last executing test programs: 18.617878393s ago: executing program 4 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0xa8, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa8}}, 0x0) 17.540644004s ago: executing program 4 (id=311): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x28040, 0x41, 0x2}, 0x18) move_mount(r2, &(0x7f0000000000)='./file0\x00', r3, 0xfffffffffffffffe, 0x224) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 12.75800498s ago: executing program 0 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102400, 0x19000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) unshare(0x6a040000) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r8, &(0x7f00000000c0)=[{0x0}], 0x1) r9 = getpid() kcmp(r9, r9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.208346032s ago: executing program 2 (id=330): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x47f, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) r4 = dup3(r2, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$random(0xffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)={0x1e8, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "8f45e57e914edfba2f0b3e9b2d9e52a21a48e463ba8fc3602b8d10a7d543bb66"}}, @TIPC_NLA_NODE_ID={0xa8, 0x3, "6744d88a0ce94c343965136c87b79ed4a5c9b3e9b3a975dfa79f1f1a50096da9f80da011923dfa2ddd9f5dc00b9fb581b73544ad2c9745b764d06ffff487577bf043c715ed826b7ed266a8b4d9ab5afa49f0df13fa40dc1e1553b0fee1772a761ed29b21c2f745275e744c5f0387e24ddcdff133dcba110cab5fa3bdc6f0d2219a3ad873f1b3a8988e5fbf02745a70cb4cdbdd22958e551827fc07442467519d975cc033"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7f, 0x3, "456f331f6bd252f989b5beafb39a9133d669d81e0149a5b235ba9cb0c04deffaec8aec3f14ca885b7d7aff0fd31604a2fc164de14e530f78b2b545f0425932d8ccb344d137ad35525919b301f2b8b4a0851cd006274052f6ab2179df6d291d041b540add7cd576edeccc00637294414a2d636eb8d019aceee6ae69"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40848}, 0x20000000) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000001000000003200000000000000ac1414bb000000000000000000000000000000000400ff0000000000000000000000000097d128ec85664cae14aee8d37cc345cc2ba6405c1159d3fcac302e629c3e7aea0ad5149b90870afa2849846c913ada83dc3fa987dcb38ed13076e0e566c5cc35410dd3dcb043f7266ba61374ee9606827cf8a221246f3d64a9a57e58b8ad43dba5dadc04e1cf00a7254f2c404192c830dc93294972e6203b67ffc793424b2d856ebab9d6b596ce474c3381c9c94442f68a9c510403ef212e8d062c74cd3886d1133b9a4b4c0423fe7a936ff1e1c8eeea6e3b13acbb99cb60f1e9fbb1a6f15778d4833cbd987ac8772456895620511208ba2302e4a59c"], 0xfc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r7, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r9, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r8, r7, 0x0, 0x578410eb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 9.822303436s ago: executing program 0 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}, {&(0x7f0000001740)={0x1340, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x227, 0xc0, 0x0, 0x1, [@generic="1d8d8e23503d1cbc6a983c7414a3425848a9837fd909a04f3ac92b200aab28b8e125a89d35defc3d4a2499e5a8957fb4489cc460ea189337568b35605689b0c271633a3e844b6a383fa27cc0b3308703eeda8d5d0c79678ae0c75ca32f978937de776c5bf10bacaff05bba76a2c47d8f6589d1ec7b216b4291d61c8b94fc4fcf9d4bae0f03923022d1cb44276c2f27d29040b357a78bc14f5c9ed41209bd907071feaf8c2db4f3eefe9006f2716defffcad2660928a809ea3fdcd5519608482bd62075a0b0a9f9cce31a8515228c9b012286415dd3779bffc9e14e81716d83b532b46fd00e06e16f4ca5e65c7a8109e7", @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@empty}, @generic="554230a17ac26fff04e31c8e192a076d634e89a3e1617a808de1934c674770f28ad7ca19c13352ad2966057ca4dcac687395f15ca2eb96f9563bb4d4bed12f2b55d223f47b4d2c75e80d1226c88d2de51ac46d9a0399d15ee7c10850a9070e96497f3bed32215f472fe53c4e6423f3cb6bcca4e4e408535f606fb8a88b98163fd3f7b5986529a1e86fefbee9e0c595055154c1230ae8bff1dc572f4a02ee72", @generic="883042f9901c18f6d2fd9981f6223d79061c0ee1aa1f7560859520441845c975f392d917c2f4091336f44c57d5c7bb0b672a2d841c1b0a08e86533323fbcbac3f2bc4552ef4cea272b5fad237d1ae469d4385b3cd938edb0c9dc2fbfa37d5f2fba1a9a884380fbca15277eb900ec214d25a4fba4e3fb153365c0f033c7a46507f1f04f357b84824c", @nested={0x4, 0x11c}]}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@mcast1}, @generic="f96951cbe5a60b02affc0c019a7f4fa73725ed7d42a9a9c91d02a75291ea40b68dc97ffd7d654c4966def303bbc63cc2ae81f8105d59104cacad9075421ac20490aa84089e512118ca886fbb16837dbdd83efb251e4069765776b48f00a75652f8307ed4effe337676e17016e63dbb601bfde053762d310a2e01b5e6620e198e5910d11afc37e4c2a7ab5347df0dfa830585df30c18849a7a46407ba772ec0b53eecd64d0fd16359114dfa764a64d1133ea888fb3d686ab3ed8be31960650f2fc7377db6bb4e9daea3473296c44342912dbfd8a067bd86012cc241c2c555a49dafdf2fb87ae27dcec9c7eb494ec4c7d17a4e649b7d4bfbaac4d87b9b0d48d40f944b60a05343d7fac76f0fe5cd4e476e4949e105012418aa57f22dad7b5cee4fac1b427c976cb0162d6c8c4b34f265c1436f5ccc64c4d53fd43ea80cc4ef19e9ec158675b5390579bf419eec172eb0bc5bcc5e59c66f804c6d9dab633664b0f3a6e55121edab6e4e901be34f929a79b439b938ce7ef70cc9bff61d5d48079d0390003a2fb79921fc76fba69aca6a6179eec9c97aa6944d24959e60ecad09aee2f3f444c911871e4ef8f9262ac45feeb191961b214ffe4356f09ad62bb844f4ee2c357a8695be5f8df16791002742102fa527bd13d7ff66e278183bc46fdc06379a40f5ccecbf934ebd372a6cf04a72c0a8b8c794ecad213a888cb9a88fa0b314bba27ac348a0c8168f2eadb4f649210dfd44143dd012e7555af72a297f5591c76a145e0984ba2505cca417d2a91f3fea64e081026dca34557c345d7d9b696dea44906b365a8bd47c07ff7ae3daf11418a4a60c4fcba61af44be82990f6bf7aaa25ac9743ffd27130497a9f45e3860be818946393cb97758c50386e743ad350077db9b6b633cb4073a8b2f9d82484ca4b8589119788c8e5cdaa0670e8b48d6ff22372d167cbc7ac18ac055a77702bc68721ef1a620a7afd75c4ad8827d21bb1e6e20f6b0b1f8275ba3761b0bc6874a510eb0d88f1b4c6c98e8ea74df40e40d06a407641b94abbc10d8ecc601ad269600bbc7a71b755366638b2c4f1a19bb100b1ac7e05d7664f0733888303040c60b4f2bc449db72cb254b6a272470d1a0679e9447bfbd08b6dc18a9d8c8dee6dc2e6be8742b4c6c70bbc52c70e67dd274ebdefca9499fbe4eb98fe1c677eab41633ae839a92be88156369954839a872cae00a96404475f93a2a0e2635acef7df3d2dc4f307b19868187dc92276281aa1d2d5b7045a10fb007caea2f8dc84a266a0959477da861b7b090b15b150bfbec83e6db6610bfec6d08e41a50e48f388176549cabe82cc98d74c131ab5576990db201e6c6d7211070e78c98e91a8fc1bc14bcfeba01bdeea022c4b35b054bff8c306773510253c408bd5c23f893541185e70babe3309f1e74e98df57aceeb90d24814c53000144823e73845f31d9eeb6018a639148c8a054d6aaa5f7cd5eaebb48014ee02837ca32768b40451d34726f502a361e10018ed3d0f25039a3d850fdca73f981ff7d0fa1855a597989f27b58289a0e65a7912985a90625218ad6100d4cf477f68ab36c73894a6cc5c8023791d14ebcfeee794217717af7fad98d844e4d700597d9521036538e1d496e3a48d13ae1bd3a97855c7ec535d12ad755591f0cd48ad924e210e0a74f8612142c3499afdd57115c6d5bc96cea828c8e38d9ea47910f6f7756c5cb6b497c5c95549c4c17e6083700d006dc9f83041ac7ff1c37ee11534da556d112b5439ff3e8aa2de37d8e52fcbf21bcc50971a26c46fa1df5a5ce62de310571bcaffbb08b5c06652938ea086e431a644ffd3be9490cba00c1d1b37145a1b4d3bfd74b64dd587d1a1730ed1139edb0287ef8401acfed6a2881b02095769552bbd88e91ffde0603f223662a7fb6fc713465d7ec920c3d7b94160a284bbbe4ac698fd4b039ada58eda1c6d00e7333a286b9926dd000e38101051974a370079ea49ce8532049486667bf111332f8dda8d18d74110e0e557d6187020f8d087cf308141695e33ee9255009b8247bcc38250cb9237dde9da95afb36048b086bb16a4ccef6c0dcce6e75d2fb8287456027629ef2ee4e8129fd3bd6f3d1fec9e0c9111cc07584d26fcf64ba283d783a5ca282b724c1cc0585044a768f622ea44b308bde88d534a16b0b53a82355aee992160fd9e4809c31666e2c596414a565775e1542272c7c6ca7af109d5c10da19e1161809ed6ec228115311776de1da723225f2af1b453bb80a3042e8386f16adfc87f863a09716ee9abcdc01016a4b37e7fb740f372d95b4bc4e52c3295a16dba938484013f3a7aa8060c5449221ebbe10f6b045ae12566231d42aa7f607ccd69470207bd19c0d66ca76cd76446650ab52f0aea2f9e329a896ad8d22e400b2f5d7819f9b62a478f80bec4a2634c90fa3d4776efc454dca3a2b1ddcd4185ae04ae743559bc3e696407a6746cab7c292d0c2f54875f43bc013281d91c8faa1edc273691ee90913c2a78fe52506aae57615dcaad380c199ca2d26d7d784118d379fca12064875578d6d7a5e98e25c9c7695d107826c909918620abbb7f12ae28528d5846e731c1f6cce0917a0e40c4d260ef4368339253198b1669bf5ffbf36c70a4e2441ceffb25f628c79d22232855544811cef043e90521f945b133e94901ac22c1991b90f1aec2a5587fe5ed044912b35c475844d88b9e570184266c790f30f5cfc0948353223f3510886b2b2f811144fe99bde04babc0b573aa5ffacb70e4c1b2a03f50068ac5a7c7e56ce9386956eb422583898adb803d254c9ebed04d772e776fe188eb32dcb2dbc1ed1fd9d0e505275e7e2742716ef98e0df05dbcb058bbe6bd6d5fa0539ce78957f18dafa2ef64f767122ffaf070180a5452ebedf61425df1a78ca43f7857d681d30d88ac85a351245ed53f46245bcbf0219474d3e1d6cd4396854adf2a425f3692abc319ac65f1f6a12ef890f1dc9d7dc1d911847782b176fda80ae1372dc5a1127551edeb123aca02caa43463ca7dd0120577e17ee75a90f6c394cac1b88dc0a4874339f58220316bc8e58b8783d966154a7faa5e72315dce62e30fb0cb38919fb048a21335254f9b248d70fa2e23a3e0bf21d9a61dac385d4c751b9946b8233bb769e7eee6379f394b22962d6898cf418028aa624ea6fc726c2c3058387497a96c0dc8c2e87997ccac3ad5155faf585404d9ba7392d072f1b98e818dd1566657136c3c76687c5d1ec0b923bdd06bf5c863298df00687ef01d3d778a712fdcacb79f7be7335b9ccfdfcda7e69a375a355eb6878e77ce6a6c022bbc5869eb302bae96707b4a4dc05c98ab10af2426fe0ff8d5db0ec2fdf10efaa42bb4881b1b2847cce879a442d84f7bf41c50e6df59d3523f2997da524410278122191ee1906c27ea1ee774feeecfd976cbd2ccc7435b1df69c862db169ea477e8424990ab8a4a2187a5b942b8c486e3948bc117572e815ee70fac5159671e9ad6dcd3769805c62334771e273a9b4c8bdcc73b3da1db61d04784ba0b0fd95838561ec072e0972e21c4b9d5a8032c70bff4e625c840c70e610d00d81fd472d001ee6ec87668260b170ceadeb38c7c40f6744a8cd51c0c55f3ca6a78818270521f29657e2a5ec2b46bf9cefca428d0179a818f7c7977b7b6b87ecf315abcb7d57caff839975f8475437866c939f2de993449d2b51f7f820896a47c936310a2ebc39ffad96ae7ef09da878cb72b964033ef4959ccc926f6e1434c2fd9f845d511abeeca2cd4efd8aacdc0883cded9831631be367d5dde4a9b374283c534938562387696ff8c0306e184e9163e54d1b7cdad18ea2ee70e6d536ba60f286ac9b67c81d4dba986c869a3e33cd211d71b5c31b2cf3a975146ba1b4e04b36e68c8216ee156ae8fb90e5662a50a4d16ea4c7b923db3dda2a9e905d19dcc233c16f5d18f53cfb5a15e59e07747031035fd6f7fa75d72d88cfc2a58e52ce0a3087afbe9b8c6121d81450847c3cfdbb950b020bbcb84b556ce16f99042ed066c0da390ab4c43dad9c7f1111123c48131b7aaf289641041c557d8ffb3994efdfc0999bcf49817c5c7a41b75d6a564c32ad51fc03f6394e75ddb3560b042335877833f0aa8240b57e06cba93f270e901cf6593b533c1ec1a587d927835c41336b805237599a5d20744d530608924024ef738914a5d00134368e95f7d02943f45c5460d75c1621058616bd09992da11f3405345ffb165ce46e339af23fd9da68cba7746182dd443d45118b0581928bd2c8bf35d55b5c8cb9e837af3fec025dc7d7d282d78f0f38a800d6e4e24332769338575f4db7cc523ef80cd088ceb3f6e56af619f547e1a7e3a564f24f1e07c29a40eda33164875859d4d5b33206a181b5495c4609978e4119375c9beae17b217a6ec0410d0015b3129f0a218b82f7220d559519c2dc28b427f1a4bc00efada9639dcaf96160deb1c5242acb027dbca6fdf4bbc6780124e8cfa55882a08151c4bf2552bbc0f1232a59ad469e4724abaffb8332a125b9ab071e453efcd26fd894c7a0ff207f21eddefa4cc5454c2692fc87ee26a59342610a01e2cd3c13e76dd1bbbfce0dc5da9a0ab7a252a92d78ad62641cd38a92b016d449873b82977debb6e2eb98950c93e6f928a51bef6faf3507b30e1c096d2b7fe3f628e0f7e0ad0450ef2abd209e5469e1c64aee47cbb879edd786bf03fab47fe9a0f8917857230de6c3068868ceb8630e9b8c1a795ef0d2e80dd027792647529cc341d066989831f22586b7000ec3bb6a7ff361fb2b48fb58e3ad2f2f9f26f651ae6db4f0bf93f6675310b46b11bc52ffe2b0c066618e427cb4932579b7fcec3fd39e387b507ebaba6193ffbdd135b96f3e3c86c71ca5b0222b80ff8bc574b561d8f52c58af5960f3c216fee1c9bbfaaf2373c3cdf80b03c873883a9aefc9a3693b758d7da2b67dde2f343f22a8897caf7fde962348180ba35934f2bfb8471b5089bd6efbe854863d7f5a750fddcfced879d0606306f4be1f21633ed0eea7f1076d75f921f801ef59f6279731af3e2cb41a84bed7c809f1f8ad438b947cb4756f67dc08f8e0f95a9822dcbb1eff10116457d49383b830fd75b16b7be9ebacfda153ad1820fbf07ca5b0cd05fcd582d40b84faf10f529af6f9c9f8098f8f1dfb646a55d7443e5ebe8f913b0d7ce76b78344abb3d3dbf7289dbd24a2aaab3f26435a547a210856850dcbca13756dd3e554514a8516a82f1ff6f03bdda08556076d3a79ad770a998c62a90ebc20c8cdb28c800e216b7daa67c6d48582fc0bef17022a1c730c3bda5b567653d819bfacd7a698e66418ffb5e5d7bd3eafab824cd724c55d86136a59addcbc8abefb3b0dc7175fdd05cb520930381c1b1fb9ac888d6ec1eb8cd33d2de8885bf2083bdf1dc86ec5333bb45488afe77481ccc2a7311482d96e8c1d1bf35dbacb87b51506f17bf2c11ba8535708d5bbeb4f5664dce16e55aeb93562a01a3e6e0614900877dd1a526466f9c87d030f830b3cdd673275466ca3465f2d2bd57ebe5248718a7e4f8fec1ae589da3fcb84b9515503f07316654182ddb349460cc584de25ab3f9631600ffc2c0c0010157515dade31a5d9d30da1887e50eea03b3e325f5babde8cb10caf5c6089603b9a5f1aad8c01b6132832dd735b5d2d54bd10ed07efdc3417d11f152d2612d9152ff2169fb8ab73897e60d4d07c7e2910db518be0fd2a7ccedde3db088dba07ddb56bc084cc737b528663d496a2a290b0f8187c698bf93c556c3", @nested={0x11, 0x7, 0x0, 0x1, [@generic="f9bb72879445c262e0b15dfbc6"]}, @generic="b4f0c1c80c2c0c09eacad834e0ab3b09978a6849ea7fb66e89f7cbda192a05441c9dee5f2a4cf75d1fbfc308439f1aef2f6fd8139c3f919489c08a", @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@loopback}, @typed={0x6, 0x2c, 0x0, 0x0, @str='$\x00'}, @typed={0x74, 0x103, 0x0, 0x0, @binary="e5e53c02ccabb8779272f29148d5ace01aa8a87733e14797997572b2faa2dcde0a32e19576ed2c22f6593264820d241c7ce9dbfc2c63b1e54b604c4916a1804df30ed4c390502e3d2c81e203b18befd01ec88052b7c6e6d9c190a5436af33e0c398f95b64001fdd428a36facbc58423c"}, @nested={0xc, 0x73, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x8, 0x96, 0x0, 0x0, @fd}]}, 0x1340}], 0x2, 0x0, 0x0, 0x48085}, 0x0) 9.461013258s ago: executing program 2 (id=335): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x5, 0x81}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x18000) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 9.387600448s ago: executing program 0 (id=336): getpid() clock_gettime(0x0, &(0x7f0000001700)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000340)) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000240)=0x2) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d2406000003000000000800fb0c24020306010205000909050c240200000100000000000009240600060100000009240306050200050009240605000100000009040100000102000009040101010102000009050109000000000007250100000000090402", @ANYRES64, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x0) 9.08611037s ago: executing program 1 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r5], 0x44}}, 0x400c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000002801020000000000000000010000040900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x22008054}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f49b008d", @ANYRES16=r10, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r12, @ANYBLOB="24002d800500040001000000080003000400000005000100010000000800020003000000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r13, 0x3b88, &(0x7f0000000300)={0xc, r14}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r13, 0x3b65, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.03590792s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x503200, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000300)={0x41, 0x2, 0x0, "444900d730faa901000000000000000000f789981008d7b15b5700e46b8be100", 0x50424752}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.941603515s ago: executing program 1 (id=339): syz_usb_connect(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4008000}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xa5dfdbfc, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x20042) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000500)=""/94, 0x5e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) socket(0x840000000002, 0x3, 0xfa) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 8.359031195s ago: executing program 3 (id=340): syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x1000000, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYRES16=r3], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x80044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000003840)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @remote, 0xa}, 0x11, &(0x7f0000000240)=[{&(0x7f0000000280)="8000102ebf77d401", 0x8}], 0x1, &(0x7f0000003500)=ANY=[@ANYBLOB="180000000000000029000000360000000400000000000000"], 0x18}}], 0x1, 0x240080c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) write$cgroup_int(r7, &(0x7f00000000c0)=0x1c3, 0x12) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) close_range(r0, 0xffffffffffffffff, 0x0) 7.872739023s ago: executing program 1 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ca09fcec9a13f8f74afd27d3103d30183d468a1259648215f6b0ac9af6fabbaa4eca33d0361044e500616defbc8b028ae4220ba16af2beeac0e8ef579332", @ANYRES16, @ANYBLOB, @ANYRES32=r1, @ANYRES64, @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00), 