last executing test programs: 2m33.988650681s ago: executing program 0 (id=1356): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) getrlimit(0xe, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="040000001c0400000400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="03000040010000000000006005f2b68200000000000000c4"], 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x490) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000200)) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e26, @multicast2}}}, &(0x7f0000000040)=0xcc) 2m33.290575186s ago: executing program 0 (id=1362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110a, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xe1, 0x5810, 0x0, 0x58, 0x18, &(0x7f0000000680)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x2, 0x200000000d}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x110a}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m32.828168166s ago: executing program 1 (id=1364): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000007b11480000000000850000008e000000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 2m32.773536069s ago: executing program 0 (id=1365): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x28, 0x4, [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x80, 0x2, 0x40, 0xf}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x200a}}, {0xbf, &(0x7f0000000280)=@string={0xbf, 0x3, "e786007dc1d64c445753632a04d11de3acebeed5cae616b1d47c917d6c9d43cf2fd4c34baae345814fd89502f13035113e13373011f355714c24a2acb0fb4728c57e4382bdd0c1ffdeead3f4eaaf283a6f22f072b9d3572e248a1dd36afbed51e16f5641f11f6b211dca6f4a0b61775d39d9baffe0dea28d3bae0905958029c772604e196a7a28bb27817c6f84075d5d4ac458a813e87061c89225e230708d7a0905466f284322e641df6ab9024d7627d10eed8a7db28895a3f5f1b30c"}}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "603abe991dfa75a124c6aa9083ec15b9fa4dfd086bbcfe3d8445397333ff733180adfb30fc6c03b5105046ae3341d820162969f0a6a766ce7238a45e00346875e05a5a9ad8196eb52640bf066ef3e3d4d81bb3ca817826ae8d3f0863e763a82efab9f8a211e9531d4ba16fb9df7194dbd9"}}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017020009008e48"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x0, 0x9, 0x2, "d5f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(0x0, 0xf, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x2b}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x48, &(0x7f0000000000), 0x4) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) r7 = io_uring_setup(0x2c23, &(0x7f0000000480)={0x0, 0xf0e6, 0x2, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xe, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m32.373564396s ago: executing program 1 (id=1367): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x0, 0xfe00}}], 0x1, 0x0) 2m32.256320277s ago: executing program 1 (id=1369): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0000004c5b76df7300", "00004702", "0300", '\x00', ["fdffffff84a438dfc5d5c010", "1b0a1c0000000000001d0d01", "0000efffffffff3c8600"]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt(r1, 0x0, 0x4, &(0x7f00000000c0), 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2m31.661136366s ago: executing program 1 (id=1371): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0xe4ffffffffffffff, 0x0, 0x1}, 0x0) 2m31.572369404s ago: executing program 1 (id=1372): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbf, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0xf3, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0x3, 0x9, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xd, 0x6d}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x0, 0x3, 0x20, 0x3}, 0x2f, &(0x7f0000000140)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x21, 0x3, 0x8f, 0x8, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "6bd02ce48ad09c109842bddd48861b47"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x9b0529b43d76f4e9, 0xc, 0xa, 0xd6ae}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}, {0x71, &(0x7f00000001c0)=@string={0x71, 0x3, "44e551c866e58532d6ae4e9edbe212d977890441297454d7cc02c6f67753a66382bc2f64dd466d7da60263a467b226fa1e6e1b998e7a2a3f9f63506d48e8be5ee9160c6c8d4d249a0330e942e806d83eab258fb24e2b1031d3a80e34e384c0aed7264daa243065c56c601247ce104a"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$printer(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000340)={0x0, 0x23, 0xf7, {0xf7, 0x10, "1ab3cbb24f55730ce20ec3b71aa9fd3b5cb677dca5483851c07e364c37e4265c5903b107a5f61ef1d2667d82c5b31ee5a796ca83c7af9ca8850cf379529ebc8e8769a42c84743989bf7fec45e2a473ca9469b89faf9d73b59458337c7603c1113dac213d5924cc73ca6744e49f0bf2b290bd0a19601bc9389e55575b3a4d14b6adf7c2907b5d2be2ac5725a69d21c0b7e0e5b72902ae6deb3657c42c5cea16e5bf8de87534d3c76bcbb0331dd2be714c2cf415f0b1775fb4d70c256f2a727a3affce190367f9e2c9c9b1305c8f2f2450a34e86f8764db3fba7585095016846d5439cb75731620bbbcf454412754495b86cc6a5afa3"}}, &(0x7f0000000440)={0x0, 0x3, 0x76, @string={0x76, 0x3, "dc7c8655626fc58637c0270e998363c83578a02894bb21c3cdee80e09cf0443bc8768db6205e85af0638d6da21f6914176373507047efb0c134f0d3d1a8511d5aad9fd3b0a504049a75b552153d8a8fed9f77f69a7657c7cb86cd9f71c229c091b01dcbd51f0729f26fcc6cc393ecbb29a2bcd6e"}}}, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)={0x20, 0x5, 0x11, "12f9d9f98609719ea6fdfcedbea67cc67d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x7c, {0x7a, "90e4c56f87c61346afa8139f4b47a3293a1f444199975b6705f29d7fca4f5eec494d12585a219ccbfc83af93ae370179ad8b0e5a3e185c3ec71a921816e1c206d29f4229680b4fc53d00e981c4e9d835499c39130afd95e4c7ea34228a7ff2ea971b102d58d59e8c6674cb0f57a6c6f4c6bf33cf207e85f7af90"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0xc}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x40, 0x19}]}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 2m29.980154407s ago: executing program 1 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003d000001fffffffff1ffffff010000000c00018008006100001414bbad0e0328e0"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001"], 0x34}}, 0x84) sync() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f0000000080), 0x0) io_uring_setup(0x27a4, &(0x7f0000000300)={0x0, 0x3681, 0x80, 0x103, 0x1a1}) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x82000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48884) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xc, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2m29.5365148s ago: executing program 0 (id=1380): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 2m28.925806781s ago: executing program 0 (id=1385): r0 = socket(0x10, 0x800, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) bind$can_raw(r1, &(0x7f00000002c0), 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x44080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000002000000014001a80100004"], 0x34}}, 0x0) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x9, 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x4c, &(0x7f0000000300), 0x4) (async) write$binfmt_elf64(r12, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x78) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 2m28.023757072s ago: executing program 0 (id=1390): socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x37, 0x2005}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x25}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x10000, 0xa, 0x1fc, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) 2m15.494995505s ago: executing program 32 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003d000001fffffffff1ffffff010000000c00018008006100001414bbad0e0328e0"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c0001"], 0x34}}, 0x84) sync() getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000058004f0f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r4, &(0x7f0000000080), 0x0) io_uring_setup(0x27a4, &(0x7f0000000300)={0x0, 0x3681, 0x80, 0x103, 0x1a1}) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) syz_open_dev$dri(&(0x7f00000003c0), 0x0, 0x82000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48884) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xc, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 2m13.337120946s ago: executing program 33 (id=1390): socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x37, 0x2005}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), 0xffffffffffffffff, 0x0, 0x3, 0x1}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x210, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x25}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x10000, 0xa, 0x1fc, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) 10.591067088s ago: executing program 2 (id=1930): r0 = socket(0x2, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') lstat(0x0, &(0x7f00000002c0)) r3 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000177, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xff78f35f28532255, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x9, 0xd6fe2, 0x3d3b4e}) 10.25621594s ago: executing program 3 (id=1934): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x870bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x6, 0x6}, {0x8, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x44008800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 9.900664707s ago: executing program 3 (id=1937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x6, 0x2}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 8.570642111s ago: executing program 3 (id=1939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '.}*'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r3], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r4}, 0x94) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r7 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r4}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r7, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) open(0x0, 0x2ad82, 0x173) 8.02126174s ago: executing program 2 (id=1943): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(0x0, 0x0, 0x416400) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000440)="617d8bdbb688fc708c2a9a7022ed6066aab29d7302cb1e32de81d358d02af9af86204683e88f4cd563c2acb270dec0b8a51b70c49605698adf4e1f79c0fb3614a99caefc2ea3cb708d4f4076a339a68bcf4d35f248ba5a8379e7c6d5b38b1ec46d77b6d4658879b958527bf293912ad85518a0d000f5f02bb4119607c54d744650f323b08c43c44d29babae62a7c5938bdb19bd7afd6af238883c53c08558b9d4b056e7cc8088aa9ba0ee13d5fb1fd837284a3ccb787058dea396a1cf28efa9e0dcf6ca581d380611a05e35a7d1f7f573702599f2526aa32b3a862fccbaf5b6295cd79a695bf9c75bdfa43268b3739b13822af5434f9078b", 0xf8}, {&(0x7f00000001c0)}], 0x3, 0xffff4fd8, 0x4) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) sched_setattr(0x0, 0x0, 0x0) timerfd_create(0x6, 0x80800) r5 = socket(0x15, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffe0}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@delchain={0x9c, 0x65, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xb, 0x10}, {0xe, 0x6}, {0x5, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x20006}, @filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x7, 0x6, 0xfffffffb, 0x8, {0x3, 0x2, 0xffff, 0x6, 0xfda9, 0x6}, {0xf9, 0x0, 0x6, 0x5, 0x4, 0x2}, 0x4, 0x49, 0xffff}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xe}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x800) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 7.97546206s ago: executing program 4 (id=1944): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffed4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x300, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x2500000000000000, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x400000007fffffff, 0x3f8}, 0x0, 0x0) 7.636180794s ago: executing program 5 (id=1946): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe40102030109021200010000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff99f38b2700000000005132ea53c410db866e66b37f1de2c5aab9016eaee93c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019300)=ANY=[@ANYBLOB="140000000a0a0103000000000000cd"], 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c004) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000006c0)=""/163) 7.566336938s ago: executing program 3 (id=1947): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32=r1, @ANYBLOB="0000000000001008000000000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'veth1_virt_wifi\x00', {0x2, 0x0, @dev}}) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x20, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r8, 0x400, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000002780)) 7.365223144s ago: executing program 6 (id=1948): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24c01, 0x0) dup3(r2, r0, 0x0) close(r0) (fail_nth: 1) 6.27401004s ago: executing program 3 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x6, 0x2}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) 6.10450045s ago: executing program 4 (id=1950): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 5.996404643s ago: executing program 4 (id=1951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6060400) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.965688144s ago: executing program 6 (id=1952): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c4) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x3}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r4, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) 5.298399675s ago: executing program 3 (id=1953): r0 = socket(0x2, 0x80805, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') lstat(0x0, &(0x7f00000002c0)) r3 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000177, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xff78f35f28532255, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x9, 0xd6fe2, 0x3d3b4e}) 4.546013514s ago: executing program 5 (id=1954): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000006000000010000000100000000040000", @ANYRES32=0x1, @ANYBLOB='5\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = fsopen(&(0x7f0000000280)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r7 = fsopen(&(0x7f0000000500)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) io_uring_setup(0x79b2, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) 4.545223539s ago: executing program 4 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0x6060400) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 3.069851541s ago: executing program 6 (id=1956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x884}, 0x40) 3.068772158s ago: executing program 5 (id=1957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000740), 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000002, 0x0) io_submit(0x0, 0x2000000000000153, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x20, 0x1, 0x0, r3, 0x0, 0xfe00}]) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) r7 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r6, 0xb, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r7, 0x3513, 0x217, 0xa1, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x830}], 0x1, 0x0, 0x0, 0x0) userfaultfd(0x1) 2.93173323s ago: executing program 6 (id=1958): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x144, 0x10, 0x713, 0xfffffffe, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x664, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x34fd, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x51, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x28, 0x60, "210466d385"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.757853957s ago: executing program 6 (id=1959): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x43000000}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40, 0x0, 0x1}, 0x28) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x37}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x1f, @empty, 0x1500}}, 0x6, 0xcd6, 0x9, 0x3, 0x2c, 0x7, 0x40}, 0x9c) (async) listen(r1, 0x8) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.040981174s ago: executing program 4 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x24008cd0}, 0x40) 2.012720262s ago: executing program 2 (id=1961): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 1.997844813s ago: executing program 5 (id=1962): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = mmap$IORING_OFF_SQES(&(0x7f0000332000/0x4000)=nil, 0x4000, 0x2000001, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x8, 0x4007, @fd=r3, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000180)="1f1950e3b64b15764db867ffd3810c35ff216372b6b2497d8d4919bc9931e55d8bc82221aa34023dde3a0e9bb8861e40cf27c907b16cee6cc1d586e8efb9bb3be64edf1ccd195b7e8ef2716249cb7d14c0d993b7b3b2bc13cb121d19328c304c4b03522b87b9ec506fad2c86e8512a568386583e", 