last executing test programs: 6m6.252595414s ago: executing program 4 (id=606): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0xf0003, 0x0, [0xfffffffffffffffc, 0x6, 0x200000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x10000, 0x1]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000180), 0x0, 0x0, 0x1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) chdir(&(0x7f0000000140)='./bus\x00') ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x5, 0x6}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6m2.078468114s ago: executing program 4 (id=610): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x700, 0x0, 0x0) 6m0.874913733s ago: executing program 4 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xdbca8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x4c}}, 0x0) 5m59.856325133s ago: executing program 4 (id=617): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbaebbbbaaaaaaaaaa1786dd605e15b100403a00fe800000000000000000000000000000ff020000000000000000000000000001040090780000000060f9695900008800fc020000000000000000000000000000fe88000000000000000000000000000100000100000000006c00000000000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000200)=""/114, &(0x7f0000000040)=0x72) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x3, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002fc0)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x64008040}, 0x6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "358711fc7606ff000001536369dc00", "00002691", "50cc5414d707eda9"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102379, 0x18feb) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x800000, 0x0) fsopen(0x0, 0x1) 5m58.305873881s ago: executing program 4 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="1d", 0x1, 0xfffffffffffffffe) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000740)="69bf05d40ff7e03db3ddca537c6c5612321b25d32064e9ed643d462211406432e87c4d40383939ab8276bfc0294ba021d1ccf9b6b32d1b6c9e8c9737ca2d08305301693ef20a414ca24bed3736d182271d197fc2146a9f55070f3f31155b9081ecbd0fcc0296c88eac143394a776955e8a075194717757c9e085976cac66fd4c5bc83183df2db8205863d7f803e302420e7fc5315861803024f921932a49a4283f6a7d8ab2cbd629e984582467fd6ca63598d554677517903644dc2ef01f8dec", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000280)={r7, r8, r8}, &(0x7f00000002c0)=""/46, 0x2e, &(0x7f0000000380)={&(0x7f0000000300)={'sha1-avx\x00'}}) 5m54.996101111s ago: executing program 4 (id=625): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000206030000000000000002000000000005000100070000000900020073797a310000000011000300686173683a69702c706f727400000000050005000a00000005000400010000000c0007800800124004"], 0x58}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) syz_io_uring_setup(0x80007640, &(0x7f0000000100)={0x0, 0x8301, 0x10, 0x3, 0x24b}, &(0x7f0000000040), &(0x7f00000000c0)) 5m39.616451193s ago: executing program 32 (id=625): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000206030000000000000002000000000005000100070000000900020073797a310000000011000300686173683a69702c706f727400000000050005000a00000005000400010000000c0007800800124004"], 0x58}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) syz_io_uring_setup(0x80007640, &(0x7f0000000100)={0x0, 0x8301, 0x10, 0x3, 0x24b}, &(0x7f0000000040), &(0x7f00000000c0)) 4m42.821890635s ago: executing program 3 (id=694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="820cd62586dbd98fdaab96fce5054f8974caa3a094955d00d6"], 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x7f, 0x8, 0x10, @remote, @mcast2, 0x20, 0x0, 0x5, 0x800006}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400), 0x4000) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x2008800) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x40010122, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(r4, 0x0, 0x0) 4m39.059895654s ago: executing program 3 (id=698): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 4m37.525974705s ago: executing program 3 (id=702): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d559", 0x79}, {&(0x7f0000000200)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="acc841985992b795fc024b740d97018a16163bb0fb2bb293e68702bb40b6ba70", 0x20}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {0x0}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4m36.900470815s ago: executing program 3 (id=705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r3], 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/106) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @random="cc5b77f14fdc", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4m36.165689009s ago: executing program 3 (id=709): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000001940)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7ff, @empty, 0x7}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000480)="b6aa7087b8ef7206dbdfe456c641eb5836bb4b931cf5b44967b59ffa8c3f76a7986dc2835264ead3922bc7318d2e3fec6450719e577ca2035c9c50150a457c7726b02770df568b44d523a989511b86599da3a1ac1040679a9c7d47144ec2d1a7fe9ef9b2fa97a8ab0f24c1d93245c843daa165", 0x73}, {&(0x7f0000000500)="7dc2d00543204e65c18406cb0418650408ec8c84d1ea27e44ac462862d4599333b8b5c9d465abe737502f0e832d7c71193fef611502b3f0a221856a94d9c9f7e95c692f058ed055471043b77e4f8aaf71763515febf984398e438b5b873fac8930178b3389f0f7eecd21141490bb14ac60bffebb1a806ab2dc14d43372665f4e4116c7210aeb0bcf0bac9fb11c0db3a5256be79c634295312579336aa8a3d8a852762d82a440524a32e2fb979083", 0xae}, {&(0x7f0000000600)="96f477056851dd53411173b19f94681e7cdf9fd1de4a93dfbe6cb731b5bc330398b63a33a472e1443150476f5f62459a6ff32d9fd0332c11b6d1972a0291245576e2dc965bb5d1705a4813f5dd0dfa0e64d2aa84c79003d213e9c557c6c267578d6d47311c7c4bd24563afcfc58e1fe6e39839a47f64f742624d284057443223188d1a1f2679e8149006679e0080ad0e2653c07c6fde08d05ac5f04c8e33d38037225f4b5dd1928fec6c87001068a70ccefaa9f713e8e84eae7deb9343738c1ab2448e7a266a6c487681f2ab63ec308b6b843b69ee29d7ead09226ddad4cc831e579d3f6910e5fbab613", 0xea}, {&(0x7f0000000700)="da1cd78f964eba9b54e71de460b50a359b433e1ef67635966d68a1db53d929ef7a99a64289223e1883963375547a96145aca04fb80ac560fb277c3dc6c9b11fe1da58c39b270ad0ea79454fbdbc0ce284ed44b764ed88466121f8448711c2b46f8466dbd2c81d6239a2b7909c80a964842f8cea09099db11f6cfef36645a64af43646ab32abd5d3b61f8c3f8f58a20af1c1a63bb0641c3f59beb51df06eed45197abcdc095d42f6ee94a8f122f0019999729591d4b159aafb4a64caafb2b4e813cb096513c668099c3931696b7", 0xcd}, {&(0x7f0000000800)="1470949852cc941ff733adb134aa302d77ae1777508ae83899df6e385fb3ca73757f2f817cd567a9f84cef407ae0c37c2be28ec3d6d1c0fce58063f62df86627c5f28028ef81473ed4e32aa940e7f4b6bfcb5ac9517f662d853a89b6f0e4943d9cdb58a4fda4", 0x66}], 0x5}}, {{&(0x7f0000000280)={0xa, 0x4e24, 0x2, @local, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000900)="1074d516b3433fcc0d87668463a6d1a04a78f8f318d7b044017fdf029ff2bfe2dd623431e92800ed6d8a7c7aaa2bb16175ad3f617725a4d68e5cee951020e246fc21ee", 0x43}, {&(0x7f000001b700)="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", 0x1000}], 0x2, &(0x7f0000000980)=[@tclass={{0x14}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x2, 0xa, 0x0, [@private2]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="c0d7cc4ba4384ca67a336074ebcfc29caa602a0c30d82e02d23c6897b97cd3eda6dff1a6c376a714a9806df20b845b1f53909512315bd14f4b877620cf203a", 0x3f}, {&(0x7f0000000a00)="109e1316653154dfc6ba9b43316e84cfe62971a1c2a4d04f21eab6f6df36d0a4cc2e1c6090088dd0ca7eb3f34acfadeb39ccaa8a046eec593c7ae632c02bd1367a8afb4cd02d0a3f78ca559a75ec3c43f25a091e012b2a18f5dcf2c4076fe38f76976a5f098ced6b0d4701fbc8963b37f6e76dd79a5f4a551290833de6663f0791ec4d95", 0x84}, {&(0x7f0000000ac0)="a433", 0x2}, {&(0x7f0000000b00)="b4c5c3df486ed55ccfbb8f6b0f66438e48c1d07c163fc7e610ff4757ca1cf7da7e6519fd61251cd7297a4ad0fbf76849dd9a82771ff771d0adc5dbc5a8b1cbe66582abced7614dc3545dc7747ae8839f209f01fc74de905d58069d25b5eb865da402e53dc6aec16feb64e9d427a064e87131e5fd59fb764410a21e6bc17bd68fcdae297afcc35cc3c752f5493546060eb61a6cd319e4b24d31390b91c618ca7efa83fa803b6cd162ee098bb677e34eb19e11beb47e542ecb8caf312bfce329", 0xbf}, {&(0x7f0000000bc0)="ce980bf03f6dbd91e357933d01ce628c0188b2470b67aeb3fd21ac5df02331404e070e3286a8a8c3d377f817a0b43f1cef0f55db0f67904e106045d56abd4388f74ee4b9502f842db19ac2e82c4d904f6e2ae83cc94b23f6caebdb7ff2fdfe0e8f0720bd220c79437bdddde57accfa9d971e83a5dcb3667696b3760ddbdac4e25b3a8e71a411c6f26d8e689577aef0c653a18d933b71ea4c3ffcfca9cba9c993a3b4aaf494ee1db407167c777bdf7440099c456559aeef185eab7d9b", 0xbc}, {&(0x7f0000000c80)="4a06b6528bda84c50fb9e1678e00e6cf8e86f6c6", 0x14}], 0x6, &(0x7f000001f980)=ANY=[@ANYBLOB="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"], 0x10f0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000d40)="0f878fe16433a917291d6f9dfbf48617b35616f5fee2e075cfd9f3ab1ae9892e19a8c082d53986a845de94467f2f8013b67f7840dfde1cee69fcb05bebabd74001321cd61432e52f5b14598fb007af65996196f97e60b393480000ac2172c606695145", 0x63}, {&(0x7f0000000dc0)="a2b6fe8d489f650295813436356ae1b99c6a5c62675641045b109b7227f6d7d58a202d44e7bf03f8391eae281d1303cc4a4e38996e61051cabe433986dc72cff5b5cf666656aa4b25aadf87f1d6f0e4a4da793d53922ae7f701f033390062f58ca3e29c42f3f1413594d9caaf83ddb5874fc42dda46032d2afff894180f468de6802bb3f0c10c68c6a298d27ec38196b53965d24f9754b4e6e5442fdf610810e8499c32b6ed091bc07432028255bd2ab28b9253f983454463d6e7a96d2533b4d3f", 0xc1}, {&(0x7f0000000ec0)="6e1a54133a0d67251a5577c50bd7e05796a8622514db140d54a6b8ccf5efae86c8af637756e52141bc418937c1963865ebdb99a9d45762a0a401aeff1f6b1becbe47c6d0271ee16c0d725872aafc29bd93c142e27735e2d5e358972e477cf11fa07b30ef1a710b0339bacb97b310172b88c10b460445b3cd8825528556c9dc9a0a78c938551fbac5332bcd447bba5a2f1f6eebf91460623e68f952ea2315da9d63600a", 0xa3}, {&(0x7f0000000f80)="8a3b0ac3ca72b55452f28600e2d23ea661bf7fabddf1be6ae25146698f8b9339fd1ce31dfb6c1f09eabad3e492e4aa1f27199a7aa9ae5a68aaeda938d2a4c46017b18c451f6effceb89b744036df3a8f43b050237ea19aacdde043e685bb9df6ef57663a8b1a748e54dd977895a7fca94fdc22c9c8349647156c77e4ed4b4641fd642530d26ad4cc2f5a4c13eb86db666cb0232074324feab4a803e7cf20c187ae7896a3e38e75ee440e98d83050fe41c6a2", 0xb2}, {&(0x7f0000001040)="df1befdbbd0413f1c3f52eb45b15c337b31db179a27a8c2707301ca328d94decb1c60e2470ba38c9bbac9da649c7078606199ecadd462bea8f3ebe71ff41fdec70fa7947a2cf8470807a489698a849b2ef557f7841f3a56466204125b132e1985592e2983ab189f81bf0ecce7fd283782740f70450b34c853b70c7d16be30f1c57c9156f4f257897ed92a29f4489a9c5f756ed3de41057b742c4c793a8b7bb9deaad2893e8db8953902dd739", 0xac}, {&(0x7f0000001100)="7cf39edd8a824075b835bb26386f4ccf19f41d2fce60ee5d04ffd08ad03c143c351bcaf36b0fe2c3325c9f89", 0x2c}], 0x6}}, {{&(0x7f00000011c0)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001300)="f022bf3e91b329edeb6a5e6567e0f767a8b7b6fb4672666638059f093c0901cd8f2ca2cb384151de047dec515d5f696285ad48fe73104b54e29d130e3e4b4a7507a572348b88240dfb12ad202a7e729a70966c2337db631267e8b55d1d7af13f77f96c479e19bd24957fd72c445e6bfd784c66a90d21fbbdd0fd61a3ba57a42508cef11d910ec97c85da5a2b8c0596b153981223448fbe1171ab4ef4e1073edc94e80d308ba1441b685df54e039d6c822e533fff1a19e8bd5b92378f97b9e7cb1d3a5d802fd1ebcf004c6eb8431b8d483c", 0xd1}, {&(0x7f0000001200)="e9a1458041ae1f", 0x7}, {&(0x7f0000001240)="b7beeb8f8375e11548b468f7bcb73aca3994153e25bc346cde61bd0b820eacdfb58b966649ca556d336212cb037e9384ba57ec64b1131c282bbf94e813ae418aaabf9c3effcc68be5654b27f469c6e6139d43863f9d22684543c64dfe459028080de95d498fca676f71a74", 0x6b}, {&(0x7f0000001400)="86d5ee2e037c93b6432460555df95474c21a611f798c8547e13bee55d55c166ab8333d28f395abe6e919a6e42bc59b7a551eac57ae3e5a8a1ac75ac4787c9b07ed815f2a2b226dbbfad83ab40cc398cc2bcd0382214e115ac514142e91ecf3e48d8950f0ccea6885727f46a881899f1a00357e04d7c035d73acca2e1d94c7f060e693c60f25e3161d1e21e710a71134024262baa9f054d6d570f19dc6ed351be3c2d147db5417dc159f26d00f72dbe4f60f286d77fc267b8a40ff532f2ebe2bc4a", 0xc1}], 0x4, &(0x7f000001d800)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x0, 0x3}}}, @dstopts_2292={{0x1028, 0x29, 0x4, {0x2b, 0x201, '\x00', [@generic={0x3, 0x1000, "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"}, @ra={0x5, 0x2, 0xc15}, @jumbo={0xc2, 0x4, 0xc}, @pad1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6, 0xa, 0x2, 0xb, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit={{0x14}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x5c, 0x2, '\x00', [@enc_lim, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}], 0x1138}}, {{&(0x7f0000001540)={0xa, 0x4e21, 0x800, @remote, 0x8}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001580)="80585900bc7f8bdb5059e3445efa133f3128622d13515d57140ad59308479583a3d78aa006f0c6ed98834451a4d111c189a06508f881a71cf37ab932516b0f7fce44ac0385b041e087a6e188ded6124b58512257918484af640e0e6ea0833f67b0af31d6a2bd23f8aeb170ee0e9d3eeaa5fccec1da71a08037a66531ac331cb5c373511730dc1cb8125ef26a639606284f29a63931a071331340dde4007648fbcad714268e455730de390a2336a8a94eaa9272efe27e10eadaae3a45c8aaf5091f950257e7d1ce0a8efd274454fc1452686dd9", 0xd3}, {&(0x7f0000001680)="7abeab26f2996a30d31f2b2a7169dbfe327d7ae784cefabda8224471e8a1ea6935b207d1e3ab277fd06997b606b7c3d6e62cc6f4a99601b19e994deeebcff196345b7d0ee447a600c99e2f92b79055e7eab705e4dde83588d0ef1539fb1617c13817727e1393633c567b8e98122f1743c9253251fc44a9a42ccd5b", 0x7b}, {&(0x7f0000001700)="ecbfeed01a6d2935e85623b40d51119c0728f9f95d44a8b3938b6b4801b4d2a141acb40eb49e7cb690c619319451b53a2e21a8e3d6e40b8cd3b78fb03acc8d58c0d41bb30a3216d1b61a5010b62e8420f4a0c3c08c76eefbf68c6f5efcb5ddb5fb615898cf8671afe7fc778996bec74af3f48b1394bbbf3fcd5b78fcf7b851129add88eb064bf000c1a7e911cb3b92ba27e43a914c0ddc13e43d85c619afc5e67ab98328c420267d33e9f7654057ff60e6517f5b2a24cecc72a7ca5c63814b91c85c429e0b2efb17f40f63b37c306d8a5ed0f3848f53f5cadda280dec8997ca30b19", 0xe2}], 0x3}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f10b8c}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000001880)="61c2ab908392933eedb7ace577ac25b4771861789b3f2afeb18730fb9654dd6f7e25ed", 0x23}, {&(0x7f00000018c0)="0432d7b1fb280f0e1f8b54d89207", 0xe}, {&(0x7f000001e980)="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", 0x1000}], 0x3}}], 0x7, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 4m26.591628222s ago: executing program 3 (id=713): syz_io_uring_setup(0x638, &(0x7f0000000000)={0x0, 0xf1ef, 0x0, 0x0, 0x38d}, &(0x7f0000000280), &(0x7f00000001c0)) syz_io_uring_setup(0x120d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x3, 0x13d}, &(0x7f0000000980)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0075bf000000fbff000000100003006269746d61700300000000000000040000"], 0x5c}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r4 = socket(0x2a, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r11, r11, r11) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r3, @ANYBLOB], 0x14}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m16.900425385s ago: executing program 0 (id=722): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xd) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r1}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) recvmmsg(r2, &(0x7f0000007480)=[{{&(0x7f00000001c0)=@ll, 0x80, &(0x7f0000000240)=[{&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000400)=""/205, 0xcd}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/234, 0xea}, {&(0x7f0000001600)=""/209, 0xd1}, {&(0x7f0000001700)=""/171, 0xab}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x7, &(0x7f0000005100)=""/4096, 0x1000}, 0x2d44}, {{&(0x7f00000017c0)=@nl=@unspec, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/10, 0xa}, {&(0x7f0000001880)=""/92, 0x5c}, {&(0x7f0000001900)=""/19, 0x13}, {&(0x7f0000001940)=""/91, 0x5b}, {&(0x7f00000019c0)=""/143, 0x8f}], 0x5, &(0x7f0000001b00)=""/138, 0x8a}, 0x9}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/27, 0x1b}, {&(0x7f0000001c00)=""/167, 0xa7}, {&(0x7f0000006100)=""/4096, 0x1000}], 0x3, &(0x7f0000001d00)=""/79, 0x4f}, 0x7}, {{&(0x7f0000001d80)=@generic, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e00)=""/150, 0x96}, {&(0x7f0000001ec0)=""/222, 0xde}, {&(0x7f0000001fc0)=""/84, 0x54}, {&(0x7f0000007100)=""/198, 0xc6}, {&(0x7f0000007200)=""/168, 0xa8}, {&(0x7f00000072c0)=""/131, 0x83}, {&(0x7f0000007380)=""/230, 0xe6}], 0x7}}], 0x4, 0x2, &(0x7f0000007580)={0x0, 0x989680}) sendto$inet6(r2, &(0x7f00000002c0)="f6584496607c4173f23e6315", 0xc, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) r8 = syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) 4m9.724006315s ago: executing program 33 (id=713): syz_io_uring_setup(0x638, &(0x7f0000000000)={0x0, 0xf1ef, 0x0, 0x0, 0x38d}, &(0x7f0000000280), &(0x7f00000001c0)) syz_io_uring_setup(0x120d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x100, 0x3, 0x13d}, &(0x7f0000000980)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0075bf000000fbff000000100003006269746d61700300000000000000040000"], 0x5c}}, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r4 = socket(0x2a, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, 0x0}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r11, r11, r11) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES8=r3, @ANYBLOB], 0x14}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$tty1(0xc, 0x4, 0x1) 4m9.428994733s ago: executing program 2 (id=725): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4f6e01, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6020480) unshare(0x26020480) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0xa}) dup3(0xffffffffffffffff, r1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) uname(&(0x7f0000000280)=""/33) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 4m6.550411543s ago: executing program 0 (id=727): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000000380), 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400481, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x9) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf30, 0x1, 0x9, 0x1ff, 0x80, 0x7, 0x9, 