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000300)=0x7e) read$dsp(r4, &(0x7f00000002c0)=""/58, 0x17a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 7.649216719s ago: executing program 3 (id=342): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat2(r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x8}, 0x18) 7.507980652s ago: executing program 4 (id=343): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x14, 0x0, 0x10b, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x854) 7.473503304s ago: executing program 3 (id=344): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) socket(0x1, 0x2, 0x0) 7.348042598s ago: executing program 0 (id=345): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getgroups(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) 7.028445928s ago: executing program 2 (id=346): syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x1000000, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180)=ANY=[@ANYRES16=r3], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x80044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000003840)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @remote, 0xa}, 0x11, &(0x7f0000000240)=[{&(0x7f0000000280)="8000102ebf77d401", 0x8}], 0x1, &(0x7f0000003500)=ANY=[@ANYBLOB="180000000000000029000000360000000400000000000000"], 0x18}}], 0x1, 0x240080c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 6.024862446s ago: executing program 4 (id=347): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@can_newroute={0x44, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_UID={0x8, 0xe, 0xffffffffffffffff}, @CGW_DST_IF={0x8}, @CGW_MOD_SET={0x15, 0x4, {{{0x4}, 0x3, 0x3, 0x0, 0x0, "918a76e1efa19e91"}, 0x5}}, @CGW_SRC_IF={0x8}]}, 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x8d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x6000, 0x0) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) 5.717988905s ago: executing program 3 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xff1) mkdir(0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, &(0x7f0000000b40)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdd) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) 5.714843189s ago: executing program 0 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000000), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r5], 0x44}}, 0x400c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000002801020000000000000000010000040900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x22008054}, 0x40000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r7, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="f49b008d", @ANYRES16=r10, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r12, @ANYBLOB="24002d800500040001000000080003000400000005000100010000000800020003000000"], 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r13, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r13, 0x3b88, &(0x7f0000000300)={0xc, r14}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r13, 0x3b65, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.21917753s ago: executing program 2 (id=350): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000010008188040f80f85fcb76f5f586b9483f0000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 3.07034786s ago: executing program 1 (id=351): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000080fcdbdf255400000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2.681059748s ago: executing program 0 (id=352): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, 0x0, &(0x7f0000000440)}, 0x20) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400e", @ANYBLOB], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x48000) syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100000602020202020201088284b2a0d4ceaa4f"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) 2.580445865s ago: executing program 4 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="255161fc12e31d068d10d1c2bd39", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x88bffd7102520d33}, 0x0) 2.522013752s ago: executing program 1 (id=354): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2dc, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x2c8, 0x1, [@m_tunnel_key={0xd4, 0xc, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}]}, {0x99, 0x6, "76777757306628024b2bb5b9aabcdaa2e2c61a46b9e88879798ac0c617e7168ebb00e45ab07c8db0ca27cfd0356206db9cd8a0661acab98d71d6c064f66ef9239397c98147899c91595fecc0ca698b04eabc5593beb65baeff4c745499754c00dfd59f3a508b9d89db46504388d954e3af192ad02fb8915ffce6cfe87948bb6c115ddc1d30004a23ed51e0fd003eb9b4fbc54954b5"}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}, @m_ife={0x120, 0x6, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x5, 0x0, 0x7ff, 0x8}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x97}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x81, 0x6, "86d979015880511d56813ec69a2c56307444f98db9e5766c0c21a4876721221a7de01eb4c5d9c316cbcc628a33280820ec0080c40cb6c408f2185dd5d3e8a26d5e17fddf56cbca26183b03c969f7fe45d0b4caaed849edd81b362b36ce5d583f2ae0fa284e195d4533289e15f7f03a9b09d3fe89afb84ee703e9dceaa1"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_bpf={0x70, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x39, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd421"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x60, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}]}, {0x19, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000914303b9850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.521344689s ago: executing program 1 (id=355): getpid() clock_gettime(0x0, &(0x7f0000001700)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x28, &(0x7f00000000c0)="fae15e8c6a78cd8e84c267762d10e8d979fc2f76a5345cf6442091e7510667de69ea1454f9b67991"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000340)) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d2406000003000000000800fb0c24020306010205000909050c240200000100000000000009240600060100000009240306050200050009240605000100000009040100000102000009040101010102000009050109000000000007250100000000090402", @ANYRES64, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16], 0x0) 2.495958071s ago: executing program 3 (id=356): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x5, 0x81}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x18000) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000100006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 2.27825036s ago: executing program 2 (id=357): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@mmap={0x1ff, 0x5, 0x4, 0x70000, 0x2, {}, {0x2, 0xc, 0x6, 0x3, 0x7, 0x5, "b120ffdc"}, 0x8, 0x1, {}, 0xb}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'veth0\x00', 0x24, 0x3, 0x8, 0x2, 0x39, 0x80000001, {0x8001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x800000000) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0xbb, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x8, 0x7}, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008031, r0, 0x4c6000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 297.376495ms ago: executing program 4 (id=358): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = getpid() getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000400)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @phonet={0x23, 0xf, 0x7, 0x1}, @can={0x1d, r3}, 0x1010, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)='batadv0\x00', 0x5, 0x401, 0x9}) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r6 = dup(0xffffffffffffffff) write$6lowpan_enable(r6, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000004000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3de63ce3475ee64743a735885a50d190e3a76573ed3bb48c8e2fa17a79a06abcefc4648f19fe2e3a07c37b7cfba9b7db345c6f8b1d16d70a9335a29d06359dca4b8f0ce321f3357d513721c2fcd4e75465afc8bc410f3009d64b55328e6f0cd21aaa57", @ANYRESHEX, @ANYBLOB=',\x00']) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 2 (id=359): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') (async) pipe2$9p(&(0x7f0000000240), 0x104800) unlink(0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r5, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r6}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000b"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$RTC_PIE_ON(r1, 0x7005) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) kernel console output (not intermixed with test programs): ink [ 61.145594][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.152874][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.160927][ T5820] bridge_slave_0: entered allmulticast mode [ 61.167572][ T5820] bridge_slave_0: entered promiscuous mode [ 61.191704][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.217900][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.225273][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.232964][ T5820] bridge_slave_1: entered allmulticast mode [ 61.239557][ T5820] bridge_slave_1: entered promiscuous mode [ 61.247814][ T5821] team0: Port device team_slave_0 added [ 61.254348][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.261659][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.268742][ T5815] bridge_slave_0: entered allmulticast mode [ 61.275492][ T5815] bridge_slave_0: entered promiscuous mode [ 61.291828][ T5829] team0: Port device team_slave_0 added [ 61.299467][ T5819] team0: Port device team_slave_0 added [ 61.314112][ T5821] team0: Port device team_slave_1 added [ 61.329396][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.336613][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.343739][ T5815] bridge_slave_1: entered allmulticast mode [ 61.351229][ T5815] bridge_slave_1: entered promiscuous mode [ 61.359016][ T5829] team0: Port device team_slave_1 added [ 61.367514][ T5819] team0: Port device team_slave_1 added [ 61.383196][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.434468][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.451803][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.458746][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.485684][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.497622][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.504641][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.530591][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.543967][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.561801][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.568752][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.595236][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.634897][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.644758][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.651865][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.677836][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.689160][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.696300][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.722273][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.735088][ T5820] team0: Port device team_slave_0 added [ 61.743486][ T5820] team0: Port device team_slave_1 added [ 61.776792][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.783813][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.810697][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.841332][ T5821] hsr_slave_0: entered promiscuous mode [ 61.847518][ T5821] hsr_slave_1: entered promiscuous mode [ 61.855964][ T5815] team0: Port device team_slave_0 added [ 61.864294][ T5815] team0: Port device team_slave_1 added [ 61.885044][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.892184][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.918129][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.956036][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.963203][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.989343][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.041890][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.048824][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.075424][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.077299][ T50] Bluetooth: hci0: command tx timeout [ 62.087564][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.098361][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.124431][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.148141][ T5829] hsr_slave_0: entered promiscuous mode [ 62.153793][ T50] Bluetooth: hci3: command tx timeout [ 62.154013][ T50] Bluetooth: hci4: command tx timeout [ 62.160185][ T5829] hsr_slave_1: entered promiscuous mode [ 62.167102][ T50] Bluetooth: hci1: command tx timeout [ 62.170203][ T5827] Bluetooth: hci2: command tx timeout [ 62.176675][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.188866][ T5829] Cannot create hsr debugfs directory [ 62.216883][ T5819] hsr_slave_0: entered promiscuous mode [ 62.223410][ T5819] hsr_slave_1: entered promiscuous mode [ 62.229241][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.236905][ T5819] Cannot create hsr debugfs directory [ 62.260477][ T5820] hsr_slave_0: entered promiscuous mode [ 62.266497][ T5820] hsr_slave_1: entered promiscuous mode [ 62.272622][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.280217][ T5820] Cannot create hsr debugfs directory [ 62.357155][ T5815] hsr_slave_0: entered promiscuous mode [ 62.363650][ T5815] hsr_slave_1: entered promiscuous mode [ 62.369483][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.377067][ T5815] Cannot create hsr debugfs directory [ 62.661515][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.673656][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.683663][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.699080][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.764599][ T5815] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.783734][ T5815] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.797351][ T5815] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.808660][ T5815] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.854544][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.865743][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.876836][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.898392][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.942773][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.971792][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.984432][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.001377][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.013543][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.023461][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.066125][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.073333][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.103598][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.117074][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.129291][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.156234][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.163310][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.172573][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.276469][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.304971][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.340358][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.354963][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.368542][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.375697][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 63.375709][ T30] audit: type=1400 audit(1749389363.878:86): avc: denied { sys_module } for pid=5821 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 