last executing test programs: 4m20.57499711s ago: executing program 1 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000012002102000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000804001680"], 0x24}}, 0x0) 4m20.50206322s ago: executing program 1 (id=1426): r0 = userfaultfd(0x1) flock(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000004c0)="2ef30fbd720f66b9800000c00f326635001000000f300fdf70ee3e65d9e9f3a566b8090000000f23d80f21f86635c00000d00f23f80fa00f4ceb66b9f903000066b80000000066ba010000000f30660f3880b1ff3a", 0x55}], 0x1, 0x1e, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x3bf2, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4m19.175249867s ago: executing program 1 (id=1430): syz_open_dev$I2C(0x0, 0x0, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x237, 0x0, &(0x7f00000000c0)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000a0000000850000009500000900000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(r1, 0x0, 0x0) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000480)={0x6, 0x7c9ddb4d}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x108, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0xb4, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x31}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 4m18.832817803s ago: executing program 1 (id=1432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffdfff000000001d0000000c000600010000000100000004002f80"], 0x24}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 4m18.6838303s ago: executing program 1 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x34, r1, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x0) 4m17.870451371s ago: executing program 1 (id=1436): socket$rxrpc(0x21, 0x2, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) 4m17.660057236s ago: executing program 32 (id=1436): socket$rxrpc(0x21, 0x2, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) 12.257758155s ago: executing program 0 (id=2342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x1, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x6, 0x5, {0x5, 0xe, "afe3d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000011446f559f3519db1a74e9b522455aa3393fb6f934102d01872663660b32a3fa742535fd63dda83bd9d7cf50034db927e4952eeb45c26063aaf18dda1ffffe26613d144c67386c6d2471d24b15dfd35bf4325172a35f23f18cc5657a855af24005d3e9b4f969836b906eae731c1ae42a964d454b56c75a4266993de16bb362162b6ad47bdd903990a489bc4670323a21eab5f127dfc9a3650c969510b07891f4edfacc4d085f6f537acc15ec9d82f6c7b3b3f0a71cceaf80c5916c965819ff1e1ad5fb4ef94ff9298a033481da606ba883dd5d5bd64494168a4"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000240), &(0x7f00000006c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[], 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) 12.067591826s ago: executing program 5 (id=2343): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000088}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000040)={0x1, 0x4}) connect$unix(r4, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES16=r8, @ANYRES32=r7], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r8], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new ecryptfs use>:}@^/!-{ 00000000000000001024\x00'], 0x2f, 0xfffffffffffffffc) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x70}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e, 0x1800}, {0x0, 0x7, 0x800}, {0x2, 0x800, 0x800}], 0x6, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000500)=[0x1f33]) r10 = socket$inet6_udp(0xa, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) socket$inet6_mptcp(0xa, 0x1, 0x106) signalfd4(r1, &(0x7f0000000040)={[0xf]}, 0x8, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000440)="4ae652ffe640e9849686d04eeeac29d7c3ff142507d8f059d204a2b0324578f2ece1703a08510efecb35a1f7174a4cbc2967c31bcf170788d109442f56f8222ff61ee6157af2b1fdc82c0f3561838322b16b657038fa683915b7e62d9f4bdc633024e9350e9729d8614b33b036e2e9b407a75758dddb00b7406fad9294df0000000000", 0x83}, {&(0x7f0000000580)="1a00c661fcb3c424b2b01cfac61118d4a10f0131e604e4fe2ca588f610bc5c671aa5aa0782aaacbdfba8a266829a33a0c787b8e2230b1238d6579857f878f547f68ccabf790e609b2a38db79baa533e49679cd07f97faf57b32e69378308d6246fb05b08229fe621a124f89b7788c9e78f1e6ebda1bc7929135c0855733da38b4fa5d30d02c707db60825d342a68cdd13cf4b5f8e73d632f5a746b6486c9164f088cc889", 0xa4}, {&(0x7f0000000200)="f7beffa08e28a70c0a5e02124601b6ffb36b7ec083e5f8c4765af7a60d0487ef1363667b8577bf04d34ad0c8600c290b9604593a7562ae74db3168017e463581ae5753bc3c11841bb64e664508037144fcf099f12114163f6ec5fdb7a9f972bb4335c5aa5fa4e1848e04dec7704eec538059fd3d0b050acb2130f0f2de2e9c6f994daeec14b171231816ac27747531d4097716dd8399cf934ac84d1dacde6806d6b6fda8fece6b600dbe47b5c7e86ad3c76754b565efa688293306cdb601c46bf8790c84d9e7f4e0c08bb6d2f5d96e9d9f69bc5a2c0c8020f2ed028fafe75a307853a01953", 0xe5}, {&(0x7f0000000300)="13d15d3e413aa3eede1b7190028d", 0xe}], 0x4) 10.618825751s ago: executing program 5 (id=2345): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000e950ecffffffff76f0ffff00000000", @ANYBLOB], 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x1, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000340)=0x74000010) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) 8.337060918s ago: executing program 0 (id=2351): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000002c0)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42", 0x240}], 0x1}, 0x9cdc2384056b48b8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) mount(0x0, 0x0, 0x0, 0x208000, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b4b, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) socket$nl_route(0x10, 0x3, 0x0) pwrite64(r6, &(0x7f00000002c0), 0x0, 0x8) 8.322518786s ago: executing program 4 (id=2352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) 7.857288451s ago: executing program 4 (id=2353): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b00000009049f3843c37b00000b403b4e000905e2379c"], 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000200)=0x8) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.452715427s ago: executing program 0 (id=2356): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)=[@nested_load_code={0x12e, 0x7c, {0x1, "46de5cf1ce400f00d8c744240010000000c7442402fbcba42aff1c243e66470f38805a0066410fc7b2a90000000f79e3b9800000c00f3235000400000f3048b884160000000000000f23c80f21f8350c0050000f23f80fc7affcffffff66b863000f00d8"}}, @uexit={0x0, 0x18, 0x5}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x8, 0x2}}, @rdmsr={0x66, 0x18, {0x901}}, @wr_crn={0x67, 0x20, {0x3, 0x8000000000000000}}, @wrmsr={0x65, 0x20, {0x971, 0xc7b}}], 0x124}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) dup(0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000680)=""/4096, 0x1000) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.202874754s ago: executing program 5 (id=2358): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa45}, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f00000001c0)='./file2\x00', &(0x7f0000000500), 0x40, &(0x7f0000000540)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid={'afid', 0x3d, 0x3}}, {@loose}], [{@pcr={'pcr', 0x3d, 0x18}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x30, 0x61, 0x66, 0x61, 0x64, 0x37, 0x39], 0x2d, [0x39, 0x62, 0x35, 0x66], 0x2d, [0x36, 0x32, 0x61, 0x61], 0x2d, [0x32, 0x0, 0x64, 0x37], 0x2d, [0x39, 0x64, 0x64, 0x31, 0x0, 0x33, 0x65, 0x65]}}}]}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e24, 0x17c1, 0x18, 0x0, @wg=@data={0x4, 0x80000000, 0x7}}}}}}, 0x0) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=""/148, 0x94) 6.189109226s ago: executing program 3 (id=2359): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000ffffffff}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_migrate_pages\x00', r3, 0x0, 0x7}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) dup(0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000000)={0x3ff, 0x4, 0x9, 0xcb, 0x0, 0x7, 0x4, 0x200000000000004, 0x0, 0x6, 0x4, 0xfffffffffffffffc, 0x9, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x401, 0x1000, 0x837b, 0x7, 0x80000000000003, 0x4, 0x3}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r6, 0x0, 0x800005}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x800005fffffffffd}) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) 4.583349339s ago: executing program 5 (id=2361): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x300, 0x0, 0x0, 0x1a0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2, [0x0, 0x0, 0x0, 0xffffffff]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004440) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8880) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003e00290200800000fcdbdf250a00000004000030"], 0x18}}, 0x8000) signalfd(r2, &(0x7f0000000000)={[0x800]}, 0x8) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f0000000f40)=[{0x9, 0x1011, 0x0, 0x0}], 0x1}) 4.383035488s ago: executing program 0 (id=2362): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x6) ioctl$TCSBRKP(r5, 0x5425, 0x80000000) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@uname={'uname', 0x3d, 'dfltgid'}}]}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x140000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=@newlink={0x50, 0x10, 0x403, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adf9a5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x50}}, 0x8080) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x3, 0x4, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x67, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @local, {[@end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x0, 0xd3, 0x4, 0x6, 0x3d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x700, 0x8, 0x9, 0x40, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@rr={0x7, 0x7, 0xb5, [@local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x3, 0x1, 0xa0, @private2, @rand_addr=' \x01\x00', 0x7, 0x7, 0x0, 0xd}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000003380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20001822}, 0xc, &(0x7f0000003340)={&(0x7f0000000680)=@newtfilter={0x2c8c, 0x2c, 0x0, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xe, 0x4}, {0xfff3, 0xd}, {0x4, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xfe, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x1}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2c44, 0x2, [@TCA_CGROUP_ACT={0x2c40, 0x1, [@m_xt={0x1074, 0x1a, 0x0, 0x0, {{0x7}, {0x1038, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0x6, 'nat\x00', 0x4, 0x29e5, "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"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x16, 0x6, "a914112fdb54670a0d4c129d8e3c8c1c117c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x998, 0xd, 0x0, 0x0, {{0xb}, {0x87c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff7}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x9, 0x52, 0x6, 0x269, 0x8e1, 0x9, 0xfa4, 0x8, 0xb8, 0x0, 0x9, 0x200000, 0x2, 0x2c, 0x1, 0x4, 0x8, 0xfffffffc, 0x9, 0x5, 0x5, 0xc, 0x6, 0x80ffff, 0xfff, 0x101, 0x9, 0x800, 0xaff, 0x33, 0x80000001, 0x2, 0x1, 0x7fffffff, 0x6, 0x5bd, 0x9, 0x0, 0x3, 0x4, 0x9, 0x92, 0x8, 0x4, 0x7, 0x400, 0x40, 0x8000, 0x83fb, 0xf0a, 0x2, 0xfffffffe, 0x400, 0x7fffffff, 0x0, 0x1ff, 0x3, 0x4cbe, 0xc22, 0xb53, 0x2, 0x4, 0x34582e0f, 0x5, 0x1, 0x639, 0xff9, 0x0, 0x1, 0x0, 0x8b, 0x7f, 0x1, 0x80000001, 0x814, 0x7, 0x7, 0x1, 0x4, 0x1c26, 0x0, 0x0, 0x401, 0x6, 0x5, 0x12, 0xc826, 0x8, 0x5125, 0xf, 0x0, 0x4, 0x8, 0x1, 0x63f, 0x9, 0x6, 0xffff9431, 0x101, 0x10, 0x4, 0x7, 0xfff00000, 0x1e, 0x5, 0x9, 0x2, 0x9, 0x0, 0x1ff, 0xffff, 0x10000, 0x68ba3f6d, 0x2, 0x8, 0x400003, 0x3ee, 0x8000, 0x1, 0x3, 0x1, 0x8, 0x7, 0x1ff, 0x1, 0x1072, 0x0, 0x0, 0x4, 0xf, 0x9772, 0xc8b1, 0x7, 0x2, 0x1, 0x7ff, 0x5, 0x8, 0x1, 0x200, 0x1, 0xb, 0x518c, 0x7fffffff, 0x5, 0x5, 0x5, 0x10001, 0x0, 0x0, 0x4, 0x2, 0x6, 0x6, 0xffffffff, 0x101, 0xa, 0x100, 0x8000, 0x1ff, 0xffff, 0x8, 0x1, 0xfffffffe, 0x7, 0x3, 0x7, 0x4, 0x5, 0xd21a, 0x80c, 0x7, 0x6, 0x9, 0x9, 0x0, 0x43, 0x2, 0x10, 0x0, 0x0, 0xd9, 0x7, 0x4, 0x5, 0x2, 0x800, 0x8, 0x9, 0xdb, 0x2, 0x8, 0x2, 0x2, 0xfff, 0x3, 0x8, 0x4, 0x6, 0x7, 0x3, 0x8, 0x8, 0x41, 0x6, 0x0, 0xffff3c15, 0xa, 0xa7c4, 0x7fff, 0x5, 0x4, 0x7, 0xa6, 0xfff, 0x9, 0x7, 0x5, 0x7, 0x12d, 0x1ffc0, 0x9, 0xc, 0x7, 0xfffffeff, 0xc, 0x5, 0x10001, 0xf7, 0x9, 0x2, 0x9, 0x4, 0x2, 0x400, 0x8000, 0x4c7f, 0x0, 0x1, 0x800, 0x4e93, 0x9, 0x9, 0x1, 0x3, 0x0, 0x0, 0x6, 0x7, 0x1, 0x8001, 0x3, 0x0, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x4, 0x3, 0x9, 0xbd, 0x9, 0x3ff, 0x79e0, 0x6, 0x3, 0x3, 0x3, 0x9a, 0x10000, 0x2, 0x8001, 0x7fff, 0x6, 0xa738, 0xfffffffd, 0x80, 0xa4, 0xa8369ebc, 0x1, 0x9, 0x3, 0x9, 0xdf0, 0xe7, 0x4, 0xe94, 0xfffffffc, 0xb, 0x4, 0x3, 0x1, 0x2bed29f1, 0x9, 0x3, 0x8, 0x3, 0x68, 0x4, 0x401, 0x5, 0x7, 0x800, 0x6, 0xffffff01, 0x9, 0x2, 0x5, 0x5f, 0xd, 0xa1b4, 0xfffffe01, 0xfffff801, 0x2, 0x200, 0xfffffffc, 0x1, 0x7fff, 0x5, 0x4, 0x9, 0x4, 0xb, 0x3, 0x7, 0x101, 0x6, 0x4, 0x1f80000, 0x6, 0x80000000, 0xcc0, 0x8dd, 0x9, 0x6, 0x3ff, 0x80000000, 0x1b5, 0x80000001, 0x3, 0x5, 0x5, 0xfffffffd, 0xe, 0x2, 0x401, 0x6, 0x0, 0x0, 0x607, 0x9, 0xdf5, 0x1, 0x2, 0x10, 0xb01, 0x7ff, 0xefc, 0x3, 0x2, 0x7f, 0x2, 0xd3a0, 0x1, 0x1, 0x1, 0x4, 0x6, 0x1, 0x7, 0x1000, 0x8, 0xdd7, 0x7, 0x4d, 0x2, 0x6, 0x4, 0x7, 0x2, 0x6, 0x280e, 0x40000000, 0x101, 0xfffff93b, 0x6, 0x98b4, 0x8001, 0x7, 0x0, 0xee6, 0x401, 0x1, 0x6, 0x6, 0x0, 0x8000000, 0xfff, 0x1000, 0x200, 0x4, 0x9, 0x81, 0x6, 0x7, 0x7, 0x8, 0x8, 0x8000, 0x0, 0x2, 0x41, 0x7, 0xc, 0xd, 0x80, 0x7, 0x0, 0x2, 0x9, 0x1000, 0x3, 0x1, 0x8, 0xff, 0xaed, 0x9, 0x3, 0x0, 0x3, 0x67c3, 0x8000, 0x1, 0x10, 0x8, 0x7, 0x7, 0x2, 0x4240, 0x9000000, 0x9, 0x4e5, 0x80000001, 0x1, 0x8000, 0x1, 0x7, 0x800, 0x0, 0x2, 0xfffffffe, 0x3, 0x10000, 0x1000, 0x53e, 0x3, 0x488b, 0x4, 0x10, 0x5, 0x100, 0x7f, 0x2000, 0x1000, 0xfffffffd, 0x2, 0x401, 0x5, 0x4, 0x4802, 0x8, 0x8, 0x100, 0xd25f, 0x10000, 0x2, 0x1, 0xa, 0x1ff, 0xff, 0x1, 0x25, 0x40, 0x9, 0x6, 0x6, 0xf4, 0x8, 0x9, 0x2, 0x7, 0xffff, 0x5, 0x4, 0x4, 0x2, 0x10, 0x7fff, 0x9, 0x5, 0x0, 0x6, 0xee8b, 0x0, 0x8, 0xa4, 0x6, 0x7, 0xe3f6, 0x80a1, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x1, 0x1, 0x3, 0x40, {0xf, 0x2, 0x5, 0x1, 0x3, 0x8}, {0x0, 0x1, 0x8, 0x4, 0x400, 0x2}, 0xfffffffd, 0x200, 0x2}}]]}, {0xf3, 0x6, "d7673451556b1a884698d25b299c714d960f9fdf23c555491dc583660ceb3e3204ef2edf3da89504955f616ece36a70afcf060247a54f4733c568697c435276ab6a3b67b47dd831ce120747c0230f7951d3b0682bc0c3ea0796f4c29320b84ea01e163c6d269329127cfc349b1688fb40eecf58118894697f0017a372e8bf8ec2c3bbcc91c32bc4a757c5142ac5a8ae73b96fa65febfadac035e7b919163d2c068dc7d9d753191862f916ae8dde5f695d76da66677af3e941148c2ce4d24a387fbb7dfb4798ff3a9e46b4eda3d1ecdd4c3fdf3fb83636490c8f2a7e1406516c1c9591998bbb62ef10fc66a22d668d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xe0, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x4, 0x1, 0x5, 0x2}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x93, 0x6, "d0f82d148c0d69dc01081df14590f65905c33d8dd71a3b6470e35ad907c5ec7a30e8b25b15cca7c8c86ae70ff4d56fef214d19b7bb58c1223acfb1dd79247016e45f7581d0f81c8c9bc36e80eaf18e9c81bb7c113b5c353c78f88743e934ab11fefcf11d984362d12e8a9bc15a597a0a9e6b019b721666347b12f96fd8a944f8b28d6ec7987cf2f9006b0653dba24d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0xf0, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x71f7, 0x1, 0x97b, 0x3}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffbff, 0x10000000, 0x9, 0xf}, 0x4, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0xa, 0x20000000, 0x80000000, 0x2}, 0x3, r13}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x9, 0xffffffffffffffff, 0x8, 0x3}, 0x3, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x2fd3, 0x4, 0x8e0c, 0x9}, 0x4}}]}, {0x24, 0x6, "8a3274ff4a654f337afce357d964134edeaddb7c7d498d98181d199c5a609a24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x1060, 0xa, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffb}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10001, 0x80, 0x7, 0xfffffff9, 0xfffff068}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}]}, {0x1004, 