0x3, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000002a00)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7, 0x400}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 4m6.267124871s ago: executing program 2 (id=729): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf251f000000000000006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="20002bbd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e4f7464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x4a}}, './cgroup\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m4.538485268s ago: executing program 1 (id=730): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d559", 0x79}, {&(0x7f0000000200)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="acc841985992b795fc024b740d97018a16163bb0fb2bb293e68702bb40b6ba70", 0x20}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {0x0}], 0x3}}], 0x2, 0xc0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 4m2.122436087s ago: executing program 2 (id=731): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) setns(0xffffffffffffffff, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x108, 0x4a, 0xe3, 0xb, 0x24, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfbfffffd, 0x1}}) 3m58.343290827s ago: executing program 1 (id=732): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) socket(0x11, 0x3, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a76, 0x80, 0x22, 0x335}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m58.301179237s ago: executing program 2 (id=733): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 3m57.902280179s ago: executing program 0 (id=734): socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x240000, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001800010000000000f8dbdf2102200008000000090000000008000100e000000206001c004e20000008000700e000000208000200ffffffff080001"], 0x4c}}, 0x0) fsopen(&(0x7f0000000140)='nfs4\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000050000104002ff827a754c3549faa7bb2", @ANYRES32=0x0, @ANYBLOB="00000000201200001400128009000100626f6e640000000004000280"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x8c0) r5 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r5) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) read(r5, 0x0, 0x0) close(r5) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000070000000000000b05000000060000003000"], &(0x7f0000000400)=""/132, 0x37, 0x84, 0x1, 0x0, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES64=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', r6, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 3m57.371129875s ago: executing program 1 (id=735): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000080)) signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8000, 0x0, 0x7, 0x2, 0x0, 0x1], [0x80000000, 0x0, 0xffffffff], [0x7ffe, 0x0, 0x0, 0x0, 0xfffffffe]], '\x00', [{0x6}, {0x400, 0xd7c}, {}, {}, {}, {}, {0xa03}, {}, {0x0, 0x80000000}, {0x3}, {0x103}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x200, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000040)) 3m56.987634247s ago: executing program 2 (id=736): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x40, 0x7ffffff7}}], 0x1, 0x4000005) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) r8 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x6003, @fd=r7, 0xff, &(0x7f00000004c0)=[{&(0x7f0000000200)="c0", 0x1}], 0x1, 0x4, 0x1, {0x3}}) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) r11 = dup2(r6, r6) connect$unix(r11, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000540)=""/74, 0x337000, 0x1000, 0xfffffffe}, 0x20) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000044) socket$netlink(0x10, 0x3, 0x2) 3m56.934484728s ago: executing program 0 (id=737): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4f6e01, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x6020480) unshare(0x26020480) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0xa}) dup3(0xffffffffffffffff, r1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) uname(&(0x7f0000000280)=""/33) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m54.656561608s ago: executing program 1 (id=738): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff43, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000000000000000000000f2000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 3m53.082647895s ago: executing program 1 (id=739): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) listen(0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r5) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf251f000000000000006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="20002bbd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e4f7464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x4a}}, './cgroup\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3m52.422159209s ago: executing program 0 (id=740): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x141000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000140)={0xa, 0x0, 0x1, 0x0, 'syz0\x00'}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d559", 0x79}, {&(0x7f0000000200)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d96", 0x71}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)="acc841985992b795fc024b740d97018a16163bb0fb2bb293e68702bb40b6ba70", 0x20}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae9920000", 0xd1}, {0x0}], 0x3}}], 0x2, 0xc0) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3m52.302544431s ago: executing program 2 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) setns(0xffffffffffffffff, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x108, 0x4a, 0xe3, 0xb, 0x24, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/30, 0x1e}], 0x1, 0x10000000, 0x8) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfbfffffd, 0x1}}) 3m35.383950189s ago: executing program 0 (id=742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000000010000000900", @ANYBLOB, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(0x0, 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) 3m30.874251567s ago: executing program 1 (id=743): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) socket(0x11, 0x3, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a76, 0x80, 0x22, 0x335}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m46.971588269s ago: executing program 34 (id=742): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socket$nl_generic(0x11, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000000010000000900", @ANYBLOB, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(0x0, 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) 0s ago: executing program 35 (id=743): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) socket(0x11, 0x3, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a76, 0x80, 0x22, 0x335}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): access+0x20c/0x300 [ 188.782800][ T7368] path_openat+0x904/0x2d80 [ 188.782822][ T7368] ? __pfx_path_openat+0x10/0x10 [ 188.782837][ T7368] ? __pfx___lock_acquire+0x10/0x10 [ 188.782856][ T7368] ? lock_acquire.part.0+0x11b/0x380 [ 188.782875][ T7368] ? find_held_lock+0x2d/0x110 [ 188.782893][ T7368] do_filp_open+0x20c/0x470 [ 188.782908][ T7368] ? __pfx_do_filp_open+0x10/0x10 [ 188.782921][ T7368] ? find_held_lock+0x2d/0x110 [ 188.782952][ T7368] ? alloc_fd+0x41f/0x760 [ 188.782972][ T7368] do_sys_openat2+0x17a/0x1e0 [ 188.782990][ T7368] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.783010][ T7368] ? __fget_files+0x206/0x3a0 [ 188.783028][ T7368] __x64_sys_openat+0x175/0x210 [ 188.783047][ T7368] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.783064][ T7368] ? ksys_write+0x1ba/0x250 [ 188.783085][ T7368] do_syscall_64+0xcd/0x250 [ 188.783107][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.783127][ T7368] RIP: 0033:0x7fe3ef58d169 [ 188.783139][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.783152][ T7368] RSP: 002b:00007fe3f0420038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.783168][ T7368] RAX: ffffffffffffffda RBX: 00007fe3ef7a5fa0 RCX: 00007fe3ef58d169 [ 188.783177][ T7368] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 188.783187][ T7368] RBP: 00007fe3f0420090 R08: 0000000000000000 R09: 0000000000000000 [ 188.783196][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.783205][ T7368] R13: 0000000000000000 R14: 00007fe3ef7a5fa0 R15: 00007fffba6a6338 [ 188.783225][ T7368] [ 189.203402][ T5910] usb 3-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 189.212356][ T7373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 189.237563][ T5910] usb 3-1: config 129 has no interface number 0 [ 189.260194][ T7369] mkiss: ax0: crc mode is auto. [ 189.271453][ T5910] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 189.383573][ T5910] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 189.406173][ T30] audit: type=1400 audit(1742816338.983:426): avc: denied { getopt } for pid=7377 comm="syz.4.396" lport=36507 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 189.420132][ T5910] usb 3-1: config 129 interface 28 has no altsetting 0 [ 189.460932][ T5910] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 189.512760][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.541948][ T5910] usb 3-1: Product: syz [ 189.565192][ T5910] usb 3-1: Manufacturer: syz [ 189.732414][ T5910] usb 3-1: SerialNumber: syz [ 190.142286][ T30] audit: type=1400 audit(1742816339.723:427): avc: denied { connect } for pid=7354 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 190.173250][ T5910] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 190.209433][ T5910] etas_es58x 3-1:129.28: could not retrieve the product info string [ 190.273382][ T5910] usb 3-1: USB disconnect, device number 14 [ 190.289670][ T5910] etas_es58x 3-1:129.28: Disconnecting syz syz [ 191.453935][ T7402] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 191.495838][ T7395] FAULT_INJECTION: forcing a failure. [ 191.495838][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 191.578821][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.3.402 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 191.578847][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.578857][ T7395] Call Trace: [ 191.578862][ T7395] [ 191.578867][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 191.578896][ T7395] should_fail_ex+0x50a/0x650 [ 191.578921][ T7395] ? fs_reclaim_acquire+0xae/0x150 [ 191.578946][ T7395] should_failslab+0xc2/0x120 [ 191.578964][ T7395] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 191.578983][ T7395] ? __alloc_skb+0x2b1/0x380 [ 191.579010][ T7395] __alloc_skb+0x2b1/0x380 [ 191.579033][ T7395] ? __pfx___alloc_skb+0x10/0x10 [ 191.579056][ T7395] ? __pfx___lock_acquire+0x10/0x10 [ 191.579078][ T7395] ? hlock_class+0x4e/0x130 [ 191.579103][ T7395] __ip6_append_data.isra.0+0x2ba1/0x46c0 [ 191.579132][ T7395] ? __pfx_raw6_getfrag+0x10/0x10 [ 191.579162][ T7395] ? __pfx___ip6_append_data.isra.0+0x10/0x10 [ 191.579183][ T7395] ? ip6_mtu+0x231/0x4a0 [ 191.579200][ T7395] ? ip6_setup_cork+0xc7c/0x14d0 [ 191.579221][ T7395] ip6_append_data+0x1e6/0x500 [ 191.579245][ T7395] ? __pfx_raw6_getfrag+0x10/0x10 [ 191.579267][ T7395] rawv6_sendmsg+0x15c9/0x4610 [ 191.579285][ T7395] ? avc_has_perm_noaudit+0x119/0x3a0 [ 191.579309][ T7395] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 191.579331][ T7395] ? avc_has_perm_noaudit+0x143/0x3a0 [ 191.579348][ T7395] ? avc_has_perm+0x11b/0x1c0 [ 191.579363][ T7395] ? __pfx_avc_has_perm+0x10/0x10 [ 191.579378][ T7395] ? __pfx___lock_acquire+0x10/0x10 [ 191.579424][ T7395] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 191.579444][ T7395] ? inet_sendmsg+0x119/0x140 [ 191.579457][ T7395] inet_sendmsg+0x119/0x140 [ 191.579471][ T7395] ____sys_sendmsg+0x98c/0xc90 [ 191.579489][ T7395] ? copy_msghdr_from_user+0x10b/0x160 [ 191.579511][ T7395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.579534][ T7395] ? __lock_acquire+0xcc5/0x3c40 [ 191.579564][ T7395] ___sys_sendmsg+0x135/0x1e0 [ 191.579591][ T7395] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.579626][ T7395] ? trace_lock_acquire+0x14e/0x1f0 [ 191.579660][ T7395] __sys_sendmmsg+0x201/0x420 [ 191.579686][ T7395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.579714][ T7395] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 191.579744][ T7395] ? fput+0x67/0x440 [ 191.579761][ T7395] ? ksys_write+0x1ba/0x250 [ 191.579774][ T7395] ? __pfx_ksys_write+0x10/0x10 [ 191.579791][ T7395] __x64_sys_sendmmsg+0x9c/0x100 [ 191.579812][ T7395] ? lockdep_hardirqs_on+0x7c/0x110 [ 191.579831][ T7395] do_syscall_64+0xcd/0x250 [ 191.579853][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.579872][ T7395] RIP: 0033:0x7f5573d8d169 [ 191.579884][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.579898][ T7395] RSP: 002b:00007f5574c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.579913][ T7395] RAX: ffffffffffffffda RBX: 00007f5573fa5fa0 RCX: 00007f5573d8d169 [ 191.579923][ T7395] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 191.579933][ T7395] RBP: 00007f5574c76090 R08: 0000000000000000 R09: 0000000000000000 [ 191.579941][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.579951][ T7395] R13: 0000000000000000 R14: 00007f5573fa5fa0 R15: 00007ffda55c2a98 [ 191.579970][ T7395] [ 192.038802][ T30] audit: type=1400 audit(1742816341.613:428): avc: denied { create } for pid=7409 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 192.118166][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 192.129366][ T7411] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 192.153598][ T7411] bridge0: port 3(batadv0) entered disabled state [ 192.161714][ T7411] batadv0: left allmulticast mode [ 192.166777][ T7411] batadv0: left promiscuous mode [ 192.172671][ T7411] bridge0: port 3(batadv0) entered disabled state [ 192.183793][ T7412] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 192.192166][ T5910] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.300154][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.317754][ T7411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 192.368210][ T5910] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.377537][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.395864][ T5910] usb 1-1: Product: syz [ 192.416117][ T5910] usb 1-1: Manufacturer: syz [ 192.442772][ T5910] usb 1-1: SerialNumber: syz [ 192.463301][ T5910] usb 1-1: config 0 descriptor?? [ 192.623206][ T7416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.408'. [ 193.590552][ T30] audit: type=1400 audit(1742816343.173:429): avc: denied { map } for pid=7418 comm="syz.2.409" path="socket:[14628]" dev="sockfs" ino=14628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 193.748029][ T30] audit: type=1400 audit(1742816343.323:430): avc: denied { ioctl } for pid=7427 comm="syz.1.412" path="socket:[13806]" dev="sockfs" ino=13806 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.804751][ T7428] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 193.956897][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.963567][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.021297][ T30] audit: type=1400 audit(1742816343.593:431): avc: denied { accept } for pid=7418 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.073540][ T30] audit: type=1400 audit(1742816343.593:432): avc: denied { listen } for pid=7418 comm="syz.2.