63.423041][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.450480][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.464864][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.472007][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.484198][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.491326][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.502194][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.509284][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.519616][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.526689][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.546155][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.561036][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.568121][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.588305][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.595383][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.614506][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.632785][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.661198][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.668274][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.690019][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.697085][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.719068][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.732239][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.854778][ T5821] veth0_vlan: entered promiscuous mode [ 63.918064][ T5821] veth1_vlan: entered promiscuous mode [ 64.036992][ T5821] veth0_macvtap: entered promiscuous mode [ 64.056039][ T5821] veth1_macvtap: entered promiscuous mode [ 64.127623][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.151091][ T5827] Bluetooth: hci0: command tx timeout [ 64.165352][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.188815][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.225676][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.230785][ T5830] Bluetooth: hci3: command tx timeout [ 64.236275][ T50] Bluetooth: hci1: command tx timeout [ 64.237939][ T5830] Bluetooth: hci4: command tx timeout [ 64.248899][ T5827] Bluetooth: hci2: command tx timeout [ 64.256778][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.265644][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.274703][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.283816][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.297262][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.352628][ T5815] veth0_vlan: entered promiscuous mode [ 64.388410][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.414892][ T5819] veth0_vlan: entered promiscuous mode [ 64.424558][ T5815] veth1_vlan: entered promiscuous mode [ 64.469560][ T5820] veth0_vlan: entered promiscuous mode [ 64.499672][ T5819] veth1_vlan: entered promiscuous mode [ 64.507839][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.524152][ T5820] veth1_vlan: entered promiscuous mode [ 64.524803][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.584091][ T5815] veth0_macvtap: entered promiscuous mode [ 64.617684][ T5815] veth1_macvtap: entered promiscuous mode [ 64.636386][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.637255][ T5819] veth0_macvtap: entered promiscuous mode [ 64.654062][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.684713][ T5819] veth1_macvtap: entered promiscuous mode [ 64.704507][ T30] audit: type=1400 audit(1749389365.188:87): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.JxbACA/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.731585][ T30] audit: type=1400 audit(1749389365.218:88): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.732979][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.754752][ T30] audit: type=1400 audit(1749389365.218:89): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.JxbACA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.805165][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.814259][ T30] audit: type=1400 audit(1749389365.218:90): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.824011][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.843371][ T30] audit: type=1400 audit(1749389365.258:91): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.JxbACA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.875087][ T5820] veth0_macvtap: entered promiscuous mode [ 64.885988][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.910464][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.918191][ T30] audit: type=1400 audit(1749389365.258:92): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.JxbACA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.947257][ T30] audit: type=1400 audit(1749389365.278:93): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.952278][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.975614][ T30] audit: type=1400 audit(1749389365.278:94): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.999057][ T30] audit: type=1400 audit(1749389365.288:95): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="gadgetfs" ino=6302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 65.021684][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.031308][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.040192][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.057532][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.066620][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.075930][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.084653][ T5815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.116889][ T5829] veth0_vlan: entered promiscuous mode [ 65.136862][ T5820] veth1_macvtap: entered promiscuous mode [ 65.210234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.398696][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.527328][ T5829] veth1_vlan: entered promiscuous mode [ 65.546225][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.559957][ T5930] netlink: 'syz.3.4': attribute type 27 has an invalid length. [ 65.568164][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.581402][ T5820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.591076][ T5820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.599918][ T5820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.608685][ T5820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.640080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.666091][ T5829] veth0_macvtap: entered promiscuous mode [ 65.693355][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.701850][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.729549][ T5829] veth1_macvtap: entered promiscuous mode [ 65.767496][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.776060][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.825502][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.846546][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.874904][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.987671][ T5939] trusted_key: encrypted_key: insufficient parameters specified [ 66.095292][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.095965][ T5939] FAULT_INJECTION: forcing a failure. [ 66.095965][ T5939] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.117028][ T5939] CPU: 0 UID: 0 PID: 5939 Comm: syz.3.6 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 66.117050][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.117059][ T5939] Call Trace: [ 66.117064][ T5939] [ 66.117069][ T5939] dump_stack_lvl+0x16c/0x1f0 [ 66.117101][ T5939] should_fail_ex+0x512/0x640 [ 66.117130][ T5939] _copy_to_user+0x32/0xd0 [ 66.117157][ T5939] simple_read_from_buffer+0xcb/0x170 [ 66.117182][ T5939] proc_fail_nth_read+0x197/0x270 [ 66.117203][ T5939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.117225][ T5939] ? rw_verify_area+0xcf/0x680 [ 66.117244][ T5939] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.117265][ T5939] vfs_read+0x1e4/0xc60 [ 66.117290][ T5939] ? __pfx___mutex_lock+0x10/0x10 [ 66.117306][ T5939] ? __pfx_vfs_read+0x10/0x10 [ 66.117333][ T5939] ? __fget_files+0x20e/0x3c0 [ 66.117365][ T5939] ksys_read+0x12a/0x250 [ 66.117386][ T5939] ? __pfx_ksys_read+0x10/0x10 [ 66.117421][ T5939] do_syscall_64+0xcd/0x4c0 [ 66.117439][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.117456][ T5939] RIP: 0033:0x7f7bd478d33c [ 66.117471][ T5939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.117486][ T5939] RSP: 002b:00007f7bd5671030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.117502][ T5939] RAX: ffffffffffffffda RBX: 00007f7bd49b6080 RCX: 00007f7bd478d33c [ 66.117513][ T5939] RDX: 000000000000000f RSI: 00007f7bd56710a0 RDI: 000000000000000b [ 66.117522][ T5939] RBP: 00007f7bd5671090 R08: 0000000000000000 R09: 0000000000000000 [ 66.117532][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.117540][ T5939] R13: 0000000000000000 R14: 00007f7bd49b6080 R15: 00007fff5323eba8 [ 66.117564][ T5939] [ 66.301090][ T5827] Bluetooth: hci0: command tx timeout [ 66.421759][ T5818] Bluetooth: hci4: command tx timeout [ 66.427276][ T5818] Bluetooth: hci3: command tx timeout [ 66.433122][ T5830] Bluetooth: hci1: command tx timeout [ 66.441103][ T5827] Bluetooth: hci2: command tx timeout [ 66.513556][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.521445][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.597681][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.611721][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.640571][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.650139][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.658849][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.737008][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.830364][ T5944] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7'. [ 66.848670][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.876989][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.509213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.817742][ T5958] trusted_key: encrypted_key: insufficient parameters specified [ 67.920251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.929091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.929322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.020542][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 68.049895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 68.075631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.085230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.316355][ T50] Bluetooth: hci0: command tx timeout [ 68.381313][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.389708][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.467092][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 68.467109][ T30] audit: type=1400 audit(1749389368.958:132): avc: denied { ioctl } for pid=5970 comm="syz.2.11" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.471446][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474248][ T50] Bluetooth: hci2: command tx timeout [ 68.498478][ T5827] Bluetooth: hci3: command tx timeout [ 68.506119][ T5818] Bluetooth: hci1: command tx timeout [ 68.511499][ T5827] Bluetooth: hci4: command tx timeout [ 68.641254][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.703663][ T30] audit: type=1400 audit(1749389369.198:133): avc: denied { read write } for pid=5974 comm="syz.3.12" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.750929][ T30] audit: type=1400 audit(1749389369.228:134): avc: denied { open } for pid=5974 comm="syz.3.12" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.791931][ T5976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 68.811723][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.838767][ T30] audit: type=1400 audit(1749389369.228:135): avc: denied { ioctl } for pid=5974 comm="syz.3.12" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 68.903034][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 68.912972][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 68.971054][ T5868] usb 3-1: device descriptor read/64, error -71 [ 69.071559][ T5984] trusted_key: encrypted_key: insufficient parameters specified [ 69.447709][ T5986] SELinux: Context system_u:object_r:fsadm_ex is not valid (left unmapped). [ 69.636891][ T5987] mkiss: ax0: crc mode is auto. [ 69.639925][ T30] audit: type=1400 audit(1749389369.948:136): avc: denied { relabelto } for pid=5983 comm="syz.1.14" name="2" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 70.039995][ T5963] SELinux: policydb magic number 0x7d710000 does not match expected magic number 0xf97cff8c [ 70.097298][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.106261][ T30] audit: type=1400 audit(1749389369.958:137): avc: denied { associate } for pid=5983 comm="syz.1.14" name="2" dev="tmpfs" ino=23 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 70.132384][ T30] audit: type=1400 audit(1749389370.528:138): avc: denied { load_policy } for pid=5962 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 70.153171][ T30] audit: type=1400 audit(1749389370.638:139): avc: denied { name_bind } for pid=5974 comm="syz.3.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.176967][ T30] audit: type=1400 audit(1749389370.638:140): avc: denied { node_bind } for pid=5974 comm="syz.3.12" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.198585][ T5963] SELinux: failed to load policy [ 70.203759][ T5968] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 70.230701][ T5968] CIFS: Unable to determine destination address [ 70.240681][ T5868] usb 3-1: device descriptor read/64, error -71 [ 70.285449][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 70.309516][ T5994] netlink: 'syz.4.15': attribute type 1 has an invalid length. [ 70.318411][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 70.348993][ T30] audit: type=1400 audit(1749389370.828:141): avc: denied { remove_name } for pid=5820 comm="syz-executor" name="binderfs" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 70.406401][ T5868] usb usb3-port1: attempt power cycle [ 70.510440][ T5996] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.636642][ T6005] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.19'. [ 70.819891][ T5868] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.869498][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.894601][ T5868] usb 3-1: device descriptor read/8, error -71 [ 70.897237][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.907580][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.981569][ T5822] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.056259][ T6023] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 71.170173][ T5868] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 71.207282][ T5822] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.272035][ T5868] usb 3-1: device descriptor read/8, error -71 [ 71.310216][ T5822] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 71.400399][ T5822] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.442710][ T5868] usb usb3-port1: unable to enumerate USB device [ 71.512971][ T5822] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 71.604714][ T5822] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 71.755171][ T5822] usb 5-1: Manufacturer: syz [ 71.830115][ T5822] usb 5-1: SerialNumber: syz [ 72.263693][ T6032] mkiss: ax0: crc mode is auto. [ 73.485587][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 73.485604][ T30] audit: type=1400 audit(1749389373.978:160): avc: denied { write } for pid=6047 comm="syz.3.29" name="ip6_flowlabel" dev="proc" ino=4026533317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.572723][ T6049] block nbd0: NBD_DISCONNECT [ 73.622587][ T6045] Zero length message leads to an empty skb [ 73.634324][ T30] audit: type=1400 audit(1749389374.128:161): avc: denied { execute } for pid=6053 comm="syz.1.30" path="/dev/audio1" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 73.670808][ T5822] yealink 5-1:36.0: invalid payload size 0, expected 16 [ 73.689879][ T30] audit: type=1400 audit(1749389374.178:162): avc: denied { execute } for pid=6053 comm="syz.1.30" name="file1" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.690848][ T6049] block nbd0: Send disconnect failed -22 [ 73.723288][ T5822] input: Yealink usb-p1k as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:36.0/input/input5 [ 73.749742][ T30] audit: type=1400 audit(1749389374.178:163): avc: denied { read } for pid=6053 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.794274][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.797568][ T30] audit: type=1400 audit(1749389374.188:164): avc: denied { write } for pid=6044 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.801409][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.827288][ T6050] block nbd0: NBD_DISCONNECT [ 73.828837][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.832707][ T6050] block nbd0: Send disconnect failed -22 [ 73.839104][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.851545][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.858807][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.866042][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.873040][ C0] yealink 5-1:36.0: urb_ctl_callback - urb status -71 [ 73.879813][ C0] yealink 5-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 73.909231][ T5822] usb 5-1: USB disconnect, device number 2 [ 73.930148][ T30] audit: type=1400 audit(1749389374.238:165): avc: denied { connect } for pid=6053 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.961262][ T6050] block nbd0: Disconnected due to user request. [ 73.976500][ T30] audit: type=1400 audit(1749389374.238:166): avc: denied { name_connect } for pid=6053 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.002687][ T6050] block nbd0: shutting down sockets [ 74.080071][ T30] audit: type=1400 audit(1749389374.388:167): avc: denied { read } for pid=5177 comm="acpid" name="event4" dev="devtmpfs" ino=2780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.153220][ T30] audit: type=1400 audit(1749389374.388:168): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2780 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.199188][ T30] audit: type=1400 audit(1749389374.388:169): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2780 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.588692][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.203854][ T5931] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 75.212975][ T6062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.395022][ T5931] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.434085][ T5931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.447499][ T5931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.467532][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.477633][ T5931] usb 2-1: Product: syz [ 75.549409][ T5931] usb 2-1: Manufacturer: syz [ 75.578971][ T5931] usb 2-1: SerialNumber: syz [ 75.641295][ T6078] FAULT_INJECTION: forcing a failure. [ 75.641295][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.654525][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.2.35 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 75.654549][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.654558][ T6078] Call Trace: [ 75.654564][ T6078] [ 75.654571][ T6078] dump_stack_lvl+0x16c/0x1f0 [ 75.654603][ T6078] should_fail_ex+0x512/0x640 [ 75.654630][ T6078] _copy_from_user+0x2e/0xd0 [ 75.654657][ T6078] copy_msghdr_from_user+0x98/0x160 [ 75.654684][ T6078] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.654723][ T6078] ___sys_sendmsg+0xfe/0x1d0 [ 75.654750][ T6078] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.654774][ T6078] ? __lock_acquire+0x622/0x1c90 [ 75.654831][ T6078] __sys_sendmsg+0x16d/0x220 [ 75.654857][ T6078] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.654899][ T6078] do_syscall_64+0xcd/0x4c0 [ 75.654917][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.654935][ T6078] RIP: 0033:0x7f4da538e929 [ 75.654948][ T6078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.654964][ T6078] RSP: 002b:00007f4da6153038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.654996][ T6078] RAX: ffffffffffffffda RBX: 00007f4da55b6160 RCX: 00007f4da538e929 [ 75.655007][ T6078] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 75.655017][ T6078] RBP: 00007f4da6153090 R08: 0000000000000000 R09: 0000000000000000 [ 75.655028][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.655037][ T6078] R13: 0000000000000000 R14: 00007f4da55b6160 R15: 00007ffe20cb36e8 [ 75.655064][ T6078] [ 76.602420][ T5931] usb 2-1: 0:2 : does not exist [ 76.663580][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.38'. [ 76.672320][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 77.485784][ T114] usb 2-1: USB disconnect, device number 2 [ 78.478973][ T6103] mkiss: ax0: crc mode is auto. [ 78.920913][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 78.920925][ T30] audit: type=1326 audit(1749389379.418:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4da538e929 code=0x7fc00000 [ 78.984180][ T30] audit: type=1326 audit(1749389379.478:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6095 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd478e929 code=0x7fc00000 [ 79.008919][ T30] audit: type=1400 audit(1749389379.478:188): avc: denied { create } for pid=6108 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.034530][ T30] audit: type=1400 audit(1749389379.478:189): avc: denied { setopt } for pid=6108 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 79.053914][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 79.109958][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.130054][ T6112] dummy0: entered promiscuous mode [ 79.367733][ T30] audit: type=1400 audit(1749389379.858:190): avc: denied { create } for pid=6108 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.389863][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.391473][ T30] audit: type=1400 audit(1749389379.888:191): avc: denied { write } for pid=6108 comm="syz.4.44" path="socket:[8387]" dev="sockfs" ino=8387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 79.420352][ T6112] dummy0: left promiscuous mode [ 79.425280][ T5822] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.438741][ T5822] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.479359][ T5822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.492806][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.511553][ T6107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.551254][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.578696][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.596777][ T5931] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00 [ 79.656633][ T5822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.710892][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.728596][ T5931] usb 1-1: config 0 descriptor?? [ 80.369972][ T30] audit: type=1400 audit(1749389380.838:192): avc: denied { ioctl } for pid=6106 comm="syz.1.43" path="/dev/video8" dev="devtmpfs" ino=952 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.525546][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.533053][ T30] audit: type=1400 audit(1749389381.008:193): avc: denied { read } for pid=6110 comm="syz.0.45" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.555616][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.111670][ T114] usb 2-1: USB disconnect, device number 3 [ 81.118961][ T30] audit: type=1400 audit(1749389381.008:194): avc: denied { open } for pid=6110 comm="syz.0.45" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.144447][ T10] cfg80211: failed to load regulatory.db [ 81.157412][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.301479][ T6111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.418919][ T30] audit: type=1400 audit(1749389381.018:195): avc: denied { ioctl } for pid=6110 comm="syz.0.45" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.421214][ T6132] binder: 6110:6132 ioctl c0306201 200000000480 returned -14 [ 82.438485][ T5931] usb 1-1: string descriptor 0 read error: -71 [ 82.464371][ T5931] usbhid 1-1:0.0: can't add hid device: -71 [ 82.474775][ T5931] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 82.788317][ T5931] usb 1-1: USB disconnect, device number 2 [ 82.969710][ T6153] netlink: 'syz.2.53': attribute type 27 has an invalid length. [ 83.012496][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.020668][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.400225][ T5933] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 83.464704][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.491324][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.571360][ T5933] usb 4-1: config 0 has an invalid interface number: 10 but max is 0 [ 83.591606][ T5933] usb 4-1: config 0 has no interface number 0 [ 83.606057][ T6153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.610425][ T5933] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=a4.d5 [ 83.628856][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.631609][ T6153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.646149][ T5933] usb 4-1: Product: syz [ 83.647841][ T6153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.659323][ T5933] usb 4-1: Manufacturer: syz [ 83.661315][ T6153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.664117][ T5933] usb 4-1: SerialNumber: syz [ 83.703425][ T5933] usb 4-1: config 0 descriptor?? [ 83.711489][ T5933] hub 4-1:0.10: bad descriptor, ignoring hub [ 83.719525][ T5933] hub 4-1:0.10: probe with driver hub failed with error -5 [ 83.762343][ T5933] kvaser_usb 4-1:0.10: error -ENODEV: Cannot get usb endpoint(s) [ 83.862092][ T6169] netlink: 156 bytes leftover after parsing attributes in process `syz.1.58'. [ 83.871124][ T54] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.001160][ T54] usb 1-1: device descriptor read/64, error -71 [ 84.023319][ T6173] ubi31: attaching mtd0 [ 84.036813][ T6173] ubi31: scanning is finished [ 84.043537][ T6173] ubi31: empty MTD device detected [ 84.249994][ T54] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.472920][ T54] usb 1-1: device descriptor read/64, error -71 [ 84.495848][ T6173] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 84.505027][ T6173] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 84.513236][ T6173] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 84.522087][ T6173] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 84.530854][ T6173] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 85.082657][ T5933] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.082734][ T6173] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 85.111588][ T6173] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3926009028 [ 85.111919][ T54] usb usb1-port1: attempt power cycle [ 85.128028][ T6173] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 85.139470][ T6181] ubi31: background thread "ubi_bgt31d" started, PID 6181 [ 85.193023][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 85.193037][ T30] audit: type=1400 audit(1749389385.688:247): avc: denied { create } for pid=6185 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.288981][ T5933] usb 5-1: config 0 has an invalid interface number: 10 but max is 0 [ 85.297450][ T5933] usb 5-1: config 0 has no interface number 0 [ 85.473395][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 85.487171][ T30] audit: type=1400 audit(1749389385.948:248): avc: denied { ioctl } for pid=6185 comm="syz.2.62" path="socket:[7097]" dev="sockfs" ino=7097 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.540272][ T54] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.541580][ T5933] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=a4.d5 [ 85.571627][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.579641][ T5933] usb 5-1: Product: syz [ 85.580845][ T54] usb 1-1: device descriptor read/8, error -71 [ 85.586014][ T5933] usb 5-1: Manufacturer: syz [ 85.598039][ T5933] usb 5-1: SerialNumber: syz [ 85.721154][ T5933] usb 5-1: config 0 descriptor?? [ 85.725742][ T5931] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 85.738876][ T5933] hub 5-1:0.10: bad descriptor, ignoring hub [ 85.747066][ T5933] hub 5-1:0.10: probe with driver hub failed with error -5 [ 85.754608][ T5933] kvaser_usb 5-1:0.10: error -ENODEV: Cannot get usb endpoint(s) [ 86.243222][ T30] audit: type=1400 audit(1749389386.318:249): avc: denied { sqpoll } for pid=6189 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.268500][ T30] audit: type=1400 audit(1749389386.318:250): avc: denied { read write } for pid=6189 comm="syz.1.63" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.300097][ T30] audit: type=1400 audit(1749389386.328:251): avc: denied { open } for pid=6189 comm="syz.1.63" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 86.340081][ T10] usb 4-1: USB disconnect, device number 2 [ 86.344531][ T30] audit: type=1400 audit(1749389386.838:252): avc: denied { write } for pid=6194 comm="syz.3.64" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.368912][ T5931] usb 3-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 86.381918][ T54] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 86.396274][ T5931] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 86.407071][ T5931] usb 3-1: config 255 has no interfaces? [ 86.415146][ T54] usb 1-1: device descriptor read/8, error -71 [ 86.482669][ T6196] ubi: mtd0 is already attached to ubi31 [ 86.582316][ T5931] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 86.597271][ T30] audit: type=1400 audit(1749389387.028:253): avc: denied { map } for pid=6194 comm="syz.3.64" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.626557][ T54] usb usb1-port1: unable to enumerate USB device [ 86.763319][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.845504][ T6198] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 86.871586][ T30] audit: type=1400 audit(1749389387.028:254): avc: denied { execute } for pid=6194 comm="syz.3.64" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 87.001751][ T30] audit: type=1400 audit(1749389387.048:255): avc: denied { write } for pid=6176 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.021328][ T30] audit: type=1400 audit(1749389387.068:256): avc: denied { read } for pid=6176 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 87.084450][ T6198] veth0_macvtap: left promiscuous mode [ 87.117721][ T6198] batman_adv: batadv0: Adding interface: macvtap0 [ 87.137721][ T6198] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.243210][ T5931] usb 3-1: string descriptor 0 read error: -71 [ 88.293924][ T5931] usb 3-1: USB disconnect, device number 6 [ 88.294959][ T6198] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 88.450206][ T5868] usb 5-1: USB disconnect, device number 3 [ 88.687538][ T6217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 88.698728][ T6217] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 88.757483][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 89.016343][ T6221] fuse: Unknown parameter 'use00000000000000000000' [ 89.867485][ T6230] use of bytesused == 0 is deprecated and will be removed in the future, [ 89.876782][ T6230] use the actual size instead. [ 89.883404][ T5868] hid-generic 0005:16BF:0006.0001: unknown main item tag 0x0 [ 89.902137][ T5868] hid-generic 0005:16BF:0006.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 90.692887][ T5868] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.693194][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 90.693204][ T30] audit: type=1400 audit(1749389390.958:279): avc: denied { listen } for pid=6231 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 90.741875][ T5931] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.809868][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.826119][ T6237] fido_id[6237]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 90.859863][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 90.889359][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.934166][ T5931] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 90.938240][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.954286][ T5868] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 90.954305][ T5931] usb 5-1: config 0 has no interface number 0 [ 90.963564][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.070268][ T5868] usb 1-1: config 0 descriptor?? [ 91.070999][ T5931] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 91.087661][ T5931] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 91.099070][ T54] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.108311][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.116322][ T54] usb 4-1: Product: syz [ 91.121174][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.139845][ T54] usb 4-1: Manufacturer: syz [ 91.156259][ T54] usb 4-1: SerialNumber: syz [ 91.418606][ T5931] usb 5-1: config 0 descriptor?? [ 91.430571][ T54] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.449129][ T30] audit: type=1400 audit(1749389391.938:280): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 91.486873][ T5931] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input7 [ 91.502493][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 92.747359][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 93.111381][ T24] ath9k_htc: Failed to initialize the device [ 93.550926][ T5931] usb 4-1: USB disconnect, device number 3 [ 93.566600][ T5931] usb 4-1: ath9k_htc: USB layer deinitialized [ 93.575842][ T30] audit: type=1326 audit(1749389393.608:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.1.