0x6, "b0d1884a4e8c3cfeaf2892df8477c360a79dbcf434267cb4fe632efa7d86c5244cc231678c4a3fe2b9c5b1e93575c693153982a605360074fd637902b6bb02ca79181740d895f3d8ac661b9949d5acfef8a4544383b628fa4bd2f1101572b2eb592149b6bb97a05beec41d4e9ac87d600b6701150c834b8444a5ef8f974895c7fed2ca93e3123f90f60195534149fb944352a1b5bfcbf2b09eb4a0865eb2fa4debc85695f5bf6caa561e896f0c73116f9843204d8e5a21d826a6629f932b793359103470e1c0198c6b33fcce3284f3bd39f989c45e655113abb06bba158f17014e7bf2164312e877fdef153af6a0e9be6f714e2ace1d7b876f6f8335977e5c7ead8c8a69d2a6aff03c0e3316caf480faf6f757fcdc1cab50206c6a7e3f967a6217014d06473b82a751ce0427e8b73fc970b03fbfb10afd4e83756d28597b072f6ac0784719282993badb5f8676913696a1ffe6a80c3d83915ee0511eb29c0706c0750e3e6170a7e923529923357e24e936586f47fdbe5e17af0070b7d948433e876120ac527e4c9c29f4e1e1e9386fc98e35667456a4cb9fe7d239748da5d242e1053e09412f981d414d6330bfc6a7d3f5b2367f09e90695f4c74b570cdbd0eac7d00e8fe7e7f191f0d50256bf1e5eee33a37683a45bbcfde34597101c1032ce39b743175d76826ab0061105dec2d162730073c46068366709e96791e3f25c3a75e8938d0c7747220bba1f440236751658c0623ec15453359514222c69db610d6f46adb519b3e27df1aff144e691a17f6cd4afd8f2e7ca0a7c3fff2538e836d2c2ee7f4492b021daa92fd1c6f887b17e61d58a7c0ecf8dbf4095fb1bf50e30e7682a493534483c33baf0bfd59576fdaea37d6a4365de25a64d524d17aafba271ab68c0fc913da018dd60e9a52c9fdc5977090725e252f34a00a2f7989dec02e8e1a6753f09497d7705026b82493aa4cae73649c1c06a2ae4f0325e79a371b200f43f68f217aa45f4591115e61f893bdb52c8e61b13336c3537e064999f55e55cc0fd375a95e4ecb2ff7898d95917a57521da6c02e25026211f518c70b8d910bd2aca966884cd128d8593587404f561f57d963521e72d506ec96e59b3707b6acf278c3144fedbe0be6892e254b05c989a06f80b0c1a6bc78e2d5d6a06d3fd92f0fa5febf3eadb5ec8f9927af6c522a6a54311194d620e3891492d65684555055f0aeb3e5d23bebfc9cd73acc60f750826debf272651e0985ca0246efe6c0fd814b0f084b17ee8857674517935cfe9c41221eb2771078e8b238e4b88422033cf461af051204d0ce6ae255f296e29d483a4e7c84e817c8ddbdb5756201e1f5040643ff675ab3167544d37895593f7c75be859648666b176c2f4f4c9c8ee2f63c8c33d727438995fcf952918c24ed20e1e749227728dfe6183d38538ed257e2c5a877a5fe4ae327b6d686f82814c365fad056f614aa0528a630655d1ea654fd4e029c58c251c09d8bf4143ccc519d2ce699e729e10d59fbbd9c40300a2ff65e22ad1514a0f69829dd678953f6249c9a56006f16d244c5b214267b261235de8225c1c8dd69f25c5aa31434b6971679fbb6b5d1f6d2affb176f454deefa015a17083786d8c7540da335d8a0b916955900e8f45e960c9779849f202b57477b21d05bc8701a130b922286935535f1281cad2b2301ba56d60f0dbcb2743217a1e7c5abbebce31fd83cab8c095cc172cb5941dffe4e2a939da89560ea29f84a1008f99380651196117a4518e9f55de6ff58e0bbd40cc4498578a8daacf3821b05f3bd4f6001a07677bd77bd888d6f1bb366022f642bdc321a5195c5f5d9acdfb24bee960a144d854614a977fbc186ab80aef8ab032f2aba73850750ef622a865646eb72b2a9ba9f8a6ba8c6dd83d9cdafc170b574bacbe4cf2b9a9bff5c921af1b22d9628ad088d6a81a6eaec7fa0ad528534917d9b2c2f886531618fab2a51ce2e3098a93ea50b129db92355de6c0445072390a897078988faca2c28be776983d5223fe89a5d554b352f611ec952f6a3cd4c4aaff981aee92c85abab262b8c858d6cf31bc1c5a02901eafa5989af0e7899485809aabf5584e64631561ba3b1698c56d31afd5665bb8c20ecd83f419b970e953ac5af2788b68a630741deade2190295d52d7311d65e663713bcf2f618fda34be78dec86989e308b3572fdff60fdb87a1873538326f530d6eaa96e7f061f3ec19d1ba06cb3f05d80c8c7486e159e76db74deda566e441981f0b380fe4f637728d2cbd520d37f7073d60f3112ac259287292d2ab916c7f6e27112f784b6ee67ad0dfd2eb1b2829337d750399e57025fc3373dd65d8df015f12575cc677beeeb14ca7fd32fa2651e4b456385d89bfa9329d0b5cd480e21b2d821a57ca4abf61e2b22af0f7c921b0d4945ec34db88d525f30e038d63840b43df99e051bd3206713422d502a465ab306120483883b0688f917fded2620363282c1ed20f22490a6a655b21b109eddf401b51182f76bccd775a5daadfb2232ad900f65c87cfd60eb62db8d6d7c9e7d56c12f987ff0a9800c34efaa4710c6ec539cc94923470caca3f886856adf720df8aa1b104a1a88f0f08c251f23d367e2e35667ace252f6d7e8f32bf71a323dbe6fce42ef4359c044320c698d47c5b9890e73dfc636e4cc61227c1eb44f96cc3686dccd85acfc73702ccfdb7124aa407c72c1b23a8e6e51ef5fb0ac6665890d112f776d0979042cdb2da6dc7743a72aa0e0de528c93d53885d7b48ae9b81a20739bc4ed78e3797a65e23a443dfa78ce713b1e835c59ce23e0e09c760a92facfbf93ca55f450aa38b603719ed617a1dc6f35463b6fea44cc8b79c204a16e66bfb0e2d4454dd5978b61e3c9a5df58f0645130eb13a1a6b261a8a09b20a573c8eab5fa074bc2c781445537bb9498a9c87f2f9c0567c73370d8331491b58a553d681550b7b12b035f5da572102a365ad03b2ad006779e0563d4f9da44387f119b5fd08913cb8497c17486004545022838982321e009121fa4e89a78f0854756b04e9d92c2ca0fa62df4a7e8c30354ed82051f44f486646d9d5d665c45a19578efea45557f4e26c06fc8395c16fe9a0bcc6d4ea94f82a6195efb644ebad39ac951de22a71e3e459dbe9791ad49475d944a87a0e1c3d61cf02fe761e0b21a172915a1f7a4b89387f53e3e49dd140f546f6bdad11ea622b2bac769276750189c0812c72e53e99c74cd730376be16ce6075ee48dade65ef9c181f56ec4496f396d721111426c54ad7ef5f40b407d17b587cab089ef2f4a650de9ba1ac6979e8e5c3f0223336ae09ea506e76612d2c8fa2b075739b9812a4d21e28ef034bc8c34646f8ae302c8618fa95702fab6e801ee57a34ce0c609978940194215fe9dbd3b37fc7b6eee550788903c825f5cf689acd571d9da23a5c0bee56b3da97a06f496d346090fdc95f04d07ff58e4ef38164c469e0d1ce9cbc2b3079b747b02c880e18cc498adc1cec3fc6ffd9a22d70b7481a5f82daed9587e5752a6a1fba0dccfe96f461810d7caf488318649f1330bc243ec1699214b957f321f6472d9ef98a7a75de7c7c0a488cb09cb6e7a396cd44c75c4333b3a80ca576304a05f9db2b49ff877b9661e49ecbddd3159385392789d3ee0fa5924d33aa22a3a5134021517edb0e534c6a9c6948e8f6fb1651a51d0750ff869f5f5879721ef42e1df9ef2431cdfe086f255670dd607a69a989d3cdf1a71b36ab4adf1b3f27beacf719d0468f2692ae64eac914ab5c3f1545e9581a7e747d7bfff652f34d18abf9dbfc3a8784f2f00abf32ee59ec870e4eb3584da8cba6a43e708a600441fd0a3453ee69922b017660c8b05be26841c3f2ed3e47f6728b3751646dabbc26ff5e6be8741a1ef6ff9ecaad206caf60968ba21e12087e1121eb19fa81c5010313b52076cafc58d2519d2dacafe893077eb391be808ab5f72486414bcb2659cb32c9fab24bf150a0de91ad21555bc64beb13eee197a72472a794d1023643a775e7cd02fdf465ec41a0fd04b09d3706c73217e2e45c1d3561d34b792d1d89438bfaa2be653db9f536a458124eceb34115e7eb683294b806f29243ec514903bb5f797999c095ce69c1887e3c48bf71a46517171dedac21a1c2e7a33eb702dcbdbafc3adbb6f252d20363376d9e322d01fd3769196f3d29661627a2657e5bca01febea5373eb7a4156b11ec9ceda0b7e61c3b937a64fe5de9b1117bab2ed511f55bfc4257134d2723c9260afe075253fc35af022790dd4482b9c356bb68505ac9ba4fed3e7db5b278c77f564ba9f84b2506d492abaec5be7ebd96bb7eff7a4ba4bf38f76ad86fad12c310f0cfcb28e812999232a29ce0bca999ba3e13880febe2acc0157e0e9ca47322099bf6530fb3f2f0f80031a2112421117f626697c4578ff9e8285f108256a8afd6b1c8f5386616f328b18a61fb0bfdbd92e78cc5f6da59b74631f1620dbf0105790dd94e35e8cf98328f0c1ffabd573db09724cf96f21bc609bc2b5d0efda07dd03befa9536c25a5b1f8512c5c0f5a2203e9d6cdf6ab9f20f26686125f615a34142f128bd4cba86178284ec0118595bc864897e7cdbcf70edbe78b943445ed1043bfdf95f7e9bd519b1188406c67a59746a209f55a46a015e0a9de23cb64c874a9ce16ee56a94650c99da197ca5d7d1e6bbdc6d60afd8c221009e69a1757e97f34f7842e5a5cb3e6822ae4a820651f9dfa61553d77e50e11f7fd1b17b7feb2a83785ec34f4bf4c7938623390161ab5950e2295771811b705a61977fc9e69f673aead0e167f585e0dad7ae7df9b374dcc3617fd931b913248bc2264d5534cabdc4e4009e120bd2544cb341388093232a89a4b101091dd5eb766358d0084e6fef73ab548c1079cb94ddeeca1877b435e73c84a680c3297f81f486f5e8fe55146fe7b1537a58138c1870b5b991bca6554ed7701815c8f902a22da12e9e48f7b461e3bc390575871210e26f8d437b5d607d4b38277e272b5a4ba8b76c87a933f6b08ceb4403c225c44d87ef9191b4c317bef170f4c71b857a705f600dc583be0c88f0a08ab678ef01ac7b68b6de5f80108fbfae02659404fb7b028d93d31d0432f46a8f968a790731abe141e8ef85b3ab876fff3ee3c8ebe799c6676dfe8428ee234eb5acc8ec33d178b9852c73cba1d278d2e2cac8961241896041853568caefb5ebd05e2267b2e2bc47b5fbf4492fce5661a62c818cd0269e5594942af2d7d553b44909e20c484ce56b897d79e25a6f87e59a14c0d189696a2763dfc23de23f334259140a073488a20d1d2d1599ae20fd9e608da2e7fdaf007b8fdbda7dacc6bcefb5150b6455e295db1e731e4a1e6b8f6b65f93274a74382bcb5156e3345553d80fa32bcb4e975a55b3dda22489ee616ef2a58237e7c27c363f050c787da766901f2a9b213d61b9202e44c1edddd19d4fd7a2ef782385fff5af411fa22ae5124cbbda751e42fda152c1b01aaa9976da76e8b2efc3ee3188fa67f241595d23ae614415e144e5d50e4339070daa46c0ac4df2b231d68b4f6028947feddf94a39c5c84b25b07e6150a9ac0e9c173bcac4bf6bf1243590c8a4022c29677764344a51dec0696bdd7197ca1488dd959cae212645eda08b7317b8a756f2f9376081b1aa62c68b7cc6677a3431d5d1c985b2cf0294b22245b32a591474235a824a646be5d19f0e9faeba51fbc3ccc85c6d90c7506190b62e294a3168f923fe7b6cba0def3abfe219ac304c216176cd9d12792c81c2278b0"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2c8c}}, 0x400d0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) 4.278467854s ago: executing program 0 (id=2363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) 4.251091796s ago: executing program 0 (id=2364): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000002c0)=0x3, 0x4) 4.159685677s ago: executing program 2 (id=2366): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2a800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r3, 0x533, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0x7, 0xf}, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x1c, r7, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40), 0x4682, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x4d}, 0x9}, 0x1c) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="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", 0x142}, {&(0x7f0000000ec0)="c9fbe0378bef0a6749d715b5c3e27d03e68c83579553d3bd9cc08edbae86d2f95e95a3fa8ab031e21b5a47e4205c87eefc819e6ea7bd0f6772e957f739339398cd07aeb0522339dde07af5b6ee6b94221ca3494c29be340810d421808f27877885583a2c80d4331aca54533ad84a0ccc5fa28956504f2eafc0f098f878ae3caf30b7981d5e778aaa1b7d235aa31c4c77fdf0e1c0d31fc7c43969830f82c4b5631e47df6b9a9f59a57e0e7bd1f9c4fcdb4150f713fb9e3530650b43a92853d1e3334fe72113d518a558343615ba8d3412bda82b725855e14c29f7ed81e1cbb76f9684cc6b7fcdc2808119a0f8328b0c5d0e996e50e95605724abb1c635b0bf633f4bcca6213fef03260e56321e3270f322eb13b8ab70c726cbce78c93e4c87d7d7b363542b1b4eb90242ae9459775aa7c045233df9912fc47d6793f40bb554303000000000000003c069644ce8d6ea00125815fae3c25f4d5c847e76c0c6987e5040b85522dcf5c3de2a92fd45ba17d7df260ba36e6917f75ccd289070477665e64ac3e00c93228b72763f28117defab475f03841980110b23d02a3d1b74d25c8f2e1c8dfd9243e0bb7a583f091f829329f045f2fc0c40bb4a5205b071d4b6959663c6bfc1f04b23db627ac9fc792cd3355dbbc031d56107ea3379209a49abf03a8347fce6d48cf1968b64558e30210b02214cd0728c6743b89bd4cc2f1d1424fcedd95fa700751a4ff438469fd9e6f3a47200f3fbbde74bdbbeabfb6f96e32366d85a8e6bb6d576687634daac56c9619e4bbeea7606f223d3976c4bea9a07406b037cef4d06cc9e447dc06901c91145aeb9b9726cbf808d253cb01e0806f21d82b928173be2f5bbed1a97e725b17d1d1bd19c14935abd242ca6501c4282f5f1a3e813c68bdb88add0b6fcc14b8355a81b9ac915e5d51212438c5d2993f26456c9ecde871752c99ddbaecb3f6f5f02a0542e898b64a6d475aae01f2acaec6013907c085ef56483c910cdf4cdcdb516533aeb97644462cd012e2407dfdeff5428e23edd335b1590641353c54f0094a771877aac6491aa62350ccde2993826928e6614b76c15e4aae8ede6de392f4f6567f0833ced4458bca37928cc2a70ca20cd38c11138b6ba39a6374ef7f150eb2d5a500a6b9c010d13dcf7318deb8c106e2448c6b21f620bba33c51300080dcc9d87db52cefe722035f1508fff231c22bfc8f1d2e14de70a281be8eb3649ace61896f0c33357fcd838db94aaca611b228f76cb4ab983ad3ab636c7260d57bba0061574bb0876afbeb916e252572687b8d28ba7c945f07e0286bedfd7c251f9769016225a158bf607dd62e11c83bc686a7ab2903ddd64d4e2c44f39ac1f76b80d6be086396e7515441afcadfecb940776ee4f776d3c294dce9aab77e5c2f6c36c20b4343d80d0c3da5f838b948aa684729c578718d3a0811a1dd654e7ad5e414d892ceb3dd704632caa4dcfdc947ce9391ab9abaa0951d12d56623b0028fe78da20a65df9eabb16e4b14bbbfea7108ab4308e7cb540ab8a81057dbd4ddd96696e85368760dc8d315cebbf0d3b64ba108d281c91b011f2a8e565c4b802448bad1a57fe6e74fd3278211a70f0767746ed1f234e8edbcb6f8a215e66849a7f10d1533ef626e31725439afd95c9b3a673041459e473d5ddbcc187f55d72d054bf16a714ee0f4bb5d14cf29b853fd6f703b54f227d20ca414b3d6314e9448d211707158ea758e04a2fe7dad468374d62ab4240bb3c9782faa9f87aec26876714b169198931cbd486c01bb2156488467cda498d0a0ce2ff6cf03fc68aa3b2051fff5d68e8374796439e9cf12dae426d3692c2d50699eac00ba4b9797fe5295740d8efb64a48bda389e841254638a118337404194e440a2338e2ce0b32395874e0d5cc36c0f1231426d82636e5a7182f82ea545bf7cd5d19ff42a1e8b90193a82452a0eec6575bf7181275d5c2ba2d74a5bda47934d8c89f3225f38959c12b3a2cae85e5108439bc262b69f5bd5f73a86776525f4ecb1685175ffc05aa5faadb9c28ee2fccc3be80d0b1d1bfc34ffc2ee1cde6bdf2cf87cb3966eddfd22cf3c8571aa76e1b1d40b09b67c96de3fd993815abf07def57822239a5057293a9dddd12911b2f5d5aca3479c817ec000000000", 0x5fa}], 0x2, 0x0, 0x0, 0x2c}, 0x40440c0) 3.982972453s ago: executing program 2 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xfffffffffffffed1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) 3.34937448s ago: executing program 2 (id=2368): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000e950ecffffffff76f0ffff00000000", @ANYBLOB], 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x1, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000340)=0x74000010) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) 3.144575164s ago: executing program 2 (id=2369): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x1000000, 0x3fc}, 0x0, r5}) 2.783317204s ago: executing program 5 (id=2370): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x20) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) 2.667464994s ago: executing program 3 (id=2371): arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = syz_io_uring_setup(0x636a, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) 2.130744893s ago: executing program 3 (id=2372): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080)=0x20) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x40000000) 1.899583719s ago: executing program 4 (id=2373): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xffffffffffff056d, 0x4000000000008a, 0xff, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xffdffffffffffffe, 0xa, 0x9, 0x5, 0x7, 0x80100000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x8, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x2000000000007, &(0x7f0000000340)="f1c72f40", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005000000"], 0x48) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @mcast2, 0x22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000001200), 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) 1.082991447s ago: executing program 4 (id=2374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) 959.673286ms ago: executing program 4 (id=2375): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x2400e844) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x600, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="e000000013000100", @ANYRES32=r3, @ANYBLOB="ef91ef3e2a6173bffcb1f47e2f47559c613451eba96cbd0a175910b2490c3d0d911596ca253871de095abbd961d8509013f3fbe590d7a4c5438fc68cdc0b02635479f187"], 0xe0}], 0x1, 0x0, 0x0, 0x2000c0a0}, 0x20008890) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0xf6df8900ba618934, 0x10) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x69000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, &(0x7f0000000000), 0x0) 718.76685ms ago: executing program 2 (id=2376): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (fail_nth: 2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) 685.790752ms ago: executing program 3 (id=2377): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r1], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x5, 0x10000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0x5, 0x2, 0x80000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x47}, 0x28) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000100e05a1d354e52aa8a23a3f7b2caf66ca5d7211762c0ee1fb128c0ea20c92a179dcf844ea652b8b13b0ad0428a4e206c98", @ANYRES16=r8, @ANYRES64=r6], 0x30}, 0x1, 0x0, 0x0, 0x48c8}, 0x20000000) close(r0) userfaultfd(0x80001) r9 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x2000004, &(0x7f00000000c0)=ANY=[@ANYBLOB="747261862c6e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) 619.459866ms ago: executing program 2 (id=2378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xfffffffffffffed1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000240)={0x2, 0xff}, 0x1) 471.180825ms ago: executing program 3 (id=2379): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000e950ecffffffff76f0ffff00000000", @ANYBLOB], 0x48) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x100, 0xb, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x1, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000340)=0x74000010) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) 315.379216ms ago: executing program 3 (id=2380): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x2c048001) r0 = getpgid(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) rt_sigtimedwait(&(0x7f0000000140)={[0xfffffffffffffff7]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f00007c5000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x480b40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="01000000030000000400"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/slabinfo\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x106f) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) 193.424277ms ago: executing program 5 (id=2381): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x25, 0x5, 0xfffffff1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)={0x10002, {{0xa, 0x4e24, 0x8, @mcast1, 0x86}}}, 0x90) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000000090103000073797a3000000000e0d284a07dacd3aee3c1c171f32dc486096e0d6f35ed9a558e5bcb3f1c0b9664bef545ab8b36dc1af83ff5f2816d21bc43fed531888a4013df444d110d8288e116264af9d4b2de3afe39752cc291e2764ee382450a9dd59d7f5c8554d63bc6ee600b83eae50ff7ad344fc99b55"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x48080) keyctl$get_persistent(0x16, 0x0, 0x0) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) syz_open_procfs(r3, &(0x7f0000000000)='fd/4\x00') io_uring_enter(0xffffffffffffffff, 0x351a, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) 0s ago: executing program 4 (id=2382): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_io_uring_setup(0x1e1b, &(0x7f0000000200)={0x0, 0x3cde, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) open(0x0, 0x64842, 0x0) kernel console output (not intermixed with test programs): 2 has an invalid bInterval 0, changing to 4 [ 535.288411][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.303417][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.317186][ T5923] usb 1-1: Product: syz [ 535.324748][ T5923] usb 1-1: Manufacturer: syz [ 535.333653][ T5923] usb 1-1: SerialNumber: syz [ 535.598505][T12092] ceph: No mds server is up or the cluster is laggy [ 535.640434][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.649291][ T5893] libceph: connect (1)[c::]:6789 error -13 [ 535.659878][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 535.743678][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.932604][ T5923] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 536.110265][T12118] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 536.120116][T12118] SELinux: failed to load policy [ 536.448477][ T5923] usb 1-1: USB disconnect, device number 27 [ 536.749103][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 536.749123][ T30] audit: type=1400 audit(2000000005.310:865): avc: denied { read } for pid=12120 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.981007][ T30] audit: type=1400 audit(2000000005.320:866): avc: denied { write } for pid=12120 comm="syz.0.1639" path="socket:[34193]" dev="sockfs" ino=34193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 537.101350][T12127] nbd: must specify an index to disconnect [ 537.117683][ T30] audit: type=1400 audit(2000000005.470:867): avc: denied { setopt } for pid=12120 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 537.485857][T12142] vivid-000: disconnect [ 537.491113][T12142] vivid-000: reconnect [ 537.720834][ T5923] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 537.871664][ T5923] usb 1-1: device descriptor read/64, error -71 [ 538.111271][ T5923] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 538.460191][ T5923] usb 1-1: device descriptor read/64, error -71 [ 538.623544][ T5923] usb usb1-port1: attempt power cycle [ 539.498761][ T5923] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 540.213956][T12172] SELinux: failed to load policy [ 541.410805][ T5923] usb 1-1: device not accepting address 30, error -71 [ 541.508817][ T30] audit: type=1400 audit(2000000010.130:868): avc: denied { getopt } for pid=12188 comm="syz.2.1659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 543.615796][T12231] veth12: entered promiscuous mode [ 543.620985][T12231] veth12: entered allmulticast mode [ 544.346006][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 544.359889][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 544.631542][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 544.637624][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 544.780832][ T5923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 545.225892][T12244] ceph: No mds server is up or the cluster is laggy [ 545.249119][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 545.260946][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 545.279570][T12265] tmpfs: Bad value for 'huge' [ 545.350840][ T5923] usb 6-1: device descriptor read/64, error -71 [ 545.725932][T12271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.760887][ T5923] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 545.867917][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1676'. [ 547.143627][T12268] SELinux: failed to load policy [ 547.180878][ T5892] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 547.233869][T12292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.388600][ T30] audit: type=1400 audit(2000000016.010:869): avc: denied { write } for pid=12293 comm="syz.3.