last executing test programs: 12.718320105s ago: executing program 2 (id=905): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f8ffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b705000008f6ffff4500000076000000bf910000000000007608ffff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x912}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 11.560233131s ago: executing program 2 (id=910): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000080)=ANY=[@ANYBLOB="0080000000030000"]) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDGKBSENT(r3, 0x4b48, 0xfffffffffffffffd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000f9ff003f6e797e5c17ae22000020", @ANYRES32=r7, @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) set_mempolicy(0x1, 0x0, 0x3ff) socket$inet6(0xa, 0x3, 0x7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a4}}, 0x4048010) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000002f3144e900000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000201009f6eae02000000adb20200000000152c000000000000000001020014bb7acde1b8e96408d7000000000300050000200000"], 0x80}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4, @ANYRES16=r11, @ANYBLOB="ef9cf122d2f71da12e3656bfbb500a656bdc59009e462fb1aea8d20f16976f6544065440b0f4cdd6749597847c4c65c4be34f7ca1f095161a7bc47b0bf42bda11f48333ea6e93ad7e6e47ded710edc63234e70a19bf17ce0cc56a304ebaef6bbc5c8f4c2e5b896ad4aaffbe6696ea8130a8fe6393660fc134f9e2a42740274aefc7ae94dec51208d6d29179d61b8d5db02f5ba0fb9d079e6512a789d69fffb5995103352fcf9295fadc63c89acd4b9df80380aade6", @ANYBLOB="4b5a140ab34d672782014c7af2f2896e1187aaf02fe8b2d773c967660c078ef4196ac9a9c450ce8e2709e325f4718d7fb98736679babcaf85333d163a3a28b", @ANYRES64=r0, @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) 11.062816508s ago: executing program 1 (id=914): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unlink(0x0) r2 = socket$inet(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f0000005500), 0x0, 0x4001) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040084) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000080), 0x3d) 10.595846096s ago: executing program 1 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d08, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8934, &(0x7f0000000a80)={{0x2, 0x4e23, @multicast1}, {0x0, @local}, 0x6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'}) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xeeee0000, 0xd000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a99b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f8f4ed0b27cedd1c5e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec0100fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9bedb6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRESOCT=r5, @ANYRESOCT=r5], 0x0) 10.411787797s ago: executing program 4 (id=918): setfsuid(0xee00) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x4008}, 0x0) setresuid(0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000002c0), 0x3, 0x2) sched_setscheduler(0x0, 0x6, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x200000000004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', &(0x7f0000000500)={0x1cb000, 0x8d, 0x18}, 0x18) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000540)={0x5, 0xfb, 0x40, 0xec, 0x3, 0x4, 0x5, 0x7, 0x1, 0x2, 0x9, 0xb, 0xfd, 0xcc}, 0xe) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) gettid() fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 9.490057208s ago: executing program 1 (id=919): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000fa7884d7a22cd4bf74cbeeb301001160000000004e220000000400"/48, @ANYRES32=0x0, @ANYBLOB="0100"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r1, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x5, 0x0, 0x9}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000340)={0x0, 0x0, 0x0, @lost_msgs}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x4, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x48, 0x9, 0x0, 0x3334}, {0x20, 0x1, 0x0, 0xfffff00c}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000440)={0xd99d, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0xb5, 0x0, 0xfd, 0x0, 0x0, 0x8}) 8.35303451s ago: executing program 1 (id=920): timer_create(0x0, &(0x7f0000000280)={0x0, 0x11}, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x8000, 0x3, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x1, 0x194, 0x14}, &(0x7f00000000c0)='./file0\x00', 0x18}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf35031100800c00027b45897f"], 0x114}], 0x1}, 0x4040054) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000040)) 8.075167051s ago: executing program 2 (id=922): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/239, 0xef}, {&(0x7f0000000180)=""/37, 0x25}], 0x2, &(0x7f0000000200)=""/60, 0x3c}, 0x7fffffff}, {{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/50, 0x32}, {&(0x7f00000003c0)=""/16, 0x10}], 0x3, &(0x7f0000000440)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)=""/170, 0xaa}, {&(0x7f0000001500)=""/91, 0x5b}, {&(0x7f0000001580)=""/205, 0xcd}], 0x3, &(0x7f00000016c0)}, 0x8}, {{&(0x7f0000001700)=@sco, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001780)=""/138, 0x8a}, {&(0x7f0000001840)=""/248, 0xf8}, {&(0x7f0000001940)=""/95, 0x5f}, {&(0x7f00000019c0)=""/124, 0x7c}, {&(0x7f0000001a40)=""/28, 0x1c}], 0x5}, 0x7f}], 0x4, 0x100, &(0x7f0000001c40)={r1, r2+60000000}) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c80)={0xffffffffffffffff, 0x0, 0x18}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d40)={'syztnl0\x00', &(0x7f0000001cc0)={'ip6gre0\x00', 0x0, 0x2f, 0x52, 0x0, 0x7, 0x44, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x90, 0x4, 0x9}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002040)={0x1b, 0x0, 0x0, 0x3, 0x0, r3, 0x8, '\x00', r4, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000002100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002180)=0x0) sched_getattr(r6, &(0x7f00000021c0)={0x38}, 0x38, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000002200)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x7, [@null, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default]}) symlinkat(&(0x7f0000002280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000022c0)='./file1\x00') recvmmsg(r5, &(0x7f0000002d80)=[{{&(0x7f0000002300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002400)=[{&(0x7f0000002380)=""/97, 0x61}], 0x1, &(0x7f0000002440)=""/189, 0xbd}, 0x3}, {{&(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002580)=""/22, 0x16}], 0x1, &(0x7f0000002600)=""/137, 0x89}, 0x8}, {{&(0x7f00000026c0)=@ax25={{0x3, @default}, [@rose, @default, @default, @null, @netrom, @bcast, @null, @default]}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002740)=""/86, 0x56}, {&(0x7f00000027c0)=""/222, 0xde}, {&(0x7f00000028c0)=""/23, 0x17}], 0x3, &(0x7f0000002940)=""/220, 0xdc}, 0x2}, {{&(0x7f0000002a40)=@x25, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002ac0)=""/190, 0xbe}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/73, 0x49}, {&(0x7f0000002c40)=""/219, 0xdb}], 0x4}, 0x7}], 0x4, 0x10000, &(0x7f0000002e80)) r9 = syz_open_dev$vivid(&(0x7f0000002ec0), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000002f00)={0x9, 0xb, 0x3, 0x0, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000002f40), 0x40480, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) sched_getattr(r6, &(0x7f0000003000)={0x38}, 0x38, 0x0) getrandom(&(0x7f0000003040)=""/96, 0x60, 0x3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000030c0)=0x5, 0x40, 0x4) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003100), 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r10, 0x40045613, &(0x7f0000003140)=0x4) write$cgroup_subtree(r10, &(0x7f0000003180)={[{0x2b, 'net'}, {0x2d, 'cpu'}, {0x0, 'pids'}]}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r8, 0x800442d2, &(0x7f00000032c0)={0x8, &(0x7f00000031c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}, {}]}) connect$qrtr(r8, &(0x7f0000003300)={0x2a, 0x3, 0x7fff}, 0xc) sched_getattr(r6, &(0x7f0000003340)={0x38}, 0x38, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000003380)={0x79, 0x0, 0x22c}) 7.968660384s ago: executing program 4 (id=923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000840)=ANY=[]) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000080), 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0xfffff882}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) 7.923925023s ago: executing program 0 (id=924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000fa7884d7a22cd4bf74cbeeb301001160000000004e220000000400"/48, @ANYRES32=0x0, @ANYBLOB="0100"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004800010000000700000000000a008000", @ANYRES32=r1, @ANYBLOB="0000000008000200cf010000140001"], 0x38}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x5, 0x0, 0x9}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, &(0x7f0000000340)={0x0, 0x0, 0x0, @lost_msgs}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x4, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000440)={0xd99d, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0xb5, 0x0, 0xfd, 0x0, 0x0, 0x8}) 6.821114036s ago: executing program 2 (id=925): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) flock(r0, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0\x00', @random="01fd9bf46d9e"}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001300)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000100)="c97024afd8306ffb4bb2da1cfcda3db0e7f2aacb21bcdd6ecfdc99044399b9ab16ad8c8c8a5d4c0045f1e1d642996e806e7126f5df67a27a388c36f0a11517eec9c93631208a31010ed1ff03eb875db387a9747dea1ca4f6cf5e0197b9975e1418e943073560fb9894155979fa78453c75673f49b248a51bf8", 0x79}, {&(0x7f0000000180)="4cf984b4921ad8a9c3f285865f472b93c93858e0f7902478bfbd61e5ef6b7a85502958ae51b66dfdf44356a089de772365bd4c", 0x33}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="2cfb78886f88237776", 0x9}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="1400000000000000290000000c000000001400000000000000290000f73e0000000300000000000000480000000000000029000000390000000006004000000000fe880000000000000000000000000001fe8000000000000000000000000000bbfe8004000000000000000000000000011400000000000000290000003e0000000400000000000000"], 0x90}}], 0x1, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 6.256313964s ago: executing program 0 (id=926): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f8ffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000000007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b705000008f6ffff4500000076000000bf910000000000007608ffff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x912}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.259558443s ago: executing program 2 (id=927): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unlink(0x0) r2 = socket$inet(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f0000005500), 0x0, 0x4001) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040084) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000080), 0x3d) 4.373935108s ago: executing program 0 (id=929): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) flock(0xffffffffffffffff, 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'veth0\x00', @random="01fd9bf46d9e"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 4.223083702s ago: executing program 4 (id=930): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001740)={'syztnl1\x00', &(0x7f0000001680)={'tunl0\x00', 0x0, 0x8000, 0x80, 0xffff, 0x1, {{0x1a, 0x4, 0x0, 0x5, 0x68, 0x68, 0x0, 0xb, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0x54, 0x0, 0xa, [0x1, 0x9]}, @noop, @generic={0x89, 0xc, "351bb6701b1e44833884"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x4a, [@dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x49, 0x0, 0xb, [0x0, 0x8000, 0xc2, 0x9, 0x54dc, 0x80000000]}]}}}}}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x281, &(0x7f0000000100)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2}}, 0x2e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000140008"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket(0x11, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000840)=""/4096, 0x1000) 4.00885763s ago: executing program 0 (id=931): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prctl$PR_SET_NAME(0xf, 0x0) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, 0xffffffffffffffff, 0xd000) sched_setscheduler(0x0, 0x1, 0x0) getpid() r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000040)=0x2, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 3.686864256s ago: executing program 3 (id=932): close(0xffffffffffffffff) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 3.542094079s ago: executing program 4 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002440)=""/102400, 0x19000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) close(0xffffffffffffffff) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="d8", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0xafe6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) add_key(&(0x7f0000002100)='asymmetric\x00', 0x0, &(0x7f00000008c0)="3080", 0x2, 0xfffffffffffffffe) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x50) 3.130797638s ago: executing program 1 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090002000000060002000100000008000a0000000000080019000a01f1ff08001900ac1414bb"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3.087192173s ago: executing program 0 (id=935): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80280, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x20040040}, 0x4c005) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/169, 0xa9}], 0x2}, 0x2}], 0x1, 0x20, 0x0) flock(r0, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0\x00', @random="01fd9bf46d9e"}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001300)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000100)="c97024afd8306ffb4bb2da1cfcda3db0e7f2aacb21bcdd6ecfdc99044399b9ab16ad8c8c8a5d4c0045f1e1d642996e806e7126f5df67a27a388c36f0a11517eec9c93631208a31010ed1ff03eb875db387a9747dea1ca4f6cf5e0197b9975e1418e943073560fb9894155979fa78453c75673f49b248a51bf8", 0x79}, {&(0x7f0000000180)="4cf984b4921ad8a9c3f285865f472b93c93858e0f7902478bfbd61e5ef6b7a85502958ae51b66dfdf44356a089de772365bd4c", 0x33}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="2cfb78886f88237776", 0x9}], 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="1400000000000000290000000c000000001400000000000000290000f73e0000000300000000000000480000000000000029000000390000000006004000000000fe880000000000000000000000000001fe8000000000000000000000000000bbfe8004000000000000000000000000011400000000000000290000003e0000000400000000000000"], 0x90}}], 0x1, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 2.260067985s ago: executing program 4 (id=936): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x28, 0x1c, 0x100, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x6}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x40c0) dup3(r1, r0, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000400000000000000000000005af34e9f1f15350e00000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff80"], 0xfc}}, 0x0) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) set_mempolicy(0x8004, &(0x7f0000003ac0)=0x9, 0x5) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="100c0608266be7d0ec5020895ae9", 0xe, 0xfffffffffffffffc) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.176339828s ago: executing program 1 (id=937): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xfff, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r2, 0x8914, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 2.174725326s ago: executing program 0 (id=938): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unlink(0x0) socket$inet(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r2, &(0x7f0000005500), 0x0, 0x4001) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040084) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x3d) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.021022209s ago: executing program 3 (id=939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x2b00, 0x0) (async) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x140000000}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) (async) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000001c0)={0x2, 0x2}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000780)={'#! ', '', [{0x20, 'freezer.parent_freezing\x00'}, {0x20, '\x00\x00\x00'}, {0x20, 'security.capability\x00'}, {0x20, '\'#%'}, {0x20, '\x8b\xda\x0fx\xedf\xa4\xb1\xdap\xccP,MF\xbdN\x12^K\xf1\xa0>C\x12\x89\x83b\xe2\xe9\x7f\x9a\xe2\xd0x\xa9\xda\xd7\xcd\x13\xec\x8e\xd4.LI\x90\x91\x16\xf0\bq\xfd\xdbD\xbeA\x81\x9d%,\xc8N\x96e\xca\t\xdb\xd0\xa2\xf7}~~)g\x15a4\x84P\xf0\x1b!5\xea\\\xf49\xc9\xe9\x19\x19!