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9407d8e929 code=0x7fc00000 [ 93.608522][ T5868] usbhid 1-1:0.0: can't add hid device: -71 [ 93.693794][ T5868] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 93.731203][ T5956] usb 5-1: USB disconnect, device number 4 [ 93.769680][ T5868] usb 1-1: USB disconnect, device number 7 [ 94.065746][ T30] audit: type=1400 audit(1749389394.468:282): avc: denied { open } for pid=6249 comm="syz.0.78" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 94.089967][ T5931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.120778][ T30] audit: type=1400 audit(1749389394.468:283): avc: denied { setopt } for pid=6249 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.310356][ T5931] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.374900][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.524177][ T30] audit: type=1400 audit(1749389394.868:284): avc: denied { append } for pid=6259 comm="syz.2.80" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.581298][ T5931] usb 4-1: Product: syz [ 94.585469][ T5931] usb 4-1: Manufacturer: syz [ 94.745043][ T6266] FAULT_INJECTION: forcing a failure. [ 94.745043][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.758282][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.4.81 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 94.758306][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.758316][ T6266] Call Trace: [ 94.758322][ T6266] [ 94.758328][ T6266] dump_stack_lvl+0x16c/0x1f0 [ 94.758359][ T6266] should_fail_ex+0x512/0x640 [ 94.758388][ T6266] _copy_from_user+0x2e/0xd0 [ 94.758415][ T6266] copy_msghdr_from_user+0x98/0x160 [ 94.758443][ T6266] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 94.758467][ T6266] ? trace_sched_exit_tp+0xde/0x130 [ 94.758503][ T6266] ___sys_sendmsg+0xfe/0x1d0 [ 94.758530][ T6266] ? __pfx____sys_sendmsg+0x10/0x10 [ 94.758554][ T6266] ? __lock_acquire+0x622/0x1c90 [ 94.758624][ T6266] __sys_sendmsg+0x16d/0x220 [ 94.758651][ T6266] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.758675][ T6266] ? __pfx___schedule+0x10/0x10 [ 94.758715][ T6266] do_syscall_64+0xcd/0x4c0 [ 94.758740][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.758757][ T6266] RIP: 0033:0x7f495f18e929 [ 94.758771][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.758787][ T6266] RSP: 002b:00007f4960057038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.758804][ T6266] RAX: ffffffffffffffda RBX: 00007f495f3b6080 RCX: 00007f495f18e929 [ 94.758814][ T6266] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a [ 94.758824][ T6266] RBP: 00007f4960057090 R08: 0000000000000000 R09: 0000000000000000 [ 94.758835][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.758845][ T6266] R13: 0000000000000000 R14: 00007f495f3b6080 R15: 00007ffe91732d58 [ 94.758868][ T6266] [ 94.942035][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.013657][ T6266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.035915][ T5931] usb 4-1: SerialNumber: syz [ 95.267616][ T5931] usb 4-1: can't set config #1, error -71 [ 95.321949][ T5931] usb 4-1: USB disconnect, device number 4 [ 95.418526][ T30] audit: type=1400 audit(1749389395.908:285): avc: denied { ioctl } for pid=6271 comm="syz.3.84" path="socket:[9245]" dev="sockfs" ino=9245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.454456][ T6273] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 96.410599][ T30] audit: type=1400 audit(1749389396.668:286): avc: denied { mount } for pid=6271 comm="syz.3.84" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 96.567529][ T30] audit: type=1400 audit(1749389397.058:287): avc: denied { ioctl } for pid=6278 comm="syz.2.88" path="socket:[8744]" dev="sockfs" ino=8744 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.778037][ T30] audit: type=1400 audit(1749389397.178:288): avc: denied { create } for pid=6282 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.009951][ T30] audit: type=1400 audit(1749389398.078:289): avc: denied { watch } for pid=6288 comm="syz.0.90" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.054336][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.160508][ T5822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.481393][ T30] audit: type=1400 audit(1749389398.078:290): avc: denied { watch_sb watch_reads } for pid=6288 comm="syz.0.90" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.526396][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.569852][ T30] audit: type=1400 audit(1749389398.678:291): avc: denied { read } for pid=6292 comm="syz.2.92" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.590216][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.649290][ T5822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.670103][ T5822] usb 2-1: config 0 has no interface number 0 [ 98.677099][ T30] audit: type=1400 audit(1749389398.678:292): avc: denied { open } for pid=6292 comm="syz.2.92" path="/14/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.718675][ T5822] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 98.732640][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.735917][ T30] audit: type=1400 audit(1749389399.118:293): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.752879][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 98.763858][ T30] audit: type=1400 audit(1749389399.118:294): avc: denied { connect } for pid=6301 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.780002][ T5822] usb 2-1: Product: syz [ 98.789829][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.828228][ T5822] usb 2-1: Manufacturer: syz [ 98.833526][ T5822] usb 2-1: SerialNumber: syz [ 98.848858][ T30] audit: type=1400 audit(1749389399.198:295): avc: denied { write } for pid=6301 comm="syz.4.94" path="socket:[9296]" dev="sockfs" ino=9296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.850000][ T5822] usb 2-1: config 0 descriptor?? [ 98.872024][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.889012][ T6310] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 98.948030][ T6315] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 99.026810][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 99.837906][ T6321] FAULT_INJECTION: forcing a failure. [ 99.837906][ T6321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.851747][ T6321] CPU: 0 UID: 0 PID: 6321 Comm: syz.3.100 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 99.851775][ T6321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.851785][ T6321] Call Trace: [ 99.851791][ T6321] [ 99.851797][ T6321] dump_stack_lvl+0x16c/0x1f0 [ 99.851829][ T6321] should_fail_ex+0x512/0x640 [ 99.851858][ T6321] _copy_to_user+0x32/0xd0 [ 99.851886][ T6321] simple_read_from_buffer+0xcb/0x170 [ 99.851912][ T6321] proc_fail_nth_read+0x197/0x270 [ 99.851943][ T6321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.851968][ T6321] ? rw_verify_area+0xcf/0x680 [ 99.851994][ T6321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.852016][ T6321] vfs_read+0x1e4/0xc60 [ 99.852041][ T6321] ? __pfx___mutex_lock+0x10/0x10 [ 99.852057][ T6321] ? __pfx_vfs_read+0x10/0x10 [ 99.852087][ T6321] ? __fget_files+0x20e/0x3c0 [ 99.852119][ T6321] ksys_read+0x12a/0x250 [ 99.852146][ T6321] ? __pfx_ksys_read+0x10/0x10 [ 99.852169][ T6321] ? fput+0x70/0xf0 [ 99.852189][ T6321] do_syscall_64+0xcd/0x4c0 [ 99.852208][ T6321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.852225][ T6321] RIP: 0033:0x7f7bd478d33c [ 99.852239][ T6321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.852255][ T6321] RSP: 002b:00007f7bd5692030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.852271][ T6321] RAX: ffffffffffffffda RBX: 00007f7bd49b5fa0 RCX: 00007f7bd478d33c [ 99.852282][ T6321] RDX: 000000000000000f RSI: 00007f7bd56920a0 RDI: 0000000000000004 [ 99.852292][ T6321] RBP: 00007f7bd5692090 R08: 0000000000000000 R09: 0000000000000000 [ 99.852302][ T6321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.852312][ T6321] R13: 0000000000000000 R14: 00007f7bd49b5fa0 R15: 00007fff5323eba8 [ 99.852337][ T6321] [ 100.075096][ T5822] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 100.118300][ T5822] usb 2-1: USB disconnect, device number 4 [ 100.459921][ T5868] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 100.740431][ T5868] usb 1-1: device descriptor read/64, error -71 [ 100.919943][ T5931] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.025121][ T5868] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 101.090178][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 101.194106][ T5931] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 101.230284][ T5868] usb 1-1: device descriptor read/64, error -71 [ 101.307614][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.381430][ T5931] usb 5-1: Product: syz [ 101.427632][ T5931] usb 5-1: Manufacturer: syz [ 101.445615][ T6349] mkiss: ax0: crc mode is auto. [ 101.484718][ T5931] usb 5-1: SerialNumber: syz [ 101.678931][ T5931] usb 5-1: config 0 descriptor?? [ 101.849735][ T5931] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 101.902547][ T5868] usb usb1-port1: attempt power cycle [ 101.964253][ T5931] usb 5-1: setting power ON [ 102.013543][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.109'. [ 102.026666][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 102.038071][ T6357] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 102.039402][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.048973][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 102.164871][ T5931] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 102.238884][ T6364] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 102.310252][ T5868] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 102.983275][ T5931] usb 5-1: media controller created [ 103.002597][ T6365] overlayfs: overlapping lowerdir path [ 103.005789][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.035443][ T5868] usb 1-1: device descriptor read/8, error -71 [ 103.049651][ T5931] usb 5-1: selecting invalid altsetting 6 [ 103.055841][ T5931] usb 5-1: digital interface selection failed (-22) [ 103.063023][ T5931] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 103.072483][ T5931] usb 5-1: setting power OFF [ 103.077241][ T5931] dvb-usb: bulk message failed: -22 (2/0) [ 103.085647][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 103.095497][ T5931] (NULL device *): no alternate interface [ 103.119840][ T5931] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 103.330060][ T5931] usb 5-1: USB disconnect, device number 5 [ 105.344517][ T6404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.622487][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.622532][ T30] audit: type=1400 audit(1749389406.018:303): avc: denied { read } for pid=6402 comm="syz.1.123" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.133818][ T30] audit: type=1400 audit(1749389406.018:304): avc: denied { open } for pid=6402 comm="syz.1.123" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.157188][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.204603][ T30] audit: type=1400 audit(1749389406.028:305): avc: denied { ioctl } for pid=6402 comm="syz.1.123" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 106.248361][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.258373][ T30] audit: type=1400 audit(1749389406.028:306): avc: denied { append } for pid=6402 comm="syz.1.123" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.282233][ T114] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.293798][ T30] audit: type=1400 audit(1749389406.028:307): avc: denied { open } for pid=6402 comm="syz.1.123" path="/dev/sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.324176][ T30] audit: type=1400 audit(1749389406.028:308): avc: denied { ioctl } for pid=6402 comm="syz.1.123" path="/dev/sg0" dev="devtmpfs" ino=768 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.351008][ T30] audit: type=1400 audit(1749389406.078:309): avc: denied { read write } for pid=6402 comm="syz.1.123" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.374278][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.381267][ T30] audit: type=1400 audit(1749389406.078:310): avc: denied { open } for pid=6402 comm="syz.1.123" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.404447][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.410676][ T30] audit: type=1400 audit(1749389406.078:311): avc: denied { ioctl } for pid=6402 comm="syz.1.123" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 106.436632][ T30] audit: type=1400 audit(1749389406.698:312): avc: denied { read } for pid=5177 comm="acpid" name="event8" dev="devtmpfs" ino=2857 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 106.458331][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.470043][ T5822] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.479854][ T114] usb 2-1: Using ep0 maxpacket: 32 [ 106.485574][ T114] usb 2-1: too many configurations: 255, using maximum allowed: 8 [ 106.503792][ T114] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=85.bd [ 106.513122][ T114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=254 [ 106.519604][ T6387] mmap: syz.0.116 (6387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.521379][ T114] usb 2-1: Product: syz [ 106.521397][ T114] usb 2-1: Manufacturer: syz [ 106.521412][ T114] usb 2-1: SerialNumber: syz [ 106.524347][ T114] usb 2-1: config 0 descriptor?? [ 106.560241][ T5868] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.663376][ T5822] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 106.672860][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.686279][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.697598][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.705312][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.714331][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 106.719551][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.730496][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.738120][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.752630][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.774385][ T5868] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 106.783623][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.794611][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.805049][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.812461][ T5868] usb 5-1: config 0 descriptor?? [ 106.822308][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.831647][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.842640][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.850444][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.859525][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.870937][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.878698][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 106.887979][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.899141][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.080896][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.090128][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.136966][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.169352][ T6417] input: syz0 as /devices/virtual/input/input10 [ 107.270417][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.279698][ T5822] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.296028][ T5868] uclogic 0003:28BD:0042.0002: interface is invalid, ignoring [ 107.324843][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.371844][ T5822] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 107.386490][ T5822] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 107.398135][ T5822] usb 3-1: Product: syz [ 107.423780][ T5822] usb 3-1: Manufacturer: syz [ 107.434644][ T5822] usb 3-1: SerialNumber: syz [ 107.451783][ T5822] usb 3-1: config 0 descriptor?? [ 107.477844][ T5822] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 107.567893][ T5931] usb 5-1: USB disconnect, device number 6 [ 107.728939][ T6429] input: syz0 as /devices/virtual/input/input11 [ 107.733685][ T6428] block device autoloading is deprecated and will be removed. [ 108.007594][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 108.014296][ T6411] ceph: No mds server is up or the cluster is laggy [ 108.034631][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 108.143343][ T5956] usb 3-1: USB disconnect, device number 7 [ 108.210857][ T5956] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 108.457350][ T5822] usb 2-1: USB disconnect, device number 5 [ 108.507245][ T6442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.689321][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.835481][ T6459] FAULT_INJECTION: forcing a failure. [ 109.835481][ T6459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.849084][ T6459] CPU: 0 UID: 0 PID: 6459 Comm: syz.0.137 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 109.849105][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.849115][ T6459] Call Trace: [ 109.849121][ T6459] [ 109.849127][ T6459] dump_stack_lvl+0x16c/0x1f0 [ 109.849156][ T6459] should_fail_ex+0x512/0x640 [ 109.849183][ T6459] _copy_from_user+0x2e/0xd0 [ 109.849209][ T6459] do_sock_getsockopt+0x5f4/0x800 [ 109.849229][ T6459] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 109.849245][ T6459] ? __fget_files+0x204/0x3c0 [ 109.849277][ T6459] __sys_getsockopt+0x12f/0x260 [ 109.849306][ T6459] __x64_sys_getsockopt+0xbd/0x160 [ 109.849328][ T6459] ? do_syscall_64+0x91/0x4c0 [ 109.849343][ T6459] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.849368][ T6459] do_syscall_64+0xcd/0x4c0 [ 109.849385][ T6459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.849402][ T6459] RIP: 0033:0x7fe62cb8e929 [ 109.849415][ T6459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.849431][ T6459] RSP: 002b:00007fe62da9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 109.849448][ T6459] RAX: ffffffffffffffda RBX: 00007fe62cdb6080 RCX: 00007fe62cb8e929 [ 109.849459][ T6459] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 109.849469][ T6459] RBP: 00007fe62da9b090 R08: 0000200000000180 R09: 0000000000000000 [ 109.849479][ T6459] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.849489][ T6459] R13: 0000000000000000 R14: 00007fe62cdb6080 R15: 00007ffe730a4868 [ 109.849512][ T6459] [ 109.850393][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 109.954378][ T6462] IPVS: set_ctl: invalid protocol: 136 172.30.1.1:20003 [ 110.399866][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 110.406500][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.419666][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.457755][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.588580][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.613740][ T6479] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(18) [ 110.620569][ T6479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.637604][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.647722][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.662933][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.679870][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.688200][ T24] usb 2-1: Manufacturer: syz [ 110.697079][ T24] usb 2-1: config 0 descriptor?? [ 110.708343][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.709622][ T6472] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 110.722998][ T6472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.723378][ T6479] vhci_hcd vhci_hcd.0: Device attached [ 111.178238][ T6477] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(22) [ 111.184857][ T6477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.192311][ T5956] vhci_hcd: vhci_device speed not set [ 111.198780][ T6477] vhci_hcd vhci_hcd.0: Device attached [ 111.217935][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.247890][ T6472] vhci_hcd vhci_hcd.0: Device attached [ 111.248250][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.270271][ T5956] usb 39-3: new full-speed USB device number 2 using vhci_hcd [ 111.325783][ T24] rc_core: IR keymap rc-hauppauge not found [ 111.331874][ T24] Registered IR keymap rc-empty [ 111.338430][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.360026][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.391147][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 111.401354][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 111.401366][ T30] audit: type=1400 audit(1749389411.888:321): avc: denied { read write } for pid=6465 comm="syz.2.140" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.421436][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 111.445030][ T30] audit: type=1400 audit(1749389411.888:322): avc: denied { open } for pid=6465 comm="syz.2.140" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 111.476504][ T6446] JFS: charset not found [ 111.486594][ T6472] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(29) [ 111.491258][ T6477] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.493185][ T6472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.517092][ T6472] vhci_hcd vhci_hcd.0: Device attached [ 111.847457][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 111.856666][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 111.927754][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.943943][ T30] audit: type=1400 audit(1749389412.428:323): avc: denied { execute } for pid=6471 comm="syz.3.142" path="/35/cpu.stat" dev="tmpfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.982157][ T6495] vhci_hcd: connection closed [ 111.983158][ T6487] vhci_hcd: connection closed [ 111.983860][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.002846][ T2960] vhci_hcd: stop threads [ 112.017375][ T6480] vhci_hcd: connection reset by peer [ 112.019576][ T2960] vhci_hcd: release socket [ 112.022808][ T6475] vhci_hcd: connection closed [ 112.030695][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.050478][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.061176][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.145'. [ 112.070195][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.145'. [ 112.082455][ T2960] vhci_hcd: disconnect device [ 112.087585][ T2960] vhci_hcd: stop threads [ 112.093631][ T2960] vhci_hcd: release socket [ 112.098137][ T2960] vhci_hcd: disconnect device [ 112.103920][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.180988][ T2960] vhci_hcd: stop threads [ 112.185358][ T2960] vhci_hcd: release socket [ 112.189935][ T2960] vhci_hcd: disconnect device [ 112.198960][ T2960] vhci_hcd: stop threads [ 112.205156][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.232628][ T2960] vhci_hcd: release socket [ 112.240427][ T2960] vhci_hcd: disconnect device [ 112.259886][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.290006][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.310935][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.379108][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.554004][ T6507] mkiss: ax0: crc mode is auto. [ 112.744659][ T30] audit: type=1400 audit(1749389412.898:324): avc: denied { relabelto } for pid=6504 comm="syz.0.146" name="28" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 112.790591][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 113.440133][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 113.500862][ T24] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 113.649839][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 114.049386][ T30] audit: type=1400 audit(1749389414.528:325): avc: denied { remove_name } for pid=5819 comm="syz-executor" name="binderfs" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 114.419075][ T24] usb 2-1: USB disconnect, device number 6 [ 114.689823][ T30] audit: type=1400 audit(1749389414.538:326): avc: denied { rmdir } for pid=5819 comm="syz-executor" name="28" dev="tmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_ex" [ 114.823633][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 114.951948][ T30] audit: type=1400 audit(1749389415.438:327): avc: denied { read write } for pid=6533 comm="syz.4.155" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.021926][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.067460][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.099177][ T30] audit: type=1400 audit(1749389415.448:328): avc: denied { open } for pid=6533 comm="syz.4.155" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.157220][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 115.177394][ T30] audit: type=1400 audit(1749389415.488:329): avc: denied { ioctl } for pid=6533 comm="syz.4.155" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.208134][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.437343][ T6547] trusted_key: encrypted_key: insufficient parameters specified [ 115.452811][ T10] usb 3-1: config 0 descriptor?? [ 116.470300][ T5956] vhci_hcd: vhci_device speed not set [ 116.995824][ T6563] trusted_key: encrypted_key: insufficient parameters specified [ 117.374853][ T5931] usb 3-1: USB disconnect, device number 8 [ 117.503299][ T30] audit: type=1400 audit(1749389417.978:330): avc: denied { append } for pid=6564 comm="syz.3.162" name="v4l-subdev1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.177729][ T6583] vivid-002: kernel_thread() failed [ 119.329968][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 119.514533][ T30] audit: type=1400 audit(1749389419.898:331): avc: denied { create } for pid=6589 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.764899][ T30] audit: type=1400 audit(1749389420.038:332): avc: denied { ioctl } for pid=6589 comm="syz.2.167" path="socket:[10419]" dev="sockfs" ino=10419 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 119.802306][ T6597] syz.2.167: attempt to access beyond end of device [ 119.802306][ T6597] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 119.816300][ T6597] hfs: can't find a HFS filesystem on dev nbd2 [ 119.819664][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 119.825508][ T10] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 119.996850][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 119.997440][ T10] usb 1-1: config 0 has no interface number 0 [ 120.056090][ T10] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=a4.d5 [ 120.065364][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.075115][ T10] usb 1-1: Product: syz [ 120.079436][ T10] usb 1-1: Manufacturer: syz [ 120.089620][ T10] usb 1-1: SerialNumber: syz [ 120.103611][ T10] usb 1-1: config 0 descriptor?? [ 120.117607][ T10] hub 1-1:0.10: bad descriptor, ignoring hub [ 120.124037][ T10] hub 1-1:0.10: probe with driver hub failed with error -5 [ 120.146326][ T10] kvaser_usb 1-1:0.10: error -ENODEV: Cannot get usb endpoint(s) [ 120.202069][ T6602] netlink: 'syz.4.169': attribute type 29 has an invalid length. [ 120.223630][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 120.251354][ T30] audit: type=1400 audit(1749389420.748:333): avc: denied { setopt } for pid=6601 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.413893][ T6607] ubi: mtd0 is already attached to ubi31 [ 122.195665][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.531404][ T5931] usb 1-1: USB disconnect, device number 12 [ 122.651323][ T114] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.681014][ T6626] mkiss: ax0: crc mode is auto. [ 123.097773][ T6615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.293238][ T114] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.299887][ T30] audit: type=1400 audit(1749389423.778:334): avc: denied { kexec_image_load } for pid=6627 comm="syz.2.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 123.308952][ T114] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.429884][ T6629] loop6: detected capacity change from 0 to 524287999 [ 123.449864][ T30] audit: type=1400 audit(1749389423.918:335): avc: denied { read } for pid=5487 comm="dhcpcd" name="n105" dev="tmpfs" ino=2736 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.924230][ T30] audit: type=1400 audit(1749389423.918:336): avc: denied { open } for pid=5487 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=2736 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.949643][ T30] audit: type=1400 audit(1749389423.918:337): avc: denied { getattr } for pid=5487 comm="dhcpcd" path="/run/udev/data/n105" dev="tmpfs" ino=2736 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.007211][ T114] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 124.017559][ T114] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.034333][ T114] usb 2-1: config 0 descriptor?? [ 124.959998][ T54] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.074006][ T6651] netlink: 1 bytes leftover after parsing attributes in process `syz.2.182'. [ 125.183438][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 125.194611][ T54] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 125.204353][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.212402][ T54] usb 1-1: Product: syz [ 125.216631][ T54] usb 1-1: Manufacturer: syz [ 125.226753][ T54] usb 1-1: SerialNumber: syz [ 125.233834][ T54] usb 1-1: config 0 descriptor?? [ 125.254733][ T54] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 125.275816][ T6653] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.318149][ T114] usb 2-1: USB disconnect, device number 7 [ 125.325125][ T6653] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 125.509476][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.180'. [ 126.005820][ T6660] input: syz0 as /devices/virtual/input/input18 [ 126.013930][ T54] gspca_sunplus: reg_w_riv err -71 [ 126.019221][ T54] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 126.028768][ T54] usb 1-1: USB disconnect, device number 13 [ 126.580985][ T6669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.654687][ T6669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.955200][ T6672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.122442][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.595057][ T6680] mkiss: ax0: crc mode is auto. [ 128.611063][ T30] audit: type=1400 audit(1749389429.018:338): avc: denied { read write } for pid=6683 comm="syz.0.192" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.820416][ T30] audit: type=1400 audit(1749389429.018:339): avc: denied { open } for pid=6683 comm="syz.0.192" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.890293][ T54] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 128.972675][ T6690] input: syz0 as /devices/virtual/input/input19 [ 129.010166][ T30] audit: type=1400 audit(1749389429.138:340): avc: denied { read } for pid=6686 comm="syz.2.191" name="sg0" dev="devtmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.291392][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.312969][ T6694] input: syz0 as /devices/virtual/input/input20 [ 129.316891][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.343989][ T54] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.356492][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.365621][ T54] usb 3-1: SerialNumber: syz [ 129.575438][ T30] audit: type=1400 audit(1749389430.068:341): avc: denied { create } for pid=6700 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 129.636985][ T6687] netlink: 'syz.2.191': attribute type 4 has an invalid length. [ 129.651515][ T30] audit: type=1400 audit(1749389430.098:342): avc: denied { bind } for pid=6700 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.771610][ T54] usb 3-1: 0:2 : does not exist [ 129.824386][ T54] usb 3-1: USB disconnect, device number 9 [ 129.864957][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.508018][ T6717] input: syz0 as /devices/virtual/input/input21 [ 131.740389][ T6713] mkiss: ax0: crc mode is auto. [ 132.799869][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806236][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.960945][ T6728] mkiss: ax0: crc mode is auto. [ 134.953052][ T6743] input: syz0 as /devices/virtual/input/input24 [ 136.114729][ T30] audit: type=1326 audit(1749389436.608:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6737 comm="syz.0.