0x74}, {&(0x7f0000000300)="2c50ac245659acf1274680097172b5a9c32decf2dce2964de98fb48ed4ccece964e58ba7a9344f927a7899ea361126cf8d815dac59cef9c89c4b23606a", 0x3d}, {&(0x7f0000000040)="33deb2fe5191", 0x6}, {&(0x7f0000000440)="3dd71f0bc0e2cfc375833e6d8db3bfa1c3a305286de9b8fa40fefede64a1a57868d2553f7ca9cf513e37088c1381d5e3c4f88fcf449b86ade8d57c10a1a4c8f305d24c28a47cab2048c72c352e3304bb2a7082f3d66deb3145018743098cf69fea5642fc21210870f42a03ece95942b8396a499eafadc4ba1d594c3f", 0x7c}, {&(0x7f00000004c0)="628b24594d329951e1db7f6099b6bc3627b7798fb4f3e5ec0dd1e226b3277529766e70b60777e95050c3a2e2a19c77ee87abcddf0739839cfb64935aded29256264249215dedf49c146710748943203f38f4ffae94c50ce8300250361ac3827263cac35eea9d71d2c378af73c4effb692442f6691ccc614d8442013f0a082b34c402", 0x82}, {&(0x7f0000000680)="014c05cbf13fa78e7a9ca25a4312e256f6b4b7e8cd351826a0e4a466daebdef606309d43db97471e5a130a", 0x2b}], 0x6, 0x0, 0x1, {0x3}}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000002400), 0x8) listen(r5, 0x0) 1.82414756s ago: executing program 6 (id=1963): getuid() r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xb5, 0xb3, 0xa, 0x40, 0xc45, 0x60a8, 0xb555, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x67, 0xd1, 0x84}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x4fd, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r5, 0x47f6, 0x25f6, 0x0, 0x0, 0x0) 1.823832404s ago: executing program 2 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9c}}, 0x0) 1.685621812s ago: executing program 4 (id=1965): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xc) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x9}, {0x81, 0xc8, 0x8}}}}, 0xb) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r6, 0x1000000000931f, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) 982.963212ms ago: executing program 5 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf002001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000206c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 916.875294ms ago: executing program 2 (id=1967): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './bus\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000c4) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$join(0x1, &(0x7f0000000380)={'syz', 0x3}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r4, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) 849.914653ms ago: executing program 5 (id=1968): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0xc) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) ftruncate(r1, 0x9) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_link_policy={{0x9}, {0x81, 0xc8, 0x8}}}}, 0xb) r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) lseek(r6, 0x1000000000931f, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) 0s ago: executing program 2 (id=1969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'wlan0\x00', 0x0}) kernel console output (not intermixed with test programs): 2][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 412.648591][T11328] Call Trace: [ 412.648597][T11328] [ 412.648604][T11328] dump_stack_lvl+0x16c/0x1f0 [ 412.648630][T11328] should_fail_ex+0x512/0x640 [ 412.648653][T11328] _copy_from_user+0x2e/0xd0 [ 412.648677][T11328] copy_msghdr_from_user+0x98/0x160 [ 412.648698][T11328] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 412.648720][T11328] ? kfree+0x24f/0x4d0 [ 412.648742][T11328] ? __lock_acquire+0x62e/0x1ce0 [ 412.648770][T11328] ___sys_recvmsg+0xdb/0x1a0 [ 412.648789][T11328] ? __pfx____sys_recvmsg+0x10/0x10 [ 412.648818][T11328] ? __pfx___might_resched+0x10/0x10 [ 412.648844][T11328] do_recvmmsg+0x2fe/0x750 [ 412.648865][T11328] ? __pfx_do_recvmmsg+0x10/0x10 [ 412.648889][T11328] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 412.648919][T11328] ? __fget_files+0x20e/0x3c0 [ 412.648944][T11328] __x64_sys_recvmmsg+0x22a/0x280 [ 412.648966][T11328] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 412.648991][T11328] do_syscall_64+0xcd/0x4e0 [ 412.649013][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.649028][T11328] RIP: 0033:0x7fc939d8eba9 [ 412.649041][T11328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.649055][T11328] RSP: 002b:00007fc93abcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 412.649074][T11328] RAX: ffffffffffffffda RBX: 00007fc939fd5fa0 RCX: 00007fc939d8eba9 [ 412.649083][T11328] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000004 [ 412.649092][T11328] RBP: 00007fc93abcb090 R08: 0000000000000000 R09: 0000000000000000 [ 412.649100][T11328] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 412.649109][T11328] R13: 00007fc939fd6038 R14: 00007fc939fd5fa0 R15: 00007ffff1e2d268 [ 412.649129][T11328] [ 412.871222][ T30] audit: type=1400 audit(1757943894.593:774): avc: denied { listen } for pid=11329 comm="syz.3.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.944827][ T30] audit: type=1400 audit(1757943894.593:775): avc: denied { ioctl } for pid=11329 comm="syz.3.1382" path="socket:[29082]" dev="sockfs" ino=29082 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.024452][T11345] openvswitch: netlink: Multiple metadata blocks provided [ 413.116135][ T7050] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 413.221790][ T30] audit: type=1400 audit(1757943894.939:776): avc: denied { append } for pid=11347 comm="syz.3.1389" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 413.296974][ T7050] usb 5-1: Using ep0 maxpacket: 8 [ 413.316494][ T7050] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.337469][ T7050] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 413.373633][ T7050] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 413.418878][ T7050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.457159][ T7024] usb 3-1: USB disconnect, device number 33 [ 413.475478][ T7050] hub 5-1:1.0: bad descriptor, ignoring hub [ 413.492290][ T7050] hub 5-1:1.0: probe with driver hub failed with error -5 [ 413.705497][ T5858] Bluetooth: hci4: Malformed LE Event: 0x0d [ 413.705735][ T5852] Bluetooth: hci1: unexpected event 0x09 length: 6 > 3 [ 413.850300][ T5904] usb 5-1: USB disconnect, device number 41 [ 415.001076][ T30] audit: type=1400 audit(1757943896.819:777): avc: denied { write } for pid=11368 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 415.399162][T11381] overlayfs: missing 'lowerdir' [ 416.506371][ T30] audit: type=1400 audit(1757943898.404:778): avc: denied { execmod } for pid=11395 comm="syz.4.1399" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 416.709753][ T30] audit: type=1400 audit(1757943898.446:779): avc: denied { execute } for pid=11395 comm="syz.4.1399" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=29915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 418.391441][ T7024] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 418.568605][T11419] netlink: 'syz.2.1405': attribute type 10 has an invalid length. [ 418.577045][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1405'. [ 418.590972][T11419] bridge0: port 1(dummy0) entered blocking state [ 418.685461][T11419] bridge0: port 1(dummy0) entered disabled state [ 418.705873][ T7024] usb 4-1: Using ep0 maxpacket: 8 [ 418.707760][T11419] dummy0: entered allmulticast mode [ 418.742499][T11419] dummy0: entered promiscuous mode [ 418.751372][T11419] bridge0: port 1(dummy0) entered blocking state [ 418.758015][T11419] bridge0: port 1(dummy0) entered forwarding state [ 418.785284][ T7024] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 418.823571][ T7024] usb 4-1: config 0 has no interface number 0 [ 418.850087][ T7024] usb 4-1: config 0 interface 96 has no altsetting 0 [ 418.870597][ T7024] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 418.882494][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 418.892193][ T7024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.911840][ T7024] usb 4-1: Product: syz [ 418.923163][ T7024] usb 4-1: Manufacturer: syz [ 418.928425][ T7024] usb 4-1: SerialNumber: syz [ 418.947733][ T7024] usb 4-1: config 0 descriptor?? [ 418.957377][ T7024] usbhid 4-1:0.96: couldn't find an input interrupt endpoint [ 418.975593][ T30] audit: type=1400 audit(1757943900.997:780): avc: denied { write } for pid=11425 comm="syz.2.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 418.997380][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.031714][ T7024] usb 4-1: USB disconnect, device number 38 [ 422.105499][T11448] netlink: 'syz.2.1413': attribute type 2 has an invalid length. [ 422.115724][T11448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1413'. [ 423.789912][ T5956] IPVS: starting estimator thread 0... [ 423.796388][T11476] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 423.907510][T11480] IPVS: using max 36 ests per chain, 86400 per kthread [ 424.273605][ T30] audit: type=1400 audit(1757943906.562:781): avc: denied { create } for pid=11490 comm="syz.4.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 424.368995][T11494] netlink: 4804 bytes leftover after parsing attributes in process `syz.3.1427'. [ 424.378662][T11494] netlink: 4804 bytes leftover after parsing attributes in process `syz.3.1427'. [ 424.717749][ T30] audit: type=1400 audit(1757943906.593:782): avc: denied { write } for pid=11490 comm="syz.4.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 424.740147][T11491] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.795200][T11489] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 424.825749][T11489] overlayfs: overlapping lowerdir path [ 425.209479][T11496] tipc: Enabling of bearer rejected, failed to enable media [ 425.898485][ T5904] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 426.053759][ T5904] usb 4-1: too many configurations: 150, using maximum allowed: 8 [ 426.077223][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 426.087340][ T5904] usb 4-1: can't read configurations, error -61 [ 426.376824][ T5904] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 426.557144][T11519] veth0: entered promiscuous mode [ 426.586969][T11519] veth0: left promiscuous mode [ 426.644917][ T5904] usb 4-1: too many configurations: 150, using maximum allowed: 8 [ 427.085571][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 427.101596][ T5904] usb 4-1: can't read configurations, error -61 [ 427.120730][ T5904] usb usb4-port1: attempt power cycle [ 427.286750][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.307513][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.318206][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.335762][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.350410][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.373508][ T30] audit: type=1400 audit(1757943909.817:783): avc: denied { mounton } for pid=11522 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 427.456666][ T30] audit: type=1400 audit(1757943909.901:784): avc: denied { getopt } for pid=11526 comm="syz.4.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 427.459897][ T5904] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 427.546580][ T5904] usb 4-1: too many configurations: 150, using maximum allowed: 8 [ 427.566222][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 427.574258][ T5904] usb 4-1: can't read configurations, error -61 [ 427.736391][ T5904] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 427.756181][ T5904] usb 4-1: too many configurations: 150, using maximum allowed: 8 [ 427.775696][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 427.794941][ T5904] usb 4-1: can't read configurations, error -61 [ 427.811268][ T5904] usb usb4-port1: unable to enumerate USB device [ 427.844769][T11522] chnl_net:caif_netlink_parms(): no params data found [ 427.866576][T11527] 9p: Unknown uid 00000000004294967295 [ 427.934124][T11522] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.949542][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.976093][T11522] bridge_slave_0: entered allmulticast mode [ 427.986638][T11522] bridge_slave_0: entered promiscuous mode [ 428.026191][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.048904][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.086967][T11522] bridge_slave_1: entered allmulticast mode [ 428.106603][T11522] bridge_slave_1: entered promiscuous mode [ 428.386312][T11543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11543 comm=syz.4.1442 [ 428.514760][T11522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.773948][ T30] audit: type=1400 audit(1757943911.265:785): avc: denied { checkpoint_restore } for pid=11533 comm="syz.2.1441" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.250714][T11522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.297942][T11553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1444'. [ 429.330970][ T5858] Bluetooth: hci5: command tx timeout [ 429.331869][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 429.351542][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 429.361102][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 429.372096][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 429.381298][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 429.498308][T11522] team0: Port device team_slave_0 added [ 429.520354][T11522] team0: Port device team_slave_1 added [ 429.686345][T11522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.716670][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.060872][T11522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.081963][T11522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.090440][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.119531][T11522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.693185][T11522] hsr_slave_0: entered promiscuous mode [ 430.709052][T11522] hsr_slave_1: entered promiscuous mode [ 430.738347][T11522] debugfs: 'hsr0' already exists in 'hsr' [ 430.745863][T11522] Cannot create hsr debugfs directory [ 430.780756][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.872206][T11581] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 431.403405][ T5852] Bluetooth: hci5: command tx timeout [ 431.410888][ T5852] Bluetooth: hci6: command tx timeout [ 431.480355][ T5956] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 431.637708][ T5956] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 431.658805][ T5956] usb 3-1: config 0 has no interface number 0 [ 431.676739][ T5956] usb 3-1: config 0 interface 41 has no altsetting 0 [ 431.689246][T11550] chnl_net:caif_netlink_parms(): no params data found [ 431.701601][ T5956] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 431.729298][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.819837][ T5956] usb 3-1: Product: syz [ 431.835996][ T5956] usb 3-1: Manufacturer: syz [ 431.841014][ T5956] usb 3-1: SerialNumber: syz [ 431.899154][T11522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.972893][T11522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 432.013801][ T5956] usb 3-1: config 0 descriptor?? [ 432.035496][T11522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.046684][T11522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.542554][T11550] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.554255][T11550] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.569160][T11550] bridge_slave_0: entered allmulticast mode [ 432.579905][T11550] bridge_slave_0: entered promiscuous mode [ 432.602801][T11550] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.619422][T11550] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.628338][T11550] bridge_slave_1: entered allmulticast mode [ 432.646095][T11550] bridge_slave_1: entered promiscuous mode [ 432.735762][T11550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.773299][T11550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.838075][T11550] team0: Port device team_slave_0 added [ 432.855041][T11550] team0: Port device team_slave_1 added [ 432.921732][T11581] bond3: (slave gretap1): making interface the new active one [ 432.933923][T11581] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 432.947336][T11550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.954835][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.969419][ T5956] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 432.984001][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.990892][T11550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.995404][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 433.026033][T11522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.041907][ T5956] usb 3-1: USB disconnect, device number 34 [ 433.066115][T11550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.078136][T11550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.107785][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.121076][T11550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.170937][T11522] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.205341][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.219694][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 