^\xceZ\xb9\xfa\\\x94\t\x7fw\xda\x0e\xbdq\"\xe0j_V\x19\xbe\r{\x98\x81j\xe5zL\x9c\xe7\x19D\x8a\xe2\xd8$\xf4\xbb\x10%'}, {0x20, '$(,&-+^+[}\\!'}, {0x20, 'security.capability\x00voiAD\xa0_KC\xcb\xfe2v&K\xdd\x0f\xa7\x15\x9d\x80k\xf1\x1c\a\xcb\xd92,\x1a\x12Hf8\xc3\x7f\x00\xb4d.\x88\x1f\x9b\xe2\xddBP\xa7p\xd9\x17\v\xf00\xd5{\x06_\xfd\xcc\x00x\xa1\xb4:\xda4\x10\x81\xc7\xcb}\x1c^\xab\xb1\x9bA5\x11\x99\tk\x16\x0fX|5\xf8Y5\xa0\x11\xa2\xf8}\xc7\xf2\xcf8\x19\xc2\x9ae>>\x7f\xad\x8a\xf5\"\xd3\x02\xb2<\xa2%\xff0\xbf|\xa4\x00\xd6\xaab;\xff\x9e\xf6\xd7\xc5u\x8d\xbdG\x8c\x06\x06\x1aW\xed\x1a\x9b\xcaIJ\xed\xcf'}, {0x20, '#! '}], 0xa, "d8cefe5fec46d632679e02efff7956130ac48602204c45637fff480827297be1bcbdbf48746c789ed89d051f04abff1d8d88e3d1939fa0183b185b4c055123f1a6434b403d1b13e8644a55fcf0148b6f93ee161c9bb950f29ee1e305007862f7f4c1aacafff7149db4c373250063eb113792fbbc158786b0f6fe4a64dcf17a39d6c05cc43abf1b2b115ea60692b9d31f4d50fa98ee086bf7ab79f4d88420d0eb70cfc729e43e4870f62aaac8299f476aa04a8cd5f2c5516ab7"}, 0x236) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x61) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x7ffd, 0x2200) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (rerun: 32) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0x10000) 1.962712705s ago: executing program 4 (id=940): close(0xffffffffffffffff) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.857951334s ago: executing program 3 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 1.521794863s ago: executing program 3 (id=942): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') symlink(&(0x7f0000003040)='./file0\x00', 0x0) 1.325748248s ago: executing program 3 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r4, 0x58, &(0x7f0000000100)}, 0x87) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000f7dbdf25010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00010024180b86", @ANYRES32, @ANYBLOB="0c0002000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) socket(0x10, 0x80003, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000004, 0x42031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r9, &(0x7f0000019080)=""/102352, 0x18fd0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x208000, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000400c) 254.158294ms ago: executing program 3 (id=944): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000a00)={{}, 0x0, 0x4, @inherit={0x50, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0xa643, {0x19, 0x9, 0x800, 0xd572, 0x2}, [0x7]}}, @name="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"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) map_shadow_stack(&(0x7f00008fb000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4800, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) clock_adjtime(0x2, &(0x7f0000000300)={0x252, 0x0, 0x3ff, 0xf, 0x6, 0x2, 0xffffffff, 0x3, 0x0, 0x100000001, 0xfff, 0x8bd, 0x10001, 0x5, 0x6, 0xffffffffffff7fff, 0x2, 0x5, 0x8, 0x1, 0x10, 0x2, 0x2, 0xf, 0x4, 0x9}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x40, 0x0, 0xfd, 0x60fa}) 0s ago: executing program 2 (id=945): set_mempolicy(0x6005, &(0x7f0000000040)=0x20000002, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000356ffc)=0xffffff3d, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @remote}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/206, 0xce, 0x4) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000356ffc)=0xffffff3d, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2=0xac1414aa}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x40001) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x25}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x13f) kernel console output (not intermixed with test programs): 082][ T5942] usb 2-1: Manufacturer: syz [ 182.927562][ T5942] usb 2-1: SerialNumber: syz [ 182.929212][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 182.934936][ T5942] usb 2-1: config 0 descriptor?? [ 183.311510][ T30] audit: type=1400 audit(1752346033.284:364): avc: denied { write } for pid=7543 comm="syz.4.417" path="socket:[14737]" dev="sockfs" ino=14737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.512651][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 183.640965][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 184.006155][ T5942] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 184.029673][ T7526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.412'. [ 184.127150][ T7552] FAULT_INJECTION: forcing a failure. [ 184.127150][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.140404][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.4.419 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 184.140427][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.140436][ T7552] Call Trace: [ 184.140442][ T7552] [ 184.140448][ T7552] dump_stack_lvl+0x16c/0x1f0 [ 184.140479][ T7552] should_fail_ex+0x512/0x640 [ 184.140506][ T7552] _copy_from_user+0x2e/0xd0 [ 184.140531][ T7552] copy_msghdr_from_user+0x98/0x160 [ 184.140556][ T7552] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 184.140586][ T7552] ? irqentry_exit+0x3b/0x90 [ 184.140614][ T7552] ___sys_sendmsg+0xfe/0x1d0 [ 184.140639][ T7552] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.140659][ T7552] ? __lock_acquire+0x622/0x1c90 [ 184.140706][ T7552] __sys_sendmsg+0x16d/0x220 [ 184.140730][ T7552] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.140770][ T7552] do_syscall_64+0xcd/0x4c0 [ 184.140796][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.140814][ T7552] RIP: 0033:0x7feb6e18e929 [ 184.140828][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.140846][ T7552] RSP: 002b:00007feb6f01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.140863][ T7552] RAX: ffffffffffffffda RBX: 00007feb6e3b6080 RCX: 00007feb6e18e929 [ 184.140875][ T7552] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 184.140885][ T7552] RBP: 00007feb6f01f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.140896][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.140906][ T7552] R13: 0000000000000000 R14: 00007feb6e3b6080 R15: 00007ffc19633bb8 [ 184.140929][ T7552] [ 184.462114][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 184.477794][ T7539] ceph: No mds server is up or the cluster is laggy [ 184.689269][ T7556] i2c i2c-0: Invalid block write size 49 [ 184.888166][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 185.508097][ T7558] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.420'. [ 185.941663][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 185.947763][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 185.954016][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 185.960988][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 187.303347][ T5942] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 187.339233][ T9] libceph: connect (1)[c::]:6789 error -101 [ 187.386170][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 187.714407][ T5908] usb 2-1: USB disconnect, device number 15 [ 187.829492][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.427'. [ 188.092388][ T9] libceph: connect (1)[c::]:6789 error -101 [ 188.099947][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 188.131509][ T7575] ceph: No mds server is up or the cluster is laggy [ 188.235100][ T7589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 188.438383][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 188.508811][ T7589] IPVS: Error joining to the multicast group [ 188.702205][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 188.762606][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.427'. [ 188.894189][ T7598] openvswitch: netlink: Flow actions attr not present in new flow. [ 189.003872][ T7599] block device autoloading is deprecated and will be removed. [ 189.035415][ T7598] md: md2 stopped. [ 189.256990][ T7582] IPVS: Error joining to the multicast group [ 189.627028][ T7585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'. [ 189.969295][ T30] audit: type=1400 audit(1752346040.024:365): avc: denied { accept } for pid=7604 comm="syz.2.435" lport=42740 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 190.728455][ T7609] netlink: 'syz.0.433': attribute type 12 has an invalid length. [ 191.849589][ T7620] ubi: mtd0 is already attached to ubi31 [ 192.189315][ T7632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.077614][ T7637] netlink: 72 bytes leftover after parsing attributes in process `syz.0.442'. [ 193.689359][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.3.444'. [ 193.752276][ T7643] netlink: 64 bytes leftover after parsing attributes in process `syz.3.444'. [ 193.918192][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.991508][ T5893] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 194.579172][ T5942] psmouse serio4: Failed to reset mouse on : -5 [ 194.599653][ T5893] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.900057][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055239800: rx timeout, send abort [ 196.409371][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055239800: abort rx timeout. Force session deactivation [ 196.454154][ T30] audit: type=1400 audit(1752346046.264:366): avc: denied { read } for pid=5186 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 196.478747][ T5893] usb 1-1: config 0 has no interfaces? [ 196.494656][ T5893] usb 1-1: string descriptor 0 read error: -71 [ 196.501017][ T5893] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 196.529007][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.538521][ T30] audit: type=1400 audit(1752346046.264:367): avc: denied { search } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.572740][ T5893] usb 1-1: config 0 descriptor?? [ 196.594616][ T30] audit: type=1400 audit(1752346046.264:368): avc: denied { search } for pid=5186 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.633485][ T5893] usb 1-1: can't set config #0, error -71 [ 196.640589][ T5893] usb 1-1: USB disconnect, device number 15 [ 196.648104][ T30] audit: type=1400 audit(1752346046.264:369): avc: denied { add_name } for pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.669231][ T30] audit: type=1400 audit(1752346046.264:370): avc: denied { create } for pid=5186 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.690415][ T30] audit: type=1400 audit(1752346046.264:371): avc: denied { append open } for pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.729482][ T30] audit: type=1400 audit(1752346046.274:372): avc: denied { getattr } for pid=5186 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 196.771057][ T7662] netlink: 666 bytes leftover after parsing attributes in process `syz.0.449'. [ 196.782870][ T7663] FAULT_INJECTION: forcing a failure. [ 196.782870][ T7663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.796915][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.2.450 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 196.796939][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.796949][ T7663] Call Trace: [ 196.796955][ T7663] [ 196.796962][ T7663] dump_stack_lvl+0x16c/0x1f0 [ 196.796999][ T7663] should_fail_ex+0x512/0x640 [ 196.797025][ T7663] _copy_from_user+0x2e/0xd0 [ 196.797048][ T7663] move_addr_to_kernel+0x65/0x170 [ 196.797069][ T7663] __sys_connect+0xb1/0x160 [ 196.797087][ T7663] ? __pfx___sys_connect+0x10/0x10 [ 196.797114][ T7663] ? __pfx_ksys_write+0x10/0x10 [ 196.797141][ T7663] __x64_sys_connect+0x72/0xb0 [ 196.797158][ T7663] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.797180][ T7663] do_syscall_64+0xcd/0x4c0 [ 196.797202][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.797218][ T7663] RIP: 0033:0x7fcc0cb8e929 [ 196.797229][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.797242][ T7663] RSP: 002b:00007fcc0dac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 196.797256][ T7663] RAX: ffffffffffffffda RBX: 00007fcc0cdb5fa0 RCX: 00007fcc0cb8e929 [ 196.797265][ T7663] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 196.797273][ T7663] RBP: 00007fcc0dac8090 R08: 0000000000000000 R09: 0000000000000000 [ 196.797281][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.797288][ T7663] R13: 0000000000000000 R14: 00007fcc0cdb5fa0 R15: 00007fffa42c0068 [ 196.797306][ T7663] [ 196.959880][ T30] audit: type=1400 audit(1752346046.864:373): avc: denied { write } for pid=7661 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 196.979733][ T30] audit: type=1400 audit(1752346046.864:374): avc: denied { read } for pid=7661 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 197.229679][ T30] audit: type=1400 audit(1752346047.284:375): avc: denied { remount } for pid=7661 comm="syz.4.451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 197.395851][ T7673] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.452'. [ 197.776005][ T5893] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 199.261584][ T5942] misc userio: Buffer overflowed, userio client isn't keeping up [ 199.799573][ T5893] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 199.927268][ T5893] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 200.008615][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.113884][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 200.176878][ T5893] usb 1-1: config 1 has no interface number 0 [ 200.238471][ T5893] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 200.275172][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.322085][ T5893] usb 1-1: can't set config #1, error -71 [ 200.344554][ T5893] usb 1-1: USB disconnect, device number 16 [ 200.451222][ T7683] FAULT_INJECTION: forcing a failure. [ 200.451222][ T7683] name failslab, interval 1, probability 0, space 0, times 0 [ 200.464111][ T7683] CPU: 0 UID: 0 PID: 7683 Comm: syz.1.457 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 200.464135][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.464145][ T7683] Call Trace: [ 200.464151][ T7683] [ 200.464157][ T7683] dump_stack_lvl+0x16c/0x1f0 [ 200.464185][ T7683] should_fail_ex+0x512/0x640 [ 200.464207][ T7683] ? fs_reclaim_acquire+0xae/0x150 [ 200.464226][ T7683] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 200.464250][ T7683] should_failslab+0xc2/0x120 [ 200.464274][ T7683] __kmalloc_noprof+0xd2/0x510 [ 200.464296][ T7683] ? trace_kmalloc+0x2b/0xd0 [ 200.464319][ T7683] ? __kmalloc_noprof+0x242/0x510 [ 200.464344][ T7683] tomoyo_realpath_from_path+0xc2/0x6e0 [ 200.464371][ T7683] ? tomoyo_fill_path_info+0x233/0x420 [ 200.464393][ T7683] tomoyo_mount_acl+0x1ae/0x850 [ 200.464413][ T7683] ? kernel_text_address+0x8d/0x100 [ 200.464434][ T7683] ? __kernel_text_address+0xd/0x40 [ 200.464452][ T7683] ? unwind_get_return_address+0x59/0xa0 [ 200.464470][ T7683] ? arch_stack_walk+0xa6/0x100 [ 200.464489][ T7683] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 200.464518][ T7683] ? stack_trace_save+0x8e/0xc0 [ 200.464562][ T7683] ? tomoyo_domain+0xbb/0x150 [ 200.464578][ T7683] ? tomoyo_profile+0x47/0x60 [ 200.464596][ T7683] tomoyo_mount_permission+0x16d/0x420 [ 200.464618][ T7683] ? tomoyo_mount_permission+0x14f/0x420 [ 200.464641][ T7683] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 200.464679][ T7683] security_sb_mount+0x9b/0x260 [ 200.464703][ T7683] path_mount+0x128/0x2020 [ 200.464731][ T7683] ? kmem_cache_free+0x2d1/0x4d0 [ 200.464752][ T7683] ? __pfx_path_mount+0x10/0x10 [ 200.464795][ T7683] ? putname+0x154/0x1a0 [ 200.464815][ T7683] __x64_sys_mount+0x28d/0x310 [ 200.464840][ T7683] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.464874][ T7683] do_syscall_64+0xcd/0x4c0 [ 200.464901][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.464917][ T7683] RIP: 0033:0x7fc805f8e929 [ 200.464932][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.464948][ T7683] RSP: 002b:00007fc806d89038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.464971][ T7683] RAX: ffffffffffffffda RBX: 00007fc8061b5fa0 RCX: 00007fc805f8e929 [ 200.464982][ T7683] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000140 [ 200.464992][ T7683] RBP: 00007fc806d89090 R08: 0000000000000000 R09: 0000000000000000 [ 200.465002][ T7683] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000001 [ 200.465011][ T7683] R13: 0000000000000000 R14: 00007fc8061b5fa0 R15: 00007ffe2bfed8f8 [ 200.465036][ T7683] [ 200.465042][ T7683] ERROR: Out of memory at tomoyo_realpath_from_path. [ 200.606663][ T5942] input: PS/2 Generic Mouse as /devices/serio4/input/input19 [ 200.821436][ T5893] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 200.846938][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.983529][ T5893] usb 1-1: device descriptor read/64, error -71 [ 201.031988][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.151410][ T5942] psmouse serio4: Failed to enable mouse on [ 201.241431][ T5893] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 201.351073][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.365496][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.376188][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.386006][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.386058][ T7694] netlink: 244 bytes leftover after parsing attributes in process `syz.3.461'. [ 201.414565][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.424785][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.432863][ T5893] usb 1-1: device descriptor read/64, error -71 [ 201.809964][ T5893] usb usb1-port1: attempt power cycle [ 201.847757][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.023833][ T7704] overlayfs: failed to resolve './file0': -2 [ 202.062384][ T5942] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.090315][ T7705] capability: warning: `syz.2.464' uses deprecated v2 capabilities in a way that may be insecure [ 202.292237][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 202.333680][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.430977][ T5942] usb 2-1: config 0 has no interfaces? [ 202.562642][ T5942] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 202.687237][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.801525][ T5942] usb 2-1: Product: syz [ 202.808909][ T5942] usb 2-1: Manufacturer: syz [ 202.816130][ T5942] usb 2-1: SerialNumber: syz [ 202.837057][ T5942] usb 2-1: config 0 descriptor?? [ 202.856246][ T5893] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 202.913277][ T5893] usb 1-1: device descriptor read/8, error -71 [ 203.129441][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 203.156876][ T61] bridge_slave_1: left allmulticast mode [ 203.171712][ T5893] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 203.179419][ T61] bridge_slave_1: left promiscuous mode [ 203.190132][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.212163][ T5893] usb 1-1: device descriptor read/8, error -71 [ 203.219171][ T61] bridge_slave_0: left allmulticast mode [ 203.227956][ T61] bridge_slave_0: left promiscuous mode [ 203.235242][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.331193][ T5893] usb usb1-port1: unable to enumerate USB device [ 203.338953][ T7725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 203.451930][ T5849] Bluetooth: hci0: command tx timeout [ 203.750531][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 203.750548][ T30] audit: type=1400 audit(1752346053.804:377): avc: denied { create } for pid=7723 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 203.877132][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 203.933360][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 203.996255][ T7741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.470'. [ 204.404237][ T5942] usb 2-1: USB disconnect, device number 16 [ 204.469129][ T7749] binder: 7747:7749 ioctl c0306201 0 returned -14 [ 204.900539][ T7761] overlayfs: failed to resolve './file0': -2 [ 205.100761][ T30] audit: type=1400 audit(1752346055.154:378): avc: denied { write } for pid=7765 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.231987][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.245456][ T30] audit: type=1400 audit(1752346055.294:379): avc: denied { mounton } for pid=7765 comm="syz.1.477" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.303142][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.404161][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.455320][ T61] bond0 (unregistering): Released all slaves [ 205.481452][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 205.489909][ T7740] IPVS: Error joining to the multicast group [ 205.490437][ T7739] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 205.510515][ T7739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 205.532307][ T5893] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 205.546118][ T5849] Bluetooth: hci0: command tx timeout [ 205.557947][ T5893] usb 4-1: config 0 has no interface number 0 [ 205.571143][ T5893] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 205.583341][ T7739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 205.595044][ T30] audit: type=1400 audit(1752346055.644:380): avc: denied { firmware_load } for pid=7736 comm="syz.2.470" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 205.615390][ T5893] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 205.629112][ T5893] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.639552][ T5893] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 205.658892][ T5893] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 206.582876][ T5893] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 206.592684][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.600655][ T5893] usb 4-1: Product: syz [ 206.613575][ T5893] usb 4-1: Manufacturer: syz [ 206.618194][ T5893] usb 4-1: SerialNumber: syz [ 206.660853][ T5893] usb 4-1: config 0 descriptor?? [ 206.809230][ T7764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 207.578115][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.611743][ T5849] Bluetooth: hci0: command tx timeout [ 207.648609][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.716903][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.743768][ T7788] 9pnet_fd: Insufficient options for proto=fd [ 207.752197][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.775058][ T7690] bridge_slave_0: entered allmulticast mode [ 207.845075][ T7690] bridge_slave_0: entered promiscuous mode [ 208.248993][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.275388][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.298792][ T7690] bridge_slave_1: entered allmulticast mode [ 208.333026][ T7690] bridge_slave_1: entered promiscuous mode [ 208.450143][ T7804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.572264][ T7809] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 208.580047][ T7809] /dev/nullb0: Can't open blockdev [ 208.603657][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.621270][ T7809] syz.1.484: attempt to access beyond end of device [ 208.621270][ T7809] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 208.687598][ T61] hsr_slave_0: left promiscuous mode [ 208.726188][ T61] hsr_slave_1: left promiscuous mode [ 208.739446][ T7809] qnx6: unable to read the first superblock [ 208.746492][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.757874][ T7809] syz.1.484: attempt to access beyond end of device [ 208.757874][ T7809] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 208.774598][ T7809] qnx6: unable to read the first superblock [ 208.780991][ T7809] qnx6: unable to read the first superblock [ 208.788862][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.813403][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.831173][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.878982][ T61] veth1_macvtap: left promiscuous mode [ 208.887139][ T61] veth0_macvtap: left promiscuous mode [ 208.894150][ T61] veth1_vlan: left promiscuous mode [ 208.900418][ T61] veth0_vlan: left promiscuous mode [ 208.911390][ T974] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 209.041940][ T974] usb 3-1: device descriptor read/64, error -71 [ 209.269470][ T7764] syz.3.473 (7764): drop_caches: 2 [ 209.281713][ T974] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 209.375426][ T5893] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 209.398067][ T5893] etas_es58x 4-1:0.219: could not retrieve the product info string [ 209.411436][ T974] usb 3-1: device descriptor read/64, error -71 [ 209.436404][ T7821] overlayfs: failed to resolve './file0': -2 [ 209.521726][ T974] usb usb3-port1: attempt power cycle [ 209.688139][ T30] audit: type=1400 audit(1752346059.744:381): avc: denied { module_request } for pid=7824 comm="syz.3.489" kmod="net-pf-16-proto-4-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 209.721571][ T5849] Bluetooth: hci0: command tx timeout [ 209.926695][ T30] audit: type=1400 audit(1752346059.984:382): avc: denied { bind } for pid=7824 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 209.957455][ T974] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 210.023215][ T974] usb 3-1: device descriptor read/8, error -71 [ 210.631600][ T974] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 210.942356][ T974] usb 3-1: device descriptor read/8, error -71 [ 211.032380][ T61] team0 (unregistering): Port device team_slave_1 removed [ 211.070780][ T61] team0 (unregistering): Port device team_slave_0 removed [ 211.161934][ T974] usb usb3-port1: unable to enumerate USB device [ 211.308577][ T7840] ubi: mtd0 is already attached to ubi31 [ 212.340442][ T7690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.632022][ T7826] netlink: 'syz.1.488': attribute type 12 has an invalid length. [ 212.698298][ T5893] usb 4-1: USB disconnect, device number 7 [ 212.845815][ T5893] etas_es58x 4-1:0.219: Disconnecting syz syz [ 213.730205][ T7690] team0: Port device team_slave_0 added [ 214.229180][ T7690] team0: Port device team_slave_1 added [ 214.461253][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'. [ 214.481299][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'. [ 214.493133][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.500268][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.561591][ T7690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.576715][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.585586][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.613719][ T7690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.675777][ T7690] hsr_slave_0: entered promiscuous mode [ 215.687885][ T7690] hsr_slave_1: entered promiscuous mode [ 215.694131][ T7690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.701786][ T7690] Cannot create hsr debugfs directory [ 215.721394][ T7892] binder: 7891:7892 ioctl c0306201 200000001440 returned -11 [ 215.911193][ T30] audit: type=1400 audit(1752346065.854:383): avc: denied { create } for pid=7884 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 216.254052][ T30] audit: type=1400 audit(1752346066.314:384): avc: denied { read } for pid=7897 comm="syz.3.508" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.263975][ T7903] overlayfs: missing 'workdir' [ 216.283529][ T7899] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 216.290156][ T7899] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.463089][ T30] audit: type=1400 audit(1752346066.314:385): avc: denied { open } for pid=7897 comm="syz.3.508" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 216.489320][ T7899] vhci_hcd vhci_hcd.0: Device attached [ 216.997005][ T30] audit: type=1400 audit(1752346066.624:386): avc: denied { getopt } for pid=7897 comm="syz.3.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.071442][ T7904] vhci_hcd: connection closed [ 217.073543][ T6393] vhci_hcd: stop threads [ 217.152349][ T5893] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 217.703393][ T6393] vhci_hcd: release socket [ 217.708744][ T6393] vhci_hcd: disconnect device [ 217.742071][ T7923] ip6erspan0: entered allmulticast mode [ 218.387761][ T7939] FAULT_INJECTION: forcing a failure. [ 218.387761][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 218.408755][ T7941] overlayfs: failed to resolve './file1': -2 [ 218.447530][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.3.516 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 218.447558][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.447567][ T7939] Call Trace: [ 218.447571][ T7939] [ 218.447575][ T7939] dump_stack_lvl+0x16c/0x1f0 [ 218.447595][ T7939] should_fail_ex+0x512/0x640 [ 218.447609][ T7939] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 218.447625][ T7939] should_failslab+0xc2/0x120 [ 218.447642][ T7939] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 218.447655][ T7939] ? netlink_dump+0xa01/0xd00 [ 218.447675][ T7939] ? __alloc_skb+0x2b2/0x380 [ 218.447688][ T7939] ? __pfx___mutex_lock+0x10/0x10 [ 218.447705][ T7939] __alloc_skb+0x2b2/0x380 [ 218.447718][ T7939] ? __pfx___alloc_skb+0x10/0x10 [ 218.447736][ T7939] netlink_dump+0x192/0xd00 [ 218.447753][ T7939] ? __pfx_netlink_dump+0x10/0x10 [ 218.447774][ T7939] ? kfree_skbmem+0x1a4/0x1f0 [ 218.447786][ T7939] netlink_recvmsg+0x7dc/0xa90 [ 218.447803][ T7939] ? __pfx_netlink_recvmsg+0x10/0x10 [ 218.447825][ T7939] sock_recvmsg+0x1f6/0x250 [ 218.447836][ T7939] ____sys_recvmsg+0x218/0x6b0 [ 218.447849][ T7939] ? __pfx_____sys_recvmsg+0x10/0x10 [ 218.447864][ T7939] ? __lock_acquire+0x622/0x1c90 [ 218.447877][ T7939] ___sys_recvmsg+0x114/0x1a0 [ 218.447891][ T7939] ? __pfx____sys_recvmsg+0x10/0x10 [ 218.447906][ T7939] ? find_held_lock+0x2b/0x80 [ 218.447930][ T7939] do_recvmmsg+0x2fe/0x750 [ 218.447945][ T7939] ? __pfx_do_recvmmsg+0x10/0x10 [ 218.447962][ T7939] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 218.447981][ T7939] ? __fget_files+0x20e/0x3c0 [ 218.447998][ T7939] __x64_sys_recvmmsg+0x22a/0x280 [ 218.448014][ T7939] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 218.448033][ T7939] do_syscall_64+0xcd/0x4c0 [ 218.448048][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.448059][ T7939] RIP: 0033:0x7f5f5eb8e929 [ 218.448068][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.448078][ T7939] RSP: 