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 547.448603][T12298] veth4: entered promiscuous mode [ 547.453728][T12298] veth4: entered allmulticast mode [ 547.544106][ T5892] usb 1-1: config 8 interface 0 has no altsetting 0 [ 547.716915][ T5892] usb 1-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=69.a3 [ 547.743757][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.753489][ T5892] usb 1-1: Product: syz [ 547.758180][ T5892] usb 1-1: Manufacturer: syz [ 547.763731][ T5892] usb 1-1: SerialNumber: syz [ 548.761213][ T5892] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 548.770696][ T5892] imon 1-1:8.0: unable to initialize intf0, err -19 [ 548.778265][ T5892] imon:imon_probe: failed to initialize context! [ 548.784687][ T5892] imon 1-1:8.0: unable to register, err -19 [ 548.794723][ T5892] usb 1-1: USB disconnect, device number 32 [ 549.049537][T12318] syz.3.1688 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 549.411258][ T5923] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 549.471001][ T5926] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 549.579686][T12331] can0: slcan on ttyS3. [ 549.717812][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 549.727687][ T5923] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 549.743691][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.764173][ T5923] usb 6-1: config 0 descriptor?? [ 549.769333][ T5926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.779086][ T5926] usb 1-1: config 0 has no interface number 0 [ 549.788265][ T5926] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 549.798076][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.808625][ T5926] usb 1-1: Product: syz [ 549.813197][ T5926] usb 1-1: Manufacturer: syz [ 549.817810][ T5926] usb 1-1: SerialNumber: syz [ 549.831181][ T5926] usb 1-1: config 0 descriptor?? [ 549.845932][T12329] can0 (unregistered): slcan off ttyS3. [ 549.865077][ T5926] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 549.874348][ T5926] usb 1-1: selecting invalid altsetting 1 [ 549.880119][ T5926] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 549.901294][ T5926] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 549.923092][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.932366][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 549.942966][ T5926] usb 1-1: media controller created [ 549.959442][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.012948][ T5819] Bluetooth: hci0: Unknown advertising packet type: 0x50 [ 550.013005][ T5819] Bluetooth: hci0: adv larger than maximum supported [ 550.020512][ T5819] Bluetooth: hci0: Malformed LE Event: 0x0d [ 550.115116][ T5892] libceph: connect (1)[c::]:6789 error -13 [ 550.121436][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 550.781263][ T5892] libceph: connect (1)[c::]:6789 error -13 [ 550.787503][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 550.989604][T12340] ceph: No mds server is up or the cluster is laggy [ 551.129324][ T5926] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 551.512516][ T5926] zl10353_read_register: readreg error (reg=127, ret==-110) [ 551.591947][ T8107] libceph: connect (1)[c::]:6789 error -101 [ 551.618060][ T8107] libceph: mon0 (1)[c::]:6789 connect error [ 552.569463][ T8107] libceph: connect (1)[c::]:6789 error -101 [ 552.581217][ T8107] libceph: mon0 (1)[c::]:6789 connect error [ 552.590789][ T5923] usb 6-1: string descriptor 0 read error: -71 [ 552.597929][ T5923] usb-storage 6-1:0.0: USB Mass Storage device detected [ 552.608480][ T5923] usb-storage 6-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 552.633116][T12352] ceph: No mds server is up or the cluster is laggy [ 552.791649][ T5923] usb 6-1: USB disconnect, device number 4 [ 552.935401][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1703'. [ 553.199220][ T5926] usb 1-1: USB disconnect, device number 33 [ 553.763405][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 553.769529][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 554.078731][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 554.102455][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 554.264137][T12386] ceph: No mds server is up or the cluster is laggy [ 554.569909][T12401] 9p: Bad value for 'rfdno' [ 554.980874][ T5926] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 555.562211][ T5926] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 555.600270][ T5926] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 555.640883][ T5926] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.663103][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.690933][T12404] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 555.698367][T12404] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 555.777983][ T5926] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.938127][T12412] wg1: entered promiscuous mode [ 555.963917][T12412] wg1: entered allmulticast mode [ 556.132445][T12416] Bluetooth: MGMT ver 1.23 [ 557.713873][ T5926] usb 6-1: USB disconnect, device number 5 [ 558.201005][ T5819] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 558.210831][ T5819] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.491977][T12449] 9p: Bad value for 'rfdno' [ 558.685494][ T30] audit: type=1400 audit(2000000027.310:870): avc: denied { bind } for pid=12451 comm="syz.5.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 558.933377][T12456] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1732'. [ 559.003101][T12464] ceph: No mds server is up or the cluster is laggy [ 559.114206][ T30] audit: type=1400 audit(2000000027.730:871): avc: denied { bind } for pid=12461 comm="syz.0.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 559.448134][T12464] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1735'. [ 560.885189][T12481] SELinux: failed to load policy [ 562.042521][ T30] audit: type=1400 audit(2000000030.670:872): avc: denied { mount } for pid=12482 comm="syz.2.1738" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 562.127327][ T30] audit: type=1400 audit(2000000030.690:873): avc: denied { remount } for pid=12482 comm="syz.2.1738" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 562.446015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.498538][T12508] veth6: entered promiscuous mode [ 562.516020][T12508] veth6: entered allmulticast mode [ 563.458351][T12518] netlink: 'syz.0.1745': attribute type 5 has an invalid length. [ 563.960994][ T5926] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 564.122283][ T5926] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 564.152565][ T5926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 564.173302][ T5926] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 564.186910][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 564.206818][ T5926] usb 1-1: Product: syz [ 564.226231][ T5926] usb 1-1: Manufacturer: syz [ 564.246949][ T5926] usb 1-1: SerialNumber: syz [ 564.292980][ T5926] usb 1-1: config 0 descriptor?? [ 564.306107][ T5926] usb 1-1: selecting invalid altsetting 0 [ 564.523738][ T5926] usb 1-1: USB disconnect, device number 34 [ 564.680197][T12551] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 564.992625][T12551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.020048][T12555] bond2: (slave geneve3): making interface the new active one [ 565.052505][T12555] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 565.140245][ T30] audit: type=1400 audit(2000000033.720:874): avc: denied { read write } for pid=12557 comm="syz.5.1752" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 566.091640][T12563] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 566.092932][T12562] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 566.316697][ T30] audit: type=1400 audit(2000000033.720:875): avc: denied { open } for pid=12557 comm="syz.5.1752" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 566.521601][ T30] audit: type=1400 audit(2000000033.720:876): avc: denied { append } for pid=12557 comm="syz.5.1752" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 567.277840][T12552] SELinux: failed to load policy [ 567.728592][T12581] infiniband syû: set active [ 567.757943][T12581] infiniband syû: added bond_slave_0 [ 568.206162][T12581] RDS/IB: syû: added [ 568.243786][T12581] smc: adding ib device syû with port count 1 [ 568.343443][T12590] SELinux: failed to load policy [ 568.371041][T12581] smc: ib device syû port 1 has no pnetid [ 568.998351][ T30] audit: type=1400 audit(2000000037.620:877): avc: denied { shutdown } for pid=12605 comm="syz.5.1762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 569.830954][ T24] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 569.963741][T12615] 9p: Bad value for 'version' [ 569.980246][T12615] netlink: zone id is out of range [ 570.046917][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 570.067906][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.085089][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.087227][T12615] netlink: zone id is out of range [ 570.094609][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.119581][T12615] netlink: zone id is out of range [ 570.140988][T12615] netlink: zone id is out of range [ 570.148206][T12615] netlink: zone id is out of range [ 570.156965][T12614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12614 comm=syz.4.1765 [ 570.171181][T12615] netlink: zone id is out of range [ 570.178498][T12615] netlink: zone id is out of range [ 570.191248][ T30] audit: type=1400 audit(2000000038.820:878): avc: denied { getopt } for pid=12613 comm="syz.4.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.197087][T12615] netlink: zone id is out of range [ 570.250318][T12615] netlink: zone id is out of range [ 570.257284][T12615] netlink: zone id is out of range [ 570.858104][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 570.863686][ T24] usbtmc 6-1:16.0: can't read capabilities [ 571.187760][ T30] audit: type=1400 audit(2000000039.580:879): avc: denied { write } for pid=12607 comm="syz.5.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 571.233926][ T24] usb 6-1: USB disconnect, device number 6 [ 571.308169][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1770'. [ 571.489726][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 571.530193][ T30] audit: type=1400 audit(2000000040.150:880): avc: denied { read } for pid=12633 comm="syz.4.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 573.173502][T12669] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 573.180178][T12669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 573.194278][T12669] vhci_hcd vhci_hcd.0: Device attached [ 573.643790][ T5923] usb 42-1: SetAddress Request (2) to port 0 [ 573.651664][ T5923] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 574.514260][T12691] FAULT_INJECTION: forcing a failure. [ 574.514260][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 574.550802][T12691] CPU: 1 UID: 0 PID: 12691 Comm: syz.0.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.550833][T12691] Tainted: [L]=SOFTLOCKUP [ 574.550839][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.550850][T12691] Call Trace: [ 574.550856][T12691] [ 574.550863][T12691] dump_stack_lvl+0x16c/0x1f0 [ 574.550891][T12691] should_fail_ex+0x512/0x640 [ 574.550917][T12691] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 574.550939][T12691] should_failslab+0xc2/0x120 [ 574.550962][T12691] kmem_cache_alloc_node_noprof+0x86/0x800 [ 574.550981][T12691] ? __alloc_skb+0x156/0x410 [ 574.551005][T12691] ? __alloc_skb+0x35d/0x410 [ 574.551034][T12691] ? __alloc_skb+0x156/0x410 [ 574.551058][T12691] __alloc_skb+0x156/0x410 [ 574.551084][T12691] ? __alloc_skb+0x35d/0x410 [ 574.551110][T12691] ? __pfx___alloc_skb+0x10/0x10 [ 574.551139][T12691] ? __lock_acquire+0x436/0x2890 [ 574.551166][T12691] alloc_skb_with_frags+0xe0/0x860 [ 574.551194][T12691] sock_alloc_send_pskb+0x7f9/0x980 [ 574.551223][T12691] ? avc_has_perm_noaudit+0x117/0x3b0 [ 574.551257][T12691] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 574.551282][T12691] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 574.551304][T12691] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 574.551333][T12691] ? avc_has_perm+0x144/0x1f0 [ 574.551351][T12691] ? __pfx_avc_has_perm+0x10/0x10 [ 574.551389][T12691] unix_dgram_sendmsg+0x3bc/0x1830 [ 574.551420][T12691] ? sock_has_perm+0x258/0x2f0 [ 574.551439][T12691] ? __pfx_sock_has_perm+0x10/0x10 [ 574.551460][T12691] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 574.551493][T12691] ? __import_iovec+0x1dd/0x650 [ 574.551520][T12691] ? __might_fault+0xe3/0x190 [ 574.551535][T12691] ? __might_fault+0x13b/0x190 [ 574.551554][T12691] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 574.551584][T12691] ____sys_sendmsg+0xa5d/0xc30 [ 574.551608][T12691] ? copy_msghdr_from_user+0x10a/0x160 [ 574.551627][T12691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.551654][T12691] ? __pfx__kstrtoull+0x10/0x10 [ 574.551684][T12691] ___sys_sendmsg+0x134/0x1d0 [ 574.551704][T12691] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.551734][T12691] ? find_held_lock+0x2b/0x80 [ 574.551778][T12691] __sys_sendmmsg+0x200/0x420 [ 574.551800][T12691] ? __pfx___sys_sendmmsg+0x10/0x10 [ 574.551826][T12691] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 574.551862][T12691] ? fput+0x70/0xf0 [ 574.551877][T12691] ? ksys_write+0x1ac/0x250 [ 574.551899][T12691] ? __pfx_ksys_write+0x10/0x10 [ 574.551926][T12691] __x64_sys_sendmmsg+0x9c/0x100 [ 574.551943][T12691] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.551966][T12691] do_syscall_64+0xcd/0xf80 [ 574.551990][T12691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.552007][T12691] RIP: 0033:0x7fbee058f749 [ 574.552022][T12691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.552038][T12691] RSP: 002b:00007fbee1367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 574.552056][T12691] RAX: ffffffffffffffda RBX: 00007fbee07e5fa0 RCX: 00007fbee058f749 [ 574.552067][T12691] RDX: 0000000000000001 RSI: 0000200000002c40 RDI: 0000000000000003 [ 574.552078][T12691] RBP: 00007fbee1367090 R08: 0000000000000000 R09: 0000000000000000 [ 574.552088][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.552099][T12691] R13: 00007fbee07e6038 R14: 00007fbee07e5fa0 R15: 00007ffc6a3bbd48 [ 574.552123][T12691] [ 576.128250][T12695] vivid-000: kernel_thread() failed [ 576.382709][T12710] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1791'. [ 577.061674][ T30] audit: type=1400 audit(2000000045.690:881): avc: denied { accept } for pid=12711 comm="syz.0.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 577.272606][T12670] vhci_hcd: connection reset by peer [ 577.283992][ T50] vhci_hcd vhci_hcd.4: stop threads [ 577.303394][ T50] vhci_hcd vhci_hcd.4: release socket [ 577.317873][ T50] vhci_hcd vhci_hcd.4: disconnect device [ 577.357077][T12726] netlink: 'syz.4.1799': attribute type 7 has an invalid length. [ 577.641870][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 577.802302][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 577.817926][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 577.829382][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 577.857420][ T9] usb 5-1: Product: syz [ 577.866303][ T9] usb 5-1: Manufacturer: syz [ 577.876633][ T9] usb 5-1: SerialNumber: syz [ 577.890932][ T9] usb 5-1: config 0 descriptor?? [ 578.762398][ T5923] usb 42-1: device descriptor read/8, error -110 [ 579.271834][ T5923] usb usb42-port1: attempt power cycle [ 579.944955][ T5923] usb usb42-port1: unable to enumerate USB device [ 580.518438][ T8955] usb 5-1: USB disconnect, device number 37 [ 581.455439][T12773] /dev/nullb0: Can't lookup blockdev [ 581.514770][ T30] audit: type=1400 audit(2000000050.140:882): avc: denied { getattr } for pid=12776 comm="syz.2.1811" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 582.343407][T12795] veth16: entered promiscuous mode [ 582.348636][T12795] veth16: entered allmulticast mode [ 582.763247][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 583.042692][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 583.066949][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 583.125569][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.187443][ T30] audit: type=1400 audit(2000000051.790:883): avc: denied { ioctl } for pid=12802 comm="syz.2.1819" path="socket:[35482]" dev="sockfs" ino=35482 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.221693][ T5923] usb 6-1: config 0 descriptor?? [ 583.237078][ T30] audit: type=1400 audit(2000000051.790:884): avc: denied { setattr } for pid=12802 comm="syz.2.1819" name="SCTPv6" dev="sockfs" ino=35482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 583.293446][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'. [ 583.444048][ T30] audit: type=1400 audit(2000000052.070:885): avc: denied { setopt } for pid=12811 comm="syz.3.