433.232672][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 433.245019][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 433.249321][T11550] hsr_slave_0: entered promiscuous mode [ 433.269322][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.269665][T11550] hsr_slave_1: entered promiscuous mode [ 433.278717][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.289275][T11550] debugfs: 'hsr0' already exists in 'hsr' [ 433.292392][ T24] usb 4-1: Manufacturer: syz [ 433.298168][T11550] Cannot create hsr debugfs directory [ 433.313753][ T24] usb 4-1: config 0 descriptor?? [ 433.323160][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.331332][T11288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.352481][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.361518][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.369166][ T5847] Bluetooth: hci6: command tx timeout [ 433.371505][ T5852] Bluetooth: hci5: command tx timeout [ 433.584721][ T24] rc_core: IR keymap rc-hauppauge not found [ 433.590679][ T24] Registered IR keymap rc-empty [ 433.616828][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 433.661721][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 433.701158][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 433.720202][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 433.905803][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 433.930365][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 433.987280][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.100127][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.138811][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.153256][T11550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 434.166192][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.203471][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.215405][T11550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 434.263079][T11550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.274620][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.284583][T11550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.312709][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.337693][ T24] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 434.368052][ T24] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 434.378612][ T24] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 434.379776][T11522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.437403][ T24] usb 4-1: USB disconnect, device number 43 [ 434.489284][ T7024] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 434.542456][T11550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.607691][T11550] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.623176][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.630346][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.657807][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.665080][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.673296][ T7024] usb 3-1: Using ep0 maxpacket: 16 [ 434.699975][ T7024] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.739643][ T7024] usb 3-1: config 0 has no interface number 0 [ 434.745973][ T7024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.784022][T11550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.849061][ T7024] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.869830][T11550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.874184][T11648] loop2: detected capacity change from 0 to 7 [ 434.890129][ T7024] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 434.914908][ T7024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.938547][T11648] Dev loop2: unable to read RDB block 7 [ 434.957237][ T7024] usb 3-1: config 0 descriptor?? [ 434.979330][T11648] loop2: unable to read partition table [ 435.008069][T11648] loop2: partition table beyond EOD, truncated [ 435.036148][T11648] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 435.050433][T11652] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 435.056816][T11522] veth0_vlan: entered promiscuous mode [ 435.095505][T11652] veth0_vlan: left promiscuous mode [ 435.104361][T11652] veth0_vlan: entered promiscuous mode [ 435.136452][T11652] team0: Device veth0_vlan failed to register rx_handler [ 435.206807][T11632] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 435.207860][T11522] veth1_vlan: entered promiscuous mode [ 435.365267][ T5852] Bluetooth: hci5: command tx timeout [ 435.371033][ T5852] Bluetooth: hci6: command tx timeout [ 435.400662][T11632] bridge0: port 1(dummy0) entered disabled state [ 435.432628][T11632] dummy0: left allmulticast mode [ 435.491011][T11662] netlink: 'syz.3.1464': attribute type 16 has an invalid length. [ 435.500702][T11662] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1464'. [ 435.758003][ T25] block nbd0: Possible stuck request ffff888026bd7000: control (read@0,1024B). Runtime 30 seconds [ 435.759178][ T37] Bluetooth: hci7: Frame reassembly failed (-84) [ 435.771812][ T25] block nbd0: Possible stuck request ffff888026bd71c0: control (read@1024,1024B). Runtime 30 seconds [ 435.789877][ T25] block nbd0: Possible stuck request ffff888026bd7380: control (read@2048,1024B). Runtime 30 seconds [ 435.802763][ T25] block nbd0: Possible stuck request ffff888026bd7540: control (read@3072,1024B). Runtime 30 seconds [ 435.807357][ T37] Bluetooth: hci7: Frame reassembly failed (-84) [ 435.816379][T11632] dummy0: left promiscuous mode [ 435.834055][T11632] bridge0: port 1(dummy0) entered disabled state [ 435.853179][T11632] team0: Port device dummy0 added [ 435.909402][T11522] veth0_macvtap: entered promiscuous mode [ 435.929293][T11550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.944830][T11522] veth1_macvtap: entered promiscuous mode [ 435.955480][ T7024] uclogic 0003:28BD:0071.0009: pen parameters not found [ 435.976113][ T7024] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 435.977703][T11522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.036386][T11522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.059524][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.074342][ T64] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.092469][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.107314][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.186140][ T5912] usb 3-1: USB disconnect, device number 35 [ 436.295883][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.310982][ T5956] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 436.314376][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.363696][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.372556][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.402992][ T30] audit: type=1400 audit(1757943919.297:786): avc: denied { mounton } for pid=11522 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 436.409982][T11550] veth0_vlan: entered promiscuous mode [ 436.448161][T11550] veth1_vlan: entered promiscuous mode [ 436.850340][ T5956] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 436.870049][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.882724][T11550] veth0_macvtap: entered promiscuous mode [ 436.887022][ T5956] usb 5-1: config 0 descriptor?? [ 436.932570][T11550] veth1_macvtap: entered promiscuous mode [ 436.943680][ T5956] cp210x 5-1:0.0: cp210x converter detected [ 437.020178][T11550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.046257][T11550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.095671][ T4295] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.136888][ T4295] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.150300][ T30] audit: type=1400 audit(1757943920.074:787): avc: denied { ioctl } for pid=11687 comm="syz.2.1471" path="socket:[31758]" dev="sockfs" ino=31758 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 437.244507][ T30] audit: type=1400 audit(1757943920.127:788): avc: denied { create } for pid=11687 comm="syz.2.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 437.266128][ T4295] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.292130][T11628] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.332574][ T5852] Bluetooth: hci6: command tx timeout [ 437.365010][T11695] kvm: pic: non byte read [ 437.377630][T11695] kvm: pic: non byte read [ 437.383006][T11695] kvm: pic: non byte read [ 437.388961][T11695] kvm: pic: non byte read [ 437.394066][T11695] kvm: pic: non byte read [ 437.401299][T11695] kvm: pic: non byte read [ 437.407087][T11695] kvm: pic: non byte read [ 437.412290][T11695] kvm: pic: non byte read [ 437.417929][T11695] kvm: pic: non byte read [ 437.422599][T11695] kvm: pic: non byte read [ 437.734501][ T5852] Bluetooth: hci7: command 0x1003 tx timeout [ 437.843960][ T5847] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 438.233693][T11702] netlink: 'syz.3.1473': attribute type 33 has an invalid length. [ 438.351700][ T3760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.404844][ T3760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.420416][ T5956] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 438.448989][ T5956] cp210x 5-1:0.0: querying part number failed [ 438.456893][T11698] [U]  [ 438.492412][T11707] netlink: 'syz.2.1474': attribute type 13 has an invalid length. [ 438.505593][ T5956] usb 5-1: cp210x converter now attached to ttyUSB0 [ 438.575358][ T5956] usb 5-1: USB disconnect, device number 42 [ 438.616794][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 438.666952][ T5956] cp210x 5-1:0.0: device disconnected [ 438.707349][T11710] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 438.735257][T11710] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1475'. [ 439.460425][T11721] netlink: 'syz.4.1477': attribute type 16 has an invalid length. [ 439.469642][T11721] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1477'. [ 439.704710][ T3760] Bluetooth: hci7: Frame reassembly failed (-84) [ 439.765306][ T4295] Bluetooth: hci7: Frame reassembly failed (-84) [ 439.779345][ T4295] Bluetooth: hci7: Frame reassembly failed (-84) [ 440.944394][T11288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.970774][T11288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.982498][ T37] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.013825][ T37] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.036450][ T37] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.048526][ T30] audit: type=1400 audit(1757943924.179:789): avc: denied { ioctl } for pid=11750 comm="syz.3.1481" path="socket:[32787]" dev="sockfs" ino=32787 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 441.049251][ T37] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.093472][ T30] audit: type=1400 audit(1757943924.179:790): avc: denied { connect } for pid=11750 comm="syz.3.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 441.134295][ T37] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.155648][ T37] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.176325][ T37] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.190461][ T37] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.345987][T11762] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 441.386777][ T30] audit: type=1326 audit(1757943924.536:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c78eba9 code=0x7ffc0000 [ 441.424370][ T30] audit: type=1326 audit(1757943924.568:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c78eba9 code=0x7ffc0000 [ 441.452520][ T30] audit: type=1326 audit(1757943924.568:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c78eba9 code=0x7ffc0000 [ 441.518728][ T5847] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 441.537286][T11766] netlink: 'syz.2.1482': attribute type 16 has an invalid length. [ 441.545317][T11766] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1482'. [ 441.647327][ T5852] Bluetooth: hci7: command 0x1003 tx timeout [ 441.824831][ T30] audit: type=1326 audit(1757943924.568:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c78eba9 code=0x7ffc0000 [ 441.878484][ T30] audit: type=1326 audit(1757943924.568:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe98c78d510 code=0x7ffc0000 [ 441.906494][ T30] audit: type=1326 audit(1757943924.568:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98c78e7ab code=0x7ffc0000 [ 441.936282][ T3760] Bluetooth: hci8: Frame reassembly failed (-84) [ 441.970795][T11760] tc_dump_action: action bad kind [ 441.980877][ T30] audit: type=1326 audit(1757943924.568:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98c78e7ab code=0x7ffc0000 [ 442.026178][ T30] audit: type=1326 audit(1757943924.568:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98c78e7ab code=0x7ffc0000 [ 442.433830][ T30] audit: type=1326 audit(1757943924.568:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe98c78e7ab code=0x7ffc0000 [ 442.480739][ T30] audit: type=1326 audit(1757943924.568:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe98c78eba9 code=0x7ffc0000 [ 442.633939][T11770] overlayfs: failed to resolve './file1': -2 [ 443.651779][ T5852] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 443.658508][ T5847] Bluetooth: hci8: command 0x1003 tx timeout [ 444.495592][T11784] FAULT_INJECTION: forcing a failure. [ 444.495592][T11784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.511716][T11784] CPU: 1 UID: 0 PID: 11784 Comm: syz.6.1488 Not tainted syzkaller #0 PREEMPT(full) [ 444.511769][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 444.511782][T11784] Call Trace: [ 444.511790][T11784] [ 444.511799][T11784] dump_stack_lvl+0x16c/0x1f0 [ 444.511832][T11784] should_fail_ex+0x512/0x640 [ 444.511864][T11784] _copy_to_user+0x32/0xd0 [ 444.511896][T11784] simple_read_from_buffer+0xcb/0x170 [ 444.511922][T11784] proc_fail_nth_read+0x197/0x240 [ 444.511948][T11784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.511973][T11784] ? rw_verify_area+0xcf/0x6c0 [ 444.512002][T11784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.512025][T11784] vfs_read+0x1e4/0xcf0 [ 444.512050][T11784] ? __pfx___mutex_lock+0x10/0x10 [ 444.512078][T11784] ? __pfx_vfs_read+0x10/0x10 [ 444.512108][T11784] ? __fget_files+0x20e/0x3c0 [ 444.512141][T11784] ksys_read+0x12a/0x250 [ 444.512161][T11784] ? __pfx_ksys_read+0x10/0x10 [ 444.512191][T11784] do_syscall_64+0xcd/0x4e0 [ 444.512221][T11784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.512242][T11784] RIP: 0033:0x7fe98c78d5bc [ 444.512259][T11784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 444.512279][T11784] RSP: 002b:00007fe98d555030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.512299][T11784] RAX: ffffffffffffffda RBX: 00007fe98c9d5fa0 RCX: 00007fe98c78d5bc [ 444.512312][T11784] RDX: 000000000000000f RSI: 00007fe98d5550a0 RDI: 0000000000000005 [ 444.512324][T11784] RBP: 00007fe98d555090 R08: 0000000000000000 R09: 0000000000000000 [ 444.512336][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.512348][T11784] R13: 00007fe98c9d6038 R14: 00007fe98c9d5fa0 R15: 00007ffe1244d448 [ 444.512377][T11784] [ 444.813608][ T7051] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 444.862371][T11786] block nbd2: Device being setup by another task [ 444.928429][T11787] block nbd2: NBD_DISCONNECT [ 445.082568][T11777] block nbd2: Disconnected due to user request. [ 445.098350][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 445.106589][T11777] block nbd2: shutting down sockets [ 445.115298][ T7051] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 445.608426][ T7051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 445.815940][ T7051] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 445.830396][ T7051] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 446.339172][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 446.339188][ T30] audit: type=1400 audit(1757943929.733:807): avc: denied { open } for pid=11789 comm="syz.3.1490" path="/312/file0" dev="tmpfs" ino=1693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 446.369824][ T7051] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 446.378279][ T7051] usb 6-1: Manufacturer: syz [ 446.406648][ T7051] usb 6-1: config 0 descriptor?? [ 446.481747][T11736] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 446.652567][T11808] evm: overlay not supported [ 446.671009][T11736] usb 5-1: Using ep0 maxpacket: 8 [ 446.680228][T11736] usb 5-1: config 0 has an invalid interface number: 96 but max is 0 [ 446.692782][T11736] usb 5-1: config 0 has no interface number 0 [ 446.700195][T11736] usb 5-1: config 0 interface 96 has no altsetting 0 [ 446.719777][T11736] usb 5-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 