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.102008][ T7436] 9pnet_virtio: no channels available for device 127.0.0.1 [ 194.126552][ T30] audit: type=1400 audit(1742816343.703:433): avc: denied { setopt } for pid=7434 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 194.773453][ T7444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 195.076915][ T7448] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 195.575298][ T5869] usb 1-1: USB disconnect, device number 11 [ 196.788755][ T5869] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.997452][ T5869] usb 1-1: config 0 has no interfaces? [ 197.104771][ T5869] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.198192][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.215088][ T5869] usb 1-1: Product: syz [ 197.226987][ T5869] usb 1-1: Manufacturer: syz [ 197.244049][ T5869] usb 1-1: SerialNumber: syz [ 197.263605][ T5869] usb 1-1: config 0 descriptor?? [ 199.689515][ T5866] usb 1-1: USB disconnect, device number 12 [ 199.937638][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 199.958624][ T30] audit: type=1400 audit(1742816349.533:434): avc: denied { write } for pid=7487 comm="syz.2.428" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 200.370772][ T30] audit: type=1400 audit(1742816349.943:435): avc: denied { read } for pid=7487 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.919301][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 203.113943][ T30] audit: type=1400 audit(1742816352.693:436): avc: denied { bind } for pid=7517 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 203.239522][ T30] audit: type=1400 audit(1742816352.723:437): avc: denied { name_bind } for pid=7517 comm="syz.2.435" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 203.293001][ T30] audit: type=1400 audit(1742816352.723:438): avc: denied { node_bind } for pid=7517 comm="syz.2.435" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 203.852573][ T30] audit: type=1400 audit(1742816352.863:439): avc: denied { mount } for pid=7501 comm="syz.3.431" name="/" dev="autofs" ino=14832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 203.875048][ T30] audit: type=1400 audit(1742816352.863:440): avc: denied { ioctl } for pid=7501 comm="syz.3.431" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 203.969685][ T30] audit: type=1400 audit(1742816352.943:441): avc: denied { connect } for pid=7517 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 204.018717][ T30] audit: type=1400 audit(1742816352.943:442): avc: denied { name_connect } for pid=7517 comm="syz.2.435" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 204.056803][ T30] audit: type=1400 audit(1742816352.953:443): avc: denied { write } for pid=7517 comm="syz.2.435" laddr=172.20.20.170 lport=59692 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 205.089754][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 205.089770][ T30] audit: type=1400 audit(1742816354.673:465): avc: denied { append } for pid=7543 comm="syz.3.443" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.168963][ T30] audit: type=1400 audit(1742816354.673:466): avc: denied { open } for pid=7543 comm="syz.3.443" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 205.198812][ T5941] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.278847][ T30] audit: type=1400 audit(1742816354.703:467): avc: denied { read } for pid=5176 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 205.328798][ T30] audit: type=1400 audit(1742816354.703:468): avc: denied { search } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.571201][ T30] audit: type=1400 audit(1742816354.703:469): avc: denied { append } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.742780][ T30] audit: type=1400 audit(1742816354.703:470): avc: denied { open } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.765887][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.776458][ T30] audit: type=1400 audit(1742816354.703:471): avc: denied { getattr } for pid=5176 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.829716][ T5941] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 205.841900][ T5941] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 205.858743][ T30] audit: type=1400 audit(1742816354.903:472): avc: denied { create } for pid=7545 comm="syz.1.444" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 205.888809][ T5941] usb 3-1: Manufacturer: syz [ 205.893499][ T5941] usb 3-1: SerialNumber: syz [ 205.920974][ T5941] usb 3-1: config 0 descriptor?? [ 205.964495][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 205.977755][ T7550] netlink: 'syz.1.445': attribute type 10 has an invalid length. [ 205.999462][ T5941] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 206.008274][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.019740][ T7550] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.048819][ T30] audit: type=1400 audit(1742816354.943:473): avc: denied { create } for pid=7545 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 206.101866][ T5941] usb 3-1: No valid video chain found. [ 206.323532][ T30] audit: type=1400 audit(1742816354.943:474): avc: denied { map_create } for pid=7545 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 206.612718][ T901] usb 3-1: USB disconnect, device number 15 [ 207.131377][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 207.163898][ T7560] netlink: 'syz.2.448': attribute type 7 has an invalid length. [ 207.173207][ T901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 207.211273][ T7560] netlink: 'syz.2.448': attribute type 8 has an invalid length. [ 207.243642][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 207.349047][ T901] usb 5-1: Using ep0 maxpacket: 8 [ 207.378918][ T901] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 207.400621][ T901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.448078][ T901] usb 5-1: Product: syz [ 207.466915][ T901] usb 5-1: Manufacturer: syz [ 207.491659][ T901] usb 5-1: SerialNumber: syz [ 207.525763][ T901] usb 5-1: config 0 descriptor?? [ 207.556879][ T901] hub 5-1:0.0: bad descriptor, ignoring hub [ 207.604172][ T901] hub 5-1:0.0: probe with driver hub failed with error -5 [ 207.730276][ T901] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 207.806992][ T901] usb 5-1: USB disconnect, device number 17 [ 209.602608][ T7595] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 209.740890][ T7597] random: crng reseeded on system resumption [ 210.415365][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 210.415382][ T30] audit: type=1400 audit(2000000001.190:516): avc: denied { append } for pid=7590 comm="syz.0.455" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 210.718931][ T30] audit: type=1400 audit(2000000001.190:517): avc: denied { open } for pid=7590 comm="syz.0.455" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 210.812921][ T30] audit: type=1400 audit(2000000002.260:518): avc: denied { read write } for pid=7604 comm="syz.3.456" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 211.518558][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 211.836373][ T30] audit: type=1400 audit(2000000002.260:519): avc: denied { open } for pid=7604 comm="syz.3.456" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 211.862437][ T30] audit: type=1400 audit(2000000002.950:520): avc: denied { create } for pid=7601 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.884540][ T30] audit: type=1400 audit(2000000003.260:521): avc: denied { setattr } for pid=7604 comm="syz.3.456" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 211.976566][ T30] audit: type=1400 audit(2000000003.420:522): avc: denied { ioctl } for pid=7611 comm="syz.3.461" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 212.092830][ T30] audit: type=1400 audit(2000000003.540:523): avc: denied { ioctl } for pid=7609 comm="syz.2.460" path="socket:[14132]" dev="sockfs" ino=14132 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.198382][ T30] audit: type=1400 audit(2000000003.570:524): avc: denied { create } for pid=7609 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.269868][ T30] audit: type=1400 audit(2000000003.570:525): avc: denied { read } for pid=7609 comm="syz.2.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.279047][ T7617] xt_TCPMSS: Only works on TCP SYN packets [ 212.364015][ T7617] netlink: 'syz.4.462': attribute type 1 has an invalid length. [ 212.425713][ T7617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.488069][ T7621] bond1: (slave gretap1): making interface the new active one [ 212.535464][ T7621] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 212.609200][ T1202] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 212.969747][ T1202] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 212.986873][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.998764][ T1202] usb 1-1: Product: syz [ 213.002944][ T1202] usb 1-1: Manufacturer: syz [ 213.007827][ T1202] usb 1-1: SerialNumber: syz [ 213.986643][ T1202] usb 1-1: config 0 descriptor?? [ 214.453812][ T7640] Invalid logical block size (3) [ 214.486918][ T1202] airspy 1-1:0.0: Board ID: 00 [ 214.517046][ T1202] airspy 1-1:0.0: Firmware version: [ 215.208833][ T1202] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 215.230502][ T1202] airspy 1-1:0.0: Registered as swradio24 [ 215.317687][ T1202] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 215.335077][ T1202] usb 1-1: USB disconnect, device number 13 [ 215.550191][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 215.550207][ T30] audit: type=1400 audit(2000000006.970:538): avc: denied { ioctl } for pid=7648 comm="syz.4.470" path="socket:[14205]" dev="sockfs" ino=14205 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 215.638386][ T30] audit: type=1400 audit(2000000007.030:539): avc: denied { write } for pid=5176 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.659783][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.676802][ T30] audit: type=1400 audit(2000000007.030:540): avc: denied { remove_name } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.749575][ T30] audit: type=1400 audit(2000000007.030:541): avc: denied { rename } for pid=5176 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.323120][ T30] audit: type=1400 audit(2000000007.030:542): avc: denied { add_name } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.351785][ T30] audit: type=1400 audit(2000000007.030:543): avc: denied { unlink } for pid=5176 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 216.397287][ T30] audit: type=1400 audit(2000000007.030:544): avc: denied { create } for pid=5176 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 217.036931][ T30] audit: type=1400 audit(2000000007.120:545): avc: denied { create } for pid=7654 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.056831][ T30] audit: type=1400 audit(2000000007.670:546): avc: denied { create } for pid=7659 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.158723][ T30] audit: type=1400 audit(2000000008.260:547): avc: denied { create } for pid=7664 comm="syz.3.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 217.197414][ T7667] 9pnet_virtio: no channels available for device 127.0.0.1 [ 217.435887][ T7669] netlink: 52 bytes leftover after parsing attributes in process `syz.0.477'. [ 217.668750][ T7669] overlay: Unknown parameter 'permit_directio' [ 219.892587][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 219.908863][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 220.089203][ T5869] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 220.364079][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.480535][ T5869] usb 2-1: not running at top speed; connect to a high speed hub [ 220.550213][ T1202] libceph: connect (1)[c::]:6789 error -101 [ 220.556279][ T1202] libceph: mon0 (1)[c::]:6789 connect error [ 220.580829][ T5869] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 220.604223][ T5869] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 220.615548][ T5869] usb 2-1: config 129 has no interface number 0 [ 220.622527][ T5869] usb 2-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 220.622906][ T7704] ceph: No mds server is up or the cluster is laggy [ 220.642167][ T5869] usb 2-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid wMaxPacketSize 0 [ 220.679241][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 220.679253][ T30] audit: type=1400 audit(2000000012.120:567): avc: denied { write } for pid=7714 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.720374][ T5869] usb 2-1: config 129 interface 28 has no altsetting 0 [ 220.729691][ T30] audit: type=1400 audit(2000000012.120:568): avc: denied { nlmsg_write } for pid=7714 comm="syz.4.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.779675][ T30] audit: type=1400 audit(2000000012.200:569): avc: denied { read } for pid=7714 comm="syz.4.487" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 220.809208][ T5869] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 220.833969][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.843482][ T5869] usb 2-1: Product: syz [ 220.847652][ T5869] usb 2-1: Manufacturer: syz [ 220.852562][ T5869] usb 2-1: SerialNumber: syz [ 220.857944][ T30] audit: type=1400 audit(2000000012.200:570): avc: denied { ioctl } for pid=7714 comm="syz.4.487" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 221.078848][ T30] audit: type=1400 audit(2000000012.510:571): avc: denied { read } for pid=7716 comm="syz.3.488" name="sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.110024][ T7724] 9pnet_fd: Insufficient options for proto=fd [ 221.179058][ T5869] etas_es58x 2-1:129.28: Starting syz syz (Serial Number syz) [ 221.229573][ T5869] etas_es58x 2-1:129.28: could not retrieve the product info string [ 221.325975][ T30] audit: type=1400 audit(2000000012.510:572): avc: denied { open } for pid=7716 comm="syz.3.488" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.774594][ T5869] usb 2-1: USB disconnect, device number 14 [ 221.795492][ T5869] etas_es58x 2-1:129.28: Disconnecting syz syz [ 221.832530][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.866399][ T30] audit: type=1400 audit(2000000012.520:573): avc: denied { ioctl } for pid=7716 comm="syz.3.488" path="/dev/sg0" dev="devtmpfs" ino=740 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.869083][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.984400][ T30] audit: type=1400 audit(2000000012.580:574): avc: denied { read } for pid=7720 comm="syz.4.490" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 221.995796][ T7736] sg_write: data in/out 65501/98 bytes for SCSI command 0x1-- guessing data in; [ 221.995796][ T7736] program syz.2.494 not setting count and/or reply_len properly [ 222.161603][ T30] audit: type=1400 audit(2000000012.580:575): avc: denied { open } for pid=7720 comm="syz.4.490" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.748532][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.790892][ T30] audit: type=1400 audit(2000000012.590:576): avc: denied { ioctl } for pid=7720 comm="syz.4.490" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.917664][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.023559][ T7744] netlink: 'syz.0.495': attribute type 10 has an invalid length. [ 223.070905][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.079775][ T7744] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.427780][ T7756] net_ratelimit: 15 callbacks suppressed [ 223.427807][ T7756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 223.927594][ T7767] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 223.934306][ T7767] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 223.958222][ T7767] vhci_hcd vhci_hcd.0: Device attached [ 224.203279][ T7772] random: crng reseeded on system resumption [ 224.984003][ T901] vhci_hcd: vhci_device speed not set [ 225.081044][ T7767] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 225.087593][ T7767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.098843][ T901] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 225.126645][ T7767] vhci_hcd vhci_hcd.0: Device attached [ 225.145623][ T7783] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 225.152145][ T7783] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.230875][ T5822] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 225.242725][ T7783] vhci_hcd vhci_hcd.0: Device attached [ 225.308010][ T7784] vhci_hcd: connection closed [ 225.321229][ T7779] vhci_hcd: connection closed [ 225.334847][ T6891] vhci_hcd: stop threads [ 225.371885][ T6891] vhci_hcd: release socket [ 225.600884][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.502'. [ 226.052342][ T6891] vhci_hcd: disconnect device [ 226.081380][ T6891] vhci_hcd: stop threads [ 226.104376][ T6891] vhci_hcd: release socket [ 226.114365][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 226.114379][ T30] audit: type=1400 audit(2000000017.040:605): avc: denied { ioctl } for pid=7786 comm="syz.4.502" path="mnt:[4026532938]" dev="nsfs" ino=4026532938 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 226.276138][ T7768] vhci_hcd: connection reset by peer [ 226.276400][ T6891] vhci_hcd: disconnect device [ 226.322913][ T6891] vhci_hcd: stop threads [ 226.327773][ T7796] FAULT_INJECTION: forcing a failure. [ 226.327773][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.340968][ T6891] vhci_hcd: release socket [ 226.351162][ T6891] vhci_hcd: disconnect device [ 226.389038][ T30] audit: type=1400 audit(2000000017.740:606): avc: denied { unlink } for pid=7795 comm="syz.2.504" name="#13" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.411484][ T7796] CPU: 0 UID: 0 PID: 7796 Comm: syz.2.504 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 226.411507][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.411517][ T7796] Call Trace: [ 226.411522][ T7796] [ 226.411528][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 226.411555][ T7796] should_fail_ex+0x50a/0x650 [ 226.411585][ T7796] strncpy_from_user+0x3b/0x2d0 [ 226.411612][ T7796] getname_flags.part.0+0x8f/0x550 [ 226.411638][ T7796] getname_flags+0x93/0xf0 [ 226.411663][ T7796] user_path_at+0x24/0x60 [ 226.411679][ T7796] do_fchownat+0xfa/0x200 [ 226.411699][ T7796] ? __pfx_do_fchownat+0x10/0x10 [ 226.411716][ T7796] ? ksys_write+0x1ba/0x250 [ 226.411731][ T7796] ? __pfx_ksys_write+0x10/0x10 [ 226.411750][ T7796] __x64_sys_lchown+0x7e/0xc0 [ 226.411768][ T7796] ? lockdep_hardirqs_on+0x7c/0x110 [ 226.411790][ T7796] do_syscall_64+0xcd/0x250 [ 226.411815][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.411838][ T7796] RIP: 0033:0x7fc0fe38d169 [ 226.411851][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.411866][ T7796] RSP: 002b:00007fc0ff190038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 226.411884][ T7796] RAX: ffffffffffffffda RBX: 00007fc0fe5a5fa0 RCX: 00007fc0fe38d169 [ 226.411894][ T7796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 226.411904][ T7796] RBP: 00007fc0ff190090 R08: 0000000000000000 R09: 0000000000000000 [ 226.411914][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.411924][ T7796] R13: 0000000000000000 R14: 00007fc0fe5a5fa0 R15: 00007ffe3a3706d8 [ 226.411946][ T7796] [ 226.582034][ T30] audit: type=1400 audit(2000000017.740:607): avc: denied { mount } for pid=7795 comm="syz.2.504" name="/" dev="overlay" ino=499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 226.603910][ T30] audit: type=1400 audit(2000000017.760:608): avc: denied { remove_name } for pid=7789 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=3602 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.628400][ T30] audit: type=1400 audit(2000000017.760:609): avc: denied { unlink } for pid=7789 comm="rm" name="resolv.conf.can1.link" dev="tmpfs" ino=3602 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 226.664859][ T30] audit: type=1400 audit(2000000017.860:610): avc: denied { ioctl } for pid=7798 comm="syz.4.505" path="socket:[15570]" dev="sockfs" ino=15570 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.810019][ T30] audit: type=1400 audit(2000000018.110:611): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 226.831203][ T7800] wg0: entered promiscuous