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe62cb8e929 code=0x7fc00000 [ 136.210512][ T6758] input: syz0 as /devices/virtual/input/input25 [ 136.547060][ T30] audit: type=1400 audit(1749389437.038:344): avc: denied { create } for pid=6760 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.754376][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.215'. [ 136.784484][ T6767] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 136.800251][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 137.578972][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.217'. [ 137.588041][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 137.632205][ T6777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.217'. [ 137.641196][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'. [ 138.175446][ T6778] mkiss: ax0: crc mode is auto. [ 138.555266][ T30] audit: type=1400 audit(1749389439.028:345): avc: denied { ioctl } for pid=6782 comm="syz.1.220" path="socket:[10053]" dev="sockfs" ino=10053 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.708244][ T30] audit: type=1400 audit(1749389439.108:346): avc: denied { ioctl } for pid=6768 comm="syz.4.217" path="socket:[10057]" dev="sockfs" ino=10057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.783470][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 138.804420][ T30] audit: type=1400 audit(1749389439.298:347): avc: denied { bind } for pid=6788 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.830681][ T30] audit: type=1400 audit(1749389439.328:348): avc: denied { listen } for pid=6788 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.854709][ T30] audit: type=1400 audit(1749389439.328:349): avc: denied { accept } for pid=6788 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.875292][ T6787] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 138.889962][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 138.946096][ T30] audit: type=1400 audit(1749389439.328:350): avc: denied { read } for pid=6788 comm="syz.0.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 139.200428][ T54] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.339978][ T6798] input: syz0 as /devices/virtual/input/input26 [ 139.362234][ T54] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.407051][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.985261][ T54] usb 1-1: config 0 descriptor?? [ 140.038386][ T54] cp210x 1-1:0.0: cp210x converter detected [ 140.465820][ T54] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 140.753497][ T54] usb 1-1: cp210x converter now attached to ttyUSB0 [ 141.406123][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.471830][ T6814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.441877][ T6827] Falling back ldisc for ttyS3. [ 142.471396][ T6816] team0 (unregistering): Port device team_slave_0 removed [ 142.490805][ T6816] team0 (unregistering): Port device team_slave_1 removed [ 142.520595][ T6833] syz.3.233: attempt to access beyond end of device [ 142.520595][ T6833] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 142.551015][ T54] usb 1-1: USB disconnect, device number 14 [ 142.587194][ T30] audit: type=1400 audit(1749389443.068:351): avc: denied { setopt } for pid=6832 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 142.611627][ T6833] affs: No valid root block on device nullb0 [ 142.639097][ T54] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.648702][ T30] audit: type=1400 audit(1749389443.078:352): avc: denied { read } for pid=6832 comm="syz.3.233" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.694866][ T54] cp210x 1-1:0.0: device disconnected [ 142.702643][ T30] audit: type=1400 audit(1749389443.078:353): avc: denied { open } for pid=6832 comm="syz.3.233" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.792575][ T30] audit: type=1400 audit(1749389443.078:354): avc: denied { ioctl } for pid=6832 comm="syz.3.233" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 142.976880][ T30] audit: type=1400 audit(1749389443.468:355): avc: denied { create } for pid=6836 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.042850][ T6839] trusted_key: encrypted_key: insufficient parameters specified [ 143.099999][ T5931] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.241427][ T54] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.358774][ T5931] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 143.875574][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.884806][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.895926][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.903605][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.917670][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 143.929377][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 143.940588][ T54] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.949710][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.995117][ T54] usb 3-1: config 0 descriptor?? [ 144.045222][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.066941][ T54] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 144.139111][ T30] audit: type=1400 audit(1749389444.578:356): avc: denied { sys_module } for pid=6841 comm="syz.0.237" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 144.213321][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.352581][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.418979][ T6853] input: syz0 as /devices/virtual/input/input27 [ 144.640606][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.652658][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.669093][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.713249][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.729625][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.740045][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 144.755989][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.779572][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 144.816586][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.044803][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.355079][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.364670][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.375887][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.385944][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 145.396014][ T5931] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 145.407296][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.420037][ T5931] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 145.454153][ T5931] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 145.493677][ T5931] usb 2-1: Product: syz [ 145.538957][ T5931] usb 2-1: Manufacturer: syz [ 145.568108][ T5931] usb 2-1: SerialNumber: syz [ 145.632281][ T5931] usb 2-1: config 0 descriptor?? [ 146.050878][ T5931] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 146.276969][ T5875] usb 3-1: USB disconnect, device number 10 [ 146.622500][ T6877] mkiss: ax0: crc mode is auto. [ 147.131544][ T5931] usb 2-1: USB disconnect, device number 8 [ 147.188771][ T5931] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 147.490685][ T6885] input: syz0 as /devices/virtual/input/input30 [ 147.635736][ T6891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.882597][ T5875] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 147.974823][ T6893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.217819][ T6880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.234820][ T6880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.276915][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.290628][ T5875] usb 1-1: no configurations [ 148.321676][ T5875] usb 1-1: can't read configurations, error -22 [ 148.364146][ T30] audit: type=1400 audit(1749389448.858:357): avc: denied { create } for pid=6897 comm="syz.1.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 148.408628][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 148.458288][ T30] audit: type=1400 audit(1749389448.918:358): avc: denied { write } for pid=6897 comm="syz.1.250" name="001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 148.480893][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.609827][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.966686][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.981388][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.995444][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 149.005274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.095583][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 149.104444][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 149.539875][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.697287][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 149.810399][ T9] usb 4-1: config 0 descriptor?? [ 149.839897][ T5931] usb 5-1: device descriptor read/64, error -32 [ 149.842528][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 149.947301][ T30] audit: type=1400 audit(1749389450.438:359): avc: denied { search } for pid=6923 comm="syz.2.258" name="/" dev="configfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 150.147017][ T5931] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.149255][ T6929] input: syz0 as /devices/virtual/input/input31 [ 150.531413][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.561714][ T5931] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.581038][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.607620][ T5931] usb 5-1: config 0 descriptor?? [ 150.623396][ T5931] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 151.678820][ T9] usb 4-1: USB disconnect, device number 5 [ 152.094510][ T6950] input: syz0 as /devices/virtual/input/input33 [ 152.353379][ T30] audit: type=1400 audit(1749389452.848:360): avc: denied { write } for pid=6953 comm="syz.1.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 152.417188][ T30] audit: type=1400 audit(1749389452.878:361): avc: denied { read write } for pid=6955 comm="syz.3.266" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.449313][ T30] audit: type=1400 audit(1749389452.878:362): avc: denied { open } for pid=6955 comm="syz.3.266" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.507759][ T30] audit: type=1400 audit(1749389452.898:363): avc: denied { map } for pid=6953 comm="syz.1.265" path="socket:[11378]" dev="sockfs" ino=11378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.553884][ T6961] netlink: 'syz.2.268': attribute type 10 has an invalid length. [ 152.617828][ T6961] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 152.681809][ T30] audit: type=1400 audit(1749389452.898:364): avc: denied { read } for pid=6953 comm="syz.1.265" path="socket:[11378]" dev="sockfs" ino=11378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 152.683610][ T9] usb 5-1: USB disconnect, device number 8 [ 152.706325][ T30] audit: type=1400 audit(1749389453.048:365): avc: denied { create } for pid=6960 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.730603][ T30] audit: type=1400 audit(1749389453.048:366): avc: denied { create } for pid=6960 comm="syz.2.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.087937][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.290219][ T5931] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.500402][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.596598][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 153.596614][ T30] audit: type=1400 audit(1749389454.088:369): avc: denied { getopt } for pid=6985 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.625195][ T30] audit: type=1400 audit(1749389454.098:370): avc: denied { listen } for pid=6985 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.645443][ T30] audit: type=1400 audit(1749389454.098:371): avc: denied { accept } for pid=6985 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.667600][ T6988] netlink: 'syz.3.274': attribute type 1 has an invalid length. [ 153.675370][ T30] audit: type=1400 audit(1749389454.158:372): avc: denied { connect } for pid=6985 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 153.695221][ T6988] netlink: 208 bytes leftover after parsing attributes in process `syz.3.274'. [ 153.732344][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 153.750539][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.762043][ T5931] usb 2-1: config 0 descriptor?? [ 153.765442][ T6990] syz.3.274 uses obsolete (PF_INET,SOCK_PACKET) [ 153.840551][ T5931] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 153.946113][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 154.132609][ T6993] hsr_slave_1 (unregistering): left promiscuous mode [ 155.239258][ T5931] usb 2-1: USB disconnect, device number 9 [ 155.809707][ T7009] netlink: 'syz.2.280': attribute type 27 has an invalid length. [ 155.817763][ T30] audit: type=1326 audit(1749389456.298:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6999 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd478e929 code=0x7fc00000 [ 155.936368][ T7015] netlink: 'syz.1.282': attribute type 27 has an invalid length. [ 156.114107][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.121690][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.211756][ T7023] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 157.374577][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.390899][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.683160][ T7015] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.701424][ T7015] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.734026][ T7015] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.743883][ T7015] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.825202][ T7036] input: syz0 as /devices/virtual/input/input34 [ 158.640265][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.823465][ T30] audit: type=1400 audit(1749389459.158:374): avc: denied { read } for pid=7053 comm="syz.0.295" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.861020][ T5941] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 158.905425][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 159.192757][ T7058] netlink: 10 bytes leftover after parsing attributes in process `syz.0.295'. [ 159.222033][ T5818] Bluetooth: hci1: Malformed LE Event: 0x0d [ 159.488083][ T30] audit: type=1400 audit(1749389459.158:375): avc: denied { open } for pid=7053 comm="syz.0.295" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.513308][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.546615][ T9] usb 5-1: config 0 descriptor?? [ 159.564633][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.565773][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 159.585660][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.599413][ T5941] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 159.608785][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.616891][ T5941] usb 4-1: SerialNumber: syz [ 159.645374][ T7061] netlink: 'syz.2.296': attribute type 27 has an invalid length. [ 159.829662][ T7043] netlink: 'syz.3.291': attribute type 4 has an invalid length. [ 159.850005][ T974] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 159.867995][ T5941] usb 4-1: 0:2 : does not exist [ 159.873268][ T5941] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 159.888933][ T5941] usb 4-1: USB disconnect, device number 6 [ 159.916193][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.021030][ T974] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 160.029221][ T974] usb 2-1: config 0 has no interface number 0 [ 160.037413][ T974] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=a4.d5 [ 160.046558][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.054588][ T974] usb 2-1: Product: syz [ 160.058784][ T974] usb 2-1: Manufacturer: syz [ 160.063428][ T974] usb 2-1: SerialNumber: syz [ 160.070029][ T974] usb 2-1: config 0 descriptor?? [ 160.076823][ T974] hub 2-1:0.10: bad descriptor, ignoring hub [ 160.083057][ T974] hub 2-1:0.10: probe with driver hub failed with error -5 [ 160.090646][ T974] kvaser_usb 2-1:0.10: error -ENODEV: Cannot get usb endpoint(s) [ 160.356904][ T7069] ubi: mtd0 is already attached to ubi31 [ 160.580748][ T974] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 160.620627][ T9] usb 5-1: USB disconnect, device number 9 [ 160.781570][ T974] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 160.791055][ T974] usb 3-1: config 0 has no interface number 0 [ 160.799480][ T974] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=a4.d5 [ 160.809136][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.817740][ T974] usb 3-1: Product: syz [ 160.822286][ T974] usb 3-1: Manufacturer: syz [ 160.826979][ T974] usb 3-1: SerialNumber: syz [ 160.836906][ T974] usb 3-1: config 0 descriptor?? [ 160.897243][ T7075] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 161.724453][ T974] hub 3-1:0.10: bad descriptor, ignoring hub [ 161.731558][ T974] hub 3-1:0.10: probe with driver hub failed with error -5 [ 161.739081][ T974] kvaser_usb 3-1:0.10: error -ENODEV: Cannot get usb endpoint(s) [ 162.935025][ T5956] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.958701][ T7093] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 162.980178][ T9] usb 2-1: USB disconnect, device number 10 [ 163.285850][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 163.312271][ T5956] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.325018][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.334109][ T5956] usb 4-1: Product: syz [ 163.338373][ T5956] usb 4-1: Manufacturer: syz [ 163.345226][ T5956] usb 4-1: SerialNumber: syz [ 163.356547][ T5956] r8152-cfgselector 4-1: Unknown version 0x0000 [ 163.367411][ T5956] r8152-cfgselector 4-1: config 0 descriptor?? [ 163.620774][ T5941] usb 3-1: USB disconnect, device number 11 [ 163.644768][ T7102] netlink: 'syz.2.309': attribute type 27 has an invalid length. [ 164.018369][ T7111] netlink: 'syz.4.311': attribute type 10 has an invalid length. [ 164.975051][ T7123] netlink: 10 bytes leftover after parsing attributes in process `syz.0.313'. [ 164.992624][ T5827] Bluetooth: hci1: Malformed LE Event: 0x0d [ 165.463172][ T7126] input: syz0 as /devices/virtual/input/input35 [ 165.538418][ T7129] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 167.065794][ T30] audit: type=1400 audit(1749389467.118:376): avc: denied { bind } for pid=7132 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.105837][ T30] audit: type=1400 audit(1749389467.128:377): avc: denied { write } for pid=7132 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.129394][ T30] audit: type=1400 audit(1749389467.238:378): avc: denied { write } for pid=7132 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.917081][ T30] audit: type=1400 audit(1749389468.388:379): avc: denied { setopt } for pid=7145 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 168.032625][ T7111] infiniband syz2: set down [ 168.041732][ T5931] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 168.068499][ T7111] infiniband syz2: added team_slave_0 [ 168.144216][ T7111] syz2: rxe_create_cq: returned err = -12 [ 168.184446][ T7111] infiniband syz2: Couldn't create ib_mad CQ [ 168.216423][ T7111] infiniband syz2: Couldn't open port 1 [ 168.658225][ T7111] RDS/IB: syz2: added [ 168.662778][ T7111] smc: adding ib device syz2 with port count 1 [ 168.669106][ T7111] smc: ib device syz2 port 1 has pnetid [ 168.882615][ T30] audit: type=1400 audit(1749389469.378:380): avc: denied { connect } for pid=7159 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.178762][ T30] audit: type=1400 audit(1749389469.378:381): avc: denied { getopt } for pid=7159 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.362054][ C0] Illegal XDP return value 16128 on prog (id 147) dev lo, expect packet loss! [ 169.439110][ T7162] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.517671][ T7167] netlink: 'syz.1.325': attribute type 27 has an invalid length. [ 170.539648][ T7183] ======================================================= [ 170.539648][ T7183] WARNING: The mand mount option has been deprecated and [ 170.539648][ T7183] and is ignored by this kernel. Remove the mand [ 170.539648][ T7183] option from the mount to silence this warning. [ 170.539648][ T7183] ======================================================= [ 170.574532][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.740140][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 171.754440][ T7198] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 171.774323][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.334'. [ 172.223678][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 172.368213][ T30] audit: type=1326 audit(1749389472.858:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7191 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd478e929 code=0x7fc00000 [ 172.590351][ T5956] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 172.672956][ T7214] netlink: 'syz.3.338': attribute type 11 has an invalid length. [ 172.907800][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 172.997727][ T5956] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 173.039333][ T5956] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 173.086497][ T5956] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 173.112851][ T5956] usb 1-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 173.128979][ T7216] netlink: 'syz.1.339': attribute type 27 has an invalid length. [ 173.155571][ T5956] usb 1-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 173.200656][ T5956] usb 1-1: config 1 interface 2 has no altsetting 0 [ 173.221649][ T5956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.237845][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.256515][ T5956] usb 1-1: Product: syz [ 173.266622][ T5956] usb 1-1: Manufacturer: syz [ 173.278503][ T5956] usb 1-1: SerialNumber: syz [ 173.680188][ T5956] usb 1-1: USB disconnect, device number 17 [ 173.718299][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.936067][ T7246] input: syz0 as /devices/virtual/input/input38 [ 178.374204][ T7258] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 178.387227][ T7258] batman_adv: batadv0: Adding interface: macvtap0 [ 178.395483][ T7258] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.421238][ T7258] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 178.458668][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 178.533131][ T7253] mkiss: ax0: crc mode is auto. [ 178.769469][ T30] audit: type=1400 audit(1749389478.968:383): avc: denied { associate } for pid=7250 comm="syz.3.348" name="77" dev="tmpfs" ino=435 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_ex" [ 178.925914][ T30] audit: type=1400 audit(1749389479.418:384): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 179.573555][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 180.776411][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.112366][ T5956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.289849][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 181.302720][ T5956] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 181.313203][ T5956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 181.328229][ T5956] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.341152][ T30] audit: type=1400 audit(1749389481.838:385): avc: denied { ioctl } for pid=7283 comm="syz.4.358" path="socket:[11969]" dev="sockfs" ino=11969 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 181.453610][ T5956] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 181.465003][ T5956] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 181.519786][ T5956] usb 2-1: config 1 interface 2 has no altsetting 0 [ 181.549422][ T5956] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.572338][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.604322][ T7286] siw: device registration error -23 [ 181.727656][ T30] audit: type=1400 audit(1749389482.088:386): avc: denied { connect } for pid=7283 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.962792][ T7287] smc: removing ib device syz2 [ 182.414740][ T7287] ------------[ cut here ]------------ [ 182.420219][ T7287] WARNING: CPU: 0 PID: 7287 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 182.430903][ T7287] Modules linked in: [ 182.434891][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.4.358 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 182.446422][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.456493][ T7287] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 182.461960][ T7287] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 55 5a 0b f9 e8 50 5a 0b f9 90 <0f> 0b 90 5b e9 46 5a 0b f9 e8 a1 19 72 f9 eb da 66 66 2e 0f 1f 84 [ 182.481744][ T7287] RSP: 0018:ffffc9000ffaf1f0 EFLAGS: 00010246 [ 182.487787][ T7287] RAX: 0000000000080000 RBX: ffff88802a065320 RCX: ffffc900105ca000 [ 182.495759][ T7287] RDX: 0000000000080000 RSI: ffffffff88b0c260 RDI: ffff88802a0653a0 [ 182.503734][ T7287] RBP: ffffffff88af2710 R08: 0000000000000005 R09: 0000000000000001 [ 182.511699][ T7287] R10: 0000000000000002 R11: 0000000000000001 R12: ffff88802a064668 [ 182.519646][ T7287] R13: ffff88802a063fe0 R14: ffff88802a063fe0 R15: ffff88802a065080 [ 182.527619][ T7287] FS: 00007f49600156c0(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 182.536539][ T7287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.543112][ T7287] CR2: 00002000000002c0 CR3: 000000002afd3000 CR4: 00000000003526f0 [ 182.551107][ T7287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.559055][ T7287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.567013][ T7287] Call Trace: [ 182.570292][ T7287] [ 182.573201][ T7287] rxe_dealloc+0x25/0xc0 [ 182.577425][ T7287] ib_dealloc_device+0x46/0x230 [ 182.582272][ T7287] __ib_unregister_device+0x396/0x480 [ 182.587620][ T7287] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 182.593514][ T7287] ib_unregister_device_and_put+0x5a/0x80 [ 182.599217][ T7287] nldev_dellink+0x21f/0x320 [ 182.603807][ T7287] ? __pfx_nldev_dellink+0x10/0x10 [ 182.608930][ T7287] ? cap_capable+0xb3/0x250 [ 182.613432][ T7287] ? bpf_lsm_capable+0x9/0x10 [ 182.618088][ T7287] ? security_capable+0x7e/0x260 [ 182.623023][ T7287] ? ns_capable+0xd7/0x110 [ 182.627416][ T7287] ? __pfx_nldev_dellink+0x10/0x10 [ 182.632531][ T7287] rdma_nl_rcv_msg+0x387/0x6e0 [ 182.637279][ T7287] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 182.642561][ T7287] ? __lock_acquire+0x622/0x1c90 [ 182.647493][ T7287] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 182.653903][ T7287] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 182.660846][ T7287] ? netlink_deliver_tap+0x1ae/0xd30 [ 182.666121][ T7287] ? is_vmalloc_addr+0x86/0xa0 [ 182.670887][ T7287] netlink_unicast+0x53d/0x7f0 [ 182.675632][ T7287] ? __pfx_netlink_unicast+0x10/0x10 [ 182.680911][ T7287] netlink_sendmsg+0x8d1/0xdd0 [ 182.685654][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.690932][ T7287] ____sys_sendmsg+0xa98/0xc70 [ 182.695676][ T7287] ? copy_msghdr_from_user+0x10a/0x160 [ 182.701137][ T7287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.706401][ T7287] ? page_table_check_set+0x631/0x750 [ 182.711770][ T7287] ___sys_sendmsg+0x134/0x1d0 [ 182.716431][ T7287] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.721634][ T7287] ? __lock_acquire+0x622/0x1c90 [ 182.726569][ T7287] __sys_sendmsg+0x16d/0x220 [ 182.731173][ T7287] ? __pfx___sys_sendmsg+0x10/0x10 [ 182.736266][ T7287] ? find_held_lock+0x2b/0x80 [ 182.740937][ T7287] ? do_user_addr_fault+0x843/0x1370 [ 182.746215][ T7287] do_syscall_64+0xcd/0x4c0 [ 182.750714][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.756583][ T7287] RIP: 0033:0x7f495f18e929 [ 182.760997][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.780593][ T7287] RSP: 002b:00007f4960015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.788980][ T7287] RAX: ffffffffffffffda RBX: 00007f495f3b6240 RCX: 00007f495f18e929 [ 182.796944][ T7287] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 182.804905][ T7287] RBP: 00007f495f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 182.812866][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.820831][ T7287] R13: 0000000000000001 R14: 00007f495f3b6240 R15: 00007ffe91732d58 [ 182.828784][ T7287] [ 182.831810][ T7287] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.839065][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.4.358 Not tainted 6.15.0-syzkaller-13743-g8630c59e9936 #0 PREEMPT(full) [ 182.850579][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.860610][ T7287] Call Trace: [ 182.863870][ T7287] [ 182.866776][ T7287] dump_stack_lvl+0x3d/0x1f0 [ 182.871350][ T7287] panic+0x71c/0x800 [ 182.875227][ T7287] ? __pfx_panic+0x10/0x10 [ 182.879624][ T7287] ? show_trace_log_lvl+0x29b/0x3e0 [ 182.884808][ T7287] ? rxe_pool_cleanup+0x41/0x60 [ 182.889639][ T7287] check_panic_on_warn+0xab/0xb0 [ 182.894561][ T7287] __warn+0xf6/0x3c0 [ 182.898441][ T7287] ? rxe_pool_cleanup+0x41/0x60 [ 182.903273][ T7287] report_bug+0x3c3/0x580 [ 182.907582][ T7287] ? rxe_pool_cleanup+0x41/0x60 [ 182.912413][ T7287] handle_bug+0x184/0x210 [ 182.916731][ T7287] exc_invalid_op+0x17/0x50 [ 182.921244][ T7287] asm_exc_invalid_op+0x1a/0x20 [ 182.926080][ T7287] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 182.931545][ T7287] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 55 5a 0b f9 e8 50 5a 0b f9 90 <0f> 0b 90 5b e9 46 5a 0b f9 e8 a1 19 72 f9 eb da 66 66 2e 0f 1f 84 [ 182.951158][ T7287] RSP: 0018:ffffc9000ffaf1f0 EFLAGS: 00010246 [ 182.957205][ T7287] RAX: 0000000000080000 RBX: ffff88802a065320 RCX: ffffc900105ca000 [ 182.965152][ T7287] RDX: 0000000000080000 RSI: ffffffff88b0c260 RDI: ffff88802a0653a0 [ 182.973100][ T7287] RBP: ffffffff88af2710 R08: 0000000000000005 R09: 0000000000000001 [ 182.981046][ T7287] R10: 0000000000000002 R11: 0000000000000001 R12: ffff88802a064668 [ 182.988991][ T7287] R13: ffff88802a063fe0 R14: ffff88802a063fe0 R15: ffff88802a065080 [ 182.996941][ T7287] ? __pfx_rxe_dealloc+0x10/0x10 [ 183.001863][ T7287] ? rxe_pool_cleanup+0x40/0x60 [ 183.006698][ T7287] rxe_dealloc+0x25/0xc0 [ 183.010931][ T7287] ib_dealloc_device+0x46/0x230 [ 183.015757][ T7287] __ib_unregister_device+0x396/0x480 [ 183.021118][ T7287] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 183.026992][ T7287] ib_unregister_device_and_put+0x5a/0x80 [ 183.032686][ T7287] nldev_dellink+0x21f/0x320 [ 183.037257][ T7287] ? __pfx_nldev_dellink+0x10/0x10 [ 183.042384][ T7287] ? cap_capable+0xb3/0x250 [ 183.046880][ T7287] ? bpf_lsm_capable+0x9/0x10 [ 183.051538][ T7287] ? security_capable+0x7e/0x260 [ 183.056453][ T7287] ? ns_capable+0xd7/0x110 [ 183.060846][ T7287] ? __pfx_nldev_dellink+0x10/0x10 [ 183.065937][ T7287] rdma_nl_rcv_msg+0x387/0x6e0 [ 183.070681][ T7287] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 183.075947][ T7287] ? __lock_acquire+0x622/0x1c90 [ 183.080875][ T7287] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 183.087270][ T7287] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 183.094192][ T7287] ? netlink_deliver_tap+0x1ae/0xd30 [ 183.099453][ T7287] ? is_vmalloc_addr+0x86/0xa0 [ 183.104197][ T7287] netlink_unicast+0x53d/0x7f0 [ 183.108948][ T7287] ? __pfx_netlink_unicast+0x10/0x10 [ 183.114212][ T7287] netlink_sendmsg+0x8d1/0xdd0 [ 183.118969][ T7287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.124237][ T7287] ____sys_sendmsg+0xa98/0xc70 [ 183.128979][ T7287] ? copy_msghdr_from_user+0x10a/0x160 [ 183.134418][ T7287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.139681][ T7287] ? page_table_check_set+0x631/0x750 [ 183.145038][ T7287] ___sys_sendmsg+0x134/0x1d0 [ 183.149700][ T7287] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.154880][ T7287] ? __lock_acquire+0x622/0x1c90 [ 183.159816][ T7287] __sys_sendmsg+0x16d/0x220 [ 183.164388][ T7287] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.169488][ T7287] ? find_held_lock+0x2b/0x80 [ 183.174145][ T7287] ? do_user_addr_fault+0x843/0x1370 [ 183.179413][ T7287] do_syscall_64+0xcd/0x4c0 [ 183.183892][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.189766][ T7287] RIP: 0033:0x7f495f18e929 [ 183.194184][ T7287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.213769][ T7287] RSP: 002b:00007f4960015038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.222159][ T7287] RAX: ffffffffffffffda RBX: 00007f495f3b6240 RCX: 00007f495f18e929 [ 183.230105][ T7287] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 183.238049][ T7287] RBP: 00007f495f210b39 R08: 0000000000000000 R09: 0000000000000000 [ 183.245995][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.253941][ T7287] R13: 0000000000000001 R14: 00007f495f3b6240 R15: 00007ffe91732d58 [ 183.261894][ T7287] [ 183.265076][ T7287] Kernel Offset: disabled [ 183.269382][ T7287] Rebooting in 86400 seconds..