002b:00007f5f5fa2c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 218.448088][ T7939] RAX: ffffffffffffffda RBX: 00007f5f5edb5fa0 RCX: 00007f5f5eb8e929 [ 218.448095][ T7939] RDX: 0000000000000001 RSI: 0000200000002380 RDI: 0000000000000003 [ 218.448101][ T7939] RBP: 00007f5f5fa2c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.448107][ T7939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.448112][ T7939] R13: 0000000000000000 R14: 00007f5f5edb5fa0 R15: 00007ffd1971dad8 [ 218.448125][ T7939] [ 219.402728][ T7950] binder: BINDER_SET_CONTEXT_MGR already set [ 219.422658][ T7950] binder: 7946:7950 ioctl 4018620d 200000000040 returned -16 [ 219.523121][ T7954] netlink: 'syz.0.521': attribute type 8 has an invalid length. [ 219.680971][ T30] audit: type=1400 audit(1752346069.654:387): avc: denied { map } for pid=7955 comm="syz.1.522" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.803383][ T5942] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 219.825107][ T30] audit: type=1400 audit(1752346069.654:388): avc: denied { execute } for pid=7955 comm="syz.1.522" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.842493][ T7962] input: syz1 as /devices/virtual/input/input20 [ 219.848853][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.952282][ T5942] usb 1-1: device descriptor read/64, error -71 [ 220.034529][ T30] audit: type=1400 audit(1752346069.984:389): avc: denied { setattr } for pid=7958 comm="syz.3.523" name="ptype" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 220.251498][ T5942] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 220.370117][ T7690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.396698][ T7690] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.404041][ T5942] usb 1-1: device descriptor read/64, error -71 [ 220.413748][ T7690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.427132][ T7690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.512947][ T5942] usb usb1-port1: attempt power cycle [ 220.591874][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 220.712242][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 220.781528][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 220.799899][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 220.882336][ T5942] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 220.902669][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 220.928560][ T24] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 220.951199][ T5942] usb 1-1: device descriptor read/8, error -71 [ 220.968490][ T7690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.971508][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.017356][ T30] audit: type=1400 audit(1752346071.074:390): avc: denied { append } for pid=7987 comm="syz.2.527" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 221.024104][ T7690] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.047780][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 221.082981][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.101257][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.526'. [ 221.120903][ T7981] IPVS: Error joining to the multicast group [ 221.129972][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 221.139152][ T24] usb 2-1: Product: syz [ 221.147950][ T24] usb 2-1: Manufacturer: syz [ 221.162157][ T24] usb 2-1: SerialNumber: syz [ 221.170307][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.177401][ T6397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.221571][ T5942] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 221.344065][ T5942] usb 1-1: device descriptor read/8, error -71 [ 221.345207][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.357588][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.367891][ T24] usb 2-1: config 0 descriptor?? [ 221.506155][ T5942] usb usb1-port1: unable to enumerate USB device [ 221.626219][ T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 221.689676][ T7998] FAULT_INJECTION: forcing a failure. [ 221.689676][ T7998] name failslab, interval 1, probability 0, space 0, times 0 [ 221.708843][ T5189] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 221.725575][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.3.528 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 221.725604][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.725612][ T7998] Call Trace: [ 221.725616][ T7998] [ 221.725620][ T7998] dump_stack_lvl+0x16c/0x1f0 [ 221.725640][ T7998] should_fail_ex+0x512/0x640 [ 221.725653][ T7998] ? __kvmalloc_node_noprof+0x124/0x620 [ 221.725668][ T7998] should_failslab+0xc2/0x120 [ 221.725684][ T7998] __kvmalloc_node_noprof+0x137/0x620 [ 221.725697][ T7998] ? io_alloc_cache_init+0x33/0x170 [ 221.725714][ T7998] ? io_alloc_cache_init+0x33/0x170 [ 221.725727][ T7998] io_alloc_cache_init+0x33/0x170 [ 221.725741][ T7998] io_uring_setup+0x5e1/0x2120 [ 221.725755][ T7998] ? __pfx_io_uring_setup+0x10/0x10 [ 221.725767][ T7998] ? avc_has_perm_noaudit+0x117/0x3b0 [ 221.725779][ T7998] ? avc_has_perm_noaudit+0x149/0x3b0 [ 221.725795][ T7998] ? ksys_write+0x1ac/0x250 [ 221.725813][ T7998] ? __pfx_ksys_write+0x10/0x10 [ 221.725829][ T7998] __x64_sys_io_uring_setup+0xc2/0x170 [ 221.725842][ T7998] do_syscall_64+0xcd/0x4c0 [ 221.725857][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.725868][ T7998] RIP: 0033:0x7f5f5eb8e929 [ 221.725877][ T7998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.725887][ T7998] RSP: 002b:00007f5f5fa0b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 221.725899][ T7998] RAX: ffffffffffffffda RBX: 00007f5f5edb6080 RCX: 00007f5f5eb8e929 [ 221.725905][ T7998] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000608a [ 221.725911][ T7998] RBP: 00007f5f5fa0b090 R08: 0000000000000000 R09: 0000000000000000 [ 221.725917][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.725922][ T7998] R13: 0000000000000000 R14: 00007f5f5edb6080 R15: 00007ffd1971dad8 [ 221.725935][ T7998] [ 221.920529][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.938355][ T5189] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 222.089026][ T5189] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 222.167651][ T5189] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 222.177909][ T5189] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 222.184261][ T24] usb 2-1: USB disconnect, device number 17 [ 222.290593][ T8007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 222.297122][ T8007] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 222.354721][ T8007] vhci_hcd vhci_hcd.0: Device attached [ 222.434943][ T8013] overlayfs: failed to resolve './file1': -2 [ 222.468519][ T7690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.531476][ T9] vhci_hcd: vhci_device speed not set [ 222.592733][ T9] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 222.641469][ T5908] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 222.804697][ T5893] vhci_hcd: vhci_device speed not set [ 222.833174][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 222.914687][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 222.969510][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 223.164872][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 223.239486][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 223.272090][ T5908] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.324079][ T5908] usb 3-1: New USB device found, idVendor=ffac, idProduct=920f, bcdDevice=b2.89 [ 223.362102][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.417618][ T5908] usb 3-1: Product: syz [ 223.454242][ T5908] usb 3-1: Manufacturer: syz [ 223.458889][ T5908] usb 3-1: SerialNumber: syz [ 223.493757][ T5908] usb 3-1: config 0 descriptor?? [ 223.660258][ T7690] veth0_vlan: entered promiscuous mode [ 223.669582][ T30] audit: type=1400 audit(1752346073.714:391): avc: denied { read } for pid=8040 comm="syz.1.535" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.692421][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.702916][ T30] audit: type=1400 audit(1752346073.714:392): avc: denied { open } for pid=8040 comm="syz.1.535" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 223.712018][ T7690] veth1_vlan: entered promiscuous mode [ 223.726146][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.798294][ T8008] vhci_hcd: connection reset by peer [ 223.817948][ T12] vhci_hcd: stop threads [ 223.827590][ T12] vhci_hcd: release socket [ 223.848171][ T5908] usb 3-1: USB disconnect, device number 16 [ 223.858591][ T12] vhci_hcd: disconnect device [ 224.089438][ T7690] veth0_macvtap: entered promiscuous mode [ 224.095804][ T8041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.110811][ T7690] veth1_macvtap: entered promiscuous mode [ 224.225310][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.233145][ T8041] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.276182][ T8041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.283517][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.291591][ T8041] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.355875][ T7690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.370681][ T8041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.372294][ T7690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.378907][ T8041] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.512675][ T7690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.531731][ T7690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.552776][ T30] audit: type=1400 audit(1752346075.574:393): avc: denied { append } for pid=8064 comm="syz.2.539" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 225.576536][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.612247][ T8041] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.619031][ T8041] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 225.675248][ T8041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 225.681264][ T8041] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 225.697336][ T8041] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 225.810390][ T6397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.837095][ T6397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.851554][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 225.858595][ T30] audit: type=1400 audit(1752346075.914:394): avc: denied { bind } for pid=8071 comm="syz.3.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.877887][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.010192][ T8080] overlayfs: failed to resolve './file1': -2 [ 226.022201][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.030045][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.272123][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 226.374749][ T5155] Bluetooth: hci3: command 0x0406 tx timeout [ 226.415476][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 226.739001][ T8102] fuse: Unknown parameter 'grou00000000000000000000' [ 227.497100][ T8108] virtiofs: Unknown parameter 'barrier' [ 227.691882][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 227.691994][ T5849] Bluetooth: hci0: command 0x0405 tx timeout [ 227.860328][ T9] vhci_hcd: vhci_device speed not set [ 227.931512][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 228.016868][ T8134] IPv6: sit1: Disabled Multicast RS [ 228.025696][ T8134] sit1: entered allmulticast mode [ 228.323750][ T30] audit: type=1326 audit(1752346078.234:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 228.371760][ T30] audit: type=1326 audit(1752346078.234:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 228.411726][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 228.491605][ T5155] Bluetooth: hci2: command 0x0406 tx timeout [ 228.494003][ T30] audit: type=1326 audit(1752346078.234:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8121 comm="syz.4.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 228.580787][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.548'. [ 229.468088][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 229.477266][ T8132] IPVS: Error joining to the multicast group [ 229.488707][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.551'. [ 229.771502][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 229.778314][ T5155] Bluetooth: hci0: command 0x0405 tx timeout [ 229.799985][ T8137] nvme_fabrics: missing parameter 'transport=%s' [ 229.809207][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 229.893401][ T8137] nvme_fabrics: missing parameter 'nqn=%s' [ 230.763278][ T8160] trusted_key: encrypted_key: insufficient parameters specified [ 231.851402][ T5849] Bluetooth: hci0: command 0x0405 tx timeout [ 234.503520][ T8217] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.566'. [ 234.891488][ T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 237.251137][ T30] audit: type=1400 audit(1752346087.304:398): avc: denied { read } for pid=8226 comm="syz.4.570" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.296271][ T30] audit: type=1400 audit(1752346087.304:399): avc: denied { open } for pid=8226 comm="syz.4.570" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.322143][ T30] audit: type=1400 audit(1752346087.314:400): avc: denied { ioctl } for pid=8226 comm="syz.4.570" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 237.460956][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 237.472682][ T8238] veth1_to_hsr: entered promiscuous mode [ 237.564402][ T8241] xt_TPROXY: Can be used only with -p tcp or -p udp [ 237.651428][ T5893] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 237.973783][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 238.064231][ T5893] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 238.160346][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.292004][ T5893] usb 1-1: Product: syz [ 238.345778][ T5893] usb 1-1: Manufacturer: syz [ 238.395030][ T5893] usb 1-1: SerialNumber: syz [ 238.533338][ T5893] usb 1-1: config 0 descriptor?? [ 238.684996][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 238.786843][ T5893] usb 1-1: setting power ON [ 238.802224][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 238.840017][ T30] audit: type=1400 audit(1752346088.894:401): avc: denied { ioctl } for pid=8230 comm="syz.0.573" path="socket:[18493]" dev="sockfs" ino=18493 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 238.939522][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.121094][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 239.134657][ T5893] usb 1-1: media controller created [ 239.239872][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 239.251570][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 239.867738][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.041603][ T24] libceph: connect (1)[c::]:6789 error -101 [ 240.047772][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 240.112278][ T5893] usb 1-1: selecting invalid altsetting 6 [ 240.142915][ T5893] usb 1-1: digital interface selection failed (-22) [ 240.184185][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 240.575767][ T24] libceph: connect (1)[c::]:6789 error -101 [ 240.621993][ T8259] ceph: No mds server is up or the cluster is laggy [ 240.661970][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 241.032045][ T5893] usb 1-1: setting power OFF [ 241.037057][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 241.043936][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 241.054633][ T5893] (NULL device *): no alternate interface [ 241.132007][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 241.159190][ T5893] usb 1-1: USB disconnect, device number 25 [ 241.968336][ T30] audit: type=1400 audit(1752346092.004:402): avc: denied { create } for pid=8282 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.037448][ T8288] nvme_fabrics: missing parameter 'transport=%s' [ 242.044285][ T8288] nvme_fabrics: missing parameter 'nqn=%s' [ 242.113683][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'. [ 242.201398][ T5893] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 242.243692][ T30] audit: type=1400 audit(1752346092.004:403): avc: denied { setopt } for pid=8282 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.449814][ T30] audit: type=1400 audit(1752346092.004:404): avc: denied { read } for pid=8282 comm="syz.4.