mode [ 227.439063][ T30] audit: type=1400 audit(2000000018.340:612): avc: denied { create } for pid=7806 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.461370][ T30] audit: type=1400 audit(2000000018.350:613): avc: denied { write } for pid=7806 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.696666][ T30] audit: type=1400 audit(2000000019.130:614): avc: denied { setopt } for pid=7818 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.748820][ T5944] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 228.328732][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.372381][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 228.414146][ T5944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.454435][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.746021][ T26] usb 1-1: device descriptor read/64, error -71 [ 228.782962][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.793149][ T5944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.806467][ T5944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.817195][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.999896][ T26] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 229.038912][ T5944] usb 3-1: GET_CAPABILITIES returned 0 [ 229.044596][ T5944] usbtmc 3-1:16.0: can't read capabilities [ 229.155424][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 229.165574][ T7855] netlink: 'syz.1.518': attribute type 3 has an invalid length. [ 229.175799][ T7855] netlink: 666 bytes leftover after parsing attributes in process `syz.1.518'. [ 229.187714][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 229.196627][ T26] usb 1-1: device descriptor read/64, error -71 [ 229.249544][ T7814] FAULT_INJECTION: forcing a failure. [ 229.249544][ T7814] name failslab, interval 1, probability 0, space 0, times 0 [ 229.268921][ T5869] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 229.278821][ T7814] CPU: 1 UID: 0 PID: 7814 Comm: syz.2.508 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 229.278843][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.278853][ T7814] Call Trace: [ 229.278858][ T7814] [ 229.278864][ T7814] dump_stack_lvl+0x16c/0x1f0 [ 229.278893][ T7814] should_fail_ex+0x50a/0x650 [ 229.278919][ T7814] ? fs_reclaim_acquire+0xae/0x150 [ 229.278945][ T7814] ? tomoyo_encode2+0x100/0x3e0 [ 229.278968][ T7814] should_failslab+0xc2/0x120 [ 229.278988][ T7814] __kmalloc_noprof+0xcb/0x510 [ 229.279008][ T7814] ? rcu_is_watching+0x12/0xc0 [ 229.279028][ T7814] tomoyo_encode2+0x100/0x3e0 [ 229.279056][ T7814] tomoyo_encode+0x29/0x50 [ 229.279079][ T7814] tomoyo_realpath_from_path+0x19d/0x720 [ 229.279106][ T7814] ? tomoyo_path_number_perm+0x235/0x590 [ 229.279131][ T7814] tomoyo_path_number_perm+0x248/0x590 [ 229.279156][ T7814] ? tomoyo_path_number_perm+0x235/0x590 [ 229.279180][ T7814] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 229.279225][ T7814] ? __pfx_lock_release+0x10/0x10 [ 229.279248][ T7814] ? trace_lock_acquire+0x14e/0x1f0 [ 229.279270][ T7814] ? lock_acquire+0x2f/0xb0 [ 229.279291][ T7814] ? __fget_files+0x40/0x3a0 [ 229.279312][ T7814] ? __fget_files+0x206/0x3a0 [ 229.279332][ T7814] security_file_ioctl+0x9b/0x240 [ 229.279357][ T7814] __x64_sys_ioctl+0xb7/0x200 [ 229.279383][ T7814] do_syscall_64+0xcd/0x250 [ 229.279407][ T7814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.279430][ T7814] RIP: 0033:0x7fc0fe38d169 [ 229.279444][ T7814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.279461][ T7814] RSP: 002b:00007fc0ff190038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.279477][ T7814] RAX: ffffffffffffffda RBX: 00007fc0fe5a5fa0 RCX: 00007fc0fe38d169 [ 229.279488][ T7814] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000006 [ 229.279498][ T7814] RBP: 00007fc0ff190090 R08: 0000000000000000 R09: 0000000000000000 [ 229.279508][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.279518][ T7814] R13: 0000000000000000 R14: 00007fc0fe5a5fa0 R15: 00007ffe3a3706d8 [ 229.279541][ T7814] [ 229.279604][ T7814] ERROR: Out of memory at tomoyo_realpath_from_path. [ 229.409545][ T7858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.508'. [ 229.517545][ T5869] usb 5-1: device descriptor read/64, error -71 [ 229.641344][ T26] usb usb1-port1: attempt power cycle [ 229.723485][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 229.762707][ T1202] usb 3-1: USB disconnect, device number 16 [ 229.869249][ T7864] random: crng reseeded on system resumption [ 230.498893][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 230.520101][ T5869] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 230.603585][ T26] usb 1-1: device descriptor read/8, error -71 [ 230.765513][ T901] vhci_hcd: vhci_device speed not set [ 230.849027][ T5869] usb 5-1: device descriptor read/64, error -71 [ 230.911521][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 230.989888][ T26] usb 1-1: device descriptor read/8, error -71 [ 231.059524][ T5869] usb usb5-port1: attempt power cycle [ 231.192289][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 231.192304][ T30] audit: type=1400 audit(2000000022.640:622): avc: denied { connect } for pid=7871 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.219627][ T26] usb usb1-port1: unable to enumerate USB device [ 231.408440][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 231.417594][ T7874] netlink: 52 bytes leftover after parsing attributes in process `syz.2.521'. [ 231.503866][ T5869] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.517243][ T30] audit: type=1400 audit(2000000022.640:623): avc: denied { name_connect } for pid=7871 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 231.541674][ T5869] usb 5-1: device descriptor read/8, error -71 [ 231.548946][ T30] audit: type=1400 audit(2000000022.850:624): avc: denied { shutdown } for pid=7871 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.568942][ T30] audit: type=1400 audit(2000000022.880:625): avc: denied { shutdown } for pid=7871 comm="syz.2.521" lport=57532 faddr=fc01:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.568977][ T30] audit: type=1400 audit(2000000023.000:626): avc: denied { write } for pid=7869 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 231.958850][ T5869] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 232.009054][ T5941] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 232.188884][ T5941] usb 3-1: device descriptor read/64, error -71 [ 232.195282][ T5869] usb 5-1: device not accepting address 21, error -71 [ 232.318842][ T30] audit: type=1400 audit(2000000023.700:627): avc: denied { bind } for pid=7882 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.719844][ T5869] usb usb5-port1: unable to enumerate USB device [ 232.758027][ T7888] fuse: Unknown parameter '00000000000000000000003Pr!pt°)ȬKíþ ½' [ 232.817614][ T30] audit: type=1400 audit(2000000023.700:628): avc: denied { name_bind } for pid=7882 comm="syz.4.524" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 232.857687][ T7891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.527'. [ 233.015251][ T5941] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.254814][ T30] audit: type=1400 audit(2000000023.700:629): avc: denied { node_bind } for pid=7882 comm="syz.4.524" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 233.284196][ T5941] usb 3-1: device descriptor read/64, error -71 [ 233.422991][ T30] audit: type=1400 audit(2000000023.700:630): avc: denied { getopt } for pid=7882 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 233.429125][ T5941] usb usb3-port1: attempt power cycle [ 233.518908][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 233.560491][ T30] audit: type=1400 audit(2000000023.700:631): avc: denied { name_connect } for pid=7882 comm="syz.4.524" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 234.092235][ T5941] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 234.149533][ T5941] usb 3-1: device descriptor read/8, error -71 [ 237.823409][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 237.823425][ T30] audit: type=1400 audit(2000000029.270:639): avc: denied { getopt } for pid=7905 comm="syz.2.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.636107][ T7909] netlink: 596 bytes leftover after parsing attributes in process `syz.2.531'. [ 239.406562][ T30] audit: type=1400 audit(2000000030.850:640): avc: denied { write } for pid=7917 comm="syz.1.533" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 241.149600][ T30] audit: type=1400 audit(2000000032.590:641): avc: denied { create } for pid=7940 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.558729][ T30] audit: type=1400 audit(2000000032.590:642): avc: denied { ioctl } for pid=7940 comm="syz.3.536" path="socket:[15857]" dev="sockfs" ino=15857 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.583169][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.655269][ T7948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.465006][ T30] audit: type=1400 audit(2000000033.100:643): avc: denied { mount } for pid=7946 comm="syz.2.538" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 242.652646][ T30] audit: type=1400 audit(2000000034.090:644): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 242.755606][ T30] audit: type=1400 audit(2000000034.170:645): avc: denied { setopt } for pid=7958 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.830266][ T7962] xt_hashlimit: size too large, truncated to 1048576 [ 242.918750][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.978242][ T7967] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 243.261656][ T26] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 243.274360][ T30] audit: type=1400 audit(2000000034.700:646): avc: denied { write } for pid=7958 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.300444][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.328462][ T26] usb 1-1: Product: syz [ 243.377610][ T26] usb 1-1: Manufacturer: syz [ 243.446757][ T30] audit: type=1400 audit(2000000034.750:647): avc: denied { read } for pid=7958 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.466460][ T26] usb 1-1: SerialNumber: syz [ 243.570368][ T26] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 243.613818][ T5866] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 244.105937][ T30] audit: type=1400 audit(2000000035.540:648): avc: denied { getopt } for pid=7956 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.125385][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.172939][ T5910] usb 1-1: USB disconnect, device number 18 [ 245.408155][ T5866] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 245.442223][ T5866] ath9k_htc: Failed to initialize the device [ 245.449449][ T5910] usb 1-1: ath9k_htc: USB layer deinitialized [ 245.592202][ T7988] @: renamed from vlan0 (while UP) [ 245.597485][ T30] audit: type=1400 audit(2000000037.040:649): avc: denied { ioctl } for pid=7987 comm="syz.4.546" path="socket:[15936]" dev="sockfs" ino=15936 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 246.146317][ T7993] libceph: resolve '4' (ret=-3): failed [ 246.162010][ T30] audit: type=1400 audit(2000000037.540:650): avc: denied { connect } for pid=7990 comm="syz.3.547" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.531044][ T30] audit: type=1400 audit(2000000038.970:651): avc: denied { mount } for pid=7994 comm="syz.2.544" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 249.829037][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 249.955319][ T30] audit: type=1400 audit(2000000041.330:652): avc: denied { read } for pid=8005 comm="syz.3.551" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 250.701687][ T30] audit: type=1400 audit(2000000041.330:653): avc: denied { open } for pid=8005 comm="syz.3.551" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.587650][ T30] audit: type=1400 audit(2000000041.330:654): avc: denied { ioctl } for pid=8005 comm="syz.3.551" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.626614][ T8010] syz.0.552 (8010): drop_caches: 2 [ 251.675027][ T30] audit: type=1400 audit(2000000043.090:655): avc: denied { create } for pid=8015 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.843867][ T30] audit: type=1400 audit(2000000043.160:656): avc: denied { bind } for pid=8015 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 252.294863][ T30] audit: type=1400 audit(2000000043.240:657): avc: denied { getopt } for pid=8015 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.855911][ T8034] x_tables: duplicate underflow at hook 2 [ 253.864576][ T30] audit: type=1400 audit(2000000045.310:658): avc: denied { create } for pid=8033 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 253.884715][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.897238][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 253.988944][ T30] audit: type=1400 audit(2000000045.340:659): avc: denied { write } for pid=8033 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 256.309198][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.315495][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.548661][ C0] sched: DL replenish lagged too much [ 257.994471][ T8060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.555334][ T8067] xt_TCPMSS: Only works on TCP SYN packets [ 261.960812][ T8067] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 262.057198][ T8076] input: syz1 as /devices/virtual/input/input16 [ 262.118729][ T30] audit: type=1400 audit(2000000053.500:660): avc: denied { write } for pid=8066 comm="syz.4.571" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 262.360470][ T8067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.382839][ T30] audit: type=1400 audit(2000000053.550:661): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.405611][ T8071] syz.1.570 (8071): drop_caches: 2 [ 262.552000][ T30] audit: type=1400 audit(2000000053.550:662): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2890 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.654962][ T30] audit: type=1400 audit(2000000053.550:663): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2890 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.753288][ T30] audit: type=1400 audit(2000000054.050:664): avc: denied { write } for pid=8082 comm="syz.3.572" path="socket:[16372]" dev="sockfs" ino=16372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 262.989857][ T8073] bond1: (slave gretap0): making interface the new active one [ 263.038766][ T5866] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 263.089355][ T8073] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 263.212497][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 263.287482][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 263.340502][ T5866] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.360852][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.444969][ T5866] usb 2-1: Product: syz [ 263.457788][ T5866] usb 2-1: Manufacturer: syz [ 263.482815][ T5866] usb 2-1: SerialNumber: syz [ 263.527228][ T5866] usb 2-1: config 0 descriptor?? [ 266.950506][ T30] audit: type=1400 audit(2000000058.400:665): avc: denied { setopt } for pid=8086 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 266.988888][ T5866] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 267.290659][ T30] audit: type=1400 audit(2000000058.450:666): avc: denied { getopt } for pid=8093 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.402530][ T5866] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.428331][ T5866] usb 5-1: config 1 has no interface number 0 [ 267.434923][ T1202] usb 2-1: USB disconnect, device number 15 [ 267.458341][ T5866] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.645000][ T5866] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 267.654299][ T5866] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 267.693020][ T5910] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 267.715841][ T5866] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 57600, setting to 1024 [ 267.746827][ T5866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.768769][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.540313][ T5866] usb 5-1: Product: syz [ 268.558699][ T5866] usb 5-1: Manufacturer: syz [ 268.563308][ T5866] usb 5-1: SerialNumber: syz [ 268.633204][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 268.686107][ T5910] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 268.718029][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.752679][ T5910] usb 1-1: Product: syz [ 268.905247][ T5910] usb 1-1: Manufacturer: syz [ 268.968951][ T1202] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 269.264250][ T5910] usb 1-1: SerialNumber: syz [ 269.328151][ T5910] usb 1-1: config 0 descriptor?? [ 269.520865][ T5866] cdc_ncm 5-1:1.1: bind() failure [ 269.529813][ T5866] usb 5-1: USB disconnect, device number 22 [ 269.548812][ T5910] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 269.598946][ T1202] usb 3-1: Using ep0 maxpacket: 16 [ 269.771690][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 270.649292][ T5910] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 270.875906][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 270.958893][ T1202] usb 3-1: unable to read config index 0 descriptor/all [ 270.971624][ T8123] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 271.008777][ T1202] usb 3-1: can't read configurations, error -71 [ 271.881446][ T30] audit: type=1400 audit(2000000063.120:667): avc: denied { write } for pid=8124 comm="syz.4.583" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.033405][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 272.055006][ T8128] xt_TCPMSS: Only works on TCP SYN packets [ 273.061477][ T8128] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 273.078703][ T8123] netlink: 'syz.0.579': attribute type 2 has an invalid length. [ 273.278827][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 273.313674][ T8128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.346836][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 273.753882][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 273.811233][ T30] audit: type=1400 audit(2000000065.260:668): avc: denied { create } for pid=8142 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 273.873165][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 273.899672][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 273.921778][ T8141] fuse: Unknown parameter 'grou' [ 273.931954][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 275.059296][ T8107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=8107 comm=syz.0.579 [ 275.557491][ T5876] usb 1-1: USB disconnect, device number 20 [ 276.320297][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 276.463261][ T30] audit: type=1400 audit(2000000067.910:669): avc: denied { mount } for pid=8158 comm="syz.0.593" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 276.485007][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.496412][ T8162] overlayfs: missing 'lowerdir' [ 276.718758][ T1202] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 276.773359][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 277.303475][ T8164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.028193][ T30] audit: type=1400 audit(2000000068.070:670): avc: denied { listen } for pid=8157 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.039349][ T5891] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 278.071974][ T30] audit: type=1400 audit(2000000068.110:671): avc: denied { accept } for pid=8157 comm="syz.4.