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 583.619713][ T30] audit: type=1400 audit(2000000052.240:886): avc: denied { remount } for pid=12792 comm="syz.5.1816" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 584.315564][T12824] FAULT_INJECTION: forcing a failure. [ 584.315564][T12824] name failslab, interval 1, probability 0, space 0, times 0 [ 584.328325][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.0.1824 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.328348][T12824] Tainted: [L]=SOFTLOCKUP [ 584.328351][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.328359][T12824] Call Trace: [ 584.328363][T12824] [ 584.328367][T12824] dump_stack_lvl+0x16c/0x1f0 [ 584.328387][T12824] should_fail_ex+0x512/0x640 [ 584.328405][T12824] ? fs_reclaim_acquire+0xae/0x150 [ 584.328423][T12824] should_failslab+0xc2/0x120 [ 584.328439][T12824] __kmalloc_noprof+0xeb/0x910 [ 584.328457][T12824] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.328477][T12824] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.328498][T12824] tomoyo_realpath_from_path+0xc2/0x6e0 [ 584.328518][T12824] tomoyo_mount_acl+0x664/0x850 [ 584.328533][T12824] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.328549][T12824] ? kernel_text_address+0x8d/0x100 [ 584.328565][T12824] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 584.328580][T12824] ? arch_stack_walk+0xa6/0x100 [ 584.328611][T12824] ? tomoyo_domain+0xba/0x150 [ 584.328628][T12824] ? tomoyo_profile+0x47/0x60 [ 584.328646][T12824] tomoyo_mount_permission+0x16d/0x420 [ 584.328661][T12824] ? tomoyo_mount_permission+0x14f/0x420 [ 584.328676][T12824] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 584.328700][T12824] security_sb_mount+0x9b/0x260 [ 584.328715][T12824] path_mount+0x158/0x23a0 [ 584.328727][T12824] ? rcu_is_watching+0x12/0xc0 [ 584.328739][T12824] ? __pfx_path_mount+0x10/0x10 [ 584.328750][T12824] ? kmem_cache_free+0x2d8/0x770 [ 584.328762][T12824] ? putname+0xf5/0x1a0 [ 584.328782][T12824] ? putname+0xf5/0x1a0 [ 584.328798][T12824] ? putname+0xf5/0x1a0 [ 584.328815][T12824] ? __x64_sys_mount+0x293/0x310 [ 584.328825][T12824] __x64_sys_mount+0x293/0x310 [ 584.328837][T12824] ? __pfx___x64_sys_mount+0x10/0x10 [ 584.328853][T12824] do_syscall_64+0xcd/0xf80 [ 584.328869][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.328881][T12824] RIP: 0033:0x7fbee058f749 [ 584.328892][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.328903][T12824] RSP: 002b:00007fbee1346038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.328914][T12824] RAX: ffffffffffffffda RBX: 00007fbee07e6090 RCX: 00007fbee058f749 [ 584.328922][T12824] RDX: 00002000000000c0 RSI: 0000200000000100 RDI: 0000200000000080 [ 584.328929][T12824] RBP: 00007fbee1346090 R08: 0000000000000000 R09: 0000000000000000 [ 584.328936][T12824] R10: 0000000001000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.328943][T12824] R13: 00007fbee07e6128 R14: 00007fbee07e6090 R15: 00007ffc6a3bbd48 [ 584.328958][T12824] [ 584.328978][T12824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 585.233097][ T5923] usb 6-1: USB disconnect, device number 7 [ 585.988470][T12842] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 586.236343][T12842] CIFS mount error: No usable UNC path provided in device string! [ 586.236343][T12842] [ 586.299142][T12842] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 586.438423][ T30] audit: type=1400 audit(2000000055.060:887): avc: denied { connect } for pid=12841 comm="syz.3.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 586.480834][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 586.507455][ T30] audit: type=1400 audit(2000000055.080:888): avc: denied { write } for pid=12841 comm="syz.3.1829" path="socket:[36821]" dev="sockfs" ino=36821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 586.660799][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 586.667712][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.683937][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 586.711067][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 586.732531][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.744014][ T24] usb 6-1: config 0 descriptor?? [ 586.755513][ T24] hso 6-1:0.0: Can't find BULK IN endpoint [ 586.895435][T12860] input: syz1 as /devices/virtual/input/input38 [ 588.723337][ T5923] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 589.353867][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 589.362498][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.373454][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.384314][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 589.398278][ T5923] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 589.407609][ T5923] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 589.426570][ T5923] usb 1-1: Manufacturer: syz [ 589.438735][ T5923] usb 1-1: config 0 descriptor?? [ 590.563268][ T6363] usb 6-1: USB disconnect, device number 8 [ 590.573043][ T30] audit: type=1400 audit(2000000059.200:889): avc: denied { mounton } for pid=12873 comm="syz.4.1837" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.582815][T12881] bridge2: entered allmulticast mode [ 590.611252][T12881] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1837'. [ 591.100292][T12887] overlayfs: failed to clone lowerpath [ 591.107726][ T30] audit: type=1400 audit(2000000059.720:890): avc: denied { mount } for pid=12879 comm="syz.2.1838" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 591.665365][ T6363] usb 1-1: USB disconnect, device number 35 [ 591.989278][T12896] veth12: entered promiscuous mode [ 591.994487][T12896] veth12: entered allmulticast mode [ 592.812161][T12904] FAULT_INJECTION: forcing a failure. [ 592.812161][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.839342][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.5.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.839367][T12904] Tainted: [L]=SOFTLOCKUP [ 592.839371][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 592.839378][T12904] Call Trace: [ 592.839382][T12904] [ 592.839386][T12904] dump_stack_lvl+0x16c/0x1f0 [ 592.839405][T12904] should_fail_ex+0x512/0x640 [ 592.839425][T12904] _copy_from_user+0x2e/0xd0 [ 592.839442][T12904] kstrtouint_from_user+0xd6/0x1d0 [ 592.839455][T12904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 592.839466][T12904] ? __lock_acquire+0x436/0x2890 [ 592.839482][T12904] ? lock_acquire+0x179/0x330 [ 592.839498][T12904] proc_fail_nth_write+0x83/0x220 [ 592.839510][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 592.839525][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 592.839536][T12904] vfs_write+0x2a0/0x11d0 [ 592.839551][T12904] ? __pfx___mutex_lock+0x10/0x10 [ 592.839567][T12904] ? __pfx_vfs_write+0x10/0x10 [ 592.839585][T12904] ? __fget_files+0x20e/0x3c0 [ 592.839605][T12904] ksys_write+0x12a/0x250 [ 592.839618][T12904] ? __pfx_ksys_write+0x10/0x10 [ 592.839633][T12904] ? fdget+0x187/0x210 [ 592.839650][T12904] do_syscall_64+0xcd/0xf80 [ 592.839666][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.839677][T12904] RIP: 0033:0x7f06c018e1ff [ 592.839686][T12904] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 592.839697][T12904] RSP: 002b:00007f06c1004030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 592.839708][T12904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06c018e1ff [ 592.839715][T12904] RDX: 0000000000000001 RSI: 00007f06c10040a0 RDI: 0000000000000009 [ 592.839721][T12904] RBP: 00007f06c1004090 R08: 0000000000000000 R09: 0000000000000000 [ 592.839727][T12904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 592.839734][T12904] R13: 00007f06c03e6128 R14: 00007f06c03e6090 R15: 00007ffdc4ddfb48 [ 592.839748][T12904] [ 594.479118][ T30] audit: type=1400 audit(2000000063.100:891): avc: denied { read } for pid=12914 comm="syz.4.1847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 594.542925][T12923] tipc: Started in network mode [ 594.548117][T12923] tipc: Node identity 0e00a2e195ca, cluster identity 4711 [ 594.557529][T12923] tipc: Enabled bearer , priority 0 [ 594.576105][T12923] syzkaller0: entered promiscuous mode [ 594.590851][T12923] syzkaller0: entered allmulticast mode [ 594.608463][ T30] audit: type=1400 audit(2000000063.230:892): avc: denied { read } for pid=12922 comm="syz.0.1849" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 594.609843][T12923] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 594.656774][ T30] audit: type=1400 audit(2000000063.230:893): avc: denied { open } for pid=12922 comm="syz.0.1849" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 594.658721][T12923] tipc: Resetting bearer [ 594.690969][ C0] net_ratelimit: 45 callbacks suppressed [ 594.690989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.706622][ T30] audit: type=1326 audit(2000000063.310:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12914 comm="syz.4.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7fc00000 [ 594.739748][T12922] tipc: Resetting bearer [ 594.766354][T12922] tipc: Disabling bearer [ 595.039529][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 595.048483][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'. [ 595.109449][ T30] audit: type=1400 audit(2000000063.730:895): avc: denied { mount } for pid=12926 comm="syz.5.1851" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 595.204748][ T30] audit: type=1400 audit(2000000063.830:896): avc: denied { map } for pid=12941 comm="syz.2.1855" path="socket:[37948]" dev="sockfs" ino=37948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 595.273032][ T30] audit: type=1400 audit(2000000063.860:897): avc: denied { getopt } for pid=12941 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 595.315082][T12947] overlayfs: failed to clone upperpath [ 595.347654][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 595.350483][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 595.368473][T12947] overlay: Unknown parameter 'euid>00000000000000000000' [ 595.523167][ T5892] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 595.580614][T12958] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1861'. [ 595.802924][ T5892] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 596.146201][ T5892] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 596.171277][ T5892] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 596.185400][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.238454][T12943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 596.344365][ T5892] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 596.385125][ T30] audit: type=1400 audit(2000000065.010:898): avc: denied { mount } for pid=12965 comm="syz.2.1863" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 596.903685][T12975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=12975 comm=syz.2.1865 [ 597.043324][ T5892] usb 1-1: USB disconnect, device number 36 [ 597.920820][ T6363] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 598.163552][ T6363] usb 5-1: Using ep0 maxpacket: 8 [ 598.589606][ T6363] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 598.603001][ T6363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.603033][ T6363] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 598.603053][ T6363] usb 5-1: config 1 has no interface number 0 [ 598.603090][ T6363] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.695156][ T6363] usb 5-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.698656][ T6363] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 598.698683][ T6363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.698701][ T6363] usb 5-1: Product: syz [ 598.698714][ T6363] usb 5-1: Manufacturer: syz [ 598.698727][ T6363] usb 5-1: SerialNumber: syz [ 598.702708][ T6363] cdc_wdm 5-1:1.128: skipping garbage [ 598.704381][ T6363] cdc_wdm 5-1:1.128: cdc-wdm0: USB WDM device [ 598.704400][ T6363] cdc_wdm 5-1:1.128: Unknown control protocol [ 598.987781][ T30] audit: type=1400 audit(2000000067.560:899): avc: denied { bind } for pid=12996 comm="syz.3.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.096460][ T6363] usb 5-1: USB disconnect, device number 38 [ 601.099491][ T30] audit: type=1400 audit(2000000069.660:900): avc: denied { create } for pid=13033 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 602.704825][T13049] FAULT_INJECTION: forcing a failure. [ 602.704825][T13049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.718012][T13049] CPU: 0 UID: 0 PID: 13049 Comm: syz.0.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 602.718038][T13049] Tainted: [L]=SOFTLOCKUP [ 602.718041][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.718048][T13049] Call Trace: [ 602.718053][T13049] [ 602.718057][T13049] dump_stack_lvl+0x16c/0x1f0 [ 602.718075][T13049] should_fail_ex+0x512/0x640 [ 602.718096][T13049] _copy_from_user+0x2e/0xd0 [ 602.718112][T13049] io_uring_setup+0xc1/0x2010 [ 602.718125][T13049] ? __pfx_io_uring_setup+0x10/0x10 [ 602.718137][T13049] ? avc_has_perm_noaudit+0x117/0x3b0 [ 602.718165][T13049] ? ksys_write+0x1ac/0x250 [ 602.718180][T13049] ? __pfx_ksys_write+0x10/0x10 [ 602.718196][T13049] __x64_sys_io_uring_setup+0xc2/0x170 [ 602.718208][T13049] do_syscall_64+0xcd/0xf80 [ 602.718224][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.718241][T13049] RIP: 0033:0x7fbee058f749 [ 602.718250][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.718260][T13049] RSP: 002b:00007fbee1346038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 602.718270][T13049] RAX: ffffffffffffffda RBX: 00007fbee07e6090 RCX: 00007fbee058f749 [ 602.718277][T13049] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7f [ 602.718283][T13049] RBP: 00007fbee1346090 R08: 0000000000000000 R09: 0000000000000000 [ 602.718289][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.718296][T13049] R13: 00007fbee07e6128 R14: 00007fbee07e6090 R15: 00007ffc6a3bbd48 [ 602.718310][T13049] [ 603.760306][ T30] audit: type=1400 audit(2000000072.340:901): avc: denied { connect } for pid=13051 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 604.571666][ T30] audit: type=1400 audit(2000000073.200:902): avc: denied { create } for pid=13067 comm="syz.0.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 604.745307][ T30] audit: type=1400 audit(2000000073.220:903): avc: denied { bind } for pid=13067 comm="syz.0.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 605.483948][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1886'. [ 605.843179][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 606.023888][ T30] audit: type=1400 audit(2000000074.650:904): avc: denied { bind } for pid=13067 comm="syz.0.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 606.074363][T13068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1891'. [ 606.980012][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 606.990180][T13095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1897'. [ 607.521556][ T6070] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 607.892582][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 608.016897][ T6070] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 608.090444][ T6070] usb 5-1: can't read configurations, error -22 [ 608.399472][T13110] overlayfs: failed to clone upperpath [ 608.727099][ T6070] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 609.490792][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 609.513558][ T6070] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 609.521928][ T6070] usb 5-1: can't read configurations, error -22 [ 609.529499][ T6070] usb usb5-port1: attempt power cycle [ 609.900871][ T6070] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 610.027165][ T6070] usb 5-1: Using ep0 maxpacket: 32 [ 610.380072][ T6070] usb 5-1: device descriptor read/all, error -71 [ 610.738389][T13102] SELinux: failed to load policy [ 612.863453][ T30] audit: type=1400 audit(2000000081.480:905): avc: denied { ioctl } for pid=13133 comm="syz.0.1908" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 613.371051][ T5951] libceph: connect (1)[c::]:6789 error -13 [ 613.377027][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 614.096236][T13167] veth14: entered promiscuous mode [ 614.101548][T13167] veth14: entered allmulticast mode [ 614.340323][ T30] audit: type=1400 audit(2000000082.740:906): avc: denied { mount } for pid=13157 comm="syz.5.1915" name="/" dev="hugetlbfs" ino=38301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 614.481093][ T5951] libceph: connect (1)[c::]:6789 error -13 [ 614.487016][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 614.532396][T13154] ceph: No mds server is up or the cluster is laggy [ 614.763673][T13178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1922'. [ 614.896271][T13178] netlink: 29868 bytes leftover after parsing attributes in process `syz.3.1922'. [ 614.940914][ T6070] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 615.810931][ T6070] usb 5-1: device descriptor read/64, error -71 [ 615.888052][T13190] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 615.916146][T13190] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.933699][T13190] bond0: (slave team0): Enslaving as an active interface with an up link [ 615.993010][ T30] audit: type=1400 audit(2000000084.600:907): avc: denied { setopt } for pid=13187 comm="syz.3.1923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 616.054773][ T6070] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 616.520850][ T6070] usb 5-1: device descriptor read/64, error -71 [ 616.661996][ T6070] usb usb5-port1: attempt power cycle [ 617.021275][ T6070] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 617.118841][T13187] delete_channel: no stack [ 617.200234][ T6070] usb 5-1: device descriptor read/8, error -71 [ 617.500866][ T6070] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 