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.701451][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 242.766637][ T5893] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 242.891377][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.924739][ T5893] usb 1-1: Product: syz [ 242.928940][ T5893] usb 1-1: Manufacturer: syz [ 242.960146][ T5893] usb 1-1: SerialNumber: syz [ 242.985701][ T5893] usb 1-1: config 0 descriptor?? [ 243.322360][ T5893] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 244.011017][ T5893] usb 1-1: USB disconnect, device number 26 [ 244.032113][ T8308] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 244.091940][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.100342][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.616705][ T30] audit: type=1400 audit(1752346094.674:405): avc: denied { read } for pid=8316 comm="syz.3.594" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.801306][ T30] audit: type=1400 audit(1752346095.854:406): avc: denied { write } for pid=8330 comm="syz.4.599" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.268034][ T8340] ubi: mtd0 is already attached to ubi31 [ 246.978327][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 247.046247][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 247.905258][ T8339] IPVS: Error joining to the multicast group [ 247.978440][ T8339] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'. [ 248.455697][ T30] audit: type=1400 audit(1752346098.444:407): avc: denied { connect } for pid=8348 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.219254][ T30] audit: type=1400 audit(1752346099.264:408): avc: denied { append } for pid=8361 comm="syz.0.607" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.242798][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.414182][ T30] audit: type=1400 audit(1752346099.474:409): avc: denied { connect } for pid=8361 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.488709][ T30] audit: type=1400 audit(1752346099.544:410): avc: denied { cmd } for pid=8365 comm="syz.2.608" path="socket:[18195]" dev="sockfs" ino=18195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 249.511397][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.604849][ T30] audit: type=1400 audit(1752346099.664:411): avc: denied { audit_write } for pid=8365 comm="syz.2.608" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 249.625800][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.851527][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 249.915814][ T8374] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.663143][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.681451][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 250.725114][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.460080][ T24] usb 2-1: config 0 descriptor?? [ 251.500451][ T24] usb 2-1: can't set config #0, error -71 [ 251.514802][ T24] usb 2-1: USB disconnect, device number 19 [ 251.626396][ T30] audit: type=1400 audit(1752346101.674:412): avc: denied { bind } for pid=8386 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.607525][ T30] audit: type=1400 audit(1752346101.684:413): avc: denied { getopt } for pid=8386 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 252.714937][ T30] audit: type=1400 audit(1752346101.734:414): avc: denied { map } for pid=8386 comm="syz.3.613" path="socket:[18221]" dev="sockfs" ino=18221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.635126][ T8403] Illegal XDP return value 4294967294 on prog (id 159) dev N/A, expect packet loss! [ 253.639763][ T30] audit: type=1400 audit(1752346103.674:415): avc: denied { write } for pid=8404 comm="syz.3.619" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 254.449339][ T8412] netlink: 'syz.1.622': attribute type 12 has an invalid length. [ 254.761651][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 254.821233][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.624'. [ 255.006937][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 255.026981][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 255.130355][ T24] usb 5-1: config 191 has an invalid interface number: 223 but max is 0 [ 255.139310][ T24] usb 5-1: config 191 has no interface number 0 [ 255.161597][ T24] usb 5-1: config 191 interface 223 altsetting 6 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 255.178702][ T24] usb 5-1: config 191 interface 223 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 255.203370][ T8424] netlink: 'syz.1.626': attribute type 7 has an invalid length. [ 255.211037][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 255.253707][ T24] usb 5-1: config 191 interface 223 has no altsetting 0 [ 255.290040][ T24] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=6a.34 [ 255.300093][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.319870][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.330558][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 255.339622][ T8414] IPVS: Error joining to the multicast group [ 255.347842][ T24] usb 5-1: Product: syz [ 255.364829][ T24] usb 5-1: Manufacturer: syz [ 255.376271][ T24] usb 5-1: SerialNumber: syz [ 255.376598][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.624'. [ 256.486380][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 256.495410][ T8433] bridge_slave_1: left allmulticast mode [ 256.501120][ T8433] bridge_slave_1: left promiscuous mode [ 256.507127][ T8433] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.543376][ T8433] bridge_slave_0: left allmulticast mode [ 256.549157][ T8433] bridge_slave_0: left promiscuous mode [ 256.555005][ T8433] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.607358][ T8416] process 'syz.4.623' launched './file0' with NULL argv: empty string added [ 256.747663][ T30] audit: type=1400 audit(1752346106.784:416): avc: denied { execute_no_trans } for pid=8415 comm="syz.4.623" path="/18/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 256.992101][ T24] usb 5-1: USB disconnect, device number 9 [ 257.101582][ T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 257.253723][ T8447] binder: 8446:8447 ioctl c0306201 0 returned -14 [ 257.265207][ T8447] binder: 8446:8447 ioctl c0306201 200000001440 returned -11 [ 257.301385][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 257.372212][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.382742][ T43] usb 2-1: config 0 has no interfaces? [ 257.390250][ T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 257.401026][ T43] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 257.429763][ T43] usb 2-1: Product: syz [ 257.483578][ T43] usb 2-1: Manufacturer: syz [ 257.488254][ T43] usb 2-1: SerialNumber: syz [ 257.496252][ T43] usb 2-1: config 0 descriptor?? [ 257.633560][ T8453] IPv6: sit1: Disabled Multicast RS [ 257.672375][ T8453] sit1: entered allmulticast mode [ 258.987684][ T8470] veth1_macvtap: left promiscuous mode [ 259.028469][ T8470] macsec0: entered promiscuous mode [ 259.222869][ T5942] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 259.556036][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 259.572873][ T5942] usb 1-1: config 0 has an invalid interface number: 62 but max is 0 [ 259.581053][ T5942] usb 1-1: config 0 has no interface number 0 [ 259.590991][ T5942] usb 1-1: config 0 interface 62 has no altsetting 0 [ 259.600026][ T5942] usb 1-1: New USB device found, idVendor=0830, idProduct=0050, bcdDevice=87.e3 [ 259.650226][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.677096][ T5942] usb 1-1: Product: syz [ 259.761132][ T5942] usb 1-1: Manufacturer: syz [ 259.766059][ T5942] usb 1-1: SerialNumber: syz [ 259.773323][ T5942] usb 1-1: config 0 descriptor?? [ 259.788368][ T5942] usb 1-1: active config #0 != 1 ?? [ 260.244106][ T8490] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 260.258198][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 260.538495][ T8492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.548254][ T8492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.942107][ T24] usb 2-1: USB disconnect, device number 20 [ 261.498983][ T8508] binder: 8507:8508 ioctl 40049366 200000000240 returned -22 [ 261.806665][ T30] audit: type=1400 audit(1752346111.864:417): avc: denied { mount } for pid=8511 comm="syz.3.648" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 262.201883][ T30] audit: type=1400 audit(1752346111.884:418): avc: denied { search } for pid=8511 comm="syz.3.648" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.305535][ T30] audit: type=1400 audit(1752346111.884:419): avc: denied { search } for pid=8511 comm="syz.3.648" name="/" dev="configfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 262.418980][ T8521] FAULT_INJECTION: forcing a failure. [ 262.418980][ T8521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.452643][ T8521] CPU: 0 UID: 0 PID: 8521 Comm: syz.4.651 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 262.452671][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.452681][ T8521] Call Trace: [ 262.452687][ T8521] [ 262.452694][ T8521] dump_stack_lvl+0x16c/0x1f0 [ 262.452723][ T8521] should_fail_ex+0x512/0x640 [ 262.452747][ T8521] _copy_from_user+0x2e/0xd0 [ 262.452771][ T8521] video_usercopy+0xedd/0x1720 [ 262.452795][ T8521] ? __pfx___video_do_ioctl+0x10/0x10 [ 262.452816][ T8521] ? selinux_kernel_read_file+0xf0/0x130 [ 262.452841][ T8521] ? __pfx_video_usercopy+0x10/0x10 [ 262.452879][ T8521] v4l2_ioctl+0x1ba/0x250 [ 262.452899][ T8521] ? __pfx_v4l2_ioctl+0x10/0x10 [ 262.452929][ T8521] __x64_sys_ioctl+0x18b/0x210 [ 262.452952][ T8521] do_syscall_64+0xcd/0x4c0 [ 262.452978][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.452994][ T8521] RIP: 0033:0x7f914778e929 [ 262.453009][ T8521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.453024][ T8521] RSP: 002b:00007f91486c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.453041][ T8521] RAX: ffffffffffffffda RBX: 00007f91479b5fa0 RCX: 00007f914778e929 [ 262.453053][ T8521] RDX: 0000200000000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 262.453063][ T8521] RBP: 00007f91486c8090 R08: 0000000000000000 R09: 0000000000000000 [ 262.453073][ T8521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.453082][ T8521] R13: 0000000000000000 R14: 00007f91479b5fa0 R15: 00007fff44c62be8 [ 262.453104][ T8521] [ 262.918087][ T30] audit: type=1400 audit(1752346112.974:420): avc: denied { ioctl } for pid=8531 comm="syz.1.656" path="socket:[19789]" dev="sockfs" ino=19789 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.434190][ T5893] usb 1-1: USB disconnect, device number 27 [ 264.400539][ T24] libceph: connect (1)[c::]:6789 error -101 [ 264.408764][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 264.561550][ T8548] ceph: No mds server is up or the cluster is laggy [ 264.852090][ T24] libceph: connect (1)[c::]:6789 error -101 [ 264.858269][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 265.013468][ T8560] syz.0.663: attempt to access beyond end of device [ 265.013468][ T8560] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 265.307740][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.658'. [ 265.364907][ T8560] gfs2: error -5 reading superblock [ 265.515449][ T8539] nvme_fabrics: missing parameter 'transport=%s' [ 265.523202][ T8539] nvme_fabrics: missing parameter 'nqn=%s' [ 265.706240][ T30] audit: type=1326 audit(1752346115.764:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.016302][ T30] audit: type=1326 audit(1752346115.764:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.177413][ T30] audit: type=1326 audit(1752346115.764:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.352149][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 266.361064][ T30] audit: type=1326 audit(1752346115.764:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.459943][ T8573] netlink: 52 bytes leftover after parsing attributes in process `syz.3.666'. [ 266.523820][ T30] audit: type=1326 audit(1752346115.764:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.568061][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.598935][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.598968][ T30] audit: type=1326 audit(1752346115.764:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f914778d3df code=0x7ffc0000 [ 266.645472][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.813775][ T30] audit: type=1326 audit(1752346115.764:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.838961][ T30] audit: type=1326 audit(1752346115.764:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8562 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 266.909675][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.016323][ T8570] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 267.059917][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.084754][ T30] audit: type=1400 audit(1752346116.414:429): avc: denied { mounton } for pid=8572 comm="syz.3.666" path="/143/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 267.197206][ T30] audit: type=1400 audit(1752346116.654:430): avc: denied { map } for pid=8572 comm="syz.3.666" path="socket:[19860]" dev="sockfs" ino=19860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 267.347497][ T8584] netlink: 244 bytes leftover after parsing attributes in process `syz.2.665'. [ 267.656711][ T8587] netdevsim netdevsim1: Direct firmware load for . [ 267.656711][ T8587] failed with error -2 [ 267.760200][ T8587] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 267.760200][ T8587] [ 267.794080][ T9] usb 3-1: USB disconnect, device number 17 [ 268.205499][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 268.309395][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 268.318550][ T8599] IPVS: Error joining to the multicast group [ 268.327558][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 268.514404][ T8607] overlay: ./file0 is not a directory [ 269.065881][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.676'. [ 269.644600][ T8610] nvme_fabrics: missing parameter 'transport=%s' [ 269.666648][ T8610] nvme_fabrics: missing parameter 'nqn=%s' [ 270.314298][ T30] audit: type=1326 audit(1752346120.094:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5eb8e929 code=0x7ffc0000 [ 270.657203][ T30] audit: type=1326 audit(1752346120.094:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5eb8e929 code=0x7ffc0000 [ 270.808719][ T30] audit: type=1326 audit(1752346120.094:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f5eb8e929 code=0x7ffc0000 [ 271.330825][ T30] audit: type=1326 audit(1752346120.094:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5eb8e929 code=0x7ffc0000 [ 271.355424][ T30] audit: type=1326 audit(1752346120.094:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f5eb8e929 code=0x7ffc0000 [ 271.379741][ T30] audit: type=1326 audit(1752346120.094:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8615 comm="syz.3.