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.136675][ T30] audit: type=1400 audit(2000000069.580:672): avc: denied { setopt } for pid=8165 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.374451][ T1202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.406475][ T30] audit: type=1400 audit(2000000069.800:673): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 278.434583][ T1202] usb 3-1: config 0 has no interfaces? [ 278.467077][ T1202] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 278.499812][ T5891] usb 2-1: config 0 has no interface number 0 [ 278.505914][ T5891] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 278.521912][ T1202] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.589343][ T5891] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11 [ 278.596820][ T1202] usb 3-1: config 0 descriptor?? [ 278.669035][ T30] audit: type=1400 audit(2000000070.120:674): avc: denied { bind } for pid=8165 comm="syz.3.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 278.720311][ T5891] usb 2-1: string descriptor 0 read error: -71 [ 278.731077][ T5891] usb 2-1: New USB device found, idVendor=13d3, idProduct=3350, bcdDevice=8d.e5 [ 278.809352][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.868868][ T1202] usb 3-1: USB disconnect, device number 23 [ 278.880059][ T5891] usb 2-1: config 0 descriptor?? [ 278.888789][ T30] audit: type=1400 audit(2000000070.330:675): avc: denied { watch watch_reads } for pid=8173 comm="syz.0.596" path="pipe:[18061]" dev="pipefs" ino=18061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 278.963247][ T5891] usb 2-1: can't set config #0, error -71 [ 279.031701][ T5891] usb 2-1: USB disconnect, device number 16 [ 279.038272][ T30] audit: type=1400 audit(2000000070.370:676): avc: denied { bind } for pid=8171 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.094343][ T8181] xt_TCPMSS: Only works on TCP SYN packets [ 279.133206][ T8181] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 279.152454][ T30] audit: type=1400 audit(2000000070.370:677): avc: denied { listen } for pid=8171 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.218419][ T30] audit: type=1400 audit(2000000070.380:678): avc: denied { write } for pid=8171 comm="syz.1.597" path="socket:[18064]" dev="sockfs" ino=18064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.474112][ T30] audit: type=1400 audit(2000000070.450:679): avc: denied { shutdown } for pid=8171 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.248630][ T8181] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.700445][ T8205] FAULT_INJECTION: forcing a failure. [ 280.700445][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 280.916229][ T30] audit: type=1400 audit(2000000072.350:680): avc: denied { append } for pid=8204 comm="syz.4.606" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 280.949508][ T8205] CPU: 1 UID: 0 PID: 8205 Comm: syz.0.604 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 280.949531][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.949540][ T8205] Call Trace: [ 280.949545][ T8205] [ 280.949552][ T8205] dump_stack_lvl+0x16c/0x1f0 [ 280.949579][ T8205] should_fail_ex+0x50a/0x650 [ 280.949606][ T8205] ? fs_reclaim_acquire+0xae/0x150 [ 280.949632][ T8205] should_failslab+0xc2/0x120 [ 280.949651][ T8205] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 280.949669][ T8205] ? __alloc_skb+0x2b1/0x380 [ 280.949696][ T8205] __alloc_skb+0x2b1/0x380 [ 280.949719][ T8205] ? __pfx___alloc_skb+0x10/0x10 [ 280.949751][ T8205] netlink_ack+0x15f/0xb80 [ 280.949774][ T8205] ? avc_has_perm_noaudit+0x61/0x3a0 [ 280.949799][ T8205] netlink_rcv_skb+0x348/0x440 [ 280.949822][ T8205] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.949858][ T8205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.949892][ T8205] ? bpf_lsm_capable+0x9/0x10 [ 280.949914][ T8205] ? security_capable+0x7e/0x260 [ 280.949934][ T8205] ? ns_capable+0xd7/0x110 [ 280.949960][ T8205] nfnetlink_rcv+0x1b4/0x430 [ 280.949986][ T8205] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 280.950011][ T8205] ? netlink_deliver_tap+0x1ae/0xd30 [ 280.950038][ T8205] netlink_unicast+0x53c/0x7f0 [ 280.950065][ T8205] ? __pfx_netlink_unicast+0x10/0x10 [ 280.950095][ T8205] netlink_sendmsg+0x8b8/0xd70 [ 280.950122][ T8205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.950155][ T8205] ____sys_sendmsg+0xaaf/0xc90 [ 280.950175][ T8205] ? copy_msghdr_from_user+0x10b/0x160 [ 280.950199][ T8205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.950230][ T8205] ___sys_sendmsg+0x135/0x1e0 [ 280.950256][ T8205] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.950290][ T8205] ? __pfx_lock_release+0x10/0x10 [ 280.950313][ T8205] ? trace_lock_acquire+0x14e/0x1f0 [ 280.950341][ T8205] ? __fget_files+0x206/0x3a0 [ 280.950363][ T8205] __sys_sendmsg+0x16e/0x220 [ 280.950389][ T8205] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.950428][ T8205] do_syscall_64+0xcd/0x250 [ 280.950454][ T8205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.950476][ T8205] RIP: 0033:0x7fe3ef58d169 [ 280.950490][ T8205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.950506][ T8205] RSP: 002b:00007fe3f0420038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.950523][ T8205] RAX: ffffffffffffffda RBX: 00007fe3ef7a5fa0 RCX: 00007fe3ef58d169 [ 280.950534][ T8205] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 280.950544][ T8205] RBP: 00007fe3f0420090 R08: 0000000000000000 R09: 0000000000000000 [ 280.950554][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.950563][ T8205] R13: 0000000000000000 R14: 00007fe3ef7a5fa0 R15: 00007fffba6a6338 [ 280.950584][ T8205] [ 281.291878][ T8210] xt_nfacct: accounting object `syz1' does not exists [ 282.538799][ T30] audit: type=1400 audit(2000000073.700:681): avc: denied { listen } for pid=8212 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 284.878807][ T1202] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 285.269015][ T1202] usb 4-1: Using ep0 maxpacket: 16 [ 285.295955][ T1202] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 285.328273][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.365791][ T1202] usb 4-1: Product: syz [ 285.383817][ T1202] usb 4-1: Manufacturer: syz [ 285.396607][ T1202] usb 4-1: SerialNumber: syz [ 285.457308][ T1202] usb 4-1: config 0 descriptor?? [ 285.476567][ T1202] as10x_usb: device has been detected [ 285.484328][ T1202] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 285.508328][ T1202] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 285.575482][ T1202] as10x_usb: error during firmware upload part1 [ 285.599106][ T5866] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 285.834679][ T1202] Registered device Sky IT Digital Key (green led) [ 285.836324][ T30] audit: type=1400 audit(2000000077.280:682): avc: denied { ioctl } for pid=8218 comm="syz.3.609" path="socket:[18280]" dev="sockfs" ino=18280 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.998795][ T5866] usb 2-1: device descriptor read/64, error -71 [ 286.664776][ T8238] xt_TCPMSS: Only works on TCP SYN packets [ 286.690154][ T8238] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 286.707995][ T5866] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 286.821755][ T8238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.858814][ T5866] usb 2-1: device descriptor read/64, error -71 [ 287.141621][ T5866] usb usb2-port1: attempt power cycle [ 287.187533][ T8239] bond2: (slave gretap2): making interface the new active one [ 287.325343][ T8239] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 287.652316][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 287.656891][ T8247] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 287.666641][ T5866] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 287.674834][ T5822] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 288.079689][ T5866] usb 2-1: device descriptor read/8, error -71 [ 288.169434][ T30] audit: type=1400 audit(2000000079.620:683): avc: denied { bind } for pid=8249 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.256460][ T30] audit: type=1400 audit(2000000079.650:684): avc: denied { setopt } for pid=8249 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 288.340920][ T5866] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 288.349572][ T8251] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 288.364340][ T30] audit: type=1400 audit(2000000079.790:685): avc: denied { mounton } for pid=8249 comm="syz.2.619" path="/proc/364/task" dev="proc" ino=16834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 288.419666][ T8251] netlink: 40 bytes leftover after parsing attributes in process `syz.2.619'. [ 288.438375][ T5866] usb 2-1: device descriptor read/8, error -71 [ 288.508890][ T30] audit: type=1400 audit(2000000079.790:686): avc: denied { mount } for pid=8249 comm="syz.2.619" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 288.581344][ T5866] usb usb2-port1: unable to enumerate USB device [ 288.609303][ T8250] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.805515][ T30] audit: type=1400 audit(2000000079.990:687): avc: denied { bind } for pid=8252 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.158199][ T8251] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 290.299537][ T8251] team0: Port device geneve0 added [ 291.108970][ T8250] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.149768][ T8271] input: syz1 as /devices/virtual/input/input17 [ 291.639101][ T30] audit: type=1400 audit(2000000083.060:688): avc: denied { sqpoll } for pid=8268 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 291.936968][ T8271] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.624'. [ 292.059362][ T5910] usb 4-1: USB disconnect, device number 10 [ 292.141910][ T5910] Unregistered device Sky IT Digital Key (green led) [ 292.147612][ T5910] as10x_usb: device has been disconnected [ 292.183270][ T8250] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.804740][ T8291] xt_TCPMSS: Only works on TCP SYN packets [ 292.831864][ T8291] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 292.842749][ T8250] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.273871][ T8293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.627'. [ 294.025958][ T8291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.566769][ T5822] block nbd4: Receive control failed (result -32) [ 294.585015][ T8298] block nbd4: shutting down sockets [ 294.766222][ T8250] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.840294][ T8250] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.873471][ T8277] syz.4.625: vmalloc error: size 538968064, failed to allocated page array size 1052672, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.923012][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.4.625 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 294.923036][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.923047][ T8277] Call Trace: [ 294.923052][ T8277] [ 294.923060][ T8277] dump_stack_lvl+0x16c/0x1f0 [ 294.923090][ T8277] warn_alloc+0x24d/0x3a0 [ 294.923112][ T8277] ? __pfx_warn_alloc+0x10/0x10 [ 294.923140][ T8277] ? __get_vm_area_node+0x1b0/0x2f0 [ 294.923165][ T8277] ? __get_vm_area_node+0x1dc/0x2f0 [ 294.923197][ T8277] __vmalloc_node_range_noprof+0x1102/0x1530 [ 294.923234][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 294.923265][ T8277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.923295][ T8277] ? rcu_is_watching+0x12/0xc0 [ 294.923315][ T8277] ? trace_kmalloc+0x2d/0xd0 [ 294.923337][ T8277] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 294.923357][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 294.923381][ T8277] __kvmalloc_node_noprof+0x14f/0x1a0 [ 294.923410][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 294.923434][ T8277] hash_ipport_create+0x845/0x1a00 [ 294.923464][ T8277] ? __pfx_hash_ipport_create+0x10/0x10 [ 294.923492][ T8277] ? __pfx_hash_ipport_create+0x10/0x10 [ 294.923518][ T8277] ? ip_set_create+0x7cb/0x14d0 [ 294.923536][ T8277] ? ip_set_create+0x6c8/0x14d0 [ 294.923553][ T8277] ip_set_create+0x7cb/0x14d0 [ 294.923576][ T8277] ? __pfx_ip_set_create+0x10/0x10 [ 294.923622][ T8277] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 294.923660][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.923696][ T8277] ? __pfx___lock_acquire+0x10/0x10 [ 294.923744][ T8277] ? lock_acquire+0x2f/0xb0 [ 294.923767][ T8277] ? avc_has_perm_noaudit+0x61/0x3a0 [ 294.923794][ T8277] netlink_rcv_skb+0x16b/0x440 [ 294.923820][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.923850][ T8277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.923888][ T8277] ? bpf_lsm_capable+0x9/0x10 [ 294.923909][ T8277] ? security_capable+0x7e/0x260 [ 294.923932][ T8277] ? ns_capable+0xd7/0x110 [ 294.923960][ T8277] nfnetlink_rcv+0x1b4/0x430 [ 294.923988][ T8277] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 294.924014][ T8277] ? netlink_deliver_tap+0x1ae/0xd30 [ 294.924044][ T8277] netlink_unicast+0x53c/0x7f0 [ 294.924073][ T8277] ? __pfx_netlink_unicast+0x10/0x10 [ 294.924106][ T8277] netlink_sendmsg+0x8b8/0xd70 [ 294.924136][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.924171][ T8277] ____sys_sendmsg+0xaaf/0xc90 [ 294.924193][ T8277] ? copy_msghdr_from_user+0x10b/0x160 [ 294.924219][ T8277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.924252][ T8277] ___sys_sendmsg+0x135/0x1e0 [ 294.924280][ T8277] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.924318][ T8277] ? __pfx_lock_release+0x10/0x10 [ 294.924342][ T8277] ? trace_lock_acquire+0x14e/0x1f0 [ 294.924371][ T8277] ? __fget_files+0x206/0x3a0 [ 294.924397][ T8277] __sys_sendmsg+0x16e/0x220 [ 294.924424][ T8277] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.924450][ T8277] ? __x64_sys_futex+0x1e1/0x4c0 [ 294.924489][ T8277] do_syscall_64+0xcd/0x250 [ 294.924517][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.924541][ T8277] RIP: 0033:0x7f9719d8d169 [ 294.924555][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.924572][ T8277] RSP: 002b:00007f971abf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.924589][ T8277] RAX: ffffffffffffffda RBX: 00007f9719fa5fa0 RCX: 00007f9719d8d169 [ 294.924601][ T8277] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 294.924612][ T8277] RBP: 00007f9719e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 294.924622][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.924632][ T8277] R13: 0000000000000000 R14: 00007f9719fa5fa0 R15: 00007ffd6d8e1b58 [ 294.924656][ T8277] [ 294.924663][ T8277] Mem-Info: [ 295.313453][ T8250] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.344772][ T8250] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.903098][ T8277] active_anon:10564 inactive_anon:1 isolated_anon:0 [ 299.903098][ T8277] active_file:18397 inactive_file:38805 isolated_file:0 [ 299.903098][ T8277] unevictable:1280 dirty:271 writeback:0 [ 299.903098][ T8277] slab_reclaimable:6453 slab_unreclaimable:140801 [ 299.903098][ T8277] mapped:35355 shmem:7053 pagetables:955 [ 299.903098][ T8277] sec_pagetables:0 bounce:0 [ 299.903098][ T8277] kernel_misc_reclaimable:0 [ 299.903098][ T8277] free:1262478 free_pcp:187 free_cma:0 [ 300.104979][ T8277] Node 0 active_anon:40632kB inactive_anon:4kB active_file:73468kB inactive_file:155148kB unevictable:4608kB isolated(anon):0kB isolated(file):0kB mapped:123400kB dirty:1084kB writeback:0kB shmem:27476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11336kB pagetables:3820kB sec_pagetables:0kB all_unreclaimable? no [ 300.322224][ T8277] Node 1 active_anon:1024kB inactive_anon:0kB active_file:120kB inactive_file:72kB unevictable:512kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 300.485665][ T8277] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 300.529949][ T8277] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 300.586475][ T8277] Node 0 DMA32 free:1274944kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20976kB inactive_anon:4kB active_file:73468kB inactive_file:155056kB unevictable:4608kB writepending:1112kB