617.941468][ T6070] usb 5-1: device descriptor read/8, error -71 [ 617.963054][ T30] audit: type=1400 audit(2000000086.590:908): avc: denied { read } for pid=13206 comm="syz.5.1927" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 618.019708][ T30] audit: type=1400 audit(2000000086.590:909): avc: denied { open } for pid=13206 comm="syz.5.1927" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 618.071186][ T6070] usb usb5-port1: unable to enumerate USB device [ 618.104594][ T5819] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 618.397697][ T30] audit: type=1400 audit(2000000087.020:910): avc: denied { ioctl } for pid=13206 comm="syz.5.1927" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 618.560855][ T6070] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 618.740819][ T6070] usb 5-1: Using ep0 maxpacket: 16 [ 618.752503][ T6070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.775825][ T6070] usb 5-1: config 0 has no interfaces? [ 618.788071][ T6070] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.938273][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.949187][ T6070] usb 5-1: config 0 descriptor?? [ 619.121281][ T30] audit: type=1400 audit(2000000087.680:911): avc: denied { mount } for pid=13228 comm="syz.5.1934" name="/" dev="rpc_pipefs" ino=37788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 619.908543][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1936'. [ 620.029656][T13239] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 620.132453][ T30] audit: type=1400 audit(2000000088.760:912): avc: denied { getopt } for pid=13240 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 621.253881][ T24] usb 5-1: USB disconnect, device number 47 [ 622.084221][ T30] audit: type=1400 audit(2000000090.710:913): avc: denied { ioctl } for pid=13264 comm="syz.4.1947" path="socket:[38919]" dev="sockfs" ino=38919 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 622.557414][T13264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.754299][T13291] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 622.769146][T13291] team0: Port device netdevsim0 added [ 622.776629][T13291] netlink: 'syz.2.1948': attribute type 10 has an invalid length. [ 622.899368][T13291] team0: Port device netdevsim0 removed [ 622.914319][T13291] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 623.100699][T13307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 623.191466][T13309] netlink: 'syz.3.1953': attribute type 1 has an invalid length. [ 623.226830][T13309] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1953'. [ 623.301674][T13310] siw: device registration error -23 [ 623.638090][ T6070] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 623.875545][ T6070] usb 6-1: device descriptor read/64, error -71 [ 623.885710][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.130819][ T6070] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 624.262983][ T6070] usb 6-1: device descriptor read/64, error -71 [ 624.373977][ T6070] usb usb6-port1: attempt power cycle [ 624.469313][T13327] bond0: (slave team0): Releasing backup interface [ 624.480626][T13327] bridge_slave_0: left allmulticast mode [ 624.488501][T13327] bridge_slave_0: left promiscuous mode [ 624.496638][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.509349][T13327] bridge_slave_1: left allmulticast mode [ 624.519399][T13327] bridge_slave_1: left promiscuous mode [ 624.527718][T13328] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 624.531020][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.536932][T13328] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1958'. [ 624.599055][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1958'. [ 624.635261][T13327] bond0: (slave bond_slave_0): Releasing backup interface [ 624.663855][T13327] bond0: (slave bond_slave_1): Releasing backup interface [ 624.678440][T13327] team0: Port device team_slave_0 removed [ 624.687103][T13327] team0: Port device team_slave_1 removed [ 624.693751][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.711065][T13327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.711704][ T6070] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 624.747938][T13327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.753542][ T6070] usb 6-1: device descriptor read/8, error -71 [ 624.794818][T13327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.031276][ T6070] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 625.037466][T13327] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 625.051173][ T6070] usb 6-1: device descriptor read/8, error -71 [ 625.183179][T13340] overlayfs: failed to clone upperpath [ 625.190135][ T6363] lo speed is unknown, defaulting to 1000 [ 625.210888][T13328] team0: entered promiscuous mode [ 625.216962][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.274553][T13328] bridge0: port 1(team0) entered blocking state [ 625.316946][T13328] bridge0: port 1(team0) entered disabled state [ 625.322932][ T6070] usb usb6-port1: unable to enumerate USB device [ 625.363296][T13328] team0: entered allmulticast mode [ 626.248794][T13355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 626.848457][T13369] input: syz1 as /devices/virtual/input/input39 [ 626.901032][ T6070] libceph: connect (1)[c::]:6789 error -101 [ 626.937498][ T6070] libceph: mon0 (1)[c::]:6789 connect error [ 626.965810][ T30] audit: type=1400 audit(2000000095.580:914): avc: denied { read } for pid=13371 comm="syz.0.1969" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 627.015767][ T30] audit: type=1400 audit(2000000095.580:915): avc: denied { open } for pid=13371 comm="syz.0.1969" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 627.078653][ T30] audit: type=1400 audit(2000000095.580:916): avc: denied { ioctl } for pid=13371 comm="syz.0.1969" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 627.107254][T13362] ceph: No mds server is up or the cluster is laggy [ 627.211267][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 627.221348][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 627.296823][ T30] audit: type=1400 audit(2000000095.920:917): avc: denied { connect } for pid=13378 comm="syz.4.1971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 627.327230][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.334448][T13376] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.488520][T13376] wg1: left promiscuous mode [ 627.493193][T13376] wg1: left allmulticast mode [ 627.517960][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 627.764101][T13390] FAULT_INJECTION: forcing a failure. [ 627.764101][T13390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.778571][T13390] CPU: 1 UID: 0 PID: 13390 Comm: syz.5.1973 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.778602][T13390] Tainted: [L]=SOFTLOCKUP [ 627.778608][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.778618][T13390] Call Trace: [ 627.778625][T13390] [ 627.778633][T13390] dump_stack_lvl+0x16c/0x1f0 [ 627.778661][T13390] should_fail_ex+0x512/0x640 [ 627.778692][T13390] _copy_from_iter+0x2a4/0x16c0 [ 627.778727][T13390] ? __pfx__copy_from_iter+0x10/0x10 [ 627.778754][T13390] ? rcu_is_watching+0x12/0xc0 [ 627.778773][T13390] ? kfree+0x27d/0x6e0 [ 627.778788][T13390] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 627.778817][T13390] file_tty_write.constprop.0+0x487/0x9b0 [ 627.778846][T13390] vfs_write+0x7d3/0x11d0 [ 627.778876][T13390] ? __pfx_tty_write+0x10/0x10 [ 627.778898][T13390] ? __pfx_vfs_write+0x10/0x10 [ 627.778917][T13390] ? find_held_lock+0x2b/0x80 [ 627.778963][T13390] ksys_write+0x12a/0x250 [ 627.778984][T13390] ? __pfx_ksys_write+0x10/0x10 [ 627.779015][T13390] do_syscall_64+0xcd/0xf80 [ 627.779040][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.779058][T13390] RIP: 0033:0x7f06c018f749 [ 627.779073][T13390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.779089][T13390] RSP: 002b:00007f06c0fe3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.779106][T13390] RAX: ffffffffffffffda RBX: 00007f06c03e6180 RCX: 00007f06c018f749 [ 627.779118][T13390] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000006 [ 627.779129][T13390] RBP: 00007f06c0fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 627.779139][T13390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.779149][T13390] R13: 00007f06c03e6218 R14: 00007f06c03e6180 R15: 00007ffdc4ddfb48 [ 627.779175][T13390] [ 627.893751][T13376] veth0_to_team: left promiscuous mode [ 628.370800][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 628.383123][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.393752][ T24] usb 1-1: config 0 has no interfaces? [ 628.399947][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 628.467094][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.491441][ T24] usb 1-1: config 0 descriptor?? [ 628.572558][T13376] bridge2: left promiscuous mode [ 628.577511][T13376] bridge2: left allmulticast mode [ 628.583506][T13376] veth2: left promiscuous mode [ 628.588252][T13376] veth2: left allmulticast mode [ 628.593215][T13376] veth4: left promiscuous mode [ 628.597951][T13376] veth4: left allmulticast mode [ 628.603101][T13376] veth6: left promiscuous mode [ 628.607857][T13376] veth6: left allmulticast mode [ 628.612948][T13376] veth8: left promiscuous mode [ 628.617700][T13376] veth8: left allmulticast mode [ 628.625408][T13376] erspan1: left allmulticast mode [ 628.631424][T13376] veth10: left promiscuous mode [ 628.636256][T13376] veth10: left allmulticast mode [ 628.641363][T13376] veth12: left promiscuous mode [ 628.646261][T13376] veth12: left allmulticast mode [ 628.651352][T13376] veth14: left promiscuous mode [ 628.656180][T13376] veth14: left allmulticast mode [ 628.664866][T13376] veth16: left promiscuous mode [ 628.669720][T13376] veth16: left allmulticast mode [ 628.677453][T13393] FAULT_INJECTION: forcing a failure. [ 628.677453][T13393] name failslab, interval 1, probability 0, space 0, times 0 [ 628.696840][T13393] CPU: 1 UID: 0 PID: 13393 Comm: syz.5.1975 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.696868][T13393] Tainted: [L]=SOFTLOCKUP [ 628.696875][T13393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.696889][T13393] Call Trace: [ 628.696895][T13393] [ 628.696901][T13393] dump_stack_lvl+0x16c/0x1f0 [ 628.696927][T13393] should_fail_ex+0x512/0x640 [ 628.696952][T13393] ? __kmalloc_cache_noprof+0x5f/0x800 [ 628.696983][T13393] should_failslab+0xc2/0x120 [ 628.697005][T13393] __kmalloc_cache_noprof+0x80/0x800 [ 628.697031][T13393] ? tcf_block_get_ext+0x3c6/0x1860 [ 628.697056][T13393] ? tcf_block_get_ext+0x3c6/0x1860 [ 628.697075][T13393] tcf_block_get_ext+0x3c6/0x1860 [ 628.697094][T13393] ? qdisc_alloc+0x6f1/0xa50 [ 628.697108][T13393] ? qdisc_create+0x71/0xfa0 [ 628.697130][T13393] ? netlink_unicast+0x5aa/0x870 [ 628.697149][T13393] ? netlink_sendmsg+0x8c8/0xdd0 [ 628.697170][T13393] tcf_block_get+0xa8/0x100 [ 628.697190][T13393] ? __pfx_tcf_block_get+0x10/0x10 [ 628.697209][T13393] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 628.697244][T13393] sfb_init+0x33/0xc0 [ 628.697267][T13393] ? __pfx_sfb_init+0x10/0x10 [ 628.697291][T13393] qdisc_create+0x457/0xfa0 [ 628.697317][T13393] tc_modify_qdisc+0x122f/0x2230 [ 628.697344][T13393] ? __mutex_lock+0x27b/0x1ca0 [ 628.697370][T13393] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 628.697417][T13393] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 628.697443][T13393] rtnetlink_rcv_msg+0x3c9/0xe90 [ 628.697465][T13393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.697493][T13393] ? ref_tracker_free+0x37c/0x830 [ 628.697512][T13393] netlink_rcv_skb+0x158/0x420 [ 628.697532][T13393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.697552][T13393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.697582][T13393] ? netlink_deliver_tap+0x1ae/0xd30 [ 628.697608][T13393] netlink_unicast+0x5aa/0x870 [ 628.697634][T13393] ? __pfx_netlink_unicast+0x10/0x10 [ 628.697665][T13393] netlink_sendmsg+0x8c8/0xdd0 [ 628.697692][T13393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.697724][T13393] ____sys_sendmsg+0xa5d/0xc30 [ 628.697749][T13393] ? copy_msghdr_from_user+0x10a/0x160 [ 628.697768][T13393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.697795][T13393] ? __pfx__kstrtoull+0x10/0x10 [ 628.697821][T13393] ___sys_sendmsg+0x134/0x1d0 [ 628.697842][T13393] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.697873][T13393] ? find_held_lock+0x2b/0x80 [ 628.697921][T13393] __sys_sendmmsg+0x200/0x420 [ 628.697941][T13393] ? __pfx___sys_sendmmsg+0x10/0x10 [ 628.697968][T13393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 628.698003][T13393] ? fput+0x70/0xf0 [ 628.698019][T13393] ? ksys_write+0x1ac/0x250 [ 628.698041][T13393] ? __pfx_ksys_write+0x10/0x10 [ 628.698068][T13393] __x64_sys_sendmmsg+0x9c/0x100 [ 628.698086][T13393] ? lockdep_hardirqs_on+0x7c/0x110 [ 628.698109][T13393] do_syscall_64+0xcd/0xf80 [ 628.698134][T13393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.698151][T13393] RIP: 0033:0x7f06c018f749 [ 628.698167][T13393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.698184][T13393] RSP: 002b:00007f06c1025038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 628.698201][T13393] RAX: ffffffffffffffda RBX: 00007f06c03e5fa0 RCX: 00007f06c018f749 [ 628.698212][T13393] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 628.698223][T13393] RBP: 00007f06c1025090 R08: 0000000000000000 R09: 0000000000000000 [ 628.698233][T13393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 628.698243][T13393] R13: 00007f06c03e6038 R14: 00007f06c03e5fa0 R15: 00007ffdc4ddfb48 [ 628.698270][T13393] [ 628.700336][ T6070] lo speed is unknown, defaulting to 1000 [ 628.701174][ T9951] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.135393][ T9951] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.146787][ T9951] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.155990][ T9951] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 629.246216][T13391] infiniband syz2: set down [ 629.250775][T13391] infiniband syz2: added ipvlan0 [ 629.256545][T13391] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 629.258917][T13391] infiniband syz2: Couldn't open port 1 [ 629.290488][ T6070] sy: Port: 1 Link DOWN [ 629.307275][T13391] RDS/IB: syz2: added [ 629.311349][T13391] smc: adding ib device syz2 with port count 1 [ 629.317671][T13391] smc: ib device syz2 port 1 has pnetid SYZ0 (user defined) [ 630.601571][T13417] FAULT_INJECTION: forcing a failure. [ 630.601571][T13417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.736289][T13417] CPU: 1 UID: 0 PID: 13417 Comm: syz.5.1980 Tainted: G L syzkaller #0 PREEMPT(full) [ 630.736322][T13417] Tainted: [L]=SOFTLOCKUP [ 630.736329][T13417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.736340][T13417] Call Trace: [ 630.736346][T13417] [ 630.736354][T13417] dump_stack_lvl+0x16c/0x1f0 [ 630.736382][T13417] should_fail_ex+0x512/0x640 [ 630.736415][T13417] _copy_to_user+0x32/0xd0 [ 630.736445][T13417] simple_read_from_buffer+0xcb/0x170 [ 630.736473][T13417] proc_fail_nth_read+0x197/0x240 [ 630.736494][T13417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.736516][T13417] ? rw_verify_area+0xcf/0x6c0 [ 630.736536][T13417] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.736555][T13417] vfs_read+0x1e4/0xcf0 [ 630.736583][T13417] ? __pfx___mutex_lock+0x10/0x10 [ 630.736611][T13417] ? __pfx_vfs_read+0x10/0x10 [ 630.736640][T13417] ? __fget_files+0x20e/0x3c0 [ 630.736672][T13417] ksys_read+0x12a/0x250 [ 630.736693][T13417] ? __pfx_ksys_read+0x10/0x10 [ 630.736724][T13417] do_syscall_64+0xcd/0xf80 [ 630.736750][T13417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.736769][T13417] RIP: 0033:0x7f06c018e15c [ 630.736785][T13417] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 630.736802][T13417] RSP: 002b:00007f06c0fe3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.736821][T13417] RAX: ffffffffffffffda RBX: 00007f06c03e6180 RCX: 00007f06c018e15c [ 630.736832][T13417] RDX: 000000000000000f RSI: 00007f06c0fe30a0 RDI: 0000000000000007 [ 630.736843][T13417] RBP: 00007f06c0fe3090 R08: 0000000000000000 R09: 0000000000000000 [ 630.736854][T13417] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 630.736865][T13417] R13: 00007f06c03e6218 R14: 00007f06c03e6180 R15: 00007ffdc4ddfb48 [ 630.736892][T13417] [ 631.008715][T13407] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.016126][T13407] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.387325][T13415] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 631.397121][T13415] SELinux: failed to load policy [ 631.923244][T13407] veth0_to_team: left promiscuous mode [ 632.013267][T13407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.091853][ T5923] usb 1-1: USB disconnect, device number 37 [ 632.096171][T13407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.206812][T13407] veth2: left promiscuous mode [ 633.212254][T13444] sctp: [Deprecated]: syz.4.1988 (pid 13444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.212254][T13444] Use struct sctp_sack_info instead [ 633.230411][T13407] veth2: left allmulticast mode [ 633.238359][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 633.250016][T13407] veth4: left promiscuous mode [ 633.281251][T13407] veth4: left allmulticast mode [ 633.311124][T13407] veth6: left promiscuous mode [ 633.318425][T13407] veth6: left allmulticast mode [ 633.331131][ T9951] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.342718][ T9951] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.361561][ T9951] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.370609][ T9951] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 633.397397][ T9951] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.408673][ T9951] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.418352][ T9951] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.438369][ T9951] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.735356][ T30] audit: type=1400 audit(2000000102.360:918): avc: denied { ioctl } for pid=13451 comm="syz.0.1993" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 633.990938][ T5951] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 634.251623][ T5951] usb 1-1: Using ep0 maxpacket: 8 [ 634.572692][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.582732][ T5951] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 634.613303][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.632558][T13465] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1995'. [ 634.703293][ T5951] usb 1-1: config 0 descriptor?? [ 634.710064][ T5951] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 634.952452][T13473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1999'. [ 635.049384][T13473] veth17: entered promiscuous mode [ 636.216668][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 636.227754][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 636.521176][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 636.557746][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 636.575999][ T5856] usb 1-1: USB disconnect, device number 38 [ 636.602561][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 636.791317][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 636.798112][ T9] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 636.814246][T13519] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 636.821468][ T9] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 636.839706][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.021330][T13497] ceph: No mds server is up or the cluster is laggy [ 637.486114][ T9] usb 5-1: string descriptor 0 read error: -71 [ 637.528933][ T9] usb 5-1: USB disconnect, device number 48 [ 637.632608][ T30] audit: type=1400 audit(2000000106.260:919): avc: denied { mount } for pid=13528 comm="syz.2.2014" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 637.656857][T13533] overlayfs: failed to clone lowerpath [ 637.708442][T13534] overlayfs: failed to clone lowerpath [ 639.078186][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 639.196401][ T30] audit: type=1400 audit(2000000107.820:920): avc: denied { nlmsg_read } for pid=13540 comm="syz.0.