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f5eb8d3df code=0x7ffc0000 [ 271.435281][ T8626] nvme_fabrics: missing parameter 'transport=%s' [ 271.441848][ T8626] nvme_fabrics: missing parameter 'nqn=%s' [ 271.811521][ T974] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 272.319114][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 272.319130][ T30] audit: type=1400 audit(1752346122.374:440): avc: denied { create } for pid=8647 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.355419][ T8650] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 272.399459][ T8650] PKCS7: Only support pkcs7_signedData type [ 272.444099][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 272.465365][ T974] usb 4-1: not running at top speed; connect to a high speed hub [ 272.492640][ T974] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 272.504022][ T30] audit: type=1400 audit(1752346122.564:441): avc: denied { write } for pid=8647 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 272.525855][ T974] usb 4-1: config index 0 descriptor too short (expected 259, got 60) [ 272.536021][ T974] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 272.821642][ T974] usb 4-1: can't read configurations, error -22 [ 272.951553][ T92] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 272.961760][ T974] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 273.054395][ T8656] Invalid ELF header magic: != ELF [ 273.054473][ T30] audit: type=1400 audit(1752346123.114:442): avc: denied { module_load } for pid=8654 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 273.261806][ T92] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.478656][ T92] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.835339][ T974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.837334][ T92] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.843555][ T974] usb 4-1: not running at top speed; connect to a high speed hub [ 273.860150][ T974] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 273.869247][ T974] usb 4-1: config index 0 descriptor too short (expected 259, got 60) [ 273.875751][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.877623][ T974] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 273.896340][ T974] usb 4-1: can't read configurations, error -22 [ 273.903144][ T974] usb usb4-port1: attempt power cycle [ 273.917739][ T8653] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 273.958172][ T92] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.968146][ T8663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8663 comm=syz.0.691 [ 273.996729][ T30] audit: type=1400 audit(1752346124.054:443): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 274.155868][ T8665] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 274.164018][ T8665] netlink: 55 bytes leftover after parsing attributes in process `syz.0.692'. [ 274.853884][ T974] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 274.877691][ T24] IPVS: starting estimator thread 0... [ 274.944756][ T8670] netlink: 244 bytes leftover after parsing attributes in process `syz.4.688'. [ 275.021535][ T8674] IPVS: using max 45 ests per chain, 108000 per kthread [ 275.121521][ T974] usb 4-1: device not accepting address 10, error -71 [ 275.438151][ T30] audit: type=1400 audit(1752346125.494:444): avc: denied { write } for pid=8679 comm="syz.2.696" path="socket:[20128]" dev="sockfs" ino=20128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.104789][ T92] usb 5-1: USB disconnect, device number 10 [ 276.693956][ T8695] netlink: 36 bytes leftover after parsing attributes in process `syz.1.701'. [ 276.805614][ T974] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.247415][ T8689] nvme_fabrics: missing parameter 'transport=%s' [ 277.270018][ T8689] nvme_fabrics: missing parameter 'nqn=%s' [ 277.299241][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 277.319926][ T974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.332424][ T974] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 277.350816][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.410861][ T974] usb 4-1: config 0 descriptor?? [ 277.418958][ T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 277.428428][ T8698] kvm: emulating exchange as write [ 277.637712][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 278.439489][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.465131][ T974] usbhid 4-1:0.0: can't add hid device: -71 [ 278.471107][ T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 278.478929][ T43] usb 1-1: config 0 has no interface number 0 [ 278.508271][ T43] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 278.529012][ T974] usb 4-1: USB disconnect, device number 11 [ 278.541087][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.664512][ T43] usb 1-1: Product: syz [ 278.671573][ T43] usb 1-1: Manufacturer: syz [ 278.676608][ T43] usb 1-1: SerialNumber: syz [ 278.687712][ T43] usb 1-1: config 0 descriptor?? [ 278.712056][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 278.785827][ T5894] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 279.071414][ T5894] usb 5-1: device descriptor read/64, error -71 [ 279.101447][ T92] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 279.149712][ T8691] Scaler: ================= START STATUS ================= [ 279.157732][ T8691] Scaler: ================== END STATUS ================== [ 279.396829][ T5894] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 279.415322][ T92] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.433412][ T92] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.449704][ T8730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.461976][ T92] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.477903][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.486651][ T92] usb 2-1: SerialNumber: syz [ 279.539438][ T8733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 279.548741][ T8733] netlink: 'syz.3.711': attribute type 15 has an invalid length. [ 279.558231][ T5894] usb 5-1: device descriptor read/64, error -71 [ 279.571643][ T8733] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.580827][ T8733] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.589698][ T8733] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.598523][ T8733] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.609345][ T8733] vxlan0: entered promiscuous mode [ 279.671776][ T5894] usb usb5-port1: attempt power cycle [ 279.772833][ T43] gspca_spca1528: reg_w err -71 [ 279.801728][ T43] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 279.832250][ T43] usb 1-1: USB disconnect, device number 28 [ 280.011397][ T5894] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 280.032001][ T5894] usb 5-1: device descriptor read/8, error -71 [ 280.554285][ T8739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.713'. [ 281.217824][ T8738] nvme_fabrics: missing parameter 'transport=%s' [ 281.221459][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 281.272110][ T8738] nvme_fabrics: missing parameter 'nqn=%s' [ 281.376651][ T5894] usb 5-1: device descriptor read/8, error -71 [ 281.377682][ T8742] fuse: Invalid rootmode [ 281.573838][ T5894] usb usb5-port1: unable to enumerate USB device [ 281.787231][ T92] usb 2-1: 0:2 : does not exist [ 281.829006][ T92] usb 2-1: USB disconnect, device number 21 [ 282.184032][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.574262][ T974] libceph: connect (1)[c::]:6789 error -101 [ 282.580394][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 283.345827][ T30] audit: type=1400 audit(1752346133.374:445): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 283.391836][ T5960] libceph: connect (1)[c::]:6789 error -101 [ 283.400301][ T5960] libceph: mon0 (1)[c::]:6789 connect error [ 283.546666][ T8752] ceph: No mds server is up or the cluster is laggy [ 283.700060][ T8780] binder: 8779:8780 ioctl c0306201 0 returned -14 [ 283.717940][ T8781] fuse: Bad value for 'group_id' [ 283.748059][ T8781] fuse: Bad value for 'group_id' [ 283.916446][ T8787] fuse: Invalid rootmode [ 284.123056][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 284.324204][ T8792] input: syz0 as /devices/virtual/input/input22 [ 284.529994][ T8794] netlink: 'syz.4.729': attribute type 12 has an invalid length. [ 284.576818][ T8798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.728'. [ 285.054217][ T8791] nvme_fabrics: missing parameter 'transport=%s' [ 285.087344][ T8791] nvme_fabrics: missing parameter 'nqn=%s' [ 285.123911][ T8795] syz.1.730: attempt to access beyond end of device [ 285.123911][ T8795] nbd1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 285.181227][ T30] audit: type=1400 audit(1752346135.234:446): avc: denied { write } for pid=8799 comm="syz.0.732" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.211500][ T5894] usb 4-1: device descriptor read/64, error -71 [ 285.238889][ T8795] tipc: Enabling of bearer rejected, failed to enable media [ 285.530976][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 286.151522][ T30] audit: type=1326 audit(1752346135.644:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.440768][ T30] audit: type=1326 audit(1752346135.644:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.471423][ T5894] usb 4-1: device descriptor read/64, error -71 [ 286.581687][ T5894] usb usb4-port1: attempt power cycle [ 286.610945][ T30] audit: type=1326 audit(1752346135.644:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.643549][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 286.684279][ T8819] binder: BINDER_SET_CONTEXT_MGR already set [ 286.690559][ T8819] binder: 8815:8819 ioctl 4018620d 200000000040 returned -16 [ 286.703479][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 286.712458][ T8809] IPVS: Error joining to the multicast group [ 286.734329][ T8809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 286.752908][ T8820] binder: 8815:8820 ioctl c0306201 0 returned -14 [ 286.772328][ T30] audit: type=1326 audit(1752346135.644:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.809692][ T30] audit: type=1326 audit(1752346135.644:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.835542][ T30] audit: type=1326 audit(1752346135.644:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f914778d3df code=0x7ffc0000 [ 286.869833][ T30] audit: type=1326 audit(1752346135.644:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.907933][ T30] audit: type=1326 audit(1752346135.644:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.4.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f914778e929 code=0x7ffc0000 [ 286.933864][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 287.018443][ T8824] fuse: Invalid rootmode [ 287.095092][ T5908] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.106256][ T5908] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.126590][ T5908] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.151459][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.190014][ T8818] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 287.200653][ T5908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.535830][ T8833] netlink: 244 bytes leftover after parsing attributes in process `syz.2.735'. [ 287.781621][ T5908] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 287.953013][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 287.960049][ T5908] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 287.970308][ T5908] usb 1-1: config 1 has no interface number 1 [ 287.980148][ T43] usb 3-1: USB disconnect, device number 18 [ 287.985349][ T5908] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.016223][ T8836] netlink: 'syz.4.742': attribute type 12 has an invalid length. [ 288.057019][ T5908] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.070685][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.078826][ T5908] usb 1-1: Product: syz [ 288.084468][ T5908] usb 1-1: Manufacturer: syz [ 288.091695][ T5908] usb 1-1: SerialNumber: syz [ 288.347728][ T8838] fuse: Bad value for 'group_id' [ 288.363190][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 288.363202][ T30] audit: type=1400 audit(1752346138.414:459): avc: denied { map } for pid=8829 comm="syz.0.740" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.430542][ T8838] fuse: Bad value for 'group_id' [ 288.436005][ T30] audit: type=1400 audit(1752346138.454:460): avc: denied { ioctl } for pid=8829 comm="syz.0.740" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.623122][ T30] audit: type=1400 audit(1752346138.674:461): avc: denied { append } for pid=8841 comm="syz.2.744" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.046007][ T8854] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.746'. [ 290.064856][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 290.340937][ T30] audit: type=1326 audit(1752346140.274:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.612735][ T8855] IPv6: sit2: Disabled Multicast RS [ 290.619561][ T8855] sit2: entered allmulticast mode [ 290.626892][ T30] audit: type=1326 audit(1752346140.274:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.665214][ T30] audit: type=1326 audit(1752346140.274:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.689607][ T5908] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 290.697601][ T5908] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 290.736064][ T5908] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 290.751355][ T5908] usb 1-1: 2:1 : invalid channels 0 [ 290.768318][ T30] audit: type=1326 audit(1752346140.274:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.793380][ T30] audit: type=1326 audit(1752346140.274:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.812977][ T5908] usb 1-1: USB disconnect, device number 29 [ 290.855037][ T30] audit: type=1326 audit(1752346140.274:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc805f8d3df code=0x7ffc0000 [ 290.888539][ T30] audit: type=1326 audit(1752346140.274:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8851 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 290.912631][ T8862] binder: 8860:8862 ioctl c0306201 0 returned -14 [ 291.008238][ T5844] udevd[5844]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.033514][ T8869] fuse: Bad value for 'rootmode' [ 291.051944][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 291.221725][ T5894] usb 4-1: device descriptor read/64, error -71 [ 292.394755][ T8876] tipc: Enabled bearer , priority 0 [ 292.495624][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.506750][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 292.671529][ T5894] usb 4-1: device descriptor read/64, error -71 [ 293.012896][ T5894] usb usb4-port1: attempt power cycle [ 293.064310][ T8876] syzkaller0: entered promiscuous mode [ 293.081672][ T8876] syzkaller0: entered allmulticast mode [ 293.087717][ T8876] tipc: Resetting bearer [ 293.493236][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 293.740286][ T8877] mmap: syz.4.753 (8877) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 293.752959][ T5894] usb 4-1: device descriptor read/8, error -71 [ 293.768394][ T974] libceph: connect (1)[c::]:6789 error -101 [ 293.777965][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 293.786104][ T8875] tipc: Resetting bearer [ 294.121433][ T8898] Bluetooth: MGMT ver 1.23 [ 294.312361][ T8888] ceph: No mds server is up or the cluster is laggy [ 295.168857][ T8908] fuse: Bad value for 'rootmode' [ 296.193887][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.768'. [ 296.794367][ T8875] tipc: Disabling bearer [ 297.279306][ T92] libceph: connect (1)[c::]:6789 error -101 [ 297.290272][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 297.422061][ T5908] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 297.552805][ T92] libceph: connect (1)[c::]:6789 error -101 [ 297.565912][ T5908] usb 3-1: device descriptor read/64, error -71 [ 297.572652][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 297.629193][ T8938] evm: overlay not supported [ 297.821403][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.877622][ T8939] ceph: No mds server is up or the cluster is laggy [ 297.981970][ T5908] usb 3-1: device descriptor read/64, error -71 [ 298.038912][ T8963] fuse: Bad value for 'rootmode' [ 298.103344][ T5908] usb usb3-port1: attempt power cycle [ 298.130866][ T8967] binder: 8966:8967 ioctl c0306201 200000001440 returned -11 [ 298.178712][ T8969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.189948][ T8969] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 298.198115][ T8969] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 298.473045][ T5908] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 298.626212][ T5908] usb 3-1: device descriptor read/8, error -71 [ 298.901632][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 298.951937][ T5908] usb 3-1: device descriptor read/8, error -71 [ 298.960646][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 298.960661][ T30] audit: type=1400 audit(1752346149.014:470): avc: denied { accept } for pid=8989 comm="syz.0.