'syz.1.49': attribute type 27 has an invalid length. [ 94.443952][ T6162] syz.1.49 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.780643][ T5973] tipc: Node number set to 2886997007 [ 94.913028][ T6185] FAULT_INJECTION: forcing a failure. [ 94.913028][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.926304][ T30] audit: type=1400 audit(1754652015.743:177): avc: denied { mounton } for pid=6182 comm="syz.4.55" path="/proc/37/task" dev="proc" ino=9287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 94.990651][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.4.55 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 94.990679][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.990689][ T6185] Call Trace: [ 94.990695][ T6185] [ 94.990703][ T6185] dump_stack_lvl+0x16c/0x1f0 [ 94.990737][ T6185] should_fail_ex+0x512/0x640 [ 94.990758][ T6185] strncpy_from_user+0x3b/0x2e0 [ 94.990786][ T6185] getname_flags.part.0+0x8f/0x550 [ 94.990814][ T6185] getname_flags+0x93/0xf0 [ 94.990832][ T6185] do_sys_openat2+0xb8/0x1d0 [ 94.990856][ T6185] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.990881][ T6185] ? __fget_files+0x20e/0x3c0 [ 94.990905][ T6185] __x64_sys_openat+0x174/0x210 [ 94.990928][ T6185] ? __pfx___x64_sys_openat+0x10/0x10 [ 94.990949][ T6185] ? ksys_write+0x1ac/0x250 [ 94.990974][ T6185] do_syscall_64+0xcd/0x4c0 [ 94.990993][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.991011][ T6185] RIP: 0033:0x7fc9c298d550 [ 94.991026][ T6185] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 94.991042][ T6185] RSP: 002b:00007fc9c38a2f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 94.991060][ T6185] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc9c298d550 [ 94.991070][ T6185] RDX: 0000000000000002 RSI: 00007fc9c38a2fa0 RDI: 00000000ffffff9c [ 94.991079][ T6185] RBP: 00007fc9c38a2fa0 R08: 0000000000000000 R09: 00007fc9c38a2cd6 [ 94.991089][ T6185] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 94.991098][ T6185] R13: 00007fc9c2bb6128 R14: 00007fc9c2bb6090 R15: 00007ffea13f4858 [ 94.991121][ T6185] [ 96.926013][ T5964] usbhid 2-1:0.0: can't add hid device: -71 [ 96.933857][ T5964] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.984595][ T5964] usb 2-1: USB disconnect, device number 4 [ 97.129763][ T6199] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 97.136619][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.185660][ T6199] vhci_hcd vhci_hcd.0: Device attached [ 97.210793][ T6208] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 97.217454][ T6208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.225052][ T30] audit: type=1400 audit(1754652018.043:178): avc: denied { create } for pid=6204 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 97.252172][ T6208] vhci_hcd vhci_hcd.0: Device attached [ 97.258403][ T6199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.303036][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.63'. [ 97.312087][ T6212] netlink: 36 bytes leftover after parsing attributes in process `syz.0.63'. [ 97.322541][ T6199] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 97.329175][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.343331][ T6199] vhci_hcd vhci_hcd.0: Device attached [ 97.361008][ T54] vhci_hcd: vhci_device speed not set [ 97.366620][ T6199] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 97.373221][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.381107][ T6199] vhci_hcd vhci_hcd.0: Device attached [ 97.390761][ T6199] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 97.397401][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.409339][ T6199] vhci_hcd vhci_hcd.0: Device attached [ 97.425411][ T6199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.437481][ T6124] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.454391][ T54] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 97.476506][ T6199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.524769][ T6199] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.537118][ T6199] vhci_hcd vhci_hcd.0: port 0 already used [ 97.558700][ T30] audit: type=1400 audit(1754652018.383:179): avc: denied { write } for pid=6206 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.584586][ T6211] vhci_hcd: connection closed [ 97.585061][ T6209] vhci_hcd: connection closed [ 97.585784][ T64] vhci_hcd: stop threads [ 97.591043][ T6200] vhci_hcd: connection reset by peer [ 97.604659][ T6217] vhci_hcd: connection closed [ 97.604919][ T6214] vhci_hcd: connection closed [ 97.615217][ T30] audit: type=1400 audit(1754652018.413:180): avc: denied { execute } for pid=6198 comm="syz.1.60" path="/7/cpu.stat" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.615721][ T64] vhci_hcd: release socket [ 97.679297][ T6124] usb 5-1: Using ep0 maxpacket: 8 [ 97.724679][ T6224] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 97.735324][ T6224] sctp: [Deprecated]: syz.3.64 (pid 6224) Use of int in max_burst socket option. [ 97.735324][ T6224] Use struct sctp_assoc_value instead [ 97.803524][ T6124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.845120][ T6124] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 98.076290][ T64] vhci_hcd: disconnect device [ 98.091898][ T64] vhci_hcd: stop threads [ 98.097344][ T64] vhci_hcd: release socket [ 98.104655][ T64] vhci_hcd: disconnect device [ 98.110192][ T64] vhci_hcd: stop threads [ 98.115607][ T64] vhci_hcd: release socket [ 98.120198][ T64] vhci_hcd: disconnect device [ 98.145118][ T64] vhci_hcd: stop threads [ 98.156256][ T6124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.164637][ T64] vhci_hcd: release socket [ 98.168827][ T64] vhci_hcd: disconnect device [ 98.186762][ T64] vhci_hcd: stop threads [ 98.197704][ T6124] usb 5-1: config 0 descriptor?? [ 98.200434][ T64] vhci_hcd: release socket [ 98.240533][ T64] vhci_hcd: disconnect device [ 98.614915][ T6234] usb usb8: usbfs: process 6234 (syz.1.66) did not claim interface 0 before use [ 99.650584][ T30] audit: type=1400 audit(1754652020.373:181): avc: denied { ioctl } for pid=6247 comm="syz.1.71" path="socket:[9473]" dev="sockfs" ino=9473 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.833164][ T5843] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.032119][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 100.043878][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.743258][ T6124] usbhid 5-1:0.0: can't add hid device: -71 [ 100.754840][ T6124] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 100.794610][ T5843] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 100.826480][ T6124] usb 5-1: USB disconnect, device number 3 [ 100.838429][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.953939][ T5843] usb 1-1: config 0 descriptor?? [ 101.244531][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.278651][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.298087][ T6244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.312342][ T6244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.554909][ T5843] elo 0003:04E7:0030.0005: unknown main item tag 0x3 [ 101.597466][ T5843] elo 0003:04E7:0030.0005: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0 [ 101.715288][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 101.759390][ T5843] usb 1-1: USB disconnect, device number 4 [ 101.830689][ T6267] fido_id[6267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04E7:0030.0005/report_descriptor': No such device [ 101.968144][ T6273] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 102.006061][ T6273] sctp: [Deprecated]: syz.2.77 (pid 6273) Use of int in max_burst socket option. [ 102.006061][ T6273] Use struct sctp_assoc_value instead [ 102.295836][ T30] audit: type=1400 audit(1754652023.073:182): avc: denied { accept } for pid=6270 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.420679][ T30] audit: type=1400 audit(1754652023.073:183): avc: denied { read } for pid=6270 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 102.601612][ T54] vhci_hcd: vhci_device speed not set [ 102.660576][ T1205] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 102.669666][ T6286] usb usb8: usbfs: process 6286 (syz.0.81) did not claim interface 0 before use [ 102.778793][ T6285] usb usb8: usbfs: process 6285 (syz.2.80) did not claim interface 0 before use [ 102.896705][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 102.900534][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 102.959909][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 103.004706][ T6295] netlink: 'syz.1.82': attribute type 15 has an invalid length. [ 103.036555][ T6295] netlink: 'syz.1.82': attribute type 18 has an invalid length. [ 103.044477][ T1205] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 103.200518][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 103.209131][ T1205] usb usb4-port1: attempt power cycle [ 103.331345][ T30] audit: type=1400 audit(1754652024.163:184): avc: denied { read write } for pid=6298 comm="syz.4.83" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.358883][ T30] audit: type=1400 audit(1754652024.183:185): avc: denied { open } for pid=6298 comm="syz.4.83" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 103.541793][ T30] audit: type=1400 audit(1754652024.183:186): avc: denied { append } for pid=6298 comm="syz.4.83" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 103.650896][ T1205] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 103.788016][ T30] audit: type=1400 audit(1754652024.613:187): avc: denied { create } for pid=6305 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.816332][ T1205] usb 4-1: Invalid ep0 maxpacket: 64 [ 104.254776][ T30] audit: type=1400 audit(1754652024.643:188): avc: denied { write } for pid=6305 comm="syz.0.85" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.279018][ T30] audit: type=1400 audit(1754652024.643:189): avc: denied { open } for pid=6305 comm="syz.0.85" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 104.378017][ T6312] FAULT_INJECTION: forcing a failure. [ 104.378017][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 104.393411][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.0.85 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 104.393446][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.393457][ T6312] Call Trace: [ 104.393464][ T6312] [ 104.393472][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 104.393508][ T6312] should_fail_ex+0x512/0x640 [ 104.393526][ T6312] ? fs_reclaim_acquire+0xae/0x150 [ 104.393553][ T6312] ? tomoyo_encode2+0x100/0x3e0 [ 104.393577][ T6312] should_failslab+0xc2/0x120 [ 104.393601][ T6312] __kmalloc_noprof+0xd2/0x510 [ 104.393627][ T6312] tomoyo_encode2+0x100/0x3e0 [ 104.393656][ T6312] tomoyo_encode+0x29/0x50 [ 104.393680][ T6312] tomoyo_realpath_from_path+0x18f/0x6e0 [ 104.393707][ T6312] ? tomoyo_profile+0x47/0x60 [ 104.393738][ T6312] tomoyo_path_number_perm+0x245/0x580 [ 104.393758][ T6312] ? tomoyo_path_number_perm+0x237/0x580 [ 104.393781][ T6312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.393810][ T6312] ? find_held_lock+0x2b/0x80 [ 104.393858][ T6312] ? find_held_lock+0x2b/0x80 [ 104.393880][ T6312] ? hook_file_ioctl_common+0x145/0x410 [ 104.393914][ T6312] ? __fget_files+0x20e/0x3c0 [ 104.393941][ T6312] security_file_ioctl+0x9b/0x240 [ 104.393967][ T6312] __x64_sys_ioctl+0xb7/0x210 [ 104.393999][ T6312] do_syscall_64+0xcd/0x4c0 [ 104.394019][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.394038][ T6312] RIP: 0033:0x7fcb4458ebe9 [ 104.394054][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.394072][ T6312] RSP: 002b:00007fcb45452038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.394091][ T6312] RAX: ffffffffffffffda RBX: 00007fcb447b6090 RCX: 00007fcb4458ebe9 [ 104.394103][ T6312] RDX: 0000200000000180 RSI: 0000000040085400 RDI: 0000000000000003 [ 104.394114][ T6312] RBP: 00007fcb45452090 R08: 0000000000000000 R09: 0000000000000000 [ 104.394124][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.394134][ T6312] R13: 00007fcb447b6128 R14: 00007fcb447b6090 R15: 00007ffe5c3d15c8 [ 104.394160][ T6312] [ 104.394320][ T6312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.460507][ T1205] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 104.742372][ T24] usb usb36-port1: attempt power cycle [ 104.755461][ T30] audit: type=1400 audit(1754652025.583:190): avc: denied { setopt } for pid=6313 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.959692][ T1205] usb 4-1: device descriptor read/8, error -71 [ 104.982572][ T30] audit: type=1400 audit(1754652025.693:191): avc: denied { read write } for pid=6298 comm="syz.4.83" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 105.307682][ T6327] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 105.318069][ T6327] sctp: [Deprecated]: syz.0.90 (pid 6327) Use of int in max_burst socket option. [ 105.318069][ T6327] Use struct sctp_assoc_value instead [ 105.359416][ T1205] usb usb4-port1: unable to enumerate USB device [ 105.508761][ T24] usb usb36-port1: unable to enumerate USB device [ 106.210853][ T6333] block nbd2: shutting down sockets [ 106.373748][ T6339] Bluetooth: MGMT ver 1.23 [ 106.900796][ T6350] evm: overlay not supported [ 107.352514][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 107.352524][ T30] audit: type=1400 audit(1754652028.183:198): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.493101][ T30] audit: type=1400 audit(1754652028.213:199): avc: denied { read write } for pid=6351 comm="syz.1.95" name="mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 107.537646][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 107.780751][ T30] audit: type=1400 audit(1754652028.213:200): avc: denied { open } for pid=6351 comm="syz.1.95" path="/dev/input/mouse0" dev="devtmpfs" ino=980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.155748][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 108.194646][ T30] audit: type=1400 audit(1754652028.963:201): avc: denied { ioctl } for pid=6362 comm="syz.0.99" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.653530][ T6372] netlink: 220 bytes leftover after parsing attributes in process `syz.1.95'. [ 108.671519][ T30] audit: type=1400 audit(1754652029.483:202): avc: denied { nlmsg_read } for pid=6351 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.810478][ T5964] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.069464][ T5964] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.082399][ T5964] usb 4-1: config 0 has no interface number 0 [ 109.091273][ T5964] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.104359][ T5964] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.115578][ T5964] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.145441][ T5964] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 109.162962][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.185085][ T5964] usb 4-1: config 0 descriptor?? [ 109.490676][ T30] audit: type=1400 audit(1754652030.283:203): avc: denied { bind } for pid=6375 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.591465][ T30] audit: type=1400 audit(1754652030.283:204): avc: denied { name_bind } for pid=6375 comm="syz.1.102" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.615540][ T30] audit: type=1400 audit(1754652030.283:205): avc: denied { node_bind } for pid=6375 comm="syz.1.102" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 109.684495][ T5964] hid (null): report_id 35660 is invalid [ 109.965903][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.974701][ T6386] block nbd0: shutting down sockets [ 109.991106][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.078369][ T5964] uclogic 0003:28BD:0042.0006: failed retrieving string descriptor #100: -71 [ 110.089573][ T5964] uclogic 0003:28BD:0042.0006: failed retrieving pen parameters: -71 [ 110.140475][ T5964] uclogic 0003:28BD:0042.0006: pen probing failed: -71 [ 110.148212][ T5964] uclogic 0003:28BD:0042.0006: failed probing parameters: -71 [ 110.158638][ T5964] uclogic 0003:28BD:0042.0006: probe with driver uclogic failed with error -71 [ 110.286628][ T5964] usb 4-1: USB disconnect, device number 8 [ 110.333352][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 110.479417][ T30] audit: type=1400 audit(1754652031.303:206): avc: denied { create } for pid=6399 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.506311][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 110.519483][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.530231][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 110.544267][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.557872][ T24] usb 3-1: config 0 descriptor?? [ 110.579886][ T6402] usb usb8: usbfs: process 6402 (syz.4.110) did not claim interface 0 before use [ 110.834135][ T30] audit: type=1400 audit(1754652031.643:207): avc: denied { map } for pid=6405 comm="syz.0.111" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 110.869209][ T6414] ubi31: attaching mtd0 [ 110.880276][ T6414] ubi31: scanning is finished [ 110.885369][ T6414] ubi31: empty MTD device detected [ 112.308258][ T6421] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 112.359197][ T6421] sctp: [Deprecated]: syz.0.114 (pid 6421) Use of int in max_burst socket option. [ 112.359197][ T6421] Use struct sctp_assoc_value instead [ 112.569752][ T6414] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 113.602536][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 113.602583][ T30] audit: type=1400 audit(1754652033.543:210): avc: denied { shutdown } for pid=6426 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.628230][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.736787][ T30] audit: type=1400 audit(1754652033.543:211): avc: denied { connect } for pid=6426 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 113.795800][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 113.801998][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 113.816608][ T24] usb 3-1: USB disconnect, device number 3 [ 113.822863][ T30] audit: type=1400 audit(1754652033.543:212): avc: denied { name_connect } for pid=6426 comm="syz.0.116" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 113.950307][ T30] audit: type=1400 audit(1754652033.553:213): avc: denied { execute } for pid=6426 comm="syz.0.116" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 114.646681][ T30] audit: type=1400 audit(1754652033.613:214): avc: denied { write } for pid=6426 comm="syz.0.116" name="dev_mcast" dev="proc" ino=4026532820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 114.814082][ T30] audit: type=1400 audit(1754652035.563:215): avc: denied { create } for pid=6440 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.883782][ T6445] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.119'. [ 114.896559][ T6443] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.119'. [ 114.901417][ T6444] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 115.000497][ T30] audit: type=1400 audit(1754652035.653:216): avc: denied { setopt } for pid=6440 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 115.281947][ T6446] 9pnet_fd: p9_fd_create_unix (6446): problem connecting socket: ./file1: -2 [ 115.321441][ T6449] process 'syz.2.122' launched './file2' with NULL argv: empty string added [ 115.360594][ T30] audit: type=1400 audit(1754652035.853:217): avc: denied { relabelto } for pid=6442 comm="syz.3.121" name="file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 115.390588][ T30] audit: type=1400 audit(1754652035.853:218): avc: denied { associate } for pid=6442 comm="syz.3.121" name="file0" dev="tmpfs" ino=119 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:system_dbusd_var_run_t:s0" [ 115.403513][ T6446] ======================================================= [ 115.403513][ T6446] WARNING: The mand mount option has been deprecated and [ 115.403513][ T6446] and is ignored by this kernel. Remove the mand [ 115.403513][ T6446] option from the mount to silence this warning. [ 115.403513][ T6446] ======================================================= [ 115.420475][ T30] audit: type=1400 audit(1754652036.003:219): avc: denied { create } for pid=6440 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 115.453633][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.479040][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.843956][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 115.890645][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 115.913306][ T6465] ceph: No mds server is up or the cluster is laggy [ 116.271128][ T5843] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.519458][ T5843] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 116.557111][ T6478] block nbd1: shutting down sockets [ 116.595726][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.619961][ T5843] usb 3-1: Product: syz [ 116.640056][ T5843] usb 3-1: Manufacturer: syz [ 116.655207][ T5843] usb 3-1: SerialNumber: syz [ 116.689800][ T5843] usb 3-1: config 0 descriptor?? [ 116.834344][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.898784][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.009952][ T54] usb 3-1: USB disconnect, device number 4 [ 117.070477][ T975] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 117.126020][ T6489] binder: 6488:6489 ioctl 400c620e 200000000000 returned -22 [ 117.345909][ T6495] Bluetooth: MGMT ver 1.23 [ 117.825460][ T975] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 117.840630][ T975] usb 2-1: config 0 has no interface number 0 [ 117.853023][ T975] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 117.862647][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.871185][ T975] usb 2-1: Product: syz [ 117.875366][ T975] usb 2-1: Manufacturer: syz [ 117.880000][ T975] usb 2-1: SerialNumber: syz [ 117.891127][ T975] usb 2-1: config 0 descriptor?? [ 118.218303][ T54] libceph: connect (1)[c::]:6789 error -101 [ 118.221283][ T975] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 118.233115][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 118.326002][ T6484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.336592][ T975] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 118.345375][ T6509] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 118.359309][ T6503] ceph: No mds server is up or the cluster is laggy [ 118.393107][ T6485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.497648][ T6484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.511589][ T54] libceph: connect (1)[c::]:6789 error -101 [ 118.517641][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 118.533880][ T975] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 118.550803][ T975] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 118.766560][ T975] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 118.775495][ T6485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.819914][ T1205] usb 2-1: USB disconnect, device number 5 [ 118.857768][ T1205] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 118.927921][ T1205] keyspan 2-1:0.133: device disconnected [ 118.981017][ T6483] ALSA: mixer_oss: invalid OSS volume 'w2²Â' [ 119.448949][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 119.448962][ T30] audit: type=1400 audit(1754652040.273:240): avc: denied { bind } for pid=6515 comm="syz.4.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.498160][ T975] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.505796][ T5964] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 120.706606][ T975] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 120.728933][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.756121][ T975] usb 1-1: Product: syz [ 120.763054][ T975] usb 1-1: Manufacturer: syz [ 120.767863][ T975] usb 1-1: SerialNumber: syz [ 120.772955][ T5964] usb 4-1: Using ep0 maxpacket: 16 [ 120.780745][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.793623][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 120.819078][ T975] usb 1-1: config 0 descriptor?? [ 120.850247][ T5964] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 120.875838][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.969442][ T5964] usb 4-1: config 0 descriptor?? [ 121.460621][ T54] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.481537][ T5964] HID 045e:07da: Invalid code 65791 type 1 [ 122.489965][ T5964] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0007/input/input9 [ 122.564538][ T5964] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 122.616951][ T54] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.818170][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.888221][ T30] audit: type=1400 audit(1754652043.713:241): avc: denied { accept } for pid=6550 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 123.258898][ T54] usb 3-1: Product: syz [ 123.277129][ T54] usb 3-1: Manufacturer: syz [ 123.300768][ T54] usb 3-1: SerialNumber: syz [ 123.308749][ T54] usb 3-1: config 0 descriptor?? [ 123.334688][ T24] usb 1-1: USB disconnect, device number 5 [ 123.447169][ T5964] usb 4-1: USB disconnect, device number 9 [ 123.583333][ T975] usb 3-1: USB disconnect, device number 5 [ 123.612015][ T6558] syzkaller1: entered promiscuous mode [ 123.617617][ T6558] syzkaller1: entered allmulticast mode [ 123.625121][ T30] audit: type=1400 audit(1754652044.443:242): avc: denied { ioctl } for pid=6557 comm="syz.1.150" path="socket:[11047]" dev="sockfs" ino=11047 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.692422][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 124.312598][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.404580][ T30] audit: type=1400 audit(1754652045.233:243): avc: denied { write } for pid=6571 comm="syz.3.157" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.458378][ T30] audit: type=1400 audit(1754652045.233:244): avc: denied { open } for pid=6571 comm="syz.3.157" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.552710][ T30] audit: type=1400 audit(1754652045.233:245): avc: denied { ioctl } for pid=6571 comm="syz.3.157" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.728011][ T24] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 124.739729][ T975] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 124.775441][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.810935][ T24] usb 2-1: Product: syz [ 124.815203][ T30] audit: type=1400 audit(1754652045.633:246): avc: denied { write } for pid=6583 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.827204][ T24] usb 2-1: Manufacturer: syz [ 124.856110][ T24] usb 2-1: SerialNumber: syz [ 124.864196][ T24] usb 2-1: config 0 descriptor?? [ 124.868127][ T6587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.888158][ T975] usb 5-1: device descriptor read/64, error -71 [ 125.140572][ T975] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 125.176428][ T5964] usb 2-1: USB disconnect, device number 6 [ 125.484632][ T975] usb 5-1: device descriptor read/64, error -71 [ 125.663795][ T975] usb usb5-port1: attempt power cycle [ 126.240498][ T975] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 126.301376][ T975] usb 5-1: device descriptor read/8, error -71 [ 126.486620][ T30] audit: type=1400 audit(1754652047.303:247): avc: denied { watch watch_reads } for pid=6606 comm="syz.1.167" path="/29" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.593049][ T30] audit: type=1400 audit(1754652047.313:248): avc: denied { mount } for pid=6605 comm="syz.0.166" name="/" dev="autofs" ino=11135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 126.620562][ T975] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 126.709702][ T975] usb 5-1: device descriptor read/8, error -71 [ 126.745498][ T30] audit: type=1400 audit(1754652047.573:249): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 127.010941][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.232229][ T975] usb usb5-port1: unable to enumerate USB device [ 127.273612][ T54] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 127.387587][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.402614][ T54] usb 2-1: Product: syz [ 127.406831][ T54] usb 2-1: Manufacturer: syz [ 127.418262][ T54] usb 2-1: SerialNumber: syz [ 127.452069][ T54] usb 2-1: config 0 descriptor?? [ 127.488591][ T6626] geneve2: entered promiscuous mode [ 127.504497][ T6626] geneve2: entered allmulticast mode [ 127.529370][ T3523] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.641943][ T3523] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.715664][ T24] usb 2-1: USB disconnect, device number 7 [ 127.722872][ T1337] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.838439][ T1337] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 128.401273][ T6645] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 128.699219][ T6643] bridge_slave_0: left allmulticast mode [ 128.721211][ T6650] netlink: 392 bytes leftover after parsing attributes in process `syz.1.179'. [ 128.766596][ T30] audit: type=1400 audit(1754652049.543:250): avc: denied { read } for pid=6641 comm="syz.0.