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 639.518789][T13549] lo speed is unknown, defaulting to 1000 [ 639.584734][T13549] lo speed is unknown, defaulting to 1000 [ 639.760811][ T5856] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 639.910891][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 639.922096][ T5856] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 639.934295][ T5856] usb 5-1: config 179 has no interface number 0 [ 639.994598][ T5856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 640.320916][ T6363] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 640.388192][ T5856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 640.400035][ T5856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 640.411470][ T5856] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 640.424577][ T5856] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 640.439492][ T5856] usb 5-1: config 179 interface 65 has no altsetting 0 [ 640.446600][ T5856] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 640.459552][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.536578][ T5856] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input41 [ 640.631097][ T5168] input input41: unable to receive magic message: -110 [ 640.672150][ T5168] input input41: unable to receive magic message: -32 [ 640.700373][ T6363] usb 6-1: not running at top speed; connect to a high speed hub [ 640.701775][ T5168] input input41: unable to receive magic message: -32 [ 640.721902][ T6363] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.745540][ T6363] usb 6-1: config 1 interface 0 has no altsetting 0 [ 640.762427][ T5168] input input41: unable to receive magic message: -32 [ 640.767643][ T6363] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.40 [ 640.788766][ T6363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.800746][ T6363] usb 6-1: Product: ᶎ쾳멚㊧⿧ì“឴凉é¿á²ƒê´‹ã•Œê¸¥î‹†Ñ¤éŽ‘쩰僡븸鑔ä©à·¥á–›åŽ²æˆ€èŸ¤â¥«ïƒƒç–ì«ë­ë£”êƒá•¢ë°»é¿äƒˆé¨ä¥¦ì›°íœ è±´áŠšïƒƒç¥·Ý´ê– ã»¾àªžì·ç£·ç€ŠîŸ˜ê‹ìˆ›á§á–쬿䰛诋边١堅їæ˜ï™ƒî†‚銠ﯞ䉢뱿缊ꑣߔ╠䅨㗎ꡂ [ 640.847286][ T6363] usb 6-1: Manufacturer: á  [ 640.870757][ T6363] usb 6-1: SerialNumber: 䈄฾ïâ¥å›ç¤¥èŠ½ê¶ä²®î©€î”®è±†îŽ®ã›¦ë‘žçœ®è«µî¬ƒá¾¿ëª®æ‘·ìª»íœŸç»‚즠개♖챔è€ì—³à§žÇœê“Œâ¦žå‡­ë†·ä±¥ï•ç Šá£¶éœ‡î¦²è†‚庙砹鄥籑谽२ê»ÄŠã€Žëƒ¾åŒ©ë켄鰊ℳäŠíŒî¿‰æ¬Žè•‡é€¦ï‚웬ﮋ漬鮞ä»î„¶ï ¶ã‚ä¼èƒ£á‚•é¡«æˆ­ç¼»åœ£â¯†çº“愘䥋ᖌ [ 640.936444][T13542] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 640.946374][T13542] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.2017'. [ 640.962235][ T5893] usb 5-1: USB disconnect, device number 49 [ 640.962272][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 641.271240][ T5856] libceph: connect (1)[c::]:6789 error -13 [ 641.284402][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 641.564104][ T5856] libceph: connect (1)[c::]:6789 error -13 [ 641.591141][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 641.618371][ T6363] usbhid 6-1:1.0: can't add hid device: -71 [ 641.637742][ T6363] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 641.672103][ T6363] usb 6-1: USB disconnect, device number 13 [ 641.939736][T13575] ceph: No mds server is up or the cluster is laggy [ 642.102903][ T5856] libceph: connect (1)[c::]:6789 error -13 [ 642.451461][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 642.481298][ T6363] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 642.574091][ T30] audit: type=1400 audit(2000000111.200:921): avc: denied { getopt } for pid=13599 comm="syz.0.2030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 642.651045][ T6363] usb 6-1: Using ep0 maxpacket: 32 [ 642.657866][ T6363] usb 6-1: config 155 has an invalid interface number: 159 but max is 0 [ 642.677474][ T6363] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 642.690775][ T6363] usb 6-1: config 155 has no interface number 0 [ 642.697077][ T6363] usb 6-1: too many endpoints for config 155 interface 159 altsetting 56: 67, using maximum allowed: 30 [ 642.733548][T13602] tipc: Enabling of bearer rejected, failed to enable media [ 642.761523][ T6363] usb 6-1: config 155 interface 159 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 642.797643][ T6363] usb 6-1: config 155 interface 159 has no altsetting 0 [ 642.827694][ T6363] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 642.837073][ T6363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.861103][ T6363] usb 6-1: Product: syz [ 642.866481][ T6363] usb 6-1: Manufacturer: syz [ 642.872230][ T6363] usb 6-1: SerialNumber: syz [ 642.883414][ T6363] imon 6-1:155.159: unable to register, err -19 [ 643.130785][ T6363] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 643.283424][ T6363] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 643.291769][ T6363] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 643.302344][ T6363] usb 5-1: config 220 has no interface number 2 [ 643.308626][ T6363] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 643.321893][ T6363] usb 5-1: config 220 interface 0 has no altsetting 0 [ 643.328673][ T6363] usb 5-1: config 220 interface 76 has no altsetting 0 [ 643.336286][ T6363] usb 5-1: config 220 interface 1 has no altsetting 0 [ 643.345955][ T6363] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 643.355076][ T6363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.363112][ T6363] usb 5-1: Product: syz [ 643.367290][ T6363] usb 5-1: Manufacturer: syz [ 643.371877][ T6363] usb 5-1: SerialNumber: syz [ 643.502976][T13624] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2040'. [ 643.584520][ T6363] usb 5-1: selecting invalid altsetting 0 [ 643.599449][ T6363] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 643.613495][ T6363] uvcvideo 5-1:220.0: No valid video chain found. [ 643.634655][ T6363] usb 5-1: selecting invalid altsetting 0 [ 643.640678][ T6363] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 643.665593][ T6363] usb 5-1: USB disconnect, device number 50 [ 644.519012][ T5856] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 644.588815][T13661] cgroup: name respecified [ 644.604812][ T30] audit: type=1326 audit(2000000113.230:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13659 comm="syz.0.2049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x0 [ 644.766263][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 644.792294][ T5856] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 644.818354][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.839223][ T5856] usb 5-1: config 0 descriptor?? [ 644.890535][ T6363] usb 6-1: USB disconnect, device number 14 [ 644.897072][T13650] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 645.379130][ T5856] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 645.488667][T13683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13683 comm=syz.0.2055 [ 646.132818][T13688] geneve2: entered promiscuous mode [ 646.181343][ T75] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 39166 - 0 [ 646.190825][ T75] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 39166 - 0 [ 646.212778][ T75] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 39166 - 0 [ 646.225112][ T75] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 39166 - 0 [ 646.291514][ T5856] usb 5-1: USB disconnect, device number 51 [ 646.795626][T13703] fuse: Bad value for 'fd' [ 648.185920][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 648.707632][T13721] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 648.714150][T13721] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 648.744634][T13721] vhci_hcd vhci_hcd.0: Device attached [ 648.850575][ T30] audit: type=1400 audit(2000000117.470:923): avc: denied { write } for pid=13720 comm="syz.4.2066" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 648.950891][ T6363] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 649.031437][ T6363] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 649.175505][T13723] vhci_hcd: cannot find a urb of seqnum 2 max seqnum 0 [ 649.338231][ T30] audit: type=1400 audit(2000000117.700:924): avc: denied { connect } for pid=13720 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 649.418422][ T1001] vhci_hcd vhci_hcd.4: stop threads [ 649.442125][ T1001] vhci_hcd vhci_hcd.4: release socket [ 649.461962][ T1001] vhci_hcd vhci_hcd.4: disconnect device [ 649.471420][T13737] : renamed from bond0 [ 649.478491][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13737 comm=syz.2.2070 [ 649.491938][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13737 comm=syz.2.2070 [ 649.508825][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13737 comm=syz.2.2070 [ 649.521725][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13737 comm=syz.2.2070 [ 649.535140][ T30] audit: type=1400 audit(2000000117.700:925): avc: denied { write } for pid=13720 comm="syz.4.2066" laddr=fe80::8c09:4aff:fefd:f209 lport=60622 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 649.569121][T13740] siw: device registration error -23 [ 649.575232][T13737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13737 comm=syz.2.2070 [ 649.699962][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 649.707216][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 649.972239][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 649.978932][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 650.420171][T13760] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2077'. [ 650.429586][T13760] openvswitch: netlink: Missing key (keys=40, expected=100) [ 650.491181][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 650.497380][T13742] ceph: No mds server is up or the cluster is laggy [ 650.508029][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 651.214817][ T5951] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 651.862545][ T5951] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 651.881977][ T5951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.979169][ T5951] usb 5-1: config 0 has no interface number 0 [ 651.985742][ T5951] usb 5-1: config 0 interface 69 has no altsetting 0 [ 651.994740][ T5951] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 652.003976][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.014307][ T5951] usb 5-1: Product: syz [ 652.018478][ T5951] usb 5-1: Manufacturer: syz [ 652.023147][ T5951] usb 5-1: SerialNumber: syz [ 652.031513][ T5951] usb 5-1: config 0 descriptor?? [ 652.037747][T13776] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.175616][T13783] veth0_to_team: entered promiscuous mode [ 652.239940][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2086'. [ 652.376199][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 652.439608][ T5951] usb 5-1: USB disconnect, device number 52 [ 652.542247][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.570905][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.580831][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.593993][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.603184][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.613630][ T9] usb 1-1: config 0 descriptor?? [ 653.044475][ T9] hid_parser_main: 73 callbacks suppressed [ 653.044488][ T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 653.448429][T13808] vivid-000: disconnect [ 653.851699][ T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 654.495772][T13818] xt_TPROXY: Can be used only with -p tcp or -p udp [ 654.510829][ T6363] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 654.749182][T13832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2094'. [ 654.774252][ T30] audit: type=1326 audit(2000000123.370:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 655.334027][T13808] vivid-000: reconnect [ 655.366516][ T9] usb 1-1: USB disconnect, device number 39 [ 655.423379][ T30] audit: type=1326 audit(2000000123.370:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 655.447357][ T30] audit: type=1326 audit(2000000123.370:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 655.499064][ T30] audit: type=1326 audit(2000000123.370:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.049126][ T30] audit: type=1326 audit(2000000123.370:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.074552][ T30] audit: type=1326 audit(2000000123.370:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.207395][ T30] audit: type=1326 audit(654.727:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.815436][ T30] audit: type=1326 audit(654.727:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.838438][ T30] audit: type=1326 audit(654.727:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 656.896055][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 656.915193][ T30] audit: type=1326 audit(654.727:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13823 comm="syz.4.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4018f749 code=0x7ffc0000 [ 657.292267][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2102'. [ 657.703475][T13856] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.710341][T13856] team0: Cannot enslave team device to itself [ 657.940818][ T5951] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 658.130889][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 658.141970][ T5951] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 658.160217][ T5951] usb 6-1: config 0 has no interface number 0 [ 658.172726][ T5951] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 658.198738][ T5951] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 658.229158][ T5951] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 658.268734][ T5951] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 658.295682][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.322903][ T5951] usb 6-1: Product: syz [ 658.328940][ T5951] usb 6-1: Manufacturer: syz [ 658.344179][ T5951] usb 6-1: SerialNumber: syz [ 658.387031][ T5951] usb 6-1: config 0 descriptor?? [ 658.410586][T13862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 660.597442][ T5951] usb-storage 6-1:0.20: USB Mass Storage device detected [ 660.644734][ T5951] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 660.726508][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 660.773458][ T5951] scsi host1: usb-storage 6-1:0.20 [ 660.797445][ T5951] usb 6-1: USB disconnect, device number 15 [ 660.875239][T13922] IPVS: sh: FWM 3 0x00000003 - no destination available [ 660.884048][T13917] veth0_to_team: entered promiscuous mode [ 661.063333][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2118'. [ 661.452777][ T5923] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 661.663858][T13935] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2122'. [ 661.710758][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 661.718470][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.735524][ T5923] usb 5-1: config 0 has no interfaces? [ 661.742052][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 661.752768][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.764182][ T5923] usb 5-1: config 0 descriptor?? [ 663.850745][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 664.108485][ T6363] usb 5-1: USB disconnect, device number 53 [ 664.508184][T13984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 664.861337][ T5923] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 664.869119][ T9] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 665.053793][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 665.084717][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.096189][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 665.107374][ T5923] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 665.116458][ T5923] usb 1-1: config 179 has no interface number 0 [ 665.124097][ T5923] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 665.136505][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 665.149469][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 665.164158][ T5923] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 665.177775][ T5923] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 