present:3129332kB managed:2547360kB mlocked:0kB bounce:0kB free_pcp:1972kB local_pcp:1440kB free_cma:0kB [ 300.780495][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 300.798623][ T8305] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 300.805144][ T8305] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 300.849117][ T8277] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 300.892302][ T8305] vhci_hcd vhci_hcd.0: Device attached [ 300.915166][ T8307] vhci_hcd: connection closed [ 300.926732][ T6771] vhci_hcd: stop threads [ 300.937377][ T6771] vhci_hcd: release socket [ 300.945678][ T6771] vhci_hcd: disconnect device [ 300.965352][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 300.991234][ T8277] Node 1 Normal free:3915320kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:1024kB inactive_anon:0kB active_file:120kB inactive_file:72kB unevictable:512kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.393446][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 301.408402][ T8277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.435044][ T8277] Node 0 DMA32: 1560*4kB (UME) 1389*8kB (UME) 1985*16kB (UME) 2331*32kB (UME) 937*64kB (UME) 149*128kB (UME) 85*256kB (UME) 38*512kB (UME) 25*1024kB (UME) 27*2048kB (UME) 233*4096kB (UME) = 1279224kB [ 301.547882][ T8277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 301.891552][ T5941] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 301.943684][ T8323] netlink: 'syz.1.636': attribute type 10 has an invalid length. [ 301.951592][ T8323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 301.967997][ T8277] 0*4096kB = 0kB [ 301.992165][ T8277] Node 1 Normal: 240*4kB (UE) 51*8kB (UME) 42*16kB (UME) 196*32kB (UME) 85*64kB (UE) 27*128kB (UME) 17*256kB (UM) 15*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 944*4096kB (M) = 3915320kB [ 302.084544][ T30] audit: type=1400 audit(2000000093.530:689): avc: denied { bind } for pid=8325 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.107051][ T8277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.127284][ T8323] batadv0: entered promiscuous mode [ 302.133348][ T8323] batadv0: entered allmulticast mode [ 302.141985][ T8323] bond0: (slave batadv0): Releasing backup interface [ 302.173550][ T8277] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 302.206854][ T8277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.226034][ T30] audit: type=1400 audit(2000000093.560:690): avc: denied { write } for pid=8325 comm="syz.2.637" path="socket:[18816]" dev="sockfs" ino=18816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.263052][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 302.302808][ T8277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 302.328088][ T5941] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 302.341314][ T5941] usb 4-1: config 8 has no interface number 0 [ 302.350880][ T5941] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 302.393336][ T8277] 56774 total pagecache pages [ 302.398021][ T8277] 1 pages in swap cache [ 302.410828][ T5941] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 302.425413][ T8277] Free swap = 124748kB [ 302.437719][ T8277] Total swap = 124996kB [ 302.452722][ T8277] 2097051 pages RAM [ 302.456522][ T8277] 0 pages HighMem/MovableOnly [ 302.456932][ T5941] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 302.464226][ T8277] 428553 pages reserved [ 302.464253][ T8277] 0 pages cma reserved [ 302.527622][ T5876] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 302.583123][ T5941] usb 4-1: config 8 interface 39 has no altsetting 0 [ 302.693375][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 302.706188][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.730559][ T5941] usb 4-1: Product: syz [ 302.734721][ T5941] usb 4-1: Manufacturer: syz [ 302.742770][ T5941] usb 4-1: SerialNumber: syz [ 302.791287][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 302.926117][ T5876] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 302.937464][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.110080][ T5941] ipheth 4-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 303.117423][ T5941] ipheth 4-1:8.39: probe with driver ipheth failed with error -71 [ 303.169862][ T5876] usb 1-1: config 0 descriptor?? [ 303.183357][ T5876] gspca_main: sunplus-2.14.0 probing 041e:400b [ 303.192219][ T5941] usb 4-1: USB disconnect, device number 11 [ 303.885045][ T5876] gspca_sunplus: reg_w_riv err -110 [ 303.892172][ T8328] syz.0.638 (8328): drop_caches: 2 [ 303.898249][ T8328] syz.0.638 (8328): drop_caches: 2 [ 303.936552][ T5876] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 305.478585][ T8323] bridge0: port 3(batadv0) entered blocking state [ 305.485167][ T8323] bridge0: port 3(batadv0) entered disabled state [ 305.629915][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 305.639244][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 305.757421][ T8277] syz.4.625: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.808808][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.4.625 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 305.808833][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.808844][ T8277] Call Trace: [ 305.808850][ T8277] [ 305.808857][ T8277] dump_stack_lvl+0x16c/0x1f0 [ 305.808886][ T8277] warn_alloc+0x24d/0x3a0 [ 305.808908][ T8277] ? __pfx_warn_alloc+0x10/0x10 [ 305.808936][ T8277] ? __get_vm_area_node+0x1b0/0x2f0 [ 305.808962][ T8277] ? __get_vm_area_node+0x1dc/0x2f0 [ 305.808992][ T8277] __vmalloc_node_range_noprof+0x1102/0x1530 [ 305.809029][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 305.809059][ T8277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.809088][ T8277] ? rcu_is_watching+0x12/0xc0 [ 305.809108][ T8277] ? trace_kmalloc+0x2d/0xd0 [ 305.809130][ T8277] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 305.809150][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 305.809174][ T8277] __kvmalloc_node_noprof+0x14f/0x1a0 [ 305.809202][ T8277] ? hash_ipport_create+0x845/0x1a00 [ 305.809227][ T8277] hash_ipport_create+0x845/0x1a00 [ 305.809258][ T8277] ? __pfx_hash_ipport_create+0x10/0x10 [ 305.809286][ T8277] ? __pfx_hash_ipport_create+0x10/0x10 [ 305.809311][ T8277] ? ip_set_create+0x7cb/0x14d0 [ 305.809328][ T8277] ? ip_set_create+0x6c8/0x14d0 [ 305.809344][ T8277] ip_set_create+0x7cb/0x14d0 [ 305.809368][ T8277] ? __pfx_ip_set_create+0x10/0x10 [ 305.809414][ T8277] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 305.809452][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 305.809483][ T8277] ? __pfx___lock_acquire+0x10/0x10 [ 305.809530][ T8277] ? lock_acquire+0x2f/0xb0 [ 305.809553][ T8277] ? avc_has_perm_noaudit+0x61/0x3a0 [ 305.809581][ T8277] netlink_rcv_skb+0x16b/0x440 [ 305.809606][ T8277] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 305.809635][ T8277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.809679][ T8277] ? bpf_lsm_capable+0x9/0x10 [ 305.809700][ T8277] ? security_capable+0x7e/0x260 [ 305.809723][ T8277] ? ns_capable+0xd7/0x110 [ 305.809750][ T8277] nfnetlink_rcv+0x1b4/0x430 [ 305.809777][ T8277] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 305.809803][ T8277] ? netlink_deliver_tap+0x1ae/0xd30 [ 305.809833][ T8277] netlink_unicast+0x53c/0x7f0 [ 305.809861][ T8277] ? __pfx_netlink_unicast+0x10/0x10 [ 305.809895][ T8277] netlink_sendmsg+0x8b8/0xd70 [ 305.809925][ T8277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.809961][ T8277] ____sys_sendmsg+0xaaf/0xc90 [ 305.809982][ T8277] ? copy_msghdr_from_user+0x10b/0x160 [ 305.810009][ T8277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.810041][ T8277] ___sys_sendmsg+0x135/0x1e0 [ 305.810069][ T8277] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.810104][ T8277] ? __pfx_lock_release+0x10/0x10 [ 305.810124][ T8277] ? trace_lock_acquire+0x14e/0x1f0 [ 305.810141][ T8277] ? __fget_files+0x206/0x3a0 [ 305.810156][ T8277] __sys_sendmsg+0x16e/0x220 [ 305.810173][ T8277] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.810189][ T8277] ? __x64_sys_futex+0x1e1/0x4c0 [ 305.810211][ T8277] do_syscall_64+0xcd/0x250 [ 305.810228][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.810244][ T8277] RIP: 0033:0x7f9719d8d169 [ 305.810253][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.810263][ T8277] RSP: 002b:00007f971abf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.810274][ T8277] RAX: ffffffffffffffda RBX: 00007f9719fa5fa0 RCX: 00007f9719d8d169 [ 305.810281][ T8277] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 305.810287][ T8277] RBP: 00007f9719e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.810292][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.810298][ T8277] R13: 0000000000000000 R14: 00007f9719fa5fa0 R15: 00007ffd6d8e1b58 [ 305.810312][ T8277] [ 305.810315][ T8277] Mem-Info: [ 306.329096][ T5866] usb 1-1: USB disconnect, device number 21 [ 306.538706][ T30] audit: type=1400 audit(2000000097.910:691): avc: denied { map } for pid=8345 comm="syz.1.642" path="socket:[18942]" dev="sockfs" ino=18942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 306.590309][ T8349] sctp: [Deprecated]: syz.3.643 (pid 8349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.590309][ T8349] Use struct sctp_sack_info instead [ 306.684851][ T30] audit: type=1400 audit(2000000097.910:692): avc: denied { read } for pid=8345 comm="syz.1.642" path="socket:[18942]" dev="sockfs" ino=18942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 307.090004][ T8358] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 307.097044][ T8358] VFS: Can't find a romfs filesystem on dev nullb0. [ 307.097044][ T8358] [ 307.529843][ T8358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.646'. [ 307.587614][ T8277] active_anon:11937 inactive_anon:1 isolated_anon:0 [ 307.587614][ T8277] active_file:18397 inactive_file:38810 isolated_file:0 [ 307.587614][ T8277] unevictable:1280 dirty:370 writeback:0 [ 307.587614][ T8277] slab_reclaimable:6532 slab_unreclaimable:102885 [ 307.587614][ T8277] mapped:36192 shmem:8152 pagetables:971 [ 307.587614][ T8277] sec_pagetables:0 bounce:0 [ 307.587614][ T8277] kernel_misc_reclaimable:0 [ 307.587614][ T8277] free:1298477 free_pcp:83 free_cma:0 [ 307.689993][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 309.048762][ T8277] Node 0 active_anon:46892kB inactive_anon:4kB active_file:73468kB inactive_file:155168kB unevictable:4608kB isolated(anon):0kB isolated(file):0kB mapped:157196kB dirty:1488kB writeback:0kB shmem:31196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no [ 309.081160][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.133775][ T8366] fuse: Unknown parameter '000000000000000000000120x0000000000000009' [ 310.169332][ T8277] Node 1 active_anon:1024kB inactive_anon:0kB active_file:120kB inactive_file:72kB unevictable:512kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 310.712356][ T8277] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 310.739413][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.789149][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.838287][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.947530][ T8277] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 310.955830][ T8277] Node 0 DMA32 free:1232024kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:29516kB inactive_anon:4kB active_file:73468kB inactive_file:155068kB unevictable:4608kB writepending:800kB present:3129332kB managed:2547360kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:408kB free_cma:0kB [ 310.993222][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.994491][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.009044][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.020452][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.469332][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.476406][ T8379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.492191][ T30] audit: type=1400 audit(2000000102.940:693): avc: denied { write } for pid=8377 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 311.511519][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 311.516595][ T8277] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 311.543222][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.593286][ T30] audit: type=1400 audit(2000000103.030:694): avc: denied { mounton } for pid=8375 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 311.783210][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 311.818431][ T8277] Node 1 Normal free:3915320kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:1024kB inactive_anon:0kB active_file:120kB inactive_file:72kB unevictable:512kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.847548][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.053584][ T30] audit: type=1400 audit(2000000359.386:695): avc: denied { read } for pid=8390 comm="syz.1.655" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.133444][ T30] audit: type=1400 audit(2000000359.386:696): avc: denied { open } for pid=8390 comm="syz.1.655" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 312.156826][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.033638][ T5876] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.119219][ T5831] Bluetooth: hci5: command tx timeout [ 313.162946][ T8277] lowmem_reserve[]: 0 0 0 0 0 [ 313.288482][ T8397] FAULT_INJECTION: forcing a failure. [ 313.288482][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.326893][ T8397] CPU: 1 UID: 0 PID: 8397 Comm: syz.2.658 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 313.326918][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.326928][ T8397] Call Trace: [ 313.326933][ T8397] [ 313.326940][ T8397] dump_stack_lvl+0x16c/0x1f0 [ 313.326969][ T8397] should_fail_ex+0x50a/0x650 [ 313.327000][ T8397] _copy_from_iter+0x2a1/0x1560 [ 313.327018][ T8397] ? trace_lock_acquire+0x14e/0x1f0 [ 313.327038][ T8397] ? __alloc_skb+0x1fe/0x380 [ 313.327063][ T8397] ? __pfx__copy_from_iter+0x10/0x10 [ 313.327078][ T8397] ? __virt_addr_valid+0x1a4/0x590 [ 313.327105][ T8397] ? __virt_addr_valid+0x5e/0x590 [ 313.327122][ T8397] ? __phys_addr_symbol+0x30/0x80 [ 313.327139][ T8397] ? __check_object_size+0x488/0x710 [ 313.327162][ T8397] netlink_sendmsg+0x813/0xd70 [ 313.327191][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.327224][ T8397] ____sys_sendmsg+0xaaf/0xc90 [ 313.327243][ T8397] ? copy_msghdr_from_user+0x10b/0x160 [ 313.327268][ T8397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.327298][ T8397] ___sys_sendmsg+0x135/0x1e0 [ 313.327325][ T8397] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.327360][ T8397] ? __pfx_lock_release+0x10/0x10 [ 313.327383][ T8397] ? trace_lock_acquire+0x14e/0x1f0 [ 313.327408][ T8397] ? __fget_files+0x206/0x3a0 [ 313.327430][ T8397] __sys_sendmsg+0x16e/0x220 [ 313.327455][ T8397] ? __pfx___sys_sendmsg+0x10/0x10 [ 313.327502][ T8397] do_syscall_64+0xcd/0x250 [ 313.327527][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.327549][ T8397] RIP: 0033:0x7fc0fe38d169 [ 313.327563][ T8397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.327579][ T8397] RSP: 002b:00007fc0ff190038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.327596][ T8397] RAX: ffffffffffffffda RBX: 00007fc0fe5a5fa0 RCX: 00007fc0fe38d169 [ 313.327607][ T8397] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 313.327617][ T8397] RBP: 00007fc0ff190090 R08: 0000000000000000 R09: 0000000000000000 [ 313.327627][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.327636][ T8397] R13: 0000000000000000 R14: 00007fc0fe5a5fa0 R15: 00007ffe3a3706d8 [ 313.327659][ T8397] [ 313.811097][ T8277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.959715][ T8277] Node 0 DMA32: 1*4kB (E) 53*8kB (UME) 240*16kB (UME) 375*32kB (UME) 312*64kB (UME) 465*128kB (UME) 211*256kB (UME) 59*512kB (UME) 27*1024kB (UME) 27*2048kB (UME) 233*4096kB (UME) = 1217292kB [ 315.038768][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 315.930212][ T5831] Bluetooth: hci5: command tx timeout [ 315.976801][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 316.179939][ T8277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.390635][ T5876] usb 4-1: device descriptor read/all, error -71 [ 316.397099][ T8277] Node 1 Normal: 240*4kB (UE) 51*8kB (UME) 42*16kB (UME) 196*32kB (UME) 85*64kB (UE) 27*128kB (UME) 17*256kB (UM) 15*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 944*4096kB (M) = 3915320kB [ 316.613512][ T8277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.971877][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 316.981271][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.987544][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.995446][ T30] audit: type=1400 audit(2000000364.356:697): avc: denied { read write } for pid=8408 comm="syz.2.659" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 317.164719][ T8411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.177387][ T8277] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 317.407601][ T30] audit: type=1400 audit(2000000364.396:698): avc: denied { open } for pid=8408 comm="syz.2.659" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 317.950266][ T8277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.999543][ T5831] Bluetooth: hci5: command tx timeout [ 318.101000][ T8277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 318.149090][ T30] audit: type=1400 audit(2000000364.886:699): avc: denied { append } for pid=8413 comm="syz.1.662" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.231604][ T8277] 56808 total pagecache pages [ 318.239339][ T8277] 1 pages in swap cache [ 318.258495][ T8277] Free swap = 124748kB [ 318.283156][ T8277] Total swap = 124996kB [ 318.307650][ T8277] 2097051 pages RAM [ 318.347333][ T8277] 0 pages HighMem/MovableOnly [ 