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.791997][ T6643] bridge_slave_0: left promiscuous mode [ 128.818387][ T6643] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.970813][ T6643] bridge_slave_1: left allmulticast mode [ 128.976602][ T6643] bridge_slave_1: left promiscuous mode [ 128.985234][ T6643] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.020958][ T6643] bond0: (slave bond_slave_0): Releasing backup interface [ 129.044103][ T6643] bond0: (slave bond_slave_1): Releasing backup interface [ 129.116768][ T6643] team0: Port device team_slave_0 removed [ 129.140462][ T6643] team0: Port device team_slave_1 removed [ 129.146824][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.154760][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.237760][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.252608][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.332971][ T6660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.355918][ T6660] FAULT_INJECTION: forcing a failure. [ 129.355918][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 129.459495][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.3.181 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 129.459521][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.459531][ T6660] Call Trace: [ 129.459536][ T6660] [ 129.459542][ T6660] dump_stack_lvl+0x16c/0x1f0 [ 129.459572][ T6660] should_fail_ex+0x512/0x640 [ 129.459587][ T6660] ? fs_reclaim_acquire+0xae/0x150 [ 129.459608][ T6660] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 129.459629][ T6660] should_failslab+0xc2/0x120 [ 129.459646][ T6660] __kmalloc_noprof+0xd2/0x510 [ 129.459668][ T6660] tomoyo_realpath_from_path+0xc2/0x6e0 [ 129.459689][ T6660] ? tomoyo_profile+0x47/0x60 [ 129.459715][ T6660] tomoyo_path_number_perm+0x245/0x580 [ 129.459730][ T6660] ? tomoyo_path_number_perm+0x237/0x580 [ 129.459749][ T6660] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.459769][ T6660] ? find_held_lock+0x2b/0x80 [ 129.459813][ T6660] ? find_held_lock+0x2b/0x80 [ 129.459834][ T6660] ? hook_file_ioctl_common+0x145/0x410 [ 129.459861][ T6660] ? __fget_files+0x20e/0x3c0 [ 129.459884][ T6660] security_file_ioctl+0x9b/0x240 [ 129.459907][ T6660] __x64_sys_ioctl+0xb7/0x210 [ 129.459936][ T6660] do_syscall_64+0xcd/0x4c0 [ 129.459954][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.459980][ T6660] RIP: 0033:0x7f427858ebe9 [ 129.459993][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.460008][ T6660] RSP: 002b:00007f42794d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.460024][ T6660] RAX: ffffffffffffffda RBX: 00007f42787b5fa0 RCX: 00007f427858ebe9 [ 129.460034][ T6660] RDX: 0000200000000100 RSI: 0000000000003b8c RDI: 0000000000000007 [ 129.460043][ T6660] RBP: 00007f42794d8090 R08: 0000000000000000 R09: 0000000000000000 [ 129.460052][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.460062][ T6660] R13: 00007f42787b6038 R14: 00007f42787b5fa0 R15: 00007ffcbe308f78 [ 129.460083][ T6660] [ 129.460121][ T6660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.784856][ T30] audit: type=1400 audit(1754652050.613:251): avc: denied { ioctl } for pid=6657 comm="syz.1.180" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 130.038167][ T6670] tipc: Enabling of bearer rejected, already enabled [ 130.221519][ T50] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 130.919747][ T6674] bridge0: port 3(gretap0) entered blocking state [ 130.932700][ T6674] bridge0: port 3(gretap0) entered disabled state [ 130.939439][ T6674] gretap0: entered allmulticast mode [ 130.952547][ T6674] gretap0: entered promiscuous mode [ 130.958415][ T6674] bridge0: port 3(gretap0) entered blocking state [ 130.965259][ T6674] bridge0: port 3(gretap0) entered forwarding state [ 130.981729][ T6674] gretap0: left allmulticast mode [ 130.986974][ T6674] gretap0: left promiscuous mode [ 130.995010][ T6674] bridge0: port 3(gretap0) entered disabled state [ 131.220481][ T54] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 131.595867][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.624890][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.635792][ T54] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.647016][ T54] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.657933][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.269060][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 132.414418][ T54] usb 1-1: config 0 descriptor?? [ 132.437234][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 132.467482][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.475910][ T54] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 132.513987][ T54] dvb-usb: bulk message failed: -22 (3/0) [ 132.579812][ T24] usb 2-1: Product: syz [ 132.588732][ T54] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 132.597175][ T24] usb 2-1: Manufacturer: syz [ 132.601820][ T24] usb 2-1: SerialNumber: syz [ 132.609641][ T54] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 132.618409][ T54] usb 1-1: media controller created [ 132.770792][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'. [ 132.794485][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801140][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.434006][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 133.459456][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 133.476486][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.622937][ T54] dvb-usb: bulk message failed: -22 (6/0) [ 133.629049][ T54] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 133.674277][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 133.715542][ T54] dvb-usb: schedule remote query interval to 150 msecs. [ 133.736901][ T54] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 133.826416][ T6700] : Can't lookup blockdev [ 133.892384][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 133.920717][ T54] dvb-usb: error while querying for an remote control event. [ 133.939665][ T5973] IPVS: starting estimator thread 0... [ 134.030660][ T6706] IPVS: using max 36 ests per chain, 86400 per kthread [ 134.057146][ T6703] bridge0: entered promiscuous mode [ 134.064002][ T6703] macsec1: entered promiscuous mode [ 134.082430][ T6703] bridge0: port 3(macsec1) entered blocking state [ 134.090468][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 134.117919][ T24] dvb-usb: error while querying for an remote control event. [ 134.577813][ T6703] bridge0: port 3(macsec1) entered disabled state [ 134.635090][ T5964] usb 1-1: USB disconnect, device number 6 [ 134.653600][ T6703] macsec1: entered allmulticast mode [ 134.675966][ T6703] bridge0: entered allmulticast mode [ 134.690216][ T54] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 135.130734][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 136.460932][ T5964] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 136.470659][ T6703] macsec1: left allmulticast mode [ 136.475792][ T6703] bridge0: left allmulticast mode [ 136.743499][ T6703] bridge0: left promiscuous mode [ 136.908690][ T6716] vxlan1: entered promiscuous mode [ 137.727074][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.774818][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.872968][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.056849][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.490536][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 138.720628][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 138.741552][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.751511][ T24] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 138.767752][ T54] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 138.781901][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.842912][ T24] usb 2-1: config 0 descriptor?? [ 138.859858][ T1205] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.141922][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.170419][ T54] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.179639][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.322617][ T1205] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.343254][ T54] usb 4-1: config 0 descriptor?? [ 139.386243][ T24] a4tech 0003:09DA:000A.0008: unknown main item tag 0x5 [ 139.442074][ T1205] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 139.587644][ T24] a4tech 0003:09DA:000A.0008: collection stack underflow [ 139.701713][ T1205] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.710441][ T24] a4tech 0003:09DA:000A.0008: item 0 2 0 12 parsing failed [ 139.718265][ T24] a4tech 0003:09DA:000A.0008: parse failed [ 139.742047][ T1205] usb 5-1: config 0 descriptor?? [ 139.765708][ T24] a4tech 0003:09DA:000A.0008: probe with driver a4tech failed with error -22 [ 139.785722][ T24] usb 2-1: USB disconnect, device number 9 [ 139.933626][ T54] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 139.958962][ T54] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0009/input/input11 [ 