665.199041][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 665.218405][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 665.230411][ T5923] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 665.245103][ T9] usb 6-1: Manufacturer: syz [ 665.333134][ T5923] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 665.346550][ T5923] usb 1-1: config 179 interface 65 has no altsetting 0 [ 665.353536][ T5923] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 665.362695][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.377992][ T9] usb 6-1: config 0 descriptor?? [ 665.392679][ T5923] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input43 [ 665.892555][ T5168] input input43: unable to receive magic message: -110 [ 665.919185][ T5168] input input43: unable to receive magic message: -32 [ 665.949374][ T5168] input input43: unable to receive magic message: -32 [ 665.962344][ T5168] input input43: unable to receive magic message: -32 [ 665.997384][T14002] sp0: Synchronizing with TNC [ 666.248859][ T9] rc_core: IR keymap rc-hauppauge not found [ 666.264494][ T9] Registered IR keymap rc-empty [ 666.270198][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.285887][ T5923] usb 1-1: USB disconnect, device number 40 [ 666.291910][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 666.361924][T14010] netlink: 'syz.3.2138': attribute type 10 has an invalid length. [ 666.370217][T14010] team0: Device hsr0 is up. Set it down before adding it as a team port [ 666.678941][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.711683][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 666.725941][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input44 [ 666.741081][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.763639][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.790956][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.812478][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.831084][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.852017][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.871484][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.891019][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.921370][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 666.957065][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 667.001082][ T9] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 667.052784][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 667.098281][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 668.394894][T14013] [U] è [ 668.490408][ T9] usb 6-1: USB disconnect, device number 16 [ 670.346038][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 670.346076][ T30] audit: type=1400 audit(670.317:947): avc: denied { firmware_load } for pid=14044 comm="syz.0.2147" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 671.350787][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 671.464701][ T30] audit: type=1400 audit(671.437:948): avc: denied { append } for pid=14062 comm="syz.0.2154" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 671.464830][T14064] random: crng reseeded on system resumption [ 671.510781][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 671.578479][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.581501][T14068] overlayfs: missing 'lowerdir' [ 671.602814][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 671.618000][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 671.636426][ T9] usb 6-1: Product: syz [ 671.637233][ T30] audit: type=1400 audit(671.597:949): avc: denied { ioctl } for pid=14062 comm="syz.0.2154" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 671.646548][ T9] usb 6-1: Manufacturer: syz [ 671.791577][ T9] usb 6-1: SerialNumber: syz [ 671.810843][ T9] usb 6-1: config 0 descriptor?? [ 671.913212][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 671.919508][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 672.383212][ T9] usb 6-1: USB disconnect, device number 17 [ 678.963714][T14147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14147 comm=syz.2.2169 [ 679.591432][T14161] netlink: 'syz.5.2179': attribute type 30 has an invalid length. [ 679.618084][T14162] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004 [ 679.896972][T14165] netlink: 'syz.5.2179': attribute type 30 has an invalid length. [ 680.122223][T14161] 9pnet_virtio: no channels available for device syz [ 681.203776][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 681.988115][ T5923] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 682.285494][ T5923] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 682.352932][ T5923] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 682.376003][T14150] delete_channel: no stack [ 682.411277][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 682.460169][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.689710][T14183] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 682.752626][ T5923] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.836575][T14198] netlink: 'syz.4.2182': attribute type 21 has an invalid length. [ 684.630396][T14177] SELinux: failed to load policy [ 685.921663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.051680][ T5951] usb 1-1: USB disconnect, device number 41 [ 686.386359][ T5822] Bluetooth: hci0: Malformed Event: 0x02 [ 688.034186][T14245] veth18: entered promiscuous mode [ 688.039363][T14245] veth18: entered allmulticast mode [ 688.455484][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2204'. [ 688.509027][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 688.900008][T14252] veth14: entered promiscuous mode [ 688.905229][T14252] veth14: entered allmulticast mode [ 688.937084][ T8955] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 689.840863][ T8955] usb 6-1: Using ep0 maxpacket: 8 [ 689.851916][ T8955] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 689.887226][ T8955] usb 6-1: config 179 has no interface number 0 [ 689.910787][ T8955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 689.939366][ T8955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 690.052936][ T8955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 690.081951][ T8955] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 690.108456][ T8955] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 690.124276][ T30] audit: type=1400 audit(690.097:950): avc: denied { connect } for pid=14269 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 690.145738][ T8955] usb 6-1: config 179 interface 65 has no altsetting 0 [ 690.153494][ T8955] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 690.165325][T14272] syz2: rxe_newlink: already configured on ipvlan0 [ 690.172987][ T30] audit: type=1400 audit(690.147:951): avc: denied { write } for pid=14271 comm="syz.4.2211" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 690.173056][T14272] random: crng reseeded on system resumption [ 690.216707][ T8955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.239403][ T8955] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input46 [ 690.301217][ T5168] input input46: unable to receive magic message: -110 [ 690.311383][ T5168] input input46: unable to receive magic message: -32 [ 690.319193][ T5168] input input46: unable to receive magic message: -32 [ 690.327395][ T5168] input input46: unable to receive magic message: -32 [ 690.689543][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2216'. [ 690.704397][ T5923] usb 6-1: USB disconnect, device number 18 [ 690.704531][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 691.021276][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 691.230909][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 691.654153][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 691.691317][ T9] usb 5-1: config 179 has no interface number 0 [ 691.700082][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 691.713610][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 691.728661][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 691.745360][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 691.763182][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 691.791092][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 691.817938][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 691.828120][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.843953][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input47 [ 691.891486][ T5168] input input47: unable to receive magic message: -110 [ 691.924838][ T5168] input input47: unable to receive magic message: -32 [ 691.941397][ T5168] input input47: unable to receive magic message: -32 [ 691.951092][ T5168] input input47: unable to receive magic message: -32 [ 692.096712][T14299] NILFS (nullb0): couldn't find nilfs on the device [ 692.107780][ T9] usb 5-1: USB disconnect, device number 54 [ 692.114262][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 692.718223][T14307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2221'. [ 692.751879][T14307] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 692.767483][T14307] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 693.702819][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 694.140003][T14322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2225'. [ 694.291062][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 694.509316][ T8955] libceph: connect (1)[c::]:6789 error -13 [ 694.515374][ T8955] libceph: mon0 (1)[c::]:6789 connect error [ 694.520767][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 695.059473][ T9] usb 6-1: config 155 has an invalid interface number: 159 but max is 0 [ 695.067877][ T9] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 695.082516][ T9] usb 6-1: config 155 has no interface number 0 [ 695.096393][ T9] usb 6-1: too many endpoints for config 155 interface 159 altsetting 56: 67, using maximum allowed: 30 [ 695.121532][ T9] usb 6-1: config 155 interface 159 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 695.148703][ T9] usb 6-1: config 155 interface 159 has no altsetting 0 [ 695.166293][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 695.180976][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.210967][ T9] usb 6-1: Product: syz [ 695.215155][ T9] usb 6-1: Manufacturer: syz [ 695.275630][ T9] usb 6-1: SerialNumber: syz [ 695.297156][T14326] ceph: No mds server is up or the cluster is laggy [ 695.311089][ T6363] libceph: connect (1)[c::]:6789 error -13 [ 695.318562][ T6363] libceph: mon0 (1)[c::]:6789 connect error [ 695.320397][ T9] imon 6-1:155.159: unable to register, err -19 [ 695.411044][ T8955] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 695.481582][T14339] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 695.571875][T14339] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 695.601425][T14339] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 695.860109][T14346] bond0: (slave bridge3): Enslaving as an active interface with a down link [ 695.944719][T14339] macvlan2: entered promiscuous mode [ 695.950029][T14339] macvlan2: entered allmulticast mode [ 696.123549][T14339] bond0: entered promiscuous mode [ 696.151519][T14339] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 696.162032][T14339] bond0: left promiscuous mode [ 696.754938][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2235'. [ 697.947757][ T9] usb 6-1: USB disconnect, device number 19 [ 698.398980][ T8955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 698.416674][ T8955] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 698.440776][ T8955] usb 1-1: can't read configurations, error -71 [ 699.827897][T14393] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[14393] [ 700.467160][T14391] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 703.084998][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 703.174741][T14431] lo speed is unknown, defaulting to 1000 [ 703.181822][T14431] lo speed is unknown, defaulting to 1000 [ 703.500832][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 703.660815][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 703.673070][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 703.688862][ T9] usb 5-1: config 179 has no interface number 0 [ 703.703762][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 703.739333][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 703.786132][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 703.829927][ T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 704.275590][ T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 704.276688][ T30] audit: type=1400 audit(703.907:952): avc: denied { checkpoint_restore } for pid=14436 comm="syz.0.2253" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 704.288960][ T9] usb 5-1: config 179 interface 65 has no altsetting 0 [ 704.364441][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 704.380939][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.462949][ T5951] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 704.537145][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input48 [ 704.619147][ T5168] input input48: unable to receive magic message: -110 [ 704.631918][ T5951] usb 1-1: not running at top speed; connect to a high speed hub [ 704.655836][ T5951] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 704.662646][T14448] gre1: entered promiscuous mode [ 704.675825][ T5168] input input48: unable to receive magic message: -32 [ 704.677266][ T5951] usb 1-1: config 95 has no interface number 0 [ 704.701804][ T5168] input input48: unable to receive magic message: -32 [ 704.717112][ T5951] usb 1-1: config 95 interface 1 has no altsetting 0 [ 704.725252][ T5168] input input48: unable to receive magic message: -32 [ 704.749556][ T5951] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 704.779011][ T6363] usb 5-1: USB disconnect, device number 55 [ 704.779099][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 704.790625][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.840042][ T5951] usb 1-1: Product: syz [ 704.859927][ T5951] usb 1-1: Manufacturer: syz [ 704.875456][ T5951] usb 1-1: SerialNumber: syz [ 705.167679][ T30] audit: type=1400 audit(705.137:953): avc: denied { listen } for pid=14436 comm="syz.0.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 706.068343][ T8955] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 706.251005][ T8955] usb 5-1: Using ep0 maxpacket: 32 [ 706.268548][ T8955] usb 5-1: config 155 has an invalid interface number: 159 but max is 0 [ 706.298112][ T8955] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 706.431836][ T8955] usb 5-1: config 155 has no interface number 0 [ 706.443367][ T8955] usb 5-1: too many endpoints for config 155 interface 159 altsetting 56: 67, using maximum allowed: 30 [ 706.459119][ T8955] usb 5-1: config 155 interface 159 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 706.604195][ T8955] usb 5-1: config 155 interface 159 has no altsetting 0 [ 706.646314][ T8955] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 706.657774][ T8955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.672197][ T8955] usb 5-1: Product: syz [ 706.721609][ T8955] usb 5-1: Manufacturer: syz [ 706.739891][ T8955] usb 5-1: SerialNumber: syz [ 706.796874][ T8955] imon 5-1:155.159: unable to register, err -19 [ 706.849105][ T30] audit: type=1400 audit(706.817:954): avc: denied { ioctl } for pid=14474 comm="syz.3.2264" path="socket:[42552]" dev="sockfs" ino=42552 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 707.116969][ T30] audit: type=1400 audit(706.847:955): avc: denied { ioctl } for pid=14474 comm="syz.3.2264" path="socket:[42551]" dev="sockfs" ino=42551 ioctlcmd=0xaf7a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 707.252636][ T5951] usb 1-1: USB disconnect, device number 44 [ 709.381317][ T5923] usb 5-1: USB disconnect, device number 56 [ 709.710798][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 710.055269][ T9] usb 6-1: device descriptor read/64, error -71 [ 710.367641][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 710.724483][ T9] usb 6-1: device descriptor read/64, error -71 [ 710.957979][ T9] usb usb6-port1: attempt power cycle [ 711.300874][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 711.331424][ T9] usb 6-1: device descriptor read/8, error -71 [ 711.527620][ T30] audit: type=1326 audit(711.467:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 711.652488][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 711.737455][ T9] usb 6-1: device descriptor read/8, error -71 [ 711.935514][ T30] audit: type=1326 audit(711.467:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 712.006977][ T9] usb usb6-port1: unable to enumerate USB device [ 712.116370][ T30] audit: type=1326 audit(711.477:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 712.169892][ T30] audit: type=1326 audit(711.477:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 712.275603][ T30] audit: type=1326 audit(711.477:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 712.298987][T14554] FAULT_INJECTION: forcing a failure. [ 712.298987][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 712.311662][T14554] CPU: 0 UID: 0 PID: 14554 Comm: syz.4.