446.735401][T11736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.744906][T11736] usb 5-1: Product: syz [ 446.749642][T11736] usb 5-1: Manufacturer: syz [ 446.754911][T11736] usb 5-1: SerialNumber: syz [ 446.797980][T11736] usb 5-1: config 0 descriptor?? [ 446.826954][T11736] usbhid 5-1:0.96: couldn't find an input interrupt endpoint [ 447.026702][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.035764][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.298903][T11817] netlink: 'syz.3.1497': attribute type 16 has an invalid length. [ 447.308759][T11817] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1497'. [ 447.621059][T11628] Bluetooth: hci7: Frame reassembly failed (-84) [ 447.663198][T11735] usb 6-1: USB disconnect, device number 2 [ 447.746468][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1499'. [ 447.755879][ T30] audit: type=1400 audit(1757943931.203:808): avc: denied { ioctl } for pid=11818 comm="syz.2.1498" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x743b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 447.804080][ T30] audit: type=1400 audit(1757943931.256:809): avc: denied { append } for pid=11818 comm="syz.2.1498" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 447.833237][ T30] audit: type=1400 audit(1757943931.256:810): avc: denied { execute } for pid=11818 comm="syz.2.1498" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 448.038325][T11828] overlayfs: missing 'lowerdir' [ 448.232975][T11745] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 448.385530][T11745] usb 3-1: device descriptor read/64, error -71 [ 448.563052][T11735] usb 5-1: USB disconnect, device number 43 [ 448.642683][T11745] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 448.795329][T11831] ceph: No mds server is up or the cluster is laggy [ 448.798282][T11745] usb 3-1: device descriptor read/64, error -71 [ 448.948220][T11745] usb usb3-port1: attempt power cycle [ 449.071791][ T30] audit: type=1400 audit(1757943932.600:811): avc: denied { open } for pid=11830 comm="syz.4.1502" path="/dev/ttyqc" dev="devtmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 449.309261][T11745] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 449.370665][ T5852] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 449.384158][ T5847] Bluetooth: hci7: command 0x1003 tx timeout [ 449.540666][T11745] usb 3-1: device descriptor read/8, error -71 [ 449.542235][ T30] audit: type=1400 audit(1757943933.093:812): avc: denied { getopt } for pid=11844 comm="syz.6.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 449.814046][T11745] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 450.338993][T11745] usb 3-1: device descriptor read/8, error -71 [ 450.453397][T11745] usb usb3-port1: unable to enumerate USB device [ 451.999853][ T30] audit: type=1400 audit(1757943935.655:813): avc: denied { mount } for pid=11864 comm="syz.2.1510" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 452.507240][ T30] audit: type=1400 audit(1757943936.190:814): avc: denied { firmware_load } for pid=3434 comm="kworker/u8:5" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 453.644376][T11867] syz.6.1506 (11867): drop_caches: 2 [ 454.285932][T11879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.405410][ T5852] Bluetooth: hci6: command 0x0405 tx timeout [ 454.492203][T11894] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1514'. [ 454.507548][T11879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.620806][T11879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.632336][T11879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.638802][T11879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.647862][T11879] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 454.665422][T11879] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 454.728186][T11879] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 454.739443][T11879] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 454.750067][T11879] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 454.756914][T11879] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 455.052700][T11743] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 455.667944][T11743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.891148][T11743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 455.910850][T11743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 455.933962][T11743] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 455.966406][T11743] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.021905][T11743] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.040833][T11743] usb 3-1: Manufacturer: syz [ 456.090361][T11743] usb 3-1: config 0 descriptor?? [ 456.226628][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 456.424072][T11743] rc_core: IR keymap rc-hauppauge not found [ 456.441076][T11743] Registered IR keymap rc-empty [ 456.455336][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.486955][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 456.605693][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 456.612057][ T5852] Bluetooth: hci4: command 0x0c1a tx timeout [ 456.618536][ T5847] Bluetooth: hci5: command 0x0c1a tx timeout [ 456.625507][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 456.681642][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 456.760182][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 456.964354][T11743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 457.204977][T11743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 457.225997][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.253319][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.319710][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.370085][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.415839][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.559249][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.577409][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.596321][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.615948][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.634949][T11743] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 457.716956][T11743] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 457.731496][T11743] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 458.159596][T11743] usb 3-1: USB disconnect, device number 40 [ 458.586577][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.748794][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 459.786719][T11736] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 459.985095][T11971] netlink: 'syz.2.1529': attribute type 16 has an invalid length. [ 459.994322][T11971] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1529'. [ 460.539093][T11736] usb 6-1: Using ep0 maxpacket: 32 [ 460.572126][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 460.592823][T11736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.720197][ T5858] Bluetooth: hci6: command 0x0405 tx timeout [ 460.766911][T11736] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.831839][T11736] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 460.869292][T11736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.901879][T11736] usb 6-1: Product: syz [ 460.906717][T11736] usb 6-1: Manufacturer: syz [ 460.952911][T11736] usb 6-1: SerialNumber: syz [ 461.015207][T11736] usb 6-1: config 0 descriptor?? [ 461.025198][T11736] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 461.228836][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.931526][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.985046][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.034804][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.076002][T11963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.105253][T11963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.863406][T11995] warn_alloc: 1 callbacks suppressed [ 462.863427][T11995] syz.3.1535: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 462.898716][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.3.1535 Not tainted syzkaller #0 PREEMPT(full) [ 462.898746][T11995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.898757][T11995] Call Trace: [ 462.898763][T11995] [ 462.898771][T11995] dump_stack_lvl+0x16c/0x1f0 [ 462.898801][T11995] warn_alloc+0x248/0x3a0 [ 462.898824][T11995] ? __pfx_warn_alloc+0x10/0x10 [ 462.898853][T11995] ? hash_netport4_resize+0x1d8/0x1c50 [ 462.898872][T11995] ? __vmalloc_node_noprof+0xad/0xf0 [ 462.898903][T11995] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 462.898936][T11995] ? hash_netport4_resize+0x1d8/0x1c50 [ 462.898958][T11995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 462.898985][T11995] ? ___kmalloc_large_node+0xed/0x160 [ 462.899010][T11995] __kvmalloc_node_noprof+0x30a/0x620 [ 462.899024][T11995] ? hash_netport4_resize+0x1d8/0x1c50 [ 462.899038][T11995] ? __kmalloc_noprof+0x242/0x510 [ 462.899051][T11995] ? hash_netport4_resize+0x1d8/0x1c50 [ 462.899068][T11995] ? hash_netport4_resize+0x1d8/0x1c50 [ 462.899081][T11995] hash_netport4_resize+0x1d8/0x1c50 [ 462.899097][T11995] ? __pfx_hash_netport4_add+0x10/0x10 [ 462.899110][T11995] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 462.899140][T11995] ? __pfx_hash_netport4_resize+0x10/0x10 [ 462.899154][T11995] ? lock_acquire+0x179/0x350 [ 462.899169][T11995] call_ad.constprop.0+0x36d/0x940 [ 462.899194][T11995] ? __pfx_hash_netport4_resize+0x10/0x10 [ 462.899211][T11995] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 462.899232][T11995] ? __pfx___nla_validate_parse+0x10/0x10 [ 462.899265][T11995] ? __nla_parse+0x40/0x60 [ 462.899289][T11995] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 462.899308][T11995] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 462.899324][T11995] ? call_rcu_tasks_generic+0x400/0x920 [ 462.899363][T11995] ? find_held_lock+0x2b/0x80 [ 462.899387][T11995] nfnetlink_rcv_msg+0x9fc/0x1200 [ 462.899408][T11995] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 462.899424][T11995] ? __lock_acquire+0x62e/0x1ce0 [ 462.899463][T11995] ? avc_has_perm_noaudit+0x149/0x3b0 [ 462.899484][T11995] netlink_rcv_skb+0x158/0x420 [ 462.899504][T11995] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 462.899519][T11995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.899553][T11995] ? ns_capable+0xd7/0x110 [ 462.899573][T11995] nfnetlink_rcv+0x1b3/0x430 [ 462.899586][T11995] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 462.899599][T11995] ? netlink_deliver_tap+0x1ae/0xd30 [ 462.899616][T11995] ? selinux_netlink_send+0x578/0x830 [ 462.899634][T11995] ? is_vmalloc_addr+0x86/0xa0 [ 462.899651][T11995] netlink_unicast+0x5a7/0x870 [ 462.899673][T11995] ? __pfx_netlink_unicast+0x10/0x10 [ 462.899692][T11995] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 462.899716][T11995] netlink_sendmsg+0x8d1/0xdd0 [ 462.899738][T11995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.899765][T11995] ____sys_sendmsg+0xa95/0xc70 [ 462.899789][T11995] ? copy_msghdr_from_user+0x10a/0x160 [ 462.899806][T11995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.899832][T11995] ? __pfx_futex_wake_mark+0x10/0x10 [ 462.899852][T11995] ___sys_sendmsg+0x134/0x1d0 [ 462.899871][T11995] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.899914][T11995] __sys_sendmsg+0x16d/0x220 [ 462.899932][T11995] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.899949][T11995] ? __x64_sys_futex+0x1e0/0x4c0 [ 462.899974][T11995] do_syscall_64+0xcd/0x4e0 [ 462.899994][T11995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.900008][T11995] RIP: 0033:0x7f8d7f98eba9 [ 462.900021][T11995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.900036][T11995] RSP: 002b:00007f8d7dbb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.900050][T11995] RAX: ffffffffffffffda RBX: 00007f8d7fbd6180 RCX: 00007f8d7f98eba9 [ 462.900059][T11995] RDX: 0000000000000084 RSI: 0000200000000400 RDI: 000000000000000a [ 462.900068][T11995] RBP: 00007f8d7fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 462.900076][T11995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.900085][T11995] R13: 00007f8d7fbd6218 R14: 00007f8d7fbd6180 R15: 00007fff0192a658 [ 462.900103][T11995] [ 462.900112][T11995] Mem-Info: [ 463.359959][T11995] active_anon:26706 inactive_anon:1 isolated_anon:0 [ 463.359959][T11995] active_file:4266 inactive_file:53094 isolated_file:0 [ 463.359959][T11995] unevictable:768 dirty:383 writeback:0 [ 463.359959][T11995] slab_reclaimable:13007 slab_unreclaimable:178287 [ 463.359959][T11995] mapped:51851 shmem:8331 pagetables:1511 [ 463.359959][T11995] sec_pagetables:0 bounce:0 [ 463.359959][T11995] kernel_misc_reclaimable:0 [ 463.359959][T11995] free:1175818 free_pcp:15625 free_cma:0 [ 463.409362][T11995] Node 0 active_anon:106824kB inactive_anon:4kB active_file:17064kB inactive_file:212176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:207404kB dirty:1532kB writeback:0kB shmem:31788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13916kB pagetables:5892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.446406][T11995] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 463.484909][T11995] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 463.607508][T11995] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 463.614201][T11995] Node 0 DMA32 free:805388kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93940kB inactive_anon:4kB active_file:17064kB inactive_file:210848kB unevictable:1536kB writepending:1532kB present:3129332kB managed:2539320kB mlocked:0kB bounce:0kB free_pcp:49808kB local_pcp:22764kB free_cma:0kB [ 463.659255][T11995] lowmem_reserve[]: 0 0 1 1 1 [ 463.716580][T11995] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 463.857195][T11995] lowmem_reserve[]: 0 0 0 0 0 [ 463.862229][T11995] Node 1 Normal free:3890544kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:8288kB free_cma:0kB [ 463.955965][T12013] netlink: 'syz.4.1539': attribute type 16 has an invalid length. [ 463.965940][T12013] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1539'. [ 464.356974][T11995] lowmem_reserve[]: 0 0 0 0 0 [ 464.645330][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 464.668919][T11735] usb 6-1: USB disconnect, device number 3 [ 464.703553][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1541'. [ 464.777109][T11995] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 464.831874][T11995] Node 0 DMA32: 498*4kB (UME) 483*8kB (UM) 416*16kB (UME) 107*32kB (UME) 75*64kB (UM) 46*128kB (UM) 10*256kB (M) 2*512kB (UE) 4*1024kB (UME) 9*2048kB (UME) 189*4096kB (UM) = 826880kB [ 465.034004][ T30] audit: type=1400 audit(1757943949.356:815): avc: denied { bind } for pid=12022 comm="syz.5.1542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 465.056504][ T25] block nbd0: Possible stuck request ffff888026bd7000: control (read@0,1024B). Runtime 60 seconds [ 465.067455][ T25] block nbd0: Possible stuck request ffff888026bd71c0: control (read@1024,1024B). Runtime 60 seconds [ 465.081635][ T25] block nbd0: Possible stuck request ffff888026bd7380: control (read@2048,1024B). Runtime 60 seconds [ 465.094518][ T25] block nbd0: Possible stuck request ffff888026bd7540: control (read@3072,1024B). Runtime 60 seconds [ 465.108742][T11995] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 465.130845][T11995] Node 1 Normal: 200*4kB (UE) 40*8kB (UME) 35*16kB (UME) 93*32kB (UME) 29*64kB (UME) 10*128kB (UME) 3*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890544kB [ 465.153467][T11995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.171709][T11995] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 465.198657][T11995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.211595][T11995] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 465.227583][T11995] 63357 total pagecache pages [ 465.233791][T11995] 521 pages in swap cache [ 465.352601][T12023] kvm: user requested TSC rate below hardware speed [ 466.059070][T11995] Free swap = 120896kB [ 466.063952][T11995] Total swap = 124996kB [ 466.070818][T11995] 2097051 pages RAM [ 466.227714][T11995] 0 pages HighMem/MovableOnly [ 466.232428][T11995] 430259 pages reserved [ 466.237051][T11995] 0 pages cma reserved [ 466.265616][T12040] FAULT_INJECTION: forcing a failure. [ 466.265616][T12040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.286338][T12040] CPU: 1 UID: 0 PID: 12040 Comm: syz.6.1546 Not tainted syzkaller #0 PREEMPT(full) [ 466.286366][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 466.286376][T12040] Call Trace: [ 466.286383][T12040] [ 466.286391][T12040] dump_stack_lvl+0x16c/0x1f0 [ 466.286420][T12040] should_fail_ex+0x512/0x640 [ 466.286449][T12040] _copy_to_user+0x32/0xd0 [ 466.286478][T12040] simple_read_from_buffer+0xcb/0x170 [ 466.286498][T12040] proc_fail_nth_read+0x197/0x240 [ 466.286521][T12040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.286545][T12040] ? rw_verify_area+0xcf/0x6c0 [ 466.286572][T12040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 466.286593][T12040] vfs_read+0x1e4/0xcf0 [ 466.286614][T12040] ? __pfx___mutex_lock+0x10/0x10 [ 466.286638][T12040] ? __pfx_vfs_read+0x10/0x10 [ 466.286664][T12040] ? __fget_files+0x20e/0x3c0 [ 466.286693][T12040] ksys_read+0x12a/0x250 [ 466.286710][T12040] ? __pfx_ksys_read+0x10/0x10 [ 466.286729][T12040] ? fput+0x9b/0xd0 [ 466.286763][T12040] do_syscall_64+0xcd/0x4e0 [ 466.286789][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.286807][T12040] RIP: 0033:0x7fe98c78d5bc [ 466.286821][T12040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 466.286839][T12040] RSP: 002b:00007fe98d555030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 466.286858][T12040] RAX: ffffffffffffffda RBX: 00007fe98c9d5fa0 RCX: 00007fe98c78d5bc [ 466.286870][T12040] RDX: 000000000000000f RSI: 00007fe98d5550a0 RDI: 0000000000000004 [ 466.286882][T12040] RBP: 00007fe98d555090 R08: 0000000000000000 R09: 0000000000000000 [ 466.286893][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.286904][T12040] R13: 00007fe98c9d6038 R14: 00007fe98c9d5fa0 R15: 00007ffe1244d448 [ 466.286930][T12040] [ 467.436704][T12058] netlink: 'syz.2.1549': attribute type 16 has an invalid length. [ 467.444774][T12058] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1549'. [ 470.119921][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1560'. [ 470.129254][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1560'. [ 470.289550][T12092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.443235][T12092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.320630][T11743] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 472.419898][T11732] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 472.468352][T12126] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 472.477798][T11743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.498161][T11743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 472.568708][T11743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 472.615267][T11743] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 472.631756][T11743] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.642776][T11743] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.661783][T11743] usb 5-1: Manufacturer: syz [ 472.672471][T12130] tipc: Started in network mode [ 472.681577][T12130] tipc: Node identity ac14142c, cluster identity 4711 [ 472.690798][T12130] tipc: Enabled bearer , priority 10 [ 472.795140][T11732] usb 4-1: device descriptor read/64, error -71 [ 472.820920][T11743] usb 5-1: config 0 descriptor?? [ 472.860246][ T7051] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 473.058787][T12139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.144808][ T7051] usb 3-1: Using ep0 maxpacket: 16 [ 473.156934][ T7051] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 473.191063][ T7051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.211270][ T7051] usb 3-1: Product: syz [ 473.215711][ T7051] usb 3-1: Manufacturer: syz [ 473.244264][ T7051] usb 3-1: SerialNumber: syz [ 473.265143][ T7051] usb 3-1: config 0 descriptor?? [ 473.272702][ T7051] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 473.282795][T11743] rc_core: IR keymap rc-hauppauge not found [ 473.283556][T11732] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 473.288750][T11743] Registered IR keymap rc-empty [ 473.296292][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.338718][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.372552][T11743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 473.386953][T11743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 473.422726][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.463554][T11732] usb 4-1: device descriptor read/64, error -71 [ 473.473031][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.498725][T12145] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1581'. [ 473.532022][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.561374][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.579431][T11732] usb usb4-port1: attempt power cycle [ 473.591035][ T7051] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 473.610616][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.647012][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.674021][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.704529][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.724162][T11735] usb 3-1: USB disconnect, device number 41 [ 473.731434][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.750296][ T7051] tipc: Node number set to 2886997036 [ 473.766433][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 473.804521][T11743] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 473.822902][T11743] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 473.842878][T11743] usb 5-1: USB disconnect, device number 44 [ 473.922610][T11732] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 473.969143][T11732] usb 4-1: device descriptor read/8, error -71 [ 474.339424][T11732] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 474.378810][T11732] usb 4-1: device descriptor read/8, error -71 [ 474.538491][T11732] usb usb4-port1: unable to enumerate USB device [ 477.058793][T12202] netlink: 'syz.5.1595': attribute type 16 has an invalid length. [ 477.067275][T12202] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1595'. [ 477.420199][T12198] tipc: Enabling of bearer rejected, failed to enable media [ 477.983665][T12214] netlink: 'syz.6.1598': attribute type 16 has an invalid length. [ 477.991735][T12214] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.1598'. [ 478.834941][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1601'. [ 479.501641][ T64] Bluetooth: hci7: Frame reassembly failed (-84) [ 479.823249][T11732] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 480.046665][T11732] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.167243][T11732] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.179117][T11732] usb 6-1: config 0 interface 0 has no altsetting 0 [ 480.186623][T11732] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.198468][T11732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.214669][T11732] usb 6-1: config 0 descriptor?? [ 480.859085][ T30] audit: type=1400 audit(1757943965.966:816): avc: denied { write } for pid=12271 comm="syz.2.1622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 481.445646][ T5858] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 481.505816][T11732] usb 6-1: string descriptor 0 read error: -22 [ 481.840296][T11732] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 481.857949][T11732] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 481.866481][T11732] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 481.876150][T11732] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 481.884279][T11732] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 481.922631][T11732] usb 6-1: USB disconnect, device number 4 [ 483.129339][ T30] audit: type=1400 audit(1757943967.908:817): avc: denied { create } for pid=12298 comm="syz.3.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 483.171212][ T30] audit: type=1400 audit(1757943967.971:818): avc: denied { sys_admin } for pid=12298 comm="syz.3.1632" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 485.619220][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.698831][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.705759][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.712637][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.720139][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.727064][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.736584][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.743455][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.751002][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 485.757898][T12346] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 487.765897][T11743] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 488.867747][T11732] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 489.055566][T11732] usb 5-1: Using ep0 maxpacket: 8 [ 489.075920][T11732] usb 5-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 489.096625][T11732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.127901][T11732] usb 5-1: config 0 descriptor?? [ 489.297827][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 489.308685][T11743] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.331940][T11743] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.350635][T11743] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.369873][T11743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 489.389033][T11743] usb 4-1: SerialNumber: syz [ 489.647627][T11732] logitech 0003:046D:C294.000B: unknown main item tag 0x0 [ 489.655268][T11732] logitech 0003:046D:C294.000B: item fetching failed at offset 3/5 [ 489.826502][T11732] logitech 0003:046D:C294.000B: parse failed [ 489.905997][T11732] logitech 0003:046D:C294.000B: probe with driver logitech failed with error -22 [ 490.635578][T11743] usb 4-1: 0:2 : does not exist [ 490.636918][T11743] usb 4-1: unit 5: unexpected type 0x0c [ 490.744619][T11743] usb 4-1: USB disconnect, device number 48 [ 491.799570][T11677] udevd[11677]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.024918][T11732] usb 5-1: USB disconnect, device number 45 [ 493.520632][ T30] audit: type=1400 audit(1757943979.258:819): avc: denied { connect } for pid=12428 comm="syz.2.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.310981][ T25] block nbd0: Possible stuck request ffff888026bd7000: control (read@0,1024B). Runtime 90 seconds [ 494.322125][ T25] block nbd0: Possible stuck request ffff888026bd71c0: control (read@1024,1024B). Runtime 90 seconds [ 494.333868][ T25] block nbd0: Possible stuck request ffff888026bd7380: control (read@2048,1024B). Runtime 90 seconds [ 494.345832][ T25] block nbd0: Possible stuck request ffff888026bd7540: control (read@3072,1024B). Runtime 90 seconds [ 494.647270][ T30] audit: type=1400 audit(1757943980.455:820): avc: denied { write } for pid=12428 comm="syz.2.1674" laddr=172.20.20.170 lport=3 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.818578][T11744] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 494.884783][T11731] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 494.981679][T11744] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.003574][T11744] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.034321][T11744] usb 6-1: config 0 interface 0 has no altsetting 0 [ 495.052398][T11731] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.072789][T11744] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 495.101654][T11731] usb 5-1: config 0 interface 0 has no altsetting 0 [ 495.108794][T11744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.130484][T11731] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 495.154688][T11744] usb 6-1: config 0 descriptor?? [ 495.171026][T11731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.233262][T11731] usb 5-1: config 0 descriptor?? [ 495.561962][T11744] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 495.599221][T11744] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 495.639575][T11744] hid-steam 0003:28DE:1102.000C: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 495.744166][T11731] nintendo 0003:057E:2009.000D: unknown main item tag 0x0 [ 495.762619][T11744] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' connected [ 495.780520][T11731] nintendo 0003:057E:2009.000D: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 495.815469][T11744] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.000C/input/input36 [ 495.885637][T11744] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 495.895424][T11731] nintendo 0003:057E:2009.000D: Failed to get joycon info; ret=-38 [ 495.905205][T11744] hid-steam 0003:28DE:1102.000E: unknown main item tag 0x0 [ 495.943937][T11731] nintendo 0003:057E:2009.000D: Failed to retrieve controller info; ret=-38 [ 495.978992][T11744] hid-steam 0003:28DE:1102.000E: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 495.993046][T11731] nintendo 0003:057E:2009.000D: Failed to initialize controller; ret=-38 [ 496.088939][T11731] nintendo 0003:057E:2009.000D: probe - fail = -38 [ 496.122952][T11744] usb 6-1: USB disconnect, device number 5 [ 496.130742][T11731] nintendo 0003:057E:2009.000D: probe with driver nintendo failed with error -38 [ 496.324686][T11744] hid-steam 0003:28DE:1102.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 496.341042][T12486] fido_id[12486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 496.463626][ T30] audit: type=1400 audit(1757943982.345:821): avc: denied { bind } for pid=12467 comm="syz.2.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 496.524979][ T7051] usb 5-1: USB disconnect, device number 46 [ 496.723023][T12503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 497.866090][ T7051] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 497.982838][T12528] vcan0: entered allmulticast mode [ 497.990358][T12528] vcan0: left allmulticast mode [ 498.028333][ T7051] usb 5-1: Using ep0 maxpacket: 16 [ 498.051834][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.093033][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.108756][ T7051] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 498.146042][ T7051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.174272][ T7051] usb 5-1: config 0 descriptor?? [ 498.446223][T12536] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1713'. [ 499.077473][ T7051] usbhid 5-1:0.0: can't add hid device: -71 [ 499.105756][ T7051] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 499.135875][ T7051] usb 5-1: USB disconnect, device number 47 [ 499.523857][ T30] audit: type=1400 audit(1757943985.486:822): avc: denied { ioctl } for pid=12540 comm="syz.5.1717" path="socket:[35636]" dev="sockfs" ino=35636 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 499.618428][T11736] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 499.792831][T11736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.825717][T11736] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.884173][T11736] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 499.926144][T11736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.124517][T11736] usb 3-1: config 0 descriptor?? [ 500.266505][T12557] netlink: 580 bytes leftover after parsing attributes in process `syz.6.1721'. [ 501.369055][T11736] isku 0003:1E7D:319C.