140.108130][ T54] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 140.346549][ T30] audit: type=1400 audit(1754652061.163:252): avc: denied { append } for pid=6775 comm="syz.0.211" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 140.369210][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.561635][ T30] audit: type=1400 audit(1754652061.393:253): avc: denied { ioctl } for pid=6753 comm="syz.3.204" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 140.586687][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.620010][ C1] Mem-Info: [ 140.620026][ C1] active_anon:16814 inactive_anon:0 isolated_anon:0 [ 140.620026][ C1] active_file:2237 inactive_file:40591 isolated_file:0 [ 140.620026][ C1] unevictable:768 dirty:207 writeback:0 [ 140.620026][ C1] slab_reclaimable:11699 slab_unreclaimable:97886 [ 140.620026][ C1] mapped:35702 shmem:8639 pagetables:1305 [ 140.620026][ C1] sec_pagetables:0 bounce:0 [ 140.620026][ C1] kernel_misc_reclaimable:0 [ 140.620026][ C1] free:1305524 free_pcp:13407 free_cma:0 [ 140.620082][ C1] Node 0 active_anon:67256kB inactive_anon:0kB active_file:8948kB inactive_file:162164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142808kB dirty:824kB writeback:0kB shmem:33020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12316kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.620139][ C1] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.620192][ C1] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.620252][ C1] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 140.620293][ C1] Node 0 DMA32 free:1315928kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67232kB inactive_anon:0kB active_file:8948kB inactive_file:160856kB unevictable:1536kB writepending:824kB present:3129332kB managed:2539444kB mlocked:0kB bounce:0kB free_pcp:37016kB local_pcp:17900kB free_cma:0kB [ 140.620352][ C1] lowmem_reserve[]: 0 0 1 1 1 [ 140.620388][ C1] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 140.620436][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 140.620472][ C1] Node 1 Normal free:3890788kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16576kB local_pcp:8864kB free_cma:0kB [ 140.620534][ C1] lowmem_reserve[]: 0 0 0 0 0 [ 140.620572][ C1] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.620697][ C1] Node 0 DMA32: 2*4kB (UE) 1*8kB (E) 1*16kB (U) 12*32kB (ME) 6*64kB (UE) 6*128kB (UME) 20*256kB (UME) 9*512kB (UME) 8*1024kB (ME) 3*2048kB (ME) 315*4096kB (M) = 1315872kB [ 140.620884][ C1] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 140.621013][ C1] Node 1 Normal: 181*4kB (UME) 44*8kB (UME) 33*16kB (UME) 83*32kB (UME) 29*64kB (UME) 5*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3890788kB [ 140.621194][ C1] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.621212][ C1] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.621228][ C1] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.621245][ C1] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.621261][ C1] 51463 total pagecache pages [ 140.621269][ C1] 0 pages in swap cache [ 140.621276][ C1] Free swap = 124996kB [ 140.621284][ C1] Total swap = 124996kB [ 140.621292][ C1] 2097051 pages RAM [ 140.621299][ C1] 0 pages HighMem/MovableOnly [ 140.621307][ C1] 430228 pages reserved [ 140.621315][ C1] 0 pages cma reserved [ 141.079377][ T6797] tipc: Started in network mode [ 141.079545][ T6797] tipc: Node identity ac14140f, cluster identity 4711 [ 141.081193][ T6797] tipc: New replicast peer: 255.255.255.255 [ 141.082263][ T6797] tipc: Enabled bearer , priority 10 [ 141.596800][ T50] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 141.623424][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.661731][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.733824][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.080528][ T975] tipc: Node number set to 2886997007 [ 142.312311][ T5973] usb 4-1: USB disconnect, device number 10 [ 142.484594][ T1205] usbhid 5-1:0.0: can't add hid device: -71 [ 142.561732][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 142.561918][ T1205] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.616549][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 142.872894][ T1205] usb 5-1: USB disconnect, device number 8 [ 143.891692][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 143.901328][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 143.909477][ T5169] Bluetooth: hci2: hardware error 0x00 [ 143.979077][ T6823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.222'. [ 145.415817][ T30] audit: type=1400 audit(1754652066.233:254): avc: denied { ioctl } for pid=6843 comm="syz.0.228" path="socket:[12039]" dev="sockfs" ino=12039 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.681422][ T6846] CIFS: VFS: Malformed UNC in devname [ 145.771638][ T30] audit: type=1400 audit(1754652066.553:255): avc: denied { create } for pid=6843 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.919703][ T30] audit: type=1400 audit(1754652066.573:256): avc: denied { ioctl } for pid=6843 comm="syz.0.228" path="socket:[12040]" dev="sockfs" ino=12040 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.944713][ T30] audit: type=1400 audit(1754652066.573:257): avc: denied { read } for pid=6843 comm="syz.0.228" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.985743][ T5169] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 146.059415][ T6853] tipc: Enabling of bearer rejected, already enabled [ 146.079633][ T5169] Bluetooth: hci4: Malformed HCI Event: 0x22 [ 146.419234][ T30] audit: type=1400 audit(1754652066.573:258): avc: denied { open } for pid=6843 comm="syz.0.228" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 146.445757][ T30] audit: type=1400 audit(1754652066.583:259): avc: denied { read write } for pid=6843 comm="syz.0.228" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.471617][ T1205] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 146.479202][ T5917] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 146.543171][ T30] audit: type=1400 audit(1754652066.583:260): avc: denied { open } for pid=6843 comm="syz.0.228" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.690579][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 146.892936][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.903040][ T1205] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 146.917617][ T5917] usb 1-1: not running at top speed; connect to a high speed hub [ 146.925597][ T1205] usb 5-1: config 0 has no interface number 0 [ 147.012883][ T5917] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 147.026228][ T1205] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=ac.ed [ 147.045026][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.054339][ T5917] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 147.066683][ T1205] usb 5-1: Product: syz [ 147.074497][ T5917] usb 1-1: config 8 interface 0 has no altsetting 0 [ 147.081480][ T1205] usb 5-1: Manufacturer: syz [ 147.086186][ T1205] usb 5-1: SerialNumber: syz [ 147.117977][ T5917] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 147.136232][ T1205] usb 5-1: config 0 descriptor?? [ 147.158512][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.169743][ T5917] usb 1-1: Product: syz [ 147.175113][ T5917] usb 1-1: Manufacturer: syz [ 147.180190][ T5917] usb 1-1: SerialNumber: syz [ 147.270819][ T6846] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.382342][ T6851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.408304][ T6851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.468897][ T1205] usbserial_generic 5-1:0.175: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 147.518246][ T30] audit: type=1400 audit(1754652068.343:261): avc: denied { create } for pid=6868 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.554470][ T1205] usbserial_generic 5-1:0.175: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 147.622845][ T6872] random: crng reseeded on system resumption [ 147.783814][ T1205] usbserial_generic 5-1:0.175: device has no bulk endpoints [ 147.863667][ T30] audit: type=1400 audit(1754652068.443:262): avc: denied { bind } for pid=6868 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 148.012806][ T1205] safe_serial 5-1:0.175: safe_serial converter detected [ 148.060841][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.171668][ T1205] safe_serial 5-1:0.175: probe with driver safe_serial failed with error -22 [ 148.255675][ T30] audit: type=1400 audit(1754652068.443:263): avc: denied { append } for pid=6868 comm="syz.1.233" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.405931][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.466922][ T1205] usb 5-1: USB disconnect, device number 9 [ 148.519291][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.609941][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.987110][ T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 149.069899][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.146054][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.555361][ T24] usb 2-1: config 0 descriptor?? [ 150.083261][ T5917] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 150.128560][ T5917] usb 1-1: selecting invalid altsetting 0 [ 150.307448][ T24] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 150.348839][ T5917] usb 1-1: USB disconnect, device number 7 [ 150.361353][ T24] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 150.505071][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 150.505086][ T30] audit: type=1400 audit(1754652071.333:268): avc: denied { ioctl } for pid=6868 comm="syz.1.233" path="socket:[12134]" dev="sockfs" ino=12134 ioctlcmd=0x89ff scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 150.593011][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.609814][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.639704][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.648661][ T30] audit: type=1400 audit(1754652071.343:269): avc: denied { open } for pid=6887 comm="syz.3.237" path="/dev/ttyqa" dev="devtmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 150.711417][ T24] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 150.840177][ T30] audit: type=1400 audit(1754652071.663:270): avc: denied { sys_module } for pid=6868 comm="syz.1.233" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 151.192047][ T24] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 151.203692][ T24] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 151.270164][ T24] usb 2-1: USB disconnect, device number 10 [ 151.670478][ T5964] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.697164][ T6913] syz.3.242: attempt to access beyond end of device [ 151.697164][ T6913] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 151.710450][ T6913] XFS (nbd3): SB validate failed with error -5. [ 151.805821][ T6921] syz.3.242: attempt to access beyond end of device [ 151.805821][ T6921] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 151.820456][ T6921] FAT-fs (loop3): unable to read boot sector [ 151.960869][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 152.000886][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 152.030464][ T975] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 152.118176][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 152.137245][ T5964] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 152.158162][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.179549][ T5964] usb 3-1: Product: syz [ 152.187954][ T5964] usb 3-1: Manufacturer: syz [ 152.187975][ T5964] usb 3-1: SerialNumber: syz [ 152.203035][ T5964] usb 3-1: config 0 descriptor?? [ 152.219662][ T5964] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 152.243901][ T975] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 152.243927][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.243945][ T975] usb 5-1: Product: syz [ 152.243957][ T975] usb 5-1: Manufacturer: syz [ 152.243968][ T975] usb 5-1: SerialNumber: syz [ 152.247518][ T975] usb 5-1: config 0 descriptor?? [ 152.653829][ T975] usb 5-1: USB disconnect, device number 10 [ 152.737882][ T6930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 152.739885][ T30] audit: type=1400 audit(1754652073.563:271): avc: denied { create } for pid=6929 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.743133][ T30] audit: type=1400 audit(1754652073.573:272): avc: denied { connect } for pid=6929 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 152.912799][ T6934] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 153.051729][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.229658][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.302480][ T5925] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 153.332770][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.447412][ T6940] loop6: detected capacity change from 0 to 63 [ 153.471859][ T5925] usb 1-1: config 0 descriptor?? [ 153.512931][ T6942] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 153.557551][ T6942] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 153.557817][ T6067] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 153.581762][ T6942] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 153.583549][ T6067] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 153.624296][ T6067] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 153.633155][ T6942] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 153.667705][ T6067] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.676230][ T6067] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.686956][ T6067] Buffer I/O error on dev loop6, logical block 0, async page read [ 153.696145][ T6067] ldm_validate_partition_table(): Disk read failed. [ 153.706104][ T6067] Dev loop6: unable to read RDB block 0 [ 153.712936][ T6067] loop6: unable to read partition table [ 153.765239][ T6940] ldm_validate_partition_table(): Disk read failed. [ 153.790754][ T6940] Dev loop6: unable to read RDB block 0 [ 153.801127][ T6940] loop6: unable to read partition table [ 153.822066][ T6940] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 153.868148][ T5218] ldm_validate_partition_table(): Disk read failed. [ 153.884652][ T5218] Dev loop6: unable to read RDB block 0 [ 153.891195][ T5218] loop6: unable to read partition table [ 153.898552][ T30] audit: type=1400 audit(1754652074.723:273): avc: denied { read } for pid=6946 comm="syz.1.252" path="socket:[12806]" dev="sockfs" ino=12806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.992508][ T30] audit: type=1400 audit(1754652074.823:274): avc: denied { write } for pid=6946 comm="syz.1.252" path="socket:[12806]" dev="sockfs" ino=12806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.643446][ T6947] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 155.667675][ T6966] kAFS: No cell specified [ 155.992327][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 156.045869][ T6973] vxlan0: entered promiscuous mode [ 156.065033][ T3564] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.261853][ T3564] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.601048][ T3564] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.733117][ T3564] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.987235][ T5964] usb 3-1: USB disconnect, device number 6 [ 157.073928][ T6983] usb usb8: usbfs: process 6983 (syz.1.259) did not claim interface 0 before use [ 157.160572][ T5843] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 157.239793][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 157.254302][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 157.328933][ T5925] usb 1-1: USB disconnect, device number 8 [ 157.345488][ T5843] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 157.354877][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.373226][ T5843] usb 5-1: Product: syz [ 157.412895][ T5843] usb 5-1: Manufacturer: syz [ 157.417712][ T5843] usb 5-1: SerialNumber: syz [ 157.424250][ T6986] syz.2.261: attempt to access beyond end of device [ 157.424250][ T6986] nbd2: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 157.437959][ T6986] XFS (nbd2): SB validate failed with error -5. [ 157.492832][ T5843] usb 5-1: config 0 descriptor?? [ 157.553120][ T6993] syz.2.261: attempt to access beyond end of device [ 157.553120][ T6993] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 157.566665][ T6993] FAT-fs (loop2): unable to read boot sector [ 157.895660][ T5843] usb 5-1: USB disconnect, device number 11 [ 158.338581][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 159.195925][ T7010] syz.1.263: attempt to access beyond end of device [ 159.195925][ T7010] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 159.208855][ T7010] FAT-fs (loop1): unable to read boot sector [ 159.362537][ T6999] syz.1.263: attempt to access beyond end of device [ 159.362537][ T6999] nbd1: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 159.376966][ T6999] XFS (nbd1): SB validate failed with error -5. [ 159.514210][ T6067] udevd[6067]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.634540][ T30] audit: type=1400 audit(1754652080.463:275): avc: denied { write } for pid=7016 comm="syz.2.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 159.781109][ T975] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.881699][ T7021] tipc: Started in network mode [ 159.886568][ T7021] tipc: Node identity , cluster identity 4711 [ 159.892672][ T7021] tipc: Failed to set node id, please configure manually [ 159.899687][ T7021] tipc: Enabling of bearer rejected, failed to enable media [ 159.961602][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=7022 comm=syz.0.269 [ 159.983267][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 160.020286][ T7024] vxlan0: entered promiscuous mode [ 160.031948][ T975] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 160.603843][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.605789][ T1337] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.630108][ T975] usb 4-1: Product: syz [ 160.639201][ T975] usb 4-1: Manufacturer: syz [ 160.647506][ T975] usb 4-1: SerialNumber: syz [ 160.653625][ T975] usb 4-1: config 0 descriptor?? [ 160.752472][ T1337] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.762737][ T1337] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.781711][ T1337] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.484950][ T5973] usb 4-1: USB disconnect, device number 11 [ 161.760451][ T975] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.924114][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.948250][ T7039] FAULT_INJECTION: forcing a failure. [ 161.948250][ T7039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.963054][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: syz.1.273 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 161.963078][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.963088][ T7039] Call Trace: [ 161.963094][ T7039] [ 161.963101][ T7039] dump_stack_lvl+0x16c/0x1f0 [ 161.963133][ T7039] should_fail_ex+0x512/0x640 [ 161.963154][ T7039] strncpy_from_user+0x3b/0x2e0 [ 161.963183][ T7039] getname_flags.part.0+0x8f/0x550 [ 161.963213][ T7039] getname_flags+0x93/0xf0 [ 161.963231][ T7039] user_path_at+0x24/0x60 [ 161.963250][ T7039] do_fchownat+0xf9/0x200 [ 161.963274][ T7039] ? __pfx_do_fchownat+0x10/0x10 [ 161.963292][ T7039] ? ksys_write+0x1ac/0x250 [ 161.963308][ T7039] ? __pfx_ksys_write+0x10/0x10 [ 161.963328][ T7039] __x64_sys_chown+0x7b/0xc0 [ 161.963345][ T7039] ? lockdep_hardirqs_on+0x7c/0x110 [ 161.963365][ T7039] do_syscall_64+0xcd/0x4c0 [ 161.963378][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.963392][ T7039] RIP: 0033:0x7f9ea838ebe9 [ 161.963404][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.963418][ T7039] RSP: 002b:00007f9ea929c038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 161.963431][ T7039] RAX: ffffffffffffffda RBX: 00007f9ea85b6180 RCX: 00007f9ea838ebe9 [ 161.963440][ T7039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 161.963447][ T7039] RBP: 00007f9ea929c090 R08: 0000000000000000 R09: 0000000000000000 [ 161.963455][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.963463][ T7039] R13: 00007f9ea85b6218 R14: 00007f9ea85b6180 R15: 00007fff0c70e2b8 [ 161.963481][ T7039] [ 162.144448][ T975] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.165815][ T975] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.183484][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 162.365814][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 162.450903][ T975] usb 3-1: Product: syz [ 162.455177][ T975] usb 3-1: Manufacturer: syz [ 162.491560][ T5973] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.502305][ T975] usb 3-1: SerialNumber: syz [ 162.630445][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.678584][ T5973] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.695697][ T5973] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.816241][ T24] usb 4-1: device descriptor read/64, error -71 [ 162.883149][ T975] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.914817][ T5973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.971249][ T30] audit: type=1400 audit(1754652083.753:276): avc: denied { read write } for pid=7032 comm="syz.2.272" name="lp0" dev="devtmpfs" ino=3015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.976992][ T5973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 163.007976][ T975] usb 3-1: USB disconnect, device number 7 [ 163.019588][ T30] audit: type=1400 audit(1754652083.753:277): avc: denied { open } for pid=7032 comm="syz.2.272" path="/dev/usb/lp0" dev="devtmpfs" ino=3015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.021829][ T975] usblp0: removed [ 163.051370][ T5973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 163.077268][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 163.116223][ T5973] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.173579][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.175901][ T30] audit: type=1400 audit(1754652083.753:278): avc: denied { ioctl } for pid=7032 comm="syz.2.272" path="/dev/usb/lp0" dev="devtmpfs" ino=3015 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 163.217557][ T5973] usb 5-1: Product: syz [ 163.222656][ T30] audit: type=1400 audit(1754652083.843:279): avc: denied { execute } for pid=7048 comm="syz.0.277" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 163.250329][ T5973] usb 5-1: Manufacturer: syz [ 163.266215][ T5973] cdc_wdm 5-1:1.0: skipping garbage [ 163.272252][ T5973] cdc_wdm 5-1:1.0: skipping garbage [ 163.280342][ T5973] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 163.349175][ T5973] cdc_wdm 5-1:1.0: Unknown control protocol [ 163.411045][ T24] usb 4-1: device descriptor read/64, error -71 [ 163.524121][ T24] usb usb4-port1: attempt power cycle [ 163.728231][ T7060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 164.068128][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 164.094667][ T24] usb 4-1: device descriptor read/8, error -71 [ 164.163360][ T7060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.280'. [ 164.177085][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 164.237853][ T30] audit: type=1400 audit(1754652085.063:280): avc: denied { create } for pid=7036 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.309664][ T30] audit: type=1400 audit(1754652085.103:281): avc: denied { setopt } for pid=7036 comm="syz.4.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 164.360560][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 164.420929][ T24] usb 4-1: device descriptor read/8, error -71 [ 164.530662][ T24] usb usb4-port1: unable to enumerate USB device [ 165.210737][ T7077] tipc: Enabling of bearer rejected, already enabled [ 165.226243][ T5169] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 166.004835][ T1205] usb 5-1: USB disconnect, device number 12 [ 167.031332][ T7084] syz.4.285 uses obsolete (PF_INET,SOCK_PACKET) [ 167.043273][ T7084] syz.4.285: attempt to access beyond end of device [ 167.043273][ T7084] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 167.205384][ T7090] ceph: No mds server is up or the cluster is laggy [ 167.212836][ T24] libceph: connect (1)[c::]:6789 error -101 [ 167.219652][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 167.225743][ T30] audit: type=1400 audit(1754652088.043:282): avc: denied { map } for pid=7080 comm="syz.4.285" path="socket:[13553]" dev="sockfs" ino=13553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.060736][ T5973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 169.162619][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.321952][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.329637][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.360751][ T5973] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 169.394055][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.407298][ T5973] usb 1-1: config 0 descriptor?? [ 169.448071][ T7122] syz.3.295: attempt to access beyond end of device [ 169.448071][ T7122] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 169.464804][ T7122] XFS (nbd3): SB validate failed with error -5. [ 169.478508][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.592464][ T7122] syz.3.295: attempt to access beyond end of device [ 169.592464][ T7122] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 169.606227][ T7122] FAT-fs (loop3): unable to read boot sector [ 169.828097][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.063329][ T6726] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.075410][ T6726] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.085787][ T6726] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.097991][ T6726] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.140261][ T6726] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.166629][ T6726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.442676][ T5973] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 170.465411][ T6726] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.498147][ T5973] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input12 [ 170.499833][ T6726] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.555475][ T7140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.560278][ T30] audit: type=1400 audit(1754652091.363:283): avc: denied { mount } for pid=7139 comm="syz.2.298" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 170.642493][ T30] audit: type=1400 audit(1754652091.463:284): avc: denied { write } for pid=7138 comm="syz.1.297" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.667379][ T7137] block nbd4: shutting down sockets [ 170.688223][ T5973] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 170.787758][ T7147] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 170.787758][ T7147] program syz.1.297 not setting count and/or reply_len properly [ 170.797961][ T7102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.814548][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.861715][ T7102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.066722][ T7146] usb usb8: usbfs: process 7146 (syz.3.299) did not claim interface 0 before use [ 171.090536][ T30] audit: type=1400 audit(1754652091.463:285): avc: denied { open } for pid=7138 comm="syz.1.297" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.177804][ T30] audit: type=1400 audit(1754652091.593:286): avc: denied { ioctl } for pid=7138 comm="syz.1.297" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 171.230479][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 171.235972][ T30] audit: type=1400 audit(1754652091.723:287): avc: denied { read } for pid=7138 comm="syz.1.297" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.237089][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.268898][ T30] audit: type=1400 audit(1754652091.733:288): avc: denied { open } for pid=7138 comm="syz.1.297" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.293060][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.334160][ T30] audit: type=1400 audit(1754652091.753:289): avc: denied { ioctl } for pid=7138 comm="syz.1.297" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 171.359064][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.368023][ T5973] usb 1-1: USB disconnect, device number 9 [ 171.384736][ T30] audit: type=1400 audit(1754652091.783:290): avc: denied { getopt } for pid=7138 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.394965][ T5917] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 171.416435][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.425251][ T5917] usb 3-1: Product: syz [ 171.429663][ T5917] usb 3-1: Manufacturer: syz [ 171.433203][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 171.457199][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 171.492798][ T7158] ------------[ cut here ]------------ [ 171.498484][ T7158] WARNING: CPU: 1 PID: 7158 at net/mac80211/rate.c:53 rate_control_rate_init+0x5c0/0x720 [ 171.508849][ T7158] Modules linked in: [ 171.513040][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.4.300 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 171.524649][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.534779][ T7158] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 171.540963][ T7158] Code: 48 8d 35 00 00 00 00 e8 4e 33 8f f6 e8 49 5a 99 f6 e9 25 fe ff ff e8 2f 04 b3 f6 90 0f 0b 90 e9 17 fe ff ff e8 21 04 b3 f6 90 <0f> 0b 90 eb b1 e8 16 04 b3 f6 e8 21 24 98 f6 31 ff 89 c3 89 c6 e8 [ 171.560787][ T7158] RSP: 0018:ffffc9000f9af218 EFLAGS: 00010287 [ 171.567420][ T7158] RAX: 00000000000007cc RBX: ffff8880258a4000 RCX: ffffc90010141000 [ 171.575440][ T7158] RDX: 0000000000080000 RSI: ffffffff8b088eff RDI: 0000000000000005 [ 171.584220][ T7158] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 171.592844][ T7158] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888142eb87e0 [ 171.600875][ T7158] R13: ffff888055810e40 R14: ffff888061dc8000 R15: 0000000000000000 [ 171.608945][ T7158] FS: 00007fc9c38826c0(0000) GS:ffff8881247c4000(0000) knlGS:0000000000000000 [ 171.617954][ T7158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.624599][ T7158] CR2: 0000001b32206ff8 CR3: 000000007077f000 CR4: 00000000003526f0 [ 171.632613][ T7158] Call Trace: [ 171.635924][ T7158] [ 171.638862][ T7158] rate_control_rate_init_all_links+0x76/0x1e0 [ 171.645095][ T7158] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 171.651524][ T7158] sta_apply_parameters+0xc37/0x18b0 [ 171.656831][ T7158] ieee80211_add_station+0x3fa/0x6c0 [ 171.662171][ T7158] nl80211_new_station+0x14ff/0x1c90 [ 171.667494][ T7158] ? __pfx_nl80211_new_station+0x10/0x10 [ 171.673196][ T7158] ? nl80211_pre_doit+0x1b0/0xb10 [ 171.678244][ T7158] genl_family_rcv_msg_doit+0x209/0x2f0 [ 171.684321][ T7158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 171.690847][ T7158] ? bpf_lsm_capable+0x9/0x10 [ 171.695545][ T7158] ? security_capable+0x7e/0x260 [ 171.700511][ T7158] ? ns_capable+0xd7/0x110 [ 171.704932][ T7158] genl_rcv_msg+0x55c/0x800 [ 171.709443][ T7158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.714505][ T7158] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 171.719881][ T7158] ? __pfx_nl80211_new_station+0x10/0x10 [ 171.725590][ T7158] ? __pfx_nl80211_post_doit+0x10/0x10 [ 171.731132][ T7158] netlink_rcv_skb+0x158/0x420 [ 171.735922][ T7158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 171.741006][ T7158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.746316][ T7158] ? netlink_deliver_tap+0x1ae/0xd30 [ 171.751645][ T7158] genl_rcv+0x28/0x40 [ 171.755630][ T7158] netlink_unicast+0x5a7/0x870 [ 171.760422][ T7158] ? __pfx_netlink_unicast+0x10/0x10 [ 171.765705][ T7158] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 171.771725][ T7158] netlink_sendmsg+0x8d1/0xdd0 [ 171.776494][ T7158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.781879][ T7158] ____sys_sendmsg+0xa95/0xc70 [ 171.787124][ T7158] ? copy_msghdr_from_user+0x10a/0x160 [ 171.793001][ T7158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.798301][ T7158] ? __pfx_futex_wake_mark+0x10/0x10 [ 171.803621][ T7158] ___sys_sendmsg+0x134/0x1d0 [ 171.808314][ T7158] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.813621][ T7158] __sys_sendmsg+0x16d/0x220 [ 171.818219][ T7158] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.823373][ T7158] ? __x64_sys_futex+0x1e0/0x4c0 [ 171.828342][ T7158] do_syscall_64+0xcd/0x4c0 [ 171.832877][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.838776][ T7158] RIP: 0033:0x7fc9c298ebe9 [ 171.843212][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.862840][ T7158] RSP: 002b:00007fc9c3882038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.871346][ T7158] RAX: ffffffffffffffda RBX: 00007fc9c2bb6180 RCX: 00007fc9c298ebe9 [ 171.879340][ T7158] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 171.887822][ T7158] RBP: 00007fc9c2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 171.896232][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.904279][ T7158] R13: 00007fc9c2bb6218 R14: 00007fc9c2bb6180 R15: 00007ffea13f4858 [ 171.912295][ T7158] [ 171.915314][ T7158] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.922590][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.4.300 Not tainted 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(full) [ 171.934126][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.944173][ T7158] Call Trace: [ 171.947445][ T7158] [ 171.950370][ T7158] dump_stack_lvl+0x3d/0x1f0 [ 171.954977][ T7158] vpanic+0x6e8/0x7a0 [ 171.958984][ T7158] ? __pfx_vpanic+0x10/0x10 [ 171.963494][ T7158] ? rate_control_rate_init+0x5c0/0x720 [ 171.969045][ T7158] panic+0xca/0xd0 [ 171.972776][ T7158] ? __pfx_panic+0x10/0x10 [ 171.977209][ T7158] check_panic_on_warn+0xab/0xb0 [ 171.982148][ T7158] __warn+0xf6/0x3c0 [ 171.986038][ T7158] ? rate_control_rate_init+0x5c0/0x720 [ 171.991594][ T7158] report_bug+0x3c3/0x580 [ 171.995929][ T7158] ? rate_control_rate_init+0x5c0/0x720 [ 172.001482][ T7158] handle_bug+0x184/0x210 [ 172.005809][ T7158] exc_invalid_op+0x17/0x50 [ 172.010307][ T7158] asm_exc_invalid_op+0x1a/0x20 [ 172.015151][ T7158] RIP: 0010:rate_control_rate_init+0x5c0/0x720 [ 172.021319][ T7158] Code: 48 8d 35 00 00 00 00 e8 4e 33 8f f6 e8 49 5a 99 f6 e9 25 fe ff ff e8 2f 04 b3 f6 90 0f 0b 90 e9 17 fe ff ff e8 21 04 b3 f6 90 <0f> 0b 90 eb b1 e8 16 04 b3 f6 e8 21 24 98 f6 31 ff 89 c3 89 c6 e8 [ 172.040921][ T7158] RSP: 0018:ffffc9000f9af218 EFLAGS: 00010287 [ 172.046988][ T7158] RAX: 00000000000007cc RBX: ffff8880258a4000 RCX: ffffc90010141000 [ 172.054952][ T7158] RDX: 0000000000080000 RSI: ffffffff8b088eff RDI: 0000000000000005 [ 172.062919][ T7158] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 172.070880][ T7158] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888142eb87e0 [ 172.078847][ T7158] R13: ffff888055810e40 R14: ffff888061dc8000 R15: 0000000000000000 [ 172.086821][ T7158] ? rate_control_rate_init+0x5bf/0x720 [ 172.092412][ T7158] ? rate_control_rate_init+0x5bf/0x720 [ 172.097970][ T7158] rate_control_rate_init_all_links+0x76/0x1e0 [ 172.104131][ T7158] sta_apply_auth_flags.constprop.0+0x4bb/0x510 [ 172.110377][ T7158] sta_apply_parameters+0xc37/0x18b0 [ 172.115672][ T7158] ieee80211_add_station+0x3fa/0x6c0 [ 172.120957][ T7158] nl80211_new_station+0x14ff/0x1c90 [ 172.126242][ T7158] ? __pfx_nl80211_new_station+0x10/0x10 [ 172.131893][ T7158] ? nl80211_pre_doit+0x1b0/0xb10 [ 172.136926][ T7158] genl_family_rcv_msg_doit+0x209/0x2f0 [ 172.142470][ T7158] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 172.148541][ T7158] ? bpf_lsm_capable+0x9/0x10 [ 172.153219][ T7158] ? security_capable+0x7e/0x260 [ 172.158154][ T7158] ? ns_capable+0xd7/0x110 [ 172.162571][ T7158] genl_rcv_msg+0x55c/0x800 [ 172.167075][ T7158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.172104][ T7158] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 172.177476][ T7158] ? __pfx_nl80211_new_station+0x10/0x10 [ 172.183102][ T7158] ? __pfx_nl80211_post_doit+0x10/0x10 [ 172.188651][ T7158] netlink_rcv_skb+0x158/0x420 [ 172.193413][ T7158] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.198441][ T7158] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.203734][ T7158] ? netlink_deliver_tap+0x1ae/0xd30 [ 172.209027][ T7158] genl_rcv+0x28/0x40 [ 172.213008][ T7158] netlink_unicast+0x5a7/0x870 [ 172.217776][ T7158] ? __pfx_netlink_unicast+0x10/0x10 [ 172.223062][ T7158] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 172.229058][ T7158] netlink_sendmsg+0x8d1/0xdd0 [ 172.233822][ T7158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.239129][ T7158] ____sys_sendmsg+0xa95/0xc70 [ 172.243893][ T7158] ? copy_msghdr_from_user+0x10a/0x160 [ 172.249354][ T7158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.254647][ T7158] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.259937][ T7158] ___sys_sendmsg+0x134/0x1d0 [ 172.264618][ T7158] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.269854][ T7158] __sys_sendmsg+0x16d/0x220 [ 172.274450][ T7158] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.279575][ T7158] ? __x64_sys_futex+0x1e0/0x4c0 [ 172.284532][ T7158] do_syscall_64+0xcd/0x4c0 [ 172.289034][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.294924][ T7158] RIP: 0033:0x7fc9c298ebe9 [ 172.299332][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.318934][ T7158] RSP: 002b:00007fc9c3882038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.327345][ T7158] RAX: ffffffffffffffda RBX: 00007fc9c2bb6180 RCX: 00007fc9c298ebe9 [ 172.335345][ T7158] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 172.343312][ T7158] RBP: 00007fc9c2a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 172.351283][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.359246][ T7158] R13: 00007fc9c2bb6218 R14: 00007fc9c2bb6180 R15: 00007ffea13f4858 [ 172.367225][ T7158] [ 172.370441][ T7158] Kernel Offset: disabled [ 172.374752][ T7158] Rebooting in 86400 seconds..