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.311682][T14554] Tainted: [L]=SOFTLOCKUP [ 712.311685][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.311692][T14554] Call Trace: [ 712.311699][T14554] [ 712.311703][T14554] dump_stack_lvl+0x16c/0x1f0 [ 712.311722][T14554] should_fail_ex+0x512/0x640 [ 712.311742][T14554] ? kmem_cache_alloc_noprof+0x62/0x770 [ 712.311756][T14554] should_failslab+0xc2/0x120 [ 712.311771][T14554] kmem_cache_alloc_noprof+0x83/0x770 [ 712.311781][T14554] ? auditd_test_task+0x131/0x2f0 [ 712.311798][T14554] ? audit_log_start+0x29b/0x950 [ 712.311817][T14554] ? audit_log_start+0x29b/0x950 [ 712.311834][T14554] audit_log_start+0x29b/0x950 [ 712.311852][T14554] ? __pfx_audit_log_start+0x10/0x10 [ 712.311872][T14554] ? find_held_lock+0x2b/0x80 [ 712.311892][T14554] audit_seccomp+0x60/0x290 [ 712.311908][T14554] __seccomp_filter+0xa91/0x11f0 [ 712.311926][T14554] ? __pfx___seccomp_filter+0x10/0x10 [ 712.311945][T14554] ? fput+0x70/0xf0 [ 712.311954][T14554] ? ksys_write+0x1ac/0x250 [ 712.311969][T14554] __secure_computing+0x287/0x3b0 [ 712.311986][T14554] syscall_trace_enter+0x89/0x220 [ 712.312004][T14554] do_syscall_64+0x42b/0xf80 [ 712.312019][T14554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.312030][T14554] RIP: 0033:0x7faa4018f749 [ 712.312039][T14554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.312051][T14554] RSP: 002b:00007faa40f40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.312062][T14554] RAX: ffffffffffffffda RBX: 00007faa403e6180 RCX: 00007faa4018f749 [ 712.312069][T14554] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000005 [ 712.312076][T14554] RBP: 00007faa40f40090 R08: 0000000000000000 R09: 0000000000000000 [ 712.312082][T14554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.312088][T14554] R13: 00007faa403e6218 R14: 00007faa403e6180 R15: 00007ffff374cd18 [ 712.312103][T14554] [ 712.312108][T14554] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 712.529918][T14554] audit: out of memory in audit_log_start [ 712.819527][ T30] audit: type=1326 audit(711.477:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 713.184330][ T30] audit: type=1326 audit(711.477:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 713.590810][ T30] audit: type=1326 audit(711.477:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14537 comm="syz.2.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f293078f749 code=0x7ffc0000 [ 714.079855][T14548] SELinux: failed to load policy [ 714.414864][T14584] input: syz1 as /devices/virtual/input/input49 [ 716.547937][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 716.547960][ T30] audit: type=1326 audit(716.507:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 716.809844][ T30] audit: type=1326 audit(716.517:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.009620][T14622] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 717.019540][T14622] SELinux: failed to load policy [ 717.064637][ T30] audit: type=1326 audit(716.577:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.233597][ T30] audit: type=1326 audit(716.577:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.401786][ T30] audit: type=1326 audit(716.587:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.573254][ T30] audit: type=1326 audit(716.587:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.698464][ T30] audit: type=1326 audit(716.597:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.740868][ T30] audit: type=1326 audit(716.607:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 717.764021][ T30] audit: type=1326 audit(716.617:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 718.054457][ T30] audit: type=1326 audit(716.627:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.5.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c018f749 code=0x7ffc0000 [ 721.338341][T14691] loop6: detected capacity change from 0 to 524287487 [ 721.349190][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.357486][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.366754][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.374888][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.397965][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.408321][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.416522][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.424766][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.433392][T14691] ldm_validate_partition_table(): Disk read failed. [ 721.580926][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.589135][T14691] Buffer I/O error on dev loop6, logical block 0, async page read [ 721.726857][T14691] Dev loop6: unable to read RDB block 0 [ 721.776097][T14691] loop6: unable to read partition table [ 721.846574][T14691] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 722.068205][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 722.068216][ T30] audit: type=1400 audit(722.037:1058): avc: denied { mounton } for pid=14700 comm="syz.2.2327" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 722.285782][ T5856] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 722.450777][ T5856] usb 6-1: Using ep0 maxpacket: 8 [ 722.467072][ T5856] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 722.748107][ T5856] usb 6-1: config 167 has an invalid descriptor of length 0, skipping remainder of the config [ 722.761853][ T5856] usb 6-1: config 167 has 0 interfaces, different from the descriptor's value: 202 [ 722.782707][ T5856] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 722.792274][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.800536][ T5856] usb 6-1: Product: syz [ 722.807346][ T5856] usb 6-1: Manufacturer: syz [ 722.813468][ T5856] usb 6-1: SerialNumber: syz [ 723.593545][ T30] audit: type=1400 audit(723.447:1059): avc: denied { read } for pid=14698 comm="syz.5.2326" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 723.878087][ T30] audit: type=1400 audit(723.457:1060): avc: denied { open } for pid=14698 comm="syz.5.2326" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 724.005155][ T30] audit: type=1400 audit(723.457:1061): avc: denied { ioctl } for pid=14698 comm="syz.5.2326" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 724.163217][ T5893] usb 6-1: USB disconnect, device number 24 [ 724.255587][T14735] siw: device registration error -23 [ 725.059361][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2336'. [ 727.161282][T14775] trusted_key: encrypted_key: master key parameter 'use>:}@^/!-{' is invalid [ 727.171961][T14775] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 728.000956][ T5893] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 728.703076][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.597493][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.521853][ T5856] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 731.999655][T14785] SELinux: failed to load policy [ 732.088136][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 732.109654][ T5893] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 732.119775][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.131383][ T5893] usb 1-1: config 0 descriptor?? [ 732.139688][ T5893] usb 1-1: can't set config #0, error -71 [ 732.157951][ T5893] usb 1-1: USB disconnect, device number 45 [ 732.220823][ T5856] usb 5-1: Using ep0 maxpacket: 32 [ 732.300001][ T5856] usb 5-1: config 155 has an invalid interface number: 159 but max is 0 [ 732.327937][ T5856] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 732.361845][ T5856] usb 5-1: config 155 has no interface number 0 [ 732.368429][ T5856] usb 5-1: too many endpoints for config 155 interface 159 altsetting 56: 67, using maximum allowed: 30 [ 732.490224][ T5856] usb 5-1: config 155 interface 159 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 67 [ 732.657191][ T5856] usb 5-1: config 155 interface 159 has no altsetting 0 [ 732.716448][ T5856] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 732.730758][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.738983][ T5856] usb 5-1: Product: syz [ 732.744646][ T5856] usb 5-1: Manufacturer: syz [ 732.750653][ T5856] usb 5-1: SerialNumber: syz [ 732.783917][ T5856] imon 5-1:155.159: unable to register, err -19 [ 732.972857][T14833] overlayfs: missing 'workdir' [ 733.409756][ T30] audit: type=1400 audit(732.897:1062): avc: denied { connect } for pid=14827 comm="syz.5.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 733.522656][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 733.578874][ T30] audit: type=1400 audit(733.457:1063): avc: denied { setattr } for pid=14830 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 733.903617][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 734.171063][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 734.177134][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 734.200883][ T5856] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 734.289172][T14837] ceph: No mds server is up or the cluster is laggy [ 734.363324][ T5856] usb 6-1: Using ep0 maxpacket: 8 [ 734.391441][ T5856] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 734.403872][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.424769][ T5856] pvrusb2: Hardware description: Terratec Grabster AV400 [ 734.438005][ T5856] pvrusb2: ********** [ 734.450348][ T5856] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 734.469505][ T5856] pvrusb2: Important functionality might not be entirely working. [ 734.490721][ T5856] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 734.502168][ T5856] pvrusb2: ********** [ 734.626512][ T2337] pvrusb2: Invalid write control endpoint [ 734.716601][ T2337] pvrusb2: Invalid write control endpoint [ 734.753524][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 734.814888][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 734.869589][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 735.031356][ T2337] pvrusb2: Device being rendered inoperable [ 735.047720][T14871] pvrusb2: Attempted to execute control transfer when device not ok [ 735.059784][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 735.061436][ T5951] usb 6-1: USB disconnect, device number 25 [ 735.078183][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 735.097895][ T2337] pvrusb2: Attached sub-driver cx25840 [ 735.107822][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 735.130299][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 735.992717][ T30] audit: type=1326 audit(735.947:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 736.109920][ T30] audit: type=1326 audit(735.947:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 736.299256][ T30] audit: type=1326 audit(735.947:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 736.330504][ T5856] usb 5-1: USB disconnect, device number 57 [ 736.436903][ T30] audit: type=1326 audit(735.947:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 736.670497][ T30] audit: type=1326 audit(735.947:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 737.420883][ T30] audit: type=1326 audit(735.947:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 737.590033][ T30] audit: type=1326 audit(735.947:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 737.646449][ T30] audit: type=1326 audit(735.947:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee058f749 code=0x7ffc0000 [ 737.711507][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 737.721048][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 737.924740][ T5893] libceph: connect (1)[c::]:6789 error -13 [ 737.931154][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 737.962680][T14911] ceph: No mds server is up or the cluster is laggy [ 737.984869][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 738.015307][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 738.504318][T14904] ceph: No mds server is up or the cluster is laggy [ 738.665661][ T30] audit: type=1400 audit(738.627:1072): avc: denied { read write } for pid=14923 comm="syz.5.2381" dev="sockfs" ino=45243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 849.170760][ C1] ------------[ cut here ]------------ [ 849.177423][ C1] WARNING: kernel/rcu/tree_stall.h:1049 at rcu_check_gp_start_stall.part.0+0x1c4/0x4b0, CPU#1: swapper/1/0 [ 849.188824][ C1] Modules linked in: [ 849.193267][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.203746][ C1] Tainted: [L]=SOFTLOCKUP [ 849.208042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.218067][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.224987][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 e5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ea 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 849.244565][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 849.250603][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38dd0 [ 849.258545][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 849.266486][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 849.274430][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 849.282367][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 849.290306][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 849.299203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 849.305758][ C1] CR2: 00007fba5360de9f CR3: 0000000025497000 CR4: 00000000003526f0 [ 849.313714][ C1] Call Trace: [ 849.317001][ C1] [ 849.319840][ C1] rcu_core+0x4cf/0x15f0 [ 849.324087][ C1] ? tmigr_handle_remote+0x132/0x380 [ 849.329347][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 849.334964][ C1] ? __pfx_rcu_core+0x10/0x10 [ 849.339629][ C1] ? run_timer_base+0x121/0x190 [ 849.344455][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 849.349633][ C1] handle_softirqs+0x219/0x950 [ 849.354375][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 849.359649][ C1] __irq_exit_rcu+0x109/0x170 [ 849.364300][ C1] irq_exit_rcu+0x9/0x30 [ 849.368520][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 849.374145][ C1] [ 849.377048][ C1] [ 849.379950][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 849.385901][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 849.391508][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 849.411087][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 849.417138][ C1] RAX: 0000000002c7650d RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 849.425084][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 849.433045][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 849.440996][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 849.448947][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 849.456895][ C1] ? ct_kernel_exit+0x139/0x190 [ 849.461727][ C1] default_idle+0x13/0x20 [ 849.466043][ C1] default_idle_call+0x6c/0xb0 [ 849.470790][ C1] do_idle+0x38d/0x510 [ 849.474859][ C1] ? __pfx_do_idle+0x10/0x10 [ 849.479442][ C1] cpu_startup_entry+0x4f/0x60 [ 849.484192][ C1] start_secondary+0x21d/0x2d0 [ 849.488925][ C1] ? __pfx_start_secondary+0x10/0x10 [ 849.494183][ C1] common_startup_64+0x13e/0x148 [ 849.499107][ C1] [ 849.502099][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 849.509349][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.519815][ C1] Tainted: [L]=SOFTLOCKUP [ 849.524193][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.534216][ C1] Call Trace: [ 849.537472][ C1] [ 849.540297][ C1] dump_stack_lvl+0x3d/0x1f0 [ 849.544862][ C1] vpanic+0x640/0x6f0 [ 849.548825][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.555123][ C1] panic+0xca/0xd0 [ 849.558814][ C1] ? __pfx_panic+0x10/0x10 [ 849.563204][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 849.568288][ C1] check_panic_on_warn+0xab/0xb0 [ 849.573199][ C1] __warn+0x108/0x3c0 [ 849.577173][ C1] __report_bug+0x2a0/0x520 [ 849.581648][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.587956][ C1] ? __pfx___report_bug+0x10/0x10 [ 849.592952][ C1] ? find_held_lock+0x2b/0x80 [ 849.597606][ C1] ? rcu_is_watching+0x12/0xc0 [ 849.602352][ C1] ? __lock_acquire+0x436/0x2890 [ 849.607272][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.613570][ C1] report_bug+0xb2/0x220 [ 849.617790][ C1] ? rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.624094][ C1] handle_bug+0x127/0x260 [ 849.628399][ C1] exc_invalid_op+0x17/0x50 [ 849.632875][ C1] asm_exc_invalid_op+0x1a/0x20 [ 849.637703][ C1] RIP: 0010:rcu_check_gp_start_stall.part.0+0x1c4/0x4b0 [ 849.644609][ C1] Code: 88 61 01 00 00 be 04 00 00 00 48 c7 c7 c0 52 c2 9a e8 30 38 85 00 b8 01 00 00 00 87 05 e5 c4 1e 19 85 c0 0f 85 3d 01 00 00 90 <0f> 0b 90 48 c7 c3 74 ea 88 90 48 81 fd 80 46 3d 8e 74 5a 48 b8 00 [ 849.664185][ C1] RSP: 0018:ffffc90000a08df0 EFLAGS: 00010046 [ 849.670222][ C1] RAX: 0000000000000000 RBX: 0000000000002904 RCX: ffffffff81a38dd0 [ 849.678161][ C1] RDX: fffffbfff3584a58 RSI: 0000000000000004 RDI: ffffffff9ac252c0 [ 849.686114][ C1] RBP: ffffffff8e3d4680 R08: 0000000000000001 R09: fffffbfff3584a58 [ 849.694054][ C1] R10: 0000000000000003 R11: ffff88801dab2ff0 R12: 1ffffffff1c02250 [ 849.701994][ C1] R13: 0000000000000246 R14: ffffffff8e3d4680 R15: ffff8880b853bc52 [ 849.709941][ C1] ? rcu_check_gp_start_stall.part.0+0x1b0/0x4b0 [ 849.716245][ C1] rcu_core+0x4cf/0x15f0 [ 849.720465][ C1] ? tmigr_handle_remote+0x132/0x380 [ 849.725721][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 849.731323][ C1] ? __pfx_rcu_core+0x10/0x10 [ 849.735983][ C1] ? run_timer_base+0x121/0x190 [ 849.740803][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 849.745974][ C1] handle_softirqs+0x219/0x950 [ 849.750728][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 849.755990][ C1] __irq_exit_rcu+0x109/0x170 [ 849.760641][ C1] irq_exit_rcu+0x9/0x30 [ 849.764857][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 849.770462][ C1] [ 849.773366][ C1] [ 849.776267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 849.782214][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 849.787822][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 849.807401][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 849.813457][ C1] RAX: 0000000002c7650d RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 849.821408][ C1] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: ffffffff8bf2b480 [ 849.829379][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 849.837337][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 849.845280][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 849.853227][ C1] ? ct_kernel_exit+0x139/0x190 [ 849.858061][ C1] default_idle+0x13/0x20 [ 849.862366][ C1] default_idle_call+0x6c/0xb0 [ 849.867104][ C1] do_idle+0x38d/0x510 [ 849.871151][ C1] ? __pfx_do_idle+0x10/0x10 [ 849.875717][ C1] cpu_startup_entry+0x4f/0x60 [ 849.880465][ C1] start_secondary+0x21d/0x2d0 [ 849.885205][ C1] ? __pfx_start_secondary+0x10/0x10 [ 849.890462][ C1] common_startup_64+0x13e/0x148 [ 849.895386][ C1] [ 850.954231][ C1] Shutting down cpus with NMI [ 850.959210][ C1] Kernel Offset: disabled [ 850.963512][ C1] Rebooting in 86400 seconds..