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 501.764768][T11744] usb 3-1: USB disconnect, device number 42 [ 502.438014][T11736] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 502.590504][T11736] usb 4-1: Using ep0 maxpacket: 32 [ 502.609094][ T30] audit: type=1400 audit(1757943988.783:823): avc: denied { write } for pid=12591 comm="syz.5.1735" name="vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="/usr/sbin/ntpd" [ 502.655186][T11736] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.824293][T11736] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 502.844473][T11736] usb 4-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 502.870103][T11736] usb 4-1: Manufacturer: syz [ 502.911727][T11736] usb 4-1: config 0 descriptor?? [ 502.961114][T11744] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 503.639835][T11744] usb 3-1: config 1 interface 0 has no altsetting 0 [ 503.658847][T11744] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 503.668326][T11744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.676353][T11744] usb 3-1: Product: syz [ 503.680616][T11744] usb 3-1: Manufacturer: syz [ 503.685225][T11744] usb 3-1: SerialNumber: syz [ 504.858522][T11736] steelseries 0003:1038:1410.0010: collection stack underflow [ 504.866054][T11736] steelseries 0003:1038:1410.0010: item 0 4 0 12 parsing failed [ 504.867831][ T30] audit: type=1400 audit(1757943990.347:824): avc: denied { mount } for pid=12616 comm="syz.4.1744" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 504.898196][T11736] steelseries 0003:1038:1410.0010: parse failed [ 504.901667][T11744] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 504.919548][T11736] steelseries 0003:1038:1410.0010: probe with driver steelseries failed with error -22 [ 504.941015][ T30] audit: type=1400 audit(1757943990.357:825): avc: denied { search } for pid=12616 comm="syz.4.1744" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 504.981238][ T30] audit: type=1400 audit(1757943990.368:826): avc: denied { setattr } for pid=12616 comm="syz.4.1744" name="/" dev="configfs" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 505.133828][T11733] usb 4-1: USB disconnect, device number 49 [ 505.565021][T12635] net_ratelimit: 3320 callbacks suppressed [ 505.565045][T12635] openvswitch: netlink: Key type 10512 is out of range max 32 [ 505.720044][T12637] netlink: 'syz.5.1751': attribute type 2 has an invalid length. [ 505.753502][T12637] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1751'. [ 505.782216][T12637] nbd: must specify at least one socket [ 505.835353][ T30] audit: type=1400 audit(1757943992.184:827): avc: denied { lock } for pid=12639 comm="syz.4.1752" path="socket:[34732]" dev="sockfs" ino=34732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 506.109228][ T30] audit: type=1400 audit(1757943992.467:828): avc: denied { associate } for pid=12651 comm="syz.5.1755" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 506.837247][T11736] usb 3-1: USB disconnect, device number 43 [ 506.884034][T11736] usblp0: removed [ 507.014399][T12663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12663 comm=syz.4.1761 [ 508.089897][T12683] netlink: 'syz.5.1766': attribute type 2 has an invalid length. [ 508.120731][T12683] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1766'. [ 508.172238][T12683] nbd: must specify at least one socket [ 508.397403][T12695] lo: entered promiscuous mode [ 508.406829][T12695] lo: entered allmulticast mode [ 508.414833][T12695] tunl0: entered promiscuous mode [ 508.421873][T12695] tunl0: entered allmulticast mode [ 508.428209][T12695] gre0: entered promiscuous mode [ 508.435412][T12695] gre0: entered allmulticast mode [ 508.443727][T12695] gretap0: entered promiscuous mode [ 508.450797][T12695] gretap0: entered allmulticast mode [ 508.457632][T12695] erspan0: entered promiscuous mode [ 508.466209][T12695] erspan0: entered allmulticast mode [ 508.484139][T12695] ip_vti0: entered promiscuous mode [ 508.494259][T12695] ip_vti0: entered allmulticast mode [ 508.502159][T12695] ip6_vti0: entered promiscuous mode [ 508.511930][T12695] ip6_vti0: entered allmulticast mode [ 508.520729][T12695] sit0: entered promiscuous mode [ 508.531143][T12695] sit0: entered allmulticast mode [ 508.556805][T12695] ip6tnl0: entered promiscuous mode [ 508.575842][T12695] ip6tnl0: entered allmulticast mode [ 508.587806][T12695] ip6gre0: entered promiscuous mode [ 508.624696][T12695] ip6gre0: entered allmulticast mode [ 508.644324][T12695] syz_tun: entered promiscuous mode [ 508.665053][T12695] syz_tun: entered allmulticast mode [ 508.674241][T12695] ip6gretap0: entered promiscuous mode [ 508.689039][T12695] ip6gretap0: entered allmulticast mode [ 508.708602][T12695] bridge0: entered promiscuous mode [ 508.718640][T11743] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 508.749068][T12695] bridge0: entered allmulticast mode [ 508.763401][T12695] vcan0: entered promiscuous mode [ 508.768694][T12695] vcan0: entered allmulticast mode [ 508.778274][T12695] bond0: entered promiscuous mode [ 508.784806][T12695] bond_slave_0: entered promiscuous mode [ 508.791266][T12695] bond_slave_1: entered promiscuous mode [ 508.797374][T12695] bond0: entered allmulticast mode [ 508.804101][T12695] bond_slave_0: entered allmulticast mode [ 508.810045][T12695] bond_slave_1: entered allmulticast mode [ 508.818339][T12695] team0: entered promiscuous mode [ 508.824840][T12695] team_slave_0: entered promiscuous mode [ 508.830838][T12695] team_slave_1: entered promiscuous mode [ 508.837617][T12695] team0: entered allmulticast mode [ 508.844078][T12695] team_slave_0: entered allmulticast mode [ 508.850403][T12695] team_slave_1: entered allmulticast mode [ 508.857293][T12695] dummy0: entered promiscuous mode [ 508.863265][T12695] dummy0: entered allmulticast mode [ 508.870900][T12695] nlmon0: entered promiscuous mode [ 508.876672][T12695] nlmon0: entered allmulticast mode [ 508.883666][T12695] caif0: entered promiscuous mode [ 508.890104][T12695] caif0: entered allmulticast mode [ 508.895248][T12695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.897772][T11743] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 508.948658][T11732] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 508.952360][T11743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.982093][T11743] usb 3-1: config 0 descriptor?? [ 508.995434][T11743] usb 3-1: selecting invalid altsetting 1 [ 509.123018][T11733] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 509.168240][T11743] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 509.201455][T11732] usb 6-1: Using ep0 maxpacket: 16 [ 509.228041][T11732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.304454][T11733] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 509.511225][T11732] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 509.581137][T11733] usb 4-1: config 0 has no interface number 0 [ 509.652571][ T30] audit: type=1400 audit(1757943996.131:829): avc: denied { read } for pid=12693 comm="syz.2.1771" dev="sockfs" ino=36983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 509.737867][T11733] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 509.863301][T11732] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 509.896944][T11733] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.935024][T11732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.979721][T11733] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 510.002009][T11732] usb 6-1: Product: syz [ 510.006236][T11732] usb 6-1: Manufacturer: syz [ 510.010910][T11732] usb 6-1: SerialNumber: syz [ 510.168168][T11733] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 510.225139][T11733] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 510.242602][T11732] usb 6-1: config 0 descriptor?? [ 510.289091][T11743] usb 3-1: USB disconnect, device number 44 [ 510.461343][T11733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.484591][T11732] hub 6-1:0.0: bad descriptor, ignoring hub [ 510.523940][T11733] usb 4-1: Product: syz [ 510.528288][T11732] hub 6-1:0.0: probe with driver hub failed with error -5 [ 510.537567][T11733] usb 4-1: Manufacturer: syz [ 510.543333][T11733] usb 4-1: SerialNumber: syz [ 510.557464][T11733] usb 4-1: config 0 descriptor?? [ 510.688845][T11733] xpad 4-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 510.705411][T11733] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.237/input/input37 [ 510.964244][T12705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.973699][T12705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.989058][T11733] usb 4-1: USB disconnect, device number 50 [ 511.097726][T11743] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 511.458891][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1785'. [ 511.726683][T11743] usb 6-1: USB disconnect, device number 6 [ 511.806034][T12738] veth1_macvtap: left promiscuous mode [ 512.434851][T12754] syz.2.1790 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 514.169544][T12777] tipc: Started in network mode [ 514.175870][T12777] tipc: Node identity ac14141b, cluster identity 4711 [ 514.188999][T12777] tipc: New replicast peer: 255.255.255.255 [ 514.197781][T12777] tipc: Enabled bearer , priority 10 [ 515.259438][T11736] tipc: Node number set to 2886997019 [ 516.357527][ T30] audit: type=1400 audit(1757944003.228:830): avc: denied { module_load } for pid=12782 comm="syz.3.1803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 516.379061][T12785] Invalid ELF header type: 3 != 1 [ 516.995861][ T30] audit: type=1400 audit(1757944003.900:831): avc: denied { prog_load } for pid=12794 comm="syz.4.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.087530][ T30] audit: type=1400 audit(1757944003.900:832): avc: denied { bpf } for pid=12794 comm="syz.4.1807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.168316][T12796] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 517.233250][ T30] audit: type=1400 audit(1757944003.931:833): avc: denied { perfmon } for pid=12794 comm="syz.4.1807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 517.380230][ T30] audit: type=1400 audit(1757944003.931:834): avc: denied { prog_run } for pid=12794 comm="syz.4.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.468759][ T30] audit: type=1400 audit(1757944003.952:835): avc: denied { map_create } for pid=12797 comm="syz.2.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 517.490765][ T30] audit: type=1400 audit(1757944003.973:836): avc: denied { name_bind } for pid=12797 comm="syz.2.1808" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 517.518493][ T30] audit: type=1400 audit(1757944003.973:837): avc: denied { node_bind } for pid=12797 comm="syz.2.1808" saddr=::ffff:172.20.20.170 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 517.543158][ T30] audit: type=1400 audit(1757944004.026:838): avc: denied { read write } for pid=5854 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 517.571563][ T30] audit: type=1400 audit(1757944004.026:839): avc: denied { open } for pid=5854 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 518.099506][T12813] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1813'. [ 520.698414][T12836] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 520.860825][T11732] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 520.890874][T12837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1823'. [ 521.081498][T11732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.176862][T12843] netlink: 'syz.4.1822': attribute type 16 has an invalid length. [ 521.184960][T12843] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1822'. [ 521.280306][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 521.286480][ T30] audit: type=1400 audit(1757944008.277:868): avc: denied { create } for pid=12833 comm="syz.4.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 521.438253][T11732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 521.449715][T11732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 521.462556][T11732] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 521.490714][T11732] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 521.513244][T12837] macvlan2: entered promiscuous mode [ 521.550548][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 521.560050][ T30] audit: type=1400 audit(1757944008.361:869): avc: denied { module_request } for pid=12833 comm="syz.4.1822" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 521.597597][T12837] macvlan2: entered allmulticast mode [ 521.613328][T11732] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 521.613370][ T30] audit: type=1400 audit(1757944008.613:870): avc: denied { sys_module } for pid=12833 comm="syz.4.1822" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 521.643934][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 521.643972][T12837] bond2: (slave macvlan2): Opening slave failed [ 521.671621][T11732] usb 6-1: Manufacturer: syz [ 521.692911][T11732] usb 6-1: config 0 descriptor?? [ 521.727638][ T30] audit: type=1400 audit(1757944008.676:871): avc: denied { bind } for pid=12830 comm="syz.2.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 521.774968][ T30] audit: type=1400 audit(1757944008.676:872): avc: denied { setopt } for pid=12830 comm="syz.2.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 521.796855][ T30] audit: type=1400 audit(1757944008.697:873): avc: denied { create } for pid=12844 comm="syz.6.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 521.856245][ T30] audit: type=1400 audit(1757944008.718:874): avc: denied { ioctl } for pid=12844 comm="syz.6.1824" path="socket:[36173]" dev="sockfs" ino=36173 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 522.044511][ T30] audit: type=1400 audit(1757944009.201:875): avc: denied { allowed } for pid=12853 comm="syz.4.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 522.213914][ T30] audit: type=1400 audit(1757944009.369:876): avc: denied { create } for pid=12853 comm="syz.4.1827" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.451367][T12868] tipc: New replicast peer: 255.255.255.255 [ 522.459502][T12868] tipc: Enabled bearer , priority 10 [ 522.756073][T11732] rc_core: IR keymap rc-hauppauge not found [ 522.766039][T11732] Registered IR keymap rc-empty [ 522.777286][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 522.783556][ T30] audit: type=1400 audit(1757944009.369:877): avc: denied { map } for pid=12853 comm="syz.4.1827" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.939988][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 522.969316][T11736] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 523.005122][T11732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 523.030651][T11732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input38 [ 523.198677][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.659652][ T25] block nbd0: Possible stuck request ffff888026bd7000: control (read@0,1024B). Runtime 120 seconds [ 523.671415][ T25] block nbd0: Possible stuck request ffff888026bd71c0: control (read@1024,1024B). Runtime 120 seconds [ 523.682509][ T25] block nbd0: Possible stuck request ffff888026bd7380: control (read@2048,1024B). Runtime 120 seconds [ 523.695029][ T25] block nbd0: Possible stuck request ffff888026bd7540: control (read@3072,1024B). Runtime 120 seconds [ 523.721402][T11736] usb 4-1: Using ep0 maxpacket: 8 [ 523.728679][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.739751][T11736] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 523.754739][T11736] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 523.766454][T11736] usb 4-1: config 6 has no interface number 0 [ 523.773176][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.782182][T11736] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 523.792770][T11736] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.806432][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.817957][T11736] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 523.848254][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.855073][T11736] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 523.863783][T11736] usb 4-1: Product: syz [ 523.868032][T11736] usb 4-1: Manufacturer: syz [ 523.878495][T11736] usb 4-1: SerialNumber: syz [ 523.883479][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 523.954883][T11736] hso 4-1:6.2: Failed to find INT IN ep [ 523.972204][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 524.023633][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 524.054756][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 524.091056][T11732] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 524.133208][T11732] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 524.201198][T12887] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 524.709057][T11732] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 524.755020][T11736] usb 4-1: USB disconnect, device number 51 [ 525.104625][T11732] usb 6-1: USB disconnect, device number 7 [ 525.454111][T12897] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 526.115409][T11732] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 526.785044][T12919] netlink: 'syz.2.1846': attribute type 16 has an invalid length. [ 526.793688][T12919] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1846'. [ 526.871365][T11732] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.880621][T11732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 527.980568][T11732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 528.146771][T11732] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 528.191877][T11732] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 528.268230][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 528.268266][ T30] audit: type=1400 audit(1757944015.731:900): avc: denied { mount } for pid=12927 comm="syz.3.1850" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 528.702493][T11732] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 528.768368][T12937] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 528.779940][T11732] usb 6-1: Manufacturer: syz [ 528.803719][ T30] audit: type=1400 audit(1757944016.287:901): avc: denied { create } for pid=12933 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.808076][T11732] usb 6-1: config 0 descriptor?? [ 528.965657][T11732] usb 6-1: can't set config #0, error -71 [ 529.008651][ T30] audit: type=1400 audit(1757944016.403:902): avc: denied { setopt } for pid=12933 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.052145][T12940] netlink: 'syz.2.1852': attribute type 10 has an invalid length. [ 529.095767][ T30] audit: type=1400 audit(1757944016.403:903): avc: denied { bind } for pid=12933 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.127072][T11732] usb 