318.625457][ T8277] 428553 pages reserved [ 318.648831][ T1202] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 318.699521][ T8277] 0 pages cma reserved [ 318.732971][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.790966][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.829213][ T8375] bridge_slave_0: entered allmulticast mode [ 318.850194][ T1202] usb 1-1: config 6 has an invalid interface number: 174 but max is 0 [ 318.884884][ T8375] bridge_slave_0: entered promiscuous mode [ 318.898838][ T1202] usb 1-1: config 6 has no interface number 0 [ 318.930889][ T1202] usb 1-1: config 6 interface 174 has no altsetting 0 [ 318.943613][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.079163][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.089699][ T1202] usb 1-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=9c.1f [ 319.213722][ T8375] bridge_slave_1: entered allmulticast mode [ 319.228870][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.264655][ T8375] bridge_slave_1: entered promiscuous mode [ 319.279020][ T1202] usb 1-1: Product: syz [ 319.334368][ T1202] usb 1-1: Manufacturer: syz [ 319.362185][ T1202] usb 1-1: SerialNumber: syz [ 320.078787][ T5831] Bluetooth: hci5: command tx timeout [ 320.353003][ T5910] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 320.417296][ T8426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.607796][ T8426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.969771][ T1202] rtl8150 1-1:6.174: couldn't find required endpoints [ 324.976724][ T1202] rtl8150 1-1:6.174: probe with driver rtl8150 failed with error -5 [ 325.110123][ T1202] usb 1-1: USB disconnect, device number 22 [ 325.660166][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.834272][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.352887][ T8447] random: crng reseeded on system resumption [ 328.128137][ T30] audit: type=1400 audit(2000000375.566:700): avc: denied { bind } for pid=8449 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 328.152038][ T8375] team0: Port device team_slave_0 added [ 328.229527][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 338.299053][ T30] audit: type=1400 audit(2000000375.566:701): avc: denied { setopt } for pid=8449 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.810048][ T30] audit: type=1400 audit(2000000375.586:702): avc: denied { write } for pid=8449 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 338.967476][ T30] audit: type=1400 audit(2000000375.616:703): avc: denied { read } for pid=8451 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 339.747276][ T8375] team0: Port device team_slave_1 added [ 340.036092][ T7133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.104124][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.121688][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.171211][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.182041][ T5867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 340.223804][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.350401][ T5867] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 340.372044][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.415782][ T5867] usb 3-1: config 0 descriptor?? [ 340.447674][ T5867] usb 3-1: selecting invalid altsetting 1 [ 340.476757][ T5867] flexcop_usb: set interface failed. [ 340.505365][ T5867] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 340.852425][ T7133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.895263][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.677'. [ 340.954377][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.985441][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.133993][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.235169][ T7133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.416800][ T7133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.427384][ T5867] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 341.466827][ T8375] hsr_slave_0: entered promiscuous mode [ 341.497129][ T8375] hsr_slave_1: entered promiscuous mode [ 341.509498][ T8375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.527423][ T8375] Cannot create hsr debugfs directory [ 341.610893][ T5867] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 341.636919][ T5867] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 341.670293][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.702955][ T5867] usb 4-1: config 0 descriptor?? [ 341.753591][ T5867] usb 4-1: bad CDC descriptors [ 342.030671][ T5876] usb 4-1: USB disconnect, device number 15 [ 342.146495][ T7133] bridge_slave_1: left allmulticast mode [ 342.163454][ T7133] bridge_slave_1: left promiscuous mode [ 342.181232][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.201262][ T7133] bridge_slave_0: left allmulticast mode [ 342.206931][ T7133] bridge_slave_0: left promiscuous mode [ 342.249263][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.938874][ T8480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.009370][ T5941] usb 3-1: USB disconnect, device number 25 [ 347.474872][ T30] audit: type=1400 audit(2000000394.916:704): avc: denied { bind } for pid=8491 comm="syz.0.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 347.632328][ T30] audit: type=1400 audit(2000000394.916:705): avc: denied { name_bind } for pid=8491 comm="syz.0.681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 347.653424][ T5866] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 350.968883][ T30] audit: type=1400 audit(2000000394.916:706): avc: denied { node_bind } for pid=8491 comm="syz.0.681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 351.545459][ T30] audit: type=1400 audit(2000000398.986:707): avc: denied { setopt } for pid=8502 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 355.558745][ T8521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.457440][ T7133] bond1 (unregistering): (slave gretap1): Releasing active interface [ 358.229962][ T8527] hfs: unable to load iocharset "io#harset" [ 358.709531][ T8534] block device autoloading is deprecated and will be removed. [ 358.854534][ T8534] syz.3.691: attempt to access beyond end of device [ 358.854534][ T8534] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 359.481575][ T7133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.849011][ T7133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.887837][ T7133] bond0 (unregistering): Released all slaves [ 362.287315][ T7133] bond1 (unregistering): Released all slaves [ 362.430426][ T30] audit: type=1400 audit(2000000409.836:708): avc: denied { create } for pid=8542 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 362.458010][ T30] audit: type=1400 audit(2000000409.836:709): avc: denied { write } for pid=8542 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 362.620453][ T7133] bond2 (unregistering): Released all slaves [ 367.538876][ T8555] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 367.554578][ T6771] Bluetooth: hci1: Frame reassembly failed (-84) [ 367.689430][ T30] audit: type=1400 audit(2000000415.126:710): avc: denied { ioctl } for pid=8550 comm="syz.2.695" path="socket:[20026]" dev="sockfs" ino=20026 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 368.183298][ T8567] syz.0.696 (8567): drop_caches: 2 [ 369.139362][ T8584] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 369.148422][ T8584] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 369.157720][ T8584] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 369.165832][ T8584] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 369.174296][ T8584] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 369.181838][ T8584] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.442842][ T30] audit: type=1400 audit(2000000416.886:711): avc: denied { ioctl } for pid=8587 comm="syz.1.701" path="socket:[20313]" dev="sockfs" ino=20313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.505474][ T8589] No such timeout policy "syz0" [ 369.512870][ T7133] hsr_slave_0: left promiscuous mode [ 369.556187][ T7133] hsr_slave_1: left promiscuous mode [ 369.594149][ T7133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.602708][ T5831] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 369.675963][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.955378][ T7133] veth1_macvtap: left promiscuous mode [ 369.978973][ T7133] veth0_macvtap: left promiscuous mode [ 369.994911][ T7133] veth1_vlan: left promiscuous mode [ 370.021781][ T7133] veth0_vlan: left promiscuous mode [ 370.266920][ T5867] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 370.492426][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.541494][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.612727][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 370.651983][ T30] audit: type=1400 audit(2000000418.096:712): avc: denied { write } for pid=8609 comm="syz.0.707" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 370.687137][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 370.687166][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.696108][ T5867] usb 3-1: config 0 descriptor?? [ 371.263350][ T8621] random: crng reseeded on system resumption [ 371.749895][ T8584] Bluetooth: hci6: command tx timeout [ 372.205730][ T5867] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 372.207208][ T5867] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 372.627776][ T5867] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 373.898796][ T8584] Bluetooth: hci6: command tx timeout [ 373.901193][ T30] audit: type=1400 audit(2000000420.616:713): avc: denied { connect } for pid=8609 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.901231][ T30] audit: type=1400 audit(2000000421.176:714): avc: denied { read } for pid=8609 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 373.901259][ T30] audit: type=1400 audit(2000000421.176:715): avc: denied { shutdown } for pid=8609 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 373.987271][ T30] audit: type=1400 audit(2000000421.436:716): avc: denied { watch } for pid=8597 comm="syz.2.703" path="/123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 373.987320][ T30] audit: type=1400 audit(2000000421.436:717): avc: denied { watch_sb watch_reads } for pid=8597 comm="syz.2.703" path="/123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.093400][ T5910] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 374.630952][ T8626] netlink: 596 bytes leftover after parsing attributes in process `syz.1.708'. [ 375.027637][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.396907][ T7133] team0 (unregistering): Port device team_slave_1 removed [ 375.489995][ T7133] team0 (unregistering): Port device team_slave_0 removed [ 376.831129][ T8584] Bluetooth: hci6: command tx timeout [ 378.270707][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.277029][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.062741][ T8584] Bluetooth: hci6: command tx timeout [ 379.249042][ T5910] usb 3-1: device descriptor read/64, error -110 [ 379.492247][ T5910] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 379.659065][ T5910] usb 3-1: device descriptor read/64, error -32 [ 379.888753][ T1202] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 379.919185][ T5910] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 379.963446][ T5910] usb 3-1: device descriptor read/8, error -32 [ 380.059013][ T1202] usb 1-1: Using ep0 maxpacket: 32 [ 380.208412][ T8615] netlink: 'syz.1.708': attribute type 29 has an invalid length. [ 380.261260][ T1202] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 380.325414][ T1202] usb 1-1: config 0 has no interface number 0 [ 380.331995][ T5910] usb 3-1: reset high-speed USB device number 26 using dummy_hcd [ 380.389324][ T8598] raw-gadget.0 gadget.2: failed to queue suspend event [ 380.414355][ T1202] usb 1-1: config 0 interface 184 has no altsetting 0 [ 380.464407][ T8598] raw-gadget.0 gadget.2: failed to queue disconnect event [ 380.502074][ T8644] netlink: 56 bytes leftover after parsing attributes in process `syz.3.713'. [ 380.523995][ T1202] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 380.602910][ T1202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.602935][ T1202] usb 1-1: Product: syz [ 380.602950][ T1202] usb 1-1: Manufacturer: syz [ 380.602964][ T1202] usb 1-1: SerialNumber: syz [ 380.604532][ T1202] usb 1-1: config 0 descriptor?? [ 380.610462][ T1202] smsc75xx v1.0.0 [ 380.618786][ T5910] usb 3-1: device not accepting address 26, error -71 [ 380.630948][ T5867] usb 3-1: USB disconnect, device number 26 [ 380.867051][ T8583] chnl_net:caif_netlink_parms(): no params data found [ 381.066613][ T8659] syz.1.714 (8659): drop_caches: 2 [ 381.229371][ T30] audit: type=1400 audit(2000000428.456:718): avc: denied { connect } for pid=8661 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.864892][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.864964][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.865124][ T8583] bridge_slave_0: entered allmulticast mode [ 381.866625][ T8583] bridge_slave_0: entered promiscuous mode [ 381.868306][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.868355][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.868463][ T8583] bridge_slave_1: entered allmulticast mode [ 381.909659][ T8583] bridge_slave_1: entered promiscuous mode [ 382.038527][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.166394][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.192599][ T7133] IPVS: stop unused estimator thread 0... [ 382.341868][ T8583] team0: Port device team_slave_0 added [ 382.353061][ T8583] team0: Port device team_slave_1 added [ 382.629759][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.629776][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.629798][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.646899][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.646914][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.646936][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.714678][ T8583] hsr_slave_0: entered promiscuous mode [ 383.715430][ T8583] hsr_slave_1: entered promiscuous mode [ 383.715853][ T8583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.715927][ T8583] Cannot create hsr debugfs directory [ 387.041040][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -110 [ 387.041071][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 387.044022][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 387.044052][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 387.044072][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 387.044089][ T1202] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 387.044202][ T1202] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 388.050757][ T30] audit: type=1400 audit(2000000435.496:719): avc: denied { map } for pid=8687 comm="syz.1.718" path="socket:[20592]" dev="sockfs" ino=20592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 389.357455][ T1202] usb 1-1: USB disconnect, device number 23 [ 390.682011][ T7133] bridge_slave_1: left allmulticast mode [ 396.779267][ T7133] bridge_slave_1: left promiscuous mode [ 397.201488][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.387076][ T30] audit: type=1400 audit(2000000444.826:720): avc: denied { read write } for pid=8713 comm="syz.0.722" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 397.499115][ T7133] bridge_slave_0: left allmulticast mode [ 397.508962][ T7133] bridge_slave_0: left promiscuous mode [ 397.552428][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.701199][ T30] audit: type=1400 audit(2000000444.826:721): avc: denied { open } for pid=8713 comm="syz.0.722" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 398.054583][ T30] audit: type=1400 audit(2000000444.916:722): avc: denied { read } for pid=8713 comm="syz.0.722" laddr=fe80::a8aa:aaff:feaa:aa16 lport=58 faddr=ff02::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 398.151186][ T1133] Bluetooth: hci1: Frame reassembly failed (-84) [ 398.238725][ T30] audit: type=1400 audit(2000000445.606:723): avc: denied { getopt } for pid=8720 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.556194][ T8729] syz.2.725 (8729): drop_caches: 2 [ 398.614232][ T7133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.854808][ T7133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.910029][ T7133] bond0 (unregistering): Released all slaves [ 398.974448][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.985456][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.994849][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.006035][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.021034][ T5822] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 399.033422][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.288650][ T8738] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.726'. [ 399.302766][ T8738] netlink: zone id is out of range [ 399.532196][ T30] audit: type=1400 audit(2000000446.976:724): avc: denied { map } for pid=8730 comm="syz.1.726" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 399.620273][ T7133] hsr_slave_0: left promiscuous mode [ 399.660283][ T7133] hsr_slave_1: left promiscuous mode [ 399.666649][ T30] audit: type=1400 audit(2000000446.976:725): avc: denied { execute } for pid=8730 comm="syz.1.726" path="/dev/sg0" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 399.705564][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.739949][ T7133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.158812][ T8584] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 400.301570][ T7133] team0 (unregistering): Port device team_slave_1 removed [ 400.426751][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'. [ 400.524822][ T7133] team0 (unregistering): Port device team_slave_0 removed [ 400.859655][ T8749] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 400.868936][ T8749] VFS: Can't find a romfs filesystem on dev nullb0. [ 400.868936][ T8749] [ 400.932549][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.2.729'. [ 401.175502][ T5822] Bluetooth: hci3: command tx timeout [ 401.193797][ T8742] mmap: syz.0.727 (8742): VmData 37859328 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 403.198680][ T5822] Bluetooth: hci3: command tx timeout [ 405.359134][ T5822] Bluetooth: hci3: command tx timeout [ 408.458758][ T5822] Bluetooth: hci3: command tx timeout [ 409.367300][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 409.454613][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.734'. [ 409.510274][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 409.548419][ T30] audit: type=1400 audit(2000000456.986:726): avc: denied { read } for pid=8771 comm="syz.0.