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.969297][ T8990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.004109][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.064586][ T5908] usb usb3-port1: unable to enumerate USB device [ 299.131539][ T5893] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 299.201907][ T5908] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 299.292941][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.312854][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 299.327461][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 299.339572][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 299.349422][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.364822][ T5893] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 299.374162][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.382259][ T5893] usb 4-1: Product: syz [ 299.386757][ T5893] usb 4-1: Manufacturer: syz [ 299.393372][ T5893] usb 4-1: SerialNumber: syz [ 299.399762][ T5908] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 299.419274][ T5893] usb 4-1: config 0 descriptor?? [ 299.430714][ T5908] usb 1-1: config 1 interface 0 has no altsetting 0 [ 299.446805][ T5893] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 299.611404][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 299.620513][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 299.640845][ T5908] usb 1-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.40 [ 299.723014][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.904581][ T5908] usb 1-1: Product: 쇵痞坼歹フᆤ⒅ꥻ뽉륬擝父풮鋝䴿騀叩䟙必ꊭ䤒伓겲렡妅寛욭橘渒ꇥ鍋⾨걍鰵䚔䶫㘠瞰벪懞軠ࢎ記ꯖ䔑꙯᫻锼蚷૾匾⛂왥꺢ࣵ䆝裎嘶竉苿ࡵ苄௶㛐ޗ蛇凧蘬綴줴먹噽唶䪊砣䎗뱐ꦍ䦡뾭ꂳ틛넛龌Ⴭሟ徸ⱱ郼땈嬛䐁ꒊ퐿༐安飔跷ʀ쇣 [ 300.035351][ T5908] usb 1-1: Manufacturer: Ⱡ [ 300.146264][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 300.436776][ T5908] usb 1-1: SerialNumber:  [ 300.569954][ T9005] fuse: Unknown parameter 'use00000000000000000000' [ 300.657997][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 300.667914][ T9002] IPVS: Error joining to the multicast group [ 300.713044][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.788'. [ 300.855122][ T974] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 300.980235][ T5908] usbhid 1-1:1.0: can't add hid device: -71 [ 301.001353][ T5908] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 301.222029][ T5908] usb 1-1: USB disconnect, device number 30 [ 301.565134][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 301.597646][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'. [ 301.606635][ T9009] IPVS: Error joining to the multicast group [ 301.616425][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.791'. [ 301.708237][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 301.858957][ T974] usb 5-1: config 0 interface 0 has no altsetting 0 [ 301.865976][ T974] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 301.876112][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.887976][ T974] usb 5-1: config 0 descriptor?? [ 302.334175][ T9023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.796'. [ 302.360243][ T30] audit: type=1400 audit(1752346152.414:471): avc: denied { bind } for pid=9022 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 302.394416][ T30] audit: type=1400 audit(1752346152.424:472): avc: denied { connect } for pid=9022 comm="syz.1.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.486896][ T974] usbhid 5-1:0.0: can't add hid device: -71 [ 302.524301][ T974] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.701872][ T974] usb 5-1: USB disconnect, device number 15 [ 302.964959][ T5960] usb 4-1: USB disconnect, device number 19 [ 303.060030][ T9040] netlink: 87 bytes leftover after parsing attributes in process `syz.1.800'. [ 303.069162][ T92] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 303.081052][ T9040] netlink: 68 bytes leftover after parsing attributes in process `syz.1.800'. [ 303.281413][ T92] usb 1-1: device descriptor read/64, error -71 [ 303.495844][ T5908] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 303.793301][ T92] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 303.938208][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.972043][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 304.101464][ T92] usb 1-1: device descriptor read/64, error -71 [ 304.116578][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 304.183280][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.225637][ T5908] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 304.235276][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.243485][ T92] usb usb1-port1: attempt power cycle [ 304.250384][ T5908] usb 2-1: Product: syz [ 304.260124][ T5908] usb 2-1: Manufacturer: syz [ 304.275239][ T5908] usb 2-1: SerialNumber: syz [ 304.281419][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 304.302346][ T5908] usb 2-1: config 0 descriptor?? [ 304.330905][ T5908] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 304.351127][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 304.398546][ T30] audit: type=1400 audit(1752346154.454:473): avc: denied { connect } for pid=9052 comm="syz.2.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.433379][ T9] usb 5-1: device descriptor read/64, error -71 [ 304.592752][ T92] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 304.623215][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 304.632893][ T92] usb 1-1: device descriptor read/8, error -71 [ 304.721454][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 304.924109][ T92] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 304.931880][ T9] usb 5-1: device descriptor read/64, error -71 [ 304.951994][ T92] usb 1-1: device descriptor read/8, error -71 [ 305.042248][ T9] usb usb5-port1: attempt power cycle [ 305.061620][ T92] usb usb1-port1: unable to enumerate USB device [ 305.621387][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.662151][ T9] usb 5-1: device descriptor read/8, error -71 [ 305.785614][ T30] audit: type=1400 audit(1752346155.844:474): avc: denied { ioctl } for pid=9074 comm="syz.2.812" path="/dev/sg0" dev="devtmpfs" ino=759 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 305.901372][ T9073] netlink: 'syz.3.811': attribute type 27 has an invalid length. [ 305.958137][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 305.993340][ T92] usb 2-1: USB disconnect, device number 22 [ 306.024702][ T9] usb 5-1: device descriptor read/8, error -71 [ 306.122379][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.132754][ T9073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.174724][ T9073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.184241][ T9073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.193203][ T9073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.202131][ T9073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.232694][ T9] usb usb5-port1: unable to enumerate USB device [ 306.252455][ T9073] sit1: left allmulticast mode [ 306.259178][ T9073] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.268431][ T9073] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.277525][ T9073] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.286608][ T9073] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.295985][ T9073] vxlan0: left promiscuous mode [ 306.326974][ T9077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.334504][ T9077] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.343622][ T9077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.429315][ T9076] smc: net device bond0 applied user defined pnetid SYZ0 [ 307.331423][ T974] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 307.496695][ T974] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.511432][ T92] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 308.108917][ T974] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 308.154890][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 308.187869][ T974] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.212637][ T92] usb 1-1: device descriptor read/64, error -71 [ 308.272066][ T974] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 308.346540][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.407786][ T974] usb 3-1: Product: syz [ 308.473667][ T974] usb 3-1: Manufacturer: syz [ 308.483950][ T92] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 308.486031][ T974] usb 3-1: SerialNumber: syz [ 308.592570][ T974] usb 3-1: config 0 descriptor?? [ 308.617069][ T974] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 308.721492][ T92] usb 1-1: device descriptor read/64, error -71 [ 308.786154][ T9114] netlink: 'syz.4.823': attribute type 4 has an invalid length. [ 308.830719][ T9114] fuse: Bad value for 'fd' [ 308.831139][ T974] usb 3-1: USB disconnect, device number 23 [ 308.835667][ T92] usb usb1-port1: attempt power cycle [ 309.052908][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 309.071989][ T9119] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.426170][ T92] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 309.482496][ T92] usb 1-1: device descriptor read/8, error -71 [ 309.585331][ T30] audit: type=1326 audit(1752346159.641:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.2.827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc0cb8e929 code=0x0 [ 309.938550][ T30] audit: type=1400 audit(1752346159.991:476): avc: denied { connect } for pid=9134 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 309.962014][ T92] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 309.993989][ T92] usb 1-1: device descriptor read/8, error -71 [ 310.121794][ T92] usb usb1-port1: unable to enumerate USB device [ 310.624900][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 312.721376][ T9] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 312.735374][ T9] usb 2-1: config 8 has no interface number 0 [ 312.745373][ T9] usb 2-1: config 8 interface 177 has no altsetting 0 [ 312.766818][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 313.079898][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.211174][ T9149] netlink: 'syz.4.835': attribute type 9 has an invalid length. [ 313.726826][ T9149] netlink: 'syz.4.835': attribute type 9 has an invalid length. [ 313.805767][ T9] usb 2-1: can't set config #8, error -71 [ 313.869490][ T9] usb 2-1: USB disconnect, device number 23 [ 314.641215][ T30] audit: type=1400 audit(1752346164.211:477): avc: denied { write } for pid=9159 comm="syz.2.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 314.958752][ T9172] binder: BINDER_SET_CONTEXT_MGR already set [ 314.987221][ T9172] binder: 9170:9172 ioctl 4018620d 200000000040 returned -16 [ 315.108706][ T9172] binder: 9170:9172 ioctl c0306201 200000001440 returned -11 [ 315.170578][ T9178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 315.371422][ T974] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 315.501833][ T974] usb 4-1: device descriptor read/64, error -71 [ 316.091591][ T5960] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 316.102561][ T974] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 316.267339][ T5960] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 316.318303][ T974] usb 4-1: device descriptor read/64, error -71 [ 316.331577][ T5960] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 316.352244][ T5960] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.382760][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.431140][ T9185] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 316.456920][ T5960] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.481717][ T974] usb usb4-port1: attempt power cycle [ 317.130892][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191539][ T974] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 317.213838][ T974] usb 4-1: device descriptor read/8, error -71 [ 317.272268][ T9202] netlink: 244 bytes leftover after parsing attributes in process `syz.0.845'. [ 317.561578][ T974] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 317.615702][ T974] usb 4-1: device descriptor read/8, error -71 [ 317.702947][ T9] usb 1-1: USB disconnect, device number 39 [ 317.717781][ T9206] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 317.761664][ T974] usb usb4-port1: unable to enumerate USB device [ 317.931376][ T43] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 318.644918][ T43] usb 5-1: config 0 has an invalid descriptor of length 166, skipping remainder of the config [ 318.664295][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.708006][ T43] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 318.727192][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.750883][ T43] usb 5-1: config 0 descriptor?? [ 318.758984][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 318.899161][ T30] audit: type=1400 audit(1752346168.951:478): avc: denied { setopt } for pid=9218 comm="syz.1.