6-1: USB disconnect, device number 8 [ 529.137678][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1852'. [ 529.188649][T12941] 8021q: adding VLAN 0 to HW filter on device  [ 529.219728][T12946] overlayfs: missing 'lowerdir' [ 529.246243][ T30] audit: type=1400 audit(1757944016.403:904): avc: denied { name_bind } for pid=12933 comm="syz.2.1852" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 529.263943][T12941] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.396191][T12941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 529.416207][T12941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.443361][ T30] audit: type=1400 audit(1757944016.403:905): avc: denied { node_bind } for pid=12933 comm="syz.2.1852" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 529.553007][ T30] audit: type=1400 audit(1757944016.434:906): avc: denied { getopt } for pid=12933 comm="syz.2.1852" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.555747][T12941] veth1_vlan: left promiscuous mode [ 529.714039][ T30] audit: type=1400 audit(1757944016.434:907): avc: denied { connect } for pid=12933 comm="syz.2.1852" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 529.772894][T12941] veth0_vlan: left promiscuous mode [ 529.828643][T12941] veth0_vlan: entered promiscuous mode [ 529.871542][T12941] veth1_vlan: entered promiscuous mode [ 529.878341][ T30] audit: type=1400 audit(1757944016.434:908): avc: denied { name_connect } for pid=12933 comm="syz.2.1852" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 529.952240][ T30] audit: type=1400 audit(1757944016.476:909): avc: denied { create } for pid=12933 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 530.001082][T12941] veth1_macvtap: left promiscuous mode [ 530.051496][T12941] veth0_macvtap: left promiscuous mode [ 530.062990][T12941] veth0_macvtap: entered promiscuous mode [ 530.079652][T12941] veth1_macvtap: entered promiscuous mode [ 530.364079][T12956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1856'. [ 530.744753][T12941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.788830][T12941] dummy0: entered promiscuous mode [ 530.829959][T12941] dummy0: entered allmulticast mode [ 530.885400][T12941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.922521][T12941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.252332][ T3434] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.273664][ T3434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.290385][ T3434] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.304263][ T3434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.314759][ T3434] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.326039][ T3434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.339579][ T3434] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.351280][ T3434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.555098][T11732] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 531.965097][T11732] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.179586][T11732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 532.200389][T11732] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 532.215710][T11732] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 532.327668][T11732] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.337644][T11732] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.345760][T11732] usb 5-1: Manufacturer: syz [ 532.352960][T11732] usb 5-1: config 0 descriptor?? [ 532.725822][T12996] netlink: 'syz.3.1870': attribute type 16 has an invalid length. [ 532.733831][T12996] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1870'. [ 533.728891][T11732] rc_core: IR keymap rc-hauppauge not found [ 533.767831][T11732] Registered IR keymap rc-empty [ 533.793169][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 533.825683][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 533.840204][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 533.840223][ T30] audit: type=1400 audit(1757944021.578:924): avc: denied { shutdown } for pid=12981 comm="syz.6.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 533.992979][T11732] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 534.020294][T11732] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 534.046614][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.083417][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.122468][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.139971][T11744] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 534.176845][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.209991][T11743] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 534.217080][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.272784][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.301514][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.580495][ T30] audit: type=1400 audit(1757944022.156:925): avc: denied { bind } for pid=13012 comm="syz.6.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.604720][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.624964][ T30] audit: type=1400 audit(1757944022.156:926): avc: denied { write } for pid=13012 comm="syz.6.1877" path="socket:[37491]" dev="sockfs" ino=37491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.652570][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.703358][T11743] usb 6-1: Using ep0 maxpacket: 8 [ 534.715138][T11744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.728667][T11732] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 534.739032][T11744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 534.751313][T11743] usb 6-1: config 162 has an invalid interface number: 116 but max is 0 [ 534.771445][T11743] usb 6-1: config 162 has no interface number 0 [ 534.779062][T11732] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 534.803743][T11743] usb 6-1: config 162 interface 116 has no altsetting 0 [ 534.812202][T11744] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 534.822091][T11732] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 534.835929][T11743] usb 6-1: New USB device found, idVendor=0499, idProduct=13b3, bcdDevice=f0.d3 [ 534.847332][T11744] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 534.864736][T11743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.868127][T11732] usb 5-1: USB disconnect, device number 48 [ 534.872869][T11743] usb 6-1: Product: syz [ 534.872889][T11743] usb 6-1: Manufacturer: syz [ 534.872902][T11743] usb 6-1: SerialNumber: syz [ 534.895599][T11744] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 534.910476][T11744] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 534.931263][T11744] usb 3-1: Manufacturer: syz [ 536.069531][T11744] usb 3-1: config 0 descriptor?? [ 536.108989][T11743] usb 6-1: USB disconnect, device number 9 [ 536.138751][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:162.116/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.229369][ T30] audit: type=1400 audit(1757944024.087:927): avc: denied { read write } for pid=13041 comm="syz.4.1887" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 536.256854][ T30] audit: type=1400 audit(1757944024.098:928): avc: denied { open } for pid=13041 comm="syz.4.1887" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 536.309348][ T30] audit: type=1400 audit(1757944024.171:929): avc: denied { read write } for pid=13041 comm="syz.4.1887" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.358316][ T30] audit: type=1400 audit(1757944024.171:930): avc: denied { open } for pid=13041 comm="syz.4.1887" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.393327][ T30] audit: type=1400 audit(1757944024.171:931): avc: denied { ioctl } for pid=13041 comm="syz.4.1887" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.419477][ T30] audit: type=1400 audit(1757944024.224:932): avc: denied { read write } for pid=13041 comm="syz.4.1887" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 536.426261][T11744] rc_core: IR keymap rc-hauppauge not found [ 536.461583][ T30] audit: type=1400 audit(1757944024.224:933): avc: denied { open } for pid=13041 comm="syz.4.1887" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 536.509278][T11744] Registered IR keymap rc-empty [ 536.511269][ T5847] Bluetooth: hci1: unexpected event for opcode 0x080c [ 536.518521][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 536.734220][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 536.817078][T11744] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 536.836672][T11744] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 536.984676][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 537.589259][T11743] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 537.784759][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 537.845515][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 537.893584][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 537.932658][T11743] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.978343][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 537.990322][T11743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 538.031020][T11743] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 538.046917][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 538.085256][T11743] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 538.101064][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 538.161629][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 538.180076][T11743] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 538.192989][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 538.207289][T11743] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 538.251558][T11744] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 538.270774][T11743] usb 5-1: Manufacturer: syz [ 538.303576][T11744] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 538.455802][T11743] usb 5-1: config 0 descriptor?? [ 538.918289][T11744] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 538.954158][T11744] usb 3-1: USB disconnect, device number 45 [ 539.764541][T13080] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1898'. [ 539.864143][T11743] rc_core: IR keymap rc-hauppauge not found [ 539.871962][T11743] Registered IR keymap rc-empty [ 539.888129][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 539.973293][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.020508][T11743] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 540.080808][T11743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input41 [ 540.094767][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 540.094789][ T30] audit: type=1400 audit(1757944028.140:937): avc: denied { ioctl } for pid=13086 comm="syz.3.1901" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=36671 ioctlcmd=0x2101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 540.132090][ T30] audit: type=1400 audit(1757944028.192:938): avc: denied { setopt } for pid=13086 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 540.203806][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.264250][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.292799][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.331705][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.359706][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.404792][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 540.464060][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 541.530084][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 541.560377][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 541.594089][T11743] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 541.632375][T11743] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.663065][T11743] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 542.703823][T11743] usb 5-1: USB disconnect, device number 49 [ 543.672863][T13119] overlayfs: missing 'lowerdir' [ 543.855753][T13123] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1911'. [ 543.864938][T13123] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1911'. [ 543.957934][T13123] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1911'. [ 544.119787][ T30] audit: type=1400 audit(1757944032.339:939): avc: denied { write } for pid=13128 comm="syz.4.1912" name="config" dev="proc" ino=4026533426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 544.154796][T13124] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20003 [ 544.246350][ T30] audit: type=1400 audit(1757944032.360:940): avc: denied { open } for pid=13118 comm="syz.5.1911" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 544.274790][T11731] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 544.305697][ T30] audit: type=1400 audit(1757944032.412:941): avc: denied { read } for pid=13118 comm="syz.5.1911" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 544.313288][T11730] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 544.506189][T11743] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 544.543356][ T30] audit: type=1400 audit(1757944032.412:942): avc: denied { open } for pid=13118 comm="syz.5.1911" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 545.110299][T11731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.132058][T11743] usb 6-1: Using ep0 maxpacket: 8 [ 545.140229][T11743] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 545.149956][T11731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 545.161701][T11730] usb 5-1: Using ep0 maxpacket: 16 [ 545.164206][T11743] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 545.235029][T11730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.286396][T11743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.297066][T11731] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 545.318888][T11743] usb 6-1: Product: syz [ 545.332732][T11743] usb 6-1: Manufacturer: syz [ 545.439549][T11743] usb 6-1: SerialNumber: syz [ 545.444387][T11730] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 545.460793][T11731] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 545.464649][T11743] usb 6-1: config 0 descriptor?? [ 545.938988][T11743] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 545.949962][T11730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.962255][T11731] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 545.991342][T11730] usb 5-1: config 0 descriptor?? [ 546.013765][T11743] usb 6-1: setting power ON [ 546.015341][T11731] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 546.048633][T11731] usb 3-1: Manufacturer: syz [ 546.073114][T11731] usb 3-1: config 0 descriptor?? [ 546.325150][T11743] dvb-usb: bulk message failed: -22 (2/0) [ 546.352081][T11743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.365121][T11743] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 546.370438][T11731] rc_core: IR keymap rc-hauppauge not found [ 546.504132][T11743] usb 6-1: media controller created [ 546.528261][T11743] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.102966][T11730] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 547.120105][T11743] usb 6-1: selecting invalid altsetting 6 [ 547.126795][T11731] Registered IR keymap rc-empty [ 547.127180][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 547.260431][T11743] usb 6-1: digital interface selection failed (-22) [ 547.275398][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 547.661779][T11743] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 547.686365][T13148] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 547.700130][T13148] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1918'. [ 547.710345][T11743] usb 6-1: setting power OFF [ 547.733341][T11731] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 547.766565][T11743] dvb-usb: bulk message failed: -22 (2/0) [ 547.777328][T13148] nbd: must specify at least one socket [ 547.802906][T11743] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 547.813085][T11730] usb 5-1: USB disconnect, device number 50 [ 547.834324][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.848623][T11731] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 547.889527][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 547.916899][T11743] (NULL device *): no alternate interface [ 548.457038][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 548.519191][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 548.563318][T13159] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1921'. [ 548.676013][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 548.724792][T11743] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 548.856471][ T30] audit: type=1400 audit(1757944037.273:943): avc: denied { create } for pid=13151 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 549.018732][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.110481][T11743] usb 6-1: USB disconnect, device number 10 [ 549.117159][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.127614][ T30] audit: type=1400 audit(1757944037.304:944): avc: denied { ioctl } for pid=13151 comm="syz.2.1920" path="socket:[37667]" dev="sockfs" ino=37667 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 549.181111][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.228788][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.395968][ T30] audit: type=1400 audit(1757944037.304:945): avc: denied { mount } for pid=13151 comm="syz.2.1920" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 549.438353][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.499523][T13175] netlink: 'syz.3.1923': attribute type 16 has an invalid length. [ 549.507862][T13175] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1923'. [ 549.914271][T11731] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 549.934599][T11731] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 550.024353][T11731] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 550.147421][ T30] audit: type=1400 audit(1757944037.693:946): avc: denied { write } for pid=13162 comm="syz.6.1922" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 550.231009][ T30] audit: type=1400 audit(1757944038.774:947): avc: denied { write } for pid=13179 comm="syz.3.1927" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 550.261345][T11731] usb 3-1: USB disconnect, device number 46 [ 550.371085][ T30] audit: type=1400 audit(1757944038.827:948): avc: denied { create } for pid=13179 comm="syz.3.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.468466][T13198] overlayfs: missing 'lowerdir' [ 551.706689][T13204] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 551.741384][ T30] audit: type=1400 audit(1757944040.359:949): avc: denied { read write } for pid=13205 comm="syz.5.1935" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 552.486686][ T30] audit: type=1400 audit(1757944040.359:950): avc: denied { open } for pid=13205 comm="syz.5.1935" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 552.758877][ T30] audit: type=1400 audit(1757944040.370:951): avc: denied { ioctl } for pid=13205 comm="syz.5.1935" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 553.055623][ T30] audit: type=1400 audit(1757944040.370:952): avc: denied { set_context_mgr } for pid=13205 comm="syz.5.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 553.076851][ T25] block nbd0: Possible stuck request ffff888026bd7000: control (read@0,1024B). Runtime 150 seconds [ 553.088912][ T25] block nbd0: Possible stuck request ffff888026bd71c0: control (read@1024,1024B). Runtime 150 seconds [ 553.101869][ T25] block nbd0: Possible stuck request ffff888026bd7380: control (read@2048,1024B). Runtime 150 seconds [ 553.115353][ T25] block nbd0: Possible stuck request ffff888026bd7540: control (read@3072,1024B). Runtime 150 seconds [ 553.794662][T13229] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1942'. [ 553.949844][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 553.949861][ T30] audit: type=1400 audit(1757944042.690:956): avc: denied { getopt } for pid=13230 comm="syz.2.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 554.429001][T11742] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 555.562700][T11742] usb 6-1: Using ep0 maxpacket: 32 [ 555.592619][T11742] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.639021][T11742] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.650785][ T30] audit: type=1400 audit(1757944044.464:957): avc: denied { create } for pid=13245 comm="syz.6.1948" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 555.835631][T11742] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 556.305790][ T30] audit: type=1400 audit(1757944044.506:958): avc: denied { read write } for pid=13245 comm="syz.6.1948" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 556.331275][T11742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.343754][T11742] usb 6-1: Product: syz [ 556.361420][T11742] usb 6-1: Manufacturer: syz [ 556.371567][T11742] usb 6-1: SerialNumber: syz [ 556.548201][T11742] usb 6-1: config 0 descriptor?? [ 556.572057][ T30] audit: type=1400 audit(1757944044.506:959): avc: denied { open } for pid=13245 comm="syz.6.1948" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 557.037488][ T30] audit: type=1400 audit(1757944044.506:960): avc: denied { mounton } for pid=13245 comm="syz.6.1948" path="/99/file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 557.062287][ T30] audit: type=1400 audit(1757944044.506:961): avc: denied { mount } for pid=13245 comm="syz.6.1948" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 557.090541][ T30] audit: type=1400 audit(1757944044.706:962): avc: denied { unmount } for pid=11550 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 557.129822][T11742] usb 6-1: can't set config #0, error -71 [ 557.139108][T11742] usb 6-1: USB disconnect, device number 11 [ 557.152598][ T30] audit: type=1400 audit(1757944045.209:963): avc: denied { unlink } for pid=11550 comm="syz-executor" name="file0" dev="tmpfs" ino=525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 558.762999][ T30] audit: type=1400 audit(1757944047.236:964): avc: denied { sqpoll } for pid=13263 comm="syz.5.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 558.811795][T13265] overlayfs: missing 'lowerdir' [ 559.851853][ T30] audit: type=1400 audit(1757944048.884:965): avc: denied { listen } for pid=13287 comm="syz.6.1959" lport=42543 faddr=::ffff:172.20.255.187 fport=65532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 560.099372][ T30] audit: type=1400 audit(1757944048.999:966): avc: denied { create } for pid=13296 comm="syz.5.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 560.589949][ T30] audit: type=1400 audit(1757944049.031:967): avc: denied { bind } for pid=13296 comm="syz.5.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 560.737892][ T30] audit: type=1400 audit(1757944049.251:968): avc: denied { create } for pid=13296 comm="syz.5.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 560.795558][ T30] audit: type=1400 audit(1757944049.251:969): avc: denied { setopt } for pid=13296 comm="syz.5.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 560.856889][ T30] audit: type=1400 audit(1757944049.262:970): avc: denied { listen } for pid=13296 comm="syz.5.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 560.884719][T13308] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1966'. [ 561.130772][ T5847] Bluetooth: hci4: unexpected event for opcode 0x080c [ 561.849943][ T31] INFO: task syz.1.1378:11320 blocked for more than 143 seconds. [ 561.867559][ T31] Not tainted syzkaller #0 [ 561.953303][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.981946][ T5847] Bluetooth: hci5: unexpected event for opcode 0x080c [ 562.068272][ T31] task:syz.1.1378 state:D stack:28296 pid:11320 tgid:11319 ppid:5848 task_flags:0x400040 flags:0x00004004 [ 562.086012][ T31] Call Trace: [ 562.090769][ T31] [ 562.093995][ T31] __schedule+0x1190/0x5de0 [ 562.101034][ T31] ? __pfx___schedule+0x10/0x10 [ 562.112739][ T31] ? find_held_lock+0x2b/0x80 [ 562.127592][ T31] ? schedule+0x2d7/0x3a0 [ 562.399045][ T31] ? sync_bdevs+0xfd/0x360 [ 562.419279][ T31] schedule+0xe7/0x3a0 [ 562.468363][ T31] schedule_preempt_disabled+0x13/0x30 [ 562.487961][ T31] __mutex_lock+0x81b/0x1060 [ 562.502737][ T31] ? sync_bdevs+0xfd/0x360 [ 562.523470][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 562.554571][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 562.574662][ T31] ? iput+0xd3/0x880 [ 562.590119][ T31] ? sync_bdevs+0xfd/0x360 [ 562.626433][ T31] sync_bdevs+0xfd/0x360 [ 562.636230][ T31] ksys_sync+0xb2/0x150 [ 562.659451][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 562.676264][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.683676][ T31] ? do_syscall_64+0x91/0x4e0 [ 562.704392][ T31] __do_sys_sync+0xe/0x20 [ 562.726353][ T31] do_syscall_64+0xcd/0x4e0 [ 562.746313][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.769902][ T31] RIP: 0033:0x7f506e18eba9 [ 562.781533][ T31] RSP: 002b:00007f506ef3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 562.807075][ T31] RAX: ffffffffffffffda RBX: 00007f506e3d5fa0 RCX: 00007f506e18eba9 [ 562.826934][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.849535][ T31] RBP: 00007f506e3d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 562.872430][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.954112][ T31] R13: 00007f506e3d6038 R14: 00007f506e3d5fa0 R15: 00007ffe82afee08 [ 562.982439][ T31] [ 562.990008][ T31] INFO: task syz.0.1390:11363 blocked for more than 144 seconds. [ 563.064145][ T31] Not tainted syzkaller #0 [ 563.107807][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.120755][ T31] task:syz.0.1390 state:D stack:23880 pid:11363 tgid:11359 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 563.133361][ T31] Call Trace: [ 563.140450][ T31] [ 563.143593][ T31] __schedule+0x1190/0x5de0 [ 563.149029][ T31] ? __pfx___schedule+0x10/0x10 [ 563.161096][ T31] ? find_held_lock+0x2b/0x80 [ 563.167068][ T31] ? schedule+0x2d7/0x3a0 [ 563.172475][ T31] ? bdev_open+0x41a/0xe40 [ 563.181417][ T31] schedule+0xe7/0x3a0 [ 563.186725][ T31] schedule_preempt_disabled+0x13/0x30 [ 563.195191][ T31] __mutex_lock+0x81b/0x1060 [ 563.200603][ T31] ? bdev_open+0x41a/0xe40 [ 563.208482][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 563.218627][ T31] ? __pfx_ilookup+0x10/0x10 [ 563.224941][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 563.235618][ T31] ? bdev_open+0x41a/0xe40 [ 563.242089][ T31] bdev_open+0x41a/0xe40 [ 563.247121][ T31] blkdev_open+0x34e/0x4f0 [ 563.253815][ T31] do_dentry_open+0x97f/0x1530 [ 563.259850][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 563.265678][ T31] vfs_open+0x82/0x3f0 [ 563.278865][ T31] path_openat+0x1de4/0x2cb0 [ 563.325979][ T31] ? __pfx_path_openat+0x10/0x10 [ 563.331635][ T31] do_filp_open+0x20b/0x470 [ 563.395779][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 563.411391][ T31] ? alloc_fd+0x471/0x7d0 [ 563.417001][ T31] do_sys_openat2+0x11b/0x1d0 [ 563.424048][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 563.429448][ T31] ? __pfx___schedule+0x10/0x10 [ 563.434707][ T31] __x64_sys_openat+0x174/0x210 [ 563.442299][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 563.448496][ T31] do_syscall_64+0xcd/0x4e0 [ 563.454727][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.463797][ T31] RIP: 0033:0x7fa12098d510 [ 563.469310][ T31] RSP: 002b:00007fa121730b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 563.480510][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa12098d510 [ 563.489316][ T31] RDX: 0000000000000000 RSI: 00007fa121730c10 RDI: 00000000ffffff9c [ 563.499375][ T31] RBP: 00007fa121730c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 563.509084][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 563.518434][ T31] R13: 00007fa120bd6308 R14: 00007fa120bd6270 R15: 00007ffc3f9f3c18 [ 563.528475][ T31] [ 563.531702][ T31] [ 563.531702][ T31] Showing all locks held in the system: [ 563.543092][ T31] 2 locks held by rcu_tasks_trace/29: [ 563.548694][ T31] #0: ffffffff8e5c0a10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0x72d/0xe20 [ 563.578708][ T31] #1: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 563.601853][ T31] 1 lock held by khungtaskd/31: [ 563.611527][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 563.633131][ T31] 3 locks held by kworker/u8:5/3434: [ 563.651681][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 563.670529][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 563.681322][ T31] #2: ffff888032bf8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x580 [ 563.693255][ T31] 2 locks held by getty/5606: [ 563.700383][ T31] #0: ffff88803220c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 563.712246][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 563.724625][ T31] 1 lock held by udevd/5864: [ 563.730120][ T31] #0: ffff888142f4a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 563.741050][ T31] 1 lock held by syz.1.1378/11320: [ 563.746941][ T31] #0: ffff888142f4a358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 563.757820][ T31] 1 lock held by syz.0.1390/11363: [ 563.763626][ T31] #0: ffff888142f4a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 563.773576][ T31] 2 locks held by syz.5.1968/13320: [ 563.779162][ T31] 1 lock held by syz.5.1968/13325: [ 563.789871][ T31] [ 563.795666][ T31] ============================================= [ 563.795666][ T31] [ 563.806127][ T31] NMI backtrace for cpu 0 [ 563.806143][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 563.806162][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 563.806172][ T31] Call Trace: [ 563.806178][ T31] [ 563.806185][ T31] dump_stack_lvl+0x116/0x1f0 [ 563.806213][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 563.806229][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 563.806251][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.806279][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 563.806299][ T31] watchdog+0xf0e/0x1260 [ 563.806324][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.806343][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.806366][ T31] ? __kthread_parkme+0x19e/0x250 [ 563.806393][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.806417][ T31] kthread+0x3c2/0x780 [ 563.806436][ T31] ? __pfx_kthread+0x10/0x10 [ 563.806455][ T31] ? rcu_is_watching+0x12/0xc0 [ 563.806479][ T31] ? __pfx_kthread+0x10/0x10 [ 563.806497][ T31] ret_from_fork+0x56a/0x730 [ 563.806513][ T31] ? __pfx_kthread+0x10/0x10 [ 563.806531][ T31] ret_from_fork_asm+0x1a/0x30 [ 563.806564][ T31] [ 563.806570][ T31] Sending NMI from CPU 0 to CPUs 1: [ 563.938835][ C1] NMI backtrace for cpu 1 [ 563.938851][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 563.938867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 563.938875][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 563.938897][ C1] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 563.938910][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 563.938922][ C1] RAX: 0000000001d9c58d RBX: 0000000000000001 RCX: ffffffff8b94bb49 [ 563.938931][ C1] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 563.938939][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 563.938947][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 563.938955][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab7290 R15: 0000000000000000 [ 563.938963][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 563.938977][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.938986][ C1] CR2: 0000200000279030 CR3: 00000000257f7000 CR4: 00000000003526f0 [ 563.938994][ C1] Call Trace: [ 563.939001][ C1] [ 563.939006][ C1] default_idle+0x13/0x20 [ 563.939024][ C1] default_idle_call+0x6d/0xb0 [ 563.939041][ C1] do_idle+0x391/0x510 [ 563.939059][ C1] ? __pfx_do_idle+0x10/0x10 [ 563.939074][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 563.939091][ C1] cpu_startup_entry+0x4f/0x60 [ 563.939106][ C1] start_secondary+0x21d/0x2b0 [ 563.939126][ C1] ? __pfx_start_secondary+0x10/0x10 [ 563.939146][ C1] common_startup_64+0x13e/0x148 [ 563.939166][ C1] [ 563.943778][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 564.139700][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.148908][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 564.159406][ T31] Call Trace: [ 564.162944][ T31] [ 564.166046][ T31] dump_stack_lvl+0x3d/0x1f0 [ 564.171026][ T31] vpanic+0x6e8/0x7a0 [ 564.175159][ T31] ? __pfx_vpanic+0x10/0x10 [ 564.179967][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 564.186569][ T31] panic+0xca/0xd0 [ 564.190760][ T31] ? __pfx_panic+0x10/0x10 [ 564.195438][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 564.201895][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 564.210687][ T31] ? watchdog+0xd78/0x1260 [ 564.215684][ T31] ? watchdog+0xd6b/0x1260 [ 564.221390][ T31] watchdog+0xd89/0x1260 [ 564.225922][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.231477][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 564.239363][ T31] ? __kthread_parkme+0x19e/0x250 [ 564.244851][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.249903][ T31] kthread+0x3c2/0x780 [ 564.256109][ T31] ? __pfx_kthread+0x10/0x10 [ 564.260993][ T31] ? rcu_is_watching+0x12/0xc0 [ 564.266307][ T31] ? __pfx_kthread+0x10/0x10 [ 564.272105][ T31] ret_from_fork+0x56a/0x730 [ 564.277678][ T31] ? __pfx_kthread+0x10/0x10 [ 564.282382][ T31] ret_from_fork_asm+0x1a/0x30 [ 564.288474][ T31] [ 564.291984][ T31] Kernel Offset: disabled [ 564.297535][ T31] Rebooting in 86400 seconds..