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.494760][ T8583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.523183][ T8583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.618247][ T8797] syz.0.737 (8797): drop_caches: 2 [ 411.685164][ T8583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.725162][ T8583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 411.762709][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.794243][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.833727][ T8734] bridge_slave_0: entered allmulticast mode [ 411.856992][ T8734] bridge_slave_0: entered promiscuous mode [ 411.952564][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.975096][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.002271][ T8734] bridge_slave_1: entered allmulticast mode [ 412.227781][ T30] audit: type=1400 audit(2000000459.666:727): avc: denied { connect } for pid=8785 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 412.270758][ T8734] bridge_slave_1: entered promiscuous mode [ 413.788340][ T7133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.044771][ T8810] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 414.051991][ T8810] VFS: Can't find a romfs filesystem on dev nullb0. [ 414.051991][ T8810] [ 414.063060][ T8810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.739'. [ 439.931374][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.946273][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 465.406124][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.803818][ T8584] Bluetooth: hci6: command 0x0406 tx timeout [ 502.323930][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.341064][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.805935][ T8584] Bluetooth: hci3: command 0x0406 tx timeout [ 562.722969][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.984975][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.456252][ T7133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.452311][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.469452][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 648.990668][ T31] INFO: task kworker/0:2:901 blocked for more than 143 seconds. [ 648.998355][ T31] Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 649.358824][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.367544][ T31] task:kworker/0:2 state:D stack:21856 pid:901 tgid:901 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 649.708565][ T31] Workqueue: events switchdev_deferred_process_work [ 649.715225][ T31] Call Trace: [ 649.718508][ T31] [ 649.826760][ T31] __schedule+0xf43/0x5890 [ 649.894424][ T31] ? __pfx_mark_lock+0x10/0x10 [ 649.947714][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 650.008867][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 650.014730][ T31] ? find_held_lock+0x2d/0x110 [ 650.168656][ T31] ? __pfx___schedule+0x10/0x10 [ 650.173573][ T31] ? schedule+0x298/0x350 [ 650.177908][ T31] ? __pfx_lock_release+0x10/0x10 [ 650.371236][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.376503][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.488720][ T31] schedule+0xe7/0x350 [ 650.492880][ T31] schedule_preempt_disabled+0x13/0x30 [ 650.498347][ T31] __mutex_lock+0x6bd/0xb10 [ 650.648672][ T31] ? lock_acquire+0x2f/0xb0 [ 650.653252][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 650.808796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 650.813880][ T31] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 650.938584][ T31] ? trace_lock_acquire+0x14e/0x1f0 [ 650.943844][ T31] ? process_one_work+0x921/0x1ba0 [ 651.098681][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 651.104845][ T31] switchdev_deferred_process_work+0xe/0x20 [ 651.248660][ T31] process_one_work+0x9c5/0x1ba0 [ 651.253679][ T31] ? __pfx_vmstat_update+0x10/0x10 [ 651.343140][ T31] ? __pfx_process_one_work+0x10/0x10 [ 651.378656][ T31] ? assign_work+0x1a0/0x250 [ 651.383968][ T31] worker_thread+0x6c8/0xf00 [ 651.438750][ T31] ? __kthread_parkme+0x148/0x220 [ 651.443843][ T31] ? __pfx_worker_thread+0x10/0x10 [ 651.508646][ T31] kthread+0x3af/0x750 [ 651.512807][ T31] ? __pfx_kthread+0x10/0x10 [ 651.517405][ T31] ? lock_acquire+0x2f/0xb0 [ 651.638724][ T31] ? __pfx_kthread+0x10/0x10 [ 651.643367][ T31] ret_from_fork+0x45/0x80 [ 651.647797][ T31] ? __pfx_kthread+0x10/0x10 [ 651.722217][ T31] ret_from_fork_asm+0x1a/0x30 [ 651.737290][ T31] [ 651.747514][ T31] [ 651.747514][ T31] Showing all locks held in the system: [ 651.828581][ T31] 1 lock held by khungtaskd/31: [ 651.833479][ T31] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 651.928776][ T31] 2 locks held by kswapd1/90: [ 651.933498][ T31] 3 locks held by kworker/0:2/901: [ 651.993323][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 652.068628][ T31] #1: ffffc900039efd18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 652.148577][ T31] #2: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 652.210555][ T31] 2 locks held by kworker/u8:6/3676: [ 652.215877][ T31] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 652.308734][ T31] #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 652.384158][ T31] 2 locks held by syslogd/5176: [ 652.418719][ T31] 5 locks held by udevd/5194: [ 652.423426][ T31] 2 locks held by dhcpcd/5488: [ 652.428177][ T31] #0: ffff8880573066c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0x9e8/0xd00 [ 652.538589][ T31] #1: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 652.547554][ T31] 2 locks held by getty/5579: [ 652.618583][ T31] #0: ffff88814e8e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 652.628412][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 652.728641][ T31] 1 lock held by syz-executor/5806: [ 652.733903][ T31] 1 lock held by syz-executor/5823: [ 652.788728][ T31] #0: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 652.848709][ T31] 6 locks held by kworker/u8:11/7133: [ 652.854146][ T31] #0: ffff88801beeb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 652.935621][ T31] #1: ffffc9000b357d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 653.006590][ T31] #2: ffffffff8fee2890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 653.068595][ T31] #3: ffff88805735e0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 653.116959][ T31] #4: ffff88805735f250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 653.188661][ T31] #5: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x9d/0x710 [ 653.197621][ T31] 1 lock held by syz.0.477/7673: [ 653.258574][ T31] #0: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 653.267627][ T31] 1 lock held by syz-executor/8583: [ 653.354017][ T31] #0: ffffffff8fef85a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 653.398623][ T31] 2 locks held by syz-executor/8734: [ 653.403958][ T31] 3 locks held by syz-executor/8820: [ 653.458658][ T31] 2 locks held by syz-executor/8825: [ 653.463998][ T31] 1 lock held by syz-executor/8829: [ 653.508589][ T31] 1 lock held by syz-executor/8830: [ 653.548620][ T31] [ 653.551000][ T31] ============================================= [ 653.551000][ T31] [ 653.608562][ T31] NMI backtrace for cpu 1 [ 653.608580][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 653.608600][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.608608][ T31] Call Trace: [ 653.608614][ T31] [ 653.608620][ T31] dump_stack_lvl+0x116/0x1f0 [ 653.608647][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 653.608664][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.608687][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 653.608707][ T31] watchdog+0xf62/0x12b0 [ 653.608743][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.608765][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.608789][ T31] ? __kthread_parkme+0x148/0x220 [ 653.608807][ T31] ? __pfx_watchdog+0x10/0x10 [ 653.608832][ T31] kthread+0x3af/0x750 [ 653.608852][ T31] ? __pfx_kthread+0x10/0x10 [ 653.608876][ T31] ? __pfx_kthread+0x10/0x10 [ 653.608895][ T31] ret_from_fork+0x45/0x80 [ 653.608916][ T31] ? __pfx_kthread+0x10/0x10 [ 653.608936][ T31] ret_from_fork_asm+0x1a/0x30 [ 653.608965][ T31] [ 653.608970][ T31] Sending NMI from CPU 1 to CPUs 0: [ 653.619517][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.623836][ C0] NMI backtrace for cpu 0 [ 653.623847][ C0] CPU: 0 UID: 0 PID: 8734 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 653.623863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 653.623871][ C0] RIP: 0010:io_serial_out+0x8f/0xb0 [ 653.623891][ C0] Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1c 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 cc cc cc cc e8 c1 43 dc fc eb a0 e8 4a 44 dc [ 653.623903][ C0] RSP: 0018:ffffc90003f96af8 EFLAGS: 00000002 [ 653.623921][ C0] RAX: 0000000000000020 RBX: 00000000000003f8 RCX: 0000000000000000 [ 653.623930][ C0] RDX: 00000000000003f8 RSI: ffffffff8540c495 RDI: ffffffff9ab847c0 [ 653.623938][ C0] RBP: ffffffff9ab84780 R08: 0000000000000001 R09: 000000000000001f [ 653.623947][ C0] R10: 0000000000000000 R11: 0000000000000005 R12: 0000000000000000 [ 653.623954][ C0] R13: 0000000000000020 R14: ffffffff9ab84780 R15: 0000000000000000 [ 653.623963][ C0] FS: 0000555575f59500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 653.623977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.623985][ C0] CR2: 00007fc0fe316b30 CR3: 0000000063efa000 CR4: 00000000003526f0 [ 653.624002][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 653.624010][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 653.624018][ C0] Call Trace: [ 653.624022][ C0] [ 653.624028][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 653.624043][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 653.624061][ C0] ? nmi_handle+0x1ac/0x5d0 [ 653.624080][ C0] ? io_serial_out+0x8f/0xb0 [ 653.624093][ C0] ? default_do_nmi+0x6a/0x160 [ 653.624108][ C0] ? exc_nmi+0x170/0x1e0 [ 653.624121][ C0] ? end_repeat_nmi+0xf/0x53 [ 653.624141][ C0] ? io_serial_out+0x65/0xb0 [ 653.624154][ C0] ? io_serial_out+0x8f/0xb0 [ 653.624168][ C0] ? io_serial_out+0x8f/0xb0 [ 653.624183][ C0] ? io_serial_out+0x8f/0xb0 [ 653.624197][ C0] [ 653.624201][ C0] [ 653.624206][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 653.624219][ C0] serial8250_console_write+0xfb1/0x1870 [ 653.624240][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 653.624259][ C0] ? rcu_is_watching+0x12/0xc0 [ 653.624273][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 653.624288][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 653.624300][ C0] ? console_lock_spinning_enable+0x9f/0xd0 [ 653.624313][ C0] ? console_flush_all+0x7bd/0xc60 [ 653.624326][ C0] ? lock_acquire+0x2f/0xb0 [ 653.624341][ C0] ? console_flush_all+0x7bd/0xc60 [ 653.624355][ C0] console_flush_all+0x800/0xc60 [ 653.624370][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 653.624383][ C0] ? __pfx_mark_lock+0x10/0x10 [ 653.624401][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 653.624416][ C0] console_unlock+0xd9/0x210 [ 653.624429][ C0] ? __pfx_console_unlock+0x10/0x10 [ 653.624442][ C0] ? lock_acquire+0x2f/0xb0 [ 653.624458][ C0] ? vprintk_emit+0x638/0x6f0 [ 653.624471][ C0] vprintk_emit+0x424/0x6f0 [ 653.624484][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 653.624497][ C0] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 653.624517][ C0] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 653.624538][ C0] _printk+0xc8/0x100 [ 653.624555][ C0] ? __pfx__printk+0x10/0x10 [ 653.624572][ C0] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 653.624591][ C0] __netdev_printk+0x376/0x500 [ 653.624613][ C0] netdev_info+0xe5/0x120 [ 653.624625][ C0] ? __pfx_netdev_info+0x10/0x10 [ 653.624635][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 653.624656][ C0] ? __pfx_bond_xdp_set_features+0x10/0x10 [ 653.624677][ C0] ? sysfs_create_files+0xb6/0x1d0 [ 653.624696][ C0] bond_enslave+0x4e1c/0x6040 [ 653.624718][ C0] ? __pfx_bond_enslave+0x10/0x10 [ 653.624735][ C0] ? __pfx_mark_lock+0x10/0x10 [ 653.624751][ C0] ? find_held_lock+0x2d/0x110 [ 653.624765][ C0] ? finish_task_switch.isra.0+0x212/0xcc0 [ 653.624783][ C0] ? __pfx_lock_release+0x10/0x10 [ 653.624803][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 653.624818][ C0] ? validate_linkmsg+0x57d/0xb60 [ 653.624837][ C0] ? __pfx_validate_linkmsg+0x10/0x10 [ 653.624854][ C0] ? __pfx_bond_enslave+0x10/0x10 [ 653.624871][ C0] do_set_master+0x1bc/0x230 [ 653.624887][ C0] do_setlink.constprop.0+0xb5b/0x3f80 [ 653.624905][ C0] ? __pfx_mark_lock+0x10/0x10 [ 653.624922][ C0] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 653.624940][ C0] ? find_held_lock+0x2d/0x110 [ 653.624953][ C0] ? __mutex_lock+0x2d0/0xb10 [ 653.624970][ C0] ? __pfx_lock_release+0x10/0x10 [ 653.624993][ C0] ? mark_held_locks+0x9f/0xe0 [ 653.625010][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 653.625026][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.625042][ C0] ? __mutex_lock+0x1cc/0xb10 [ 653.625059][ C0] ? rtnl_newlink+0x5d9/0x1d60 [ 653.625077][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 653.625093][ C0] ? cap_capable+0xb3/0x250 [ 653.625114][ C0] rtnl_newlink+0x1306/0x1d60 [ 653.625134][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 653.625153][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 653.625169][ C0] ? cred_has_capability.isra.0+0x192/0x2f0 [ 653.625188][ C0] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 653.625207][ C0] ? find_held_lock+0x2d/0x110 [ 653.625221][ C0] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 653.625239][ C0] ? __pfx_lock_release+0x10/0x10 [ 653.625255][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 653.625270][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 653.625288][ C0] rtnetlink_rcv_msg+0x95b/0xea0 [ 653.625306][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.625324][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 653.625340][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 653.625356][ C0] ? hlock_class+0x4e/0x130 [ 653.625368][ C0] ? __lock_acquire+0xcc5/0x3c40 [ 653.625386][ C0] netlink_rcv_skb+0x16b/0x440 [ 653.625405][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 653.625423][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.625445][ C0] ? netlink_deliver_tap+0x1ae/0xd30 [ 653.625463][ C0] netlink_unicast+0x53c/0x7f0 [ 653.625481][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 653.625500][ C0] netlink_sendmsg+0x8b8/0xd70 [ 653.625519][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.625539][ C0] __sys_sendto+0x488/0x4f0 [ 653.625556][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 653.625580][ C0] ? __fput+0x68d/0xb70 [ 653.625596][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 653.625612][ C0] ? do_syscall_64+0x91/0x250 [ 653.625629][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.625644][ C0] do_syscall_64+0xcd/0x250 [ 653.625661][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.625677][ C0] RIP: 0033:0x7ff35618effc [ 653.625688][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 653.625700][ C0] RSP: 002b:00007ffedf629790 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 653.625711][ C0] RAX: ffffffffffffffda RBX: 00007ff356ed4620 RCX: 00007ff35618effc [ 653.625719][ C0] RDX: 0000000000000028 RSI: 00007ff356ed4670 RDI: 0000000000000003 [ 653.625727][ C0] RBP: 0000000000000000 R08: 00007ffedf6297e4 R09: 000000000000000c [ 653.625735][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 653.625743][ C0] R13: 0000000000000000 R14: 00007ff356ed4670 R15: 0000000000000000 [ 653.625755][ C0] [ 654.488592][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 654.495467][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 654.505946][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 654.515981][ T31] Call Trace: [ 654.519242][ T31] [ 654.522154][ T31] dump_stack_lvl+0x3d/0x1f0 [ 654.526740][ T31] panic+0x71d/0x800 [ 654.530619][ T31] ? __pfx_panic+0x10/0x10 [ 654.535017][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 654.540376][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 654.546339][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 654.551695][ T31] ? watchdog+0xdcc/0x12b0 [ 654.556102][ T31] ? watchdog+0xdbf/0x12b0 [ 654.560508][ T31] watchdog+0xddd/0x12b0 [ 654.564747][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.569428][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 654.574625][ T31] ? __kthread_parkme+0x148/0x220 [ 654.579633][ T31] ? __pfx_watchdog+0x10/0x10 [ 654.584297][ T31] kthread+0x3af/0x750 [ 654.588350][ T31] ? __pfx_kthread+0x10/0x10 [ 654.592927][ T31] ? __pfx_kthread+0x10/0x10 [ 654.597512][ T31] ret_from_fork+0x45/0x80 [ 654.601913][ T31] ? __pfx_kthread+0x10/0x10 [ 654.606507][ T31] ret_from_fork_asm+0x1a/0x30 [ 654.611271][ T31] [ 654.614468][ T31] Kernel Offset: disabled [ 654.618769][ T31] Rebooting in 86400 seconds..