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.474745][ T92] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 319.547157][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 319.556326][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 320.227016][ T92] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 320.264135][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.625677][ T92] usb 2-1: config 0 descriptor?? [ 320.670823][ T9237] netlink: 'syz.2.858': attribute type 12 has an invalid length. [ 320.742887][ T9241] binder: 9240:9241 ioctl c0306201 0 returned -14 [ 320.835870][ T9243] fuse: Unknown parameter 'user_id00000000000000000000' [ 321.331544][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 321.661425][ T5960] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 321.680656][ T974] usb 5-1: USB disconnect, device number 20 [ 321.681419][ T9] usb 3-1: device descriptor read/64, error -71 [ 321.934707][ T5960] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.970574][ T92] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 322.033857][ T5960] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 322.044072][ T5960] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.059875][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.069676][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 322.182826][ T9250] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 322.291991][ T92] [drm:udl_init] *ERROR* Selecting channel failed [ 322.376857][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.521838][ T9] usb 3-1: device descriptor read/64, error -71 [ 322.677506][ T9260] netlink: 244 bytes leftover after parsing attributes in process `syz.3.865'. [ 322.891520][ T9] usb usb3-port1: attempt power cycle [ 322.938014][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 322.947057][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 323.008140][ T92] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 323.193084][ T92] [drm] Initialized udl on minor 2 [ 323.275728][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 323.622544][ T92] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 323.638974][ T9] usb 3-1: device descriptor read/8, error -71 [ 323.654036][ T92] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 323.664279][ T5908] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 323.679375][ T92] usb 2-1: USB disconnect, device number 24 [ 323.688452][ T5908] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 323.728291][ T5908] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 323.804492][ T5893] usb 4-1: USB disconnect, device number 24 [ 323.911647][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 323.951399][ T5960] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 324.054283][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 324.074483][ T30] audit: type=1400 audit(1752346174.131:479): avc: denied { create } for pid=9269 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.201527][ T9] usb 3-1: device not accepting address 27, error -71 [ 324.211608][ T5960] usb 1-1: Using ep0 maxpacket: 8 [ 324.218549][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 324.229743][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 324.233706][ T9] usb usb3-port1: unable to enumerate USB device [ 324.276373][ T9277] binder: 9276:9277 ioctl c0306201 0 returned -14 [ 324.290125][ T5960] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.680239][ T5960] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.699573][ T9281] fuse: Unknown parameter 'user_id00000000000000000000' [ 324.709477][ T5960] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 324.719743][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.729033][ T5960] usb 1-1: Product: syz [ 324.734039][ T5960] usb 1-1: Manufacturer: syz [ 324.738760][ T5960] usb 1-1: SerialNumber: syz [ 324.747704][ T5960] usb 1-1: config 0 descriptor?? [ 324.778080][ T5960] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input26 [ 325.884371][ T9285] nvme_fabrics: missing parameter 'transport=%s' [ 325.890826][ T9285] nvme_fabrics: missing parameter 'nqn=%s' [ 325.963664][ T30] audit: type=1400 audit(1752346176.011:480): avc: denied { setopt } for pid=9264 comm="syz.0.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 326.331372][ T9278] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 326.689909][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 326.795999][ T9293] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 326.883709][ T9293] netlink: 120 bytes leftover after parsing attributes in process `syz.4.879'. [ 327.047701][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 327.120526][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 327.449270][ T9272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.081177][ T5960] imon:send_packet: packet tx failed (-71) [ 328.145813][ T5960] imon 1-1:0.0: panel buttons/knobs setup failed [ 328.464844][ T5960] rc_core: IR keymap rc-imon-pad not found [ 328.508977][ T5960] Registered IR keymap rc-empty [ 328.545499][ T5960] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 328.701968][ T5960] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 328.918159][ T5960] imon:send_packet: packet tx failed (-71) [ 329.051720][ T30] audit: type=1400 audit(1752346178.751:481): avc: denied { write } for pid=9307 comm="syz.0.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 329.142003][ T5960] imon 1-1:0.0: remote input dev register failed [ 329.142314][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 329.148584][ T5960] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 329.380755][ T9315] fuse: Bad value for 'fd' [ 329.381487][ T9] usb 4-1: device descriptor read/64, error -71 [ 329.403194][ T5960] imon 1-1:0.0: unable to initialize intf0, err 0 [ 329.409743][ T30] audit: type=1400 audit(1752346179.461:482): avc: denied { setattr } for pid=9312 comm="syz.1.885" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 329.436026][ T5960] imon:imon_probe: failed to initialize context! [ 329.446417][ T5960] imon 1-1:0.0: unable to register, err -19 [ 329.459974][ T5960] usb 1-1: USB disconnect, device number 40 [ 329.490263][ T30] audit: type=1400 audit(1752346179.541:483): avc: denied { setopt } for pid=9316 comm="syz.4.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.563607][ T9319] binder: 9317:9319 ioctl c0306201 200000000700 returned -11 [ 329.583167][ T9321] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 329.590045][ T9321] PKCS7: Only support pkcs7_signedData type [ 329.613687][ T9323] input: syz1 as /devices/virtual/input/input28 [ 329.657691][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 329.674312][ T30] audit: type=1400 audit(1752346179.701:484): avc: denied { view } for pid=9322 comm="syz.4.890" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 329.780717][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 329.853977][ T9] usb 4-1: device descriptor read/64, error -71 [ 329.903904][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 329.969060][ T9] usb usb4-port1: attempt power cycle [ 330.702214][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 330.752342][ T9] usb 4-1: device descriptor read/8, error -71 [ 331.118917][ T9344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 331.394731][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 331.423304][ T9] usb 4-1: device descriptor read/8, error -71 [ 331.572388][ T9] usb usb4-port1: unable to enumerate USB device [ 331.907111][ T9355] trusted_key: encrypted_key: insufficient parameters specified [ 332.025905][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 332.757291][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 332.764749][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 332.776311][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 332.785517][ T9] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 332.794355][ T9] usb 4-1: Manufacturer: syz [ 332.800075][ T9] usb 4-1: SerialNumber: syz [ 332.807306][ T9] usb 4-1: config 0 descriptor?? [ 332.816249][ T9] em28xx 4-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 332.825798][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 332.923445][ T9362] fuse: Bad value for 'fd' [ 333.173588][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 333.348552][ T30] audit: type=1326 audit(1752346183.401:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.625158][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 333.633638][ T9] em28xx 4-1:0.0: board has no eeprom [ 333.669653][ T30] audit: type=1326 audit(1752346183.401:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.695651][ T30] audit: type=1326 audit(1752346183.401:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.723565][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 333.724720][ T30] audit: type=1326 audit(1752346183.401:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.743559][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 333.755535][ T30] audit: type=1326 audit(1752346183.401:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.784745][ T30] audit: type=1326 audit(1752346183.401:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc805f8d3df code=0x7ffc0000 [ 333.787644][ T5894] em28xx 4-1:0.0: Binding DVB extension [ 333.808680][ T30] audit: type=1326 audit(1752346183.401:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 333.819819][ T9] usb 4-1: USB disconnect, device number 29 [ 333.958785][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 334.042559][ T9383] netlink: 60 bytes leftover after parsing attributes in process `syz.1.906'. [ 334.137041][ T5894] em28xx 4-1:0.0: Registering input extension [ 334.750623][ T9] em28xx 4-1:0.0: Closing input extension [ 335.106093][ T9390] netlink: 'syz.4.908': attribute type 12 has an invalid length. [ 335.122182][ T9398] input: syz1 as /devices/virtual/input/input30 [ 335.300630][ T9] em28xx 4-1:0.0: Freeing device [ 335.514094][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 335.602275][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.910'. [ 335.642795][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 335.651830][ T9387] IPVS: Error joining to the multicast group [ 335.668380][ T9408] fuse: Bad value for 'fd' [ 335.687900][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 335.724308][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 335.949933][ T9418] xt_TPROXY: Can be used only with -p tcp or -p udp [ 335.961566][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 335.985241][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 335.992054][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 335.998525][ T9409] IPVS: Error joining to the multicast group [ 336.141390][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 336.164679][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 336.177298][ T9402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.910'. [ 336.186685][ T9] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 336.196222][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.224826][ T9] usb 1-1: config 0 descriptor?? [ 336.329956][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 336.368595][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 336.969105][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 336.975322][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 336.976764][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 336.976776][ T30] audit: type=1326 audit(1752346186.561:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 337.130671][ T9414] ceph: No mds server is up or the cluster is laggy [ 337.164173][ T30] audit: type=1326 audit(1752346186.561:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 337.375609][ T9] chicony 0003:04F2:1421.0004: hidraw0: USB HID v1.01 Device [HID 04f2:1421] on usb-dummy_hcd.0-1/input0 [ 337.390249][ T30] audit: type=1326 audit(1752346186.561:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 337.426623][ T30] audit: type=1326 audit(1752346186.561:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 337.587402][ T9] usb 1-1: USB disconnect, device number 41 [ 337.594134][ T30] audit: type=1326 audit(1752346186.561:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 338.170184][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 338.180203][ T30] audit: type=1326 audit(1752346186.561:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc805f8d3df code=0x7ffc0000 [ 338.302813][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 338.333943][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 338.393613][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 338.400449][ T30] audit: type=1326 audit(1752346186.561:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 338.451068][ T9435] fido_id[9435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 338.513953][ T30] audit: type=1326 audit(1752346186.561:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc805f8e929 code=0x7ffc0000 [ 338.611777][ T9432] ceph: No mds server is up or the cluster is laggy [ 338.631388][ T5894] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 339.709758][ T5893] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 339.782932][ T5894] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.794503][ T5894] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.804488][ T5894] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.813937][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.244252][ T9442] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 340.256637][ T5894] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 340.380617][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 340.407594][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 341.297846][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.415428][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.427142][ T9444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 342.040873][ T5893] usb 4-1: can't set config #27, error -71 [ 342.081038][ T5893] usb 4-1: USB disconnect, device number 30 [ 342.381398][ T9472] netlink: 244 bytes leftover after parsing attributes in process `syz.1.920'. [ 342.560402][ T5894] usb 2-1: USB disconnect, device number 25 [ 342.589602][ T9480] xt_TPROXY: Can be used only with -p tcp or -p udp [ 343.190229][ T9492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.933'. [ 344.558159][ T9498] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 344.606844][ T9498] PKCS7: Only support pkcs7_signedData type [ 345.573346][ T30] audit: type=1400 audit(1752346195.591:502): avc: denied { execute } for pid=9518 comm="syz.3.943" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 346.421863][ T30] audit: type=1400 audit(1752346196.471:503): avc: denied { open } for pid=9525 comm="syz.3.944" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 451.631212][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 451.638191][ C0] rcu: 1-...!: (1 GPs behind) idle=a04c/1/0x4000000000000000 softirq=38568/38572 fqs=1 [ 451.648810][ C0] rcu: (detected by 0, t=10505 jiffies, g=28997, q=188 ncpus=2) [ 451.656529][ C0] Sending NMI from CPU 0 to CPUs 1: [ 451.656556][ C1] NMI backtrace for cpu 1 [ 451.656569][ C1] CPU: 1 UID: 0 PID: 9500 Comm: syz.0.938 Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 451.656586][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 451.656593][ C1] RIP: 0010:__hrtimer_run_queues+0x580/0xad0 [ 451.656614][ C1] Code: 00 e8 e4 fa 12 00 45 89 ed be 08 00 00 00 4c 89 e8 48 c1 e8 06 48 8d 3c c5 50 89 a9 90 e8 38 de 79 00 4c 0f a3 2d 00 8d 00 0f <41> 0f 92 c5 31 ff 44 89 ee e8 92 f5 12 00 45 84 ed 0f 85 f4 02 00 [ 451.656627][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000047 [ 451.656643][ C1] RAX: 0000000000000001 RBX: ffff8880b8527d80 RCX: ffffffff81a8fc48 [ 451.656652][ C1] RDX: fffffbfff215312b RSI: 0000000000000008 RDI: ffffffff90a98950 [ 451.656660][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff215312a [ 451.656668][ C1] R10: ffffffff90a98957 R11: 0000000000000001 R12: ffff8880b8527c80 [ 451.656676][ C1] R13: 0000000000000001 R14: ffff888036ff9340 R15: ffffffff899adeb0 [ 451.656684][ C1] FS: 000055555c492500(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 451.656698][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.656707][ C1] CR2: 00007fcc0cd81ab8 CR3: 0000000035859000 CR4: 00000000003526f0 [ 451.656715][ C1] Call Trace: [ 451.656722][ C1] [ 451.656731][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 451.656747][ C1] ? read_tsc+0x9/0x20 [ 451.656765][ C1] hrtimer_interrupt+0x397/0x8e0 [ 451.656785][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 451.656800][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 451.656819][ C1] [ 451.656823][ C1] [ 451.656828][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 451.656843][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 451.656859][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 451.656870][ C1] RSP: 0018:ffffc9000c6f7640 EFLAGS: 00000293 [ 451.656880][ C1] RAX: 0000000000000000 RBX: ffffc9000c6f77f8 RCX: ffffffff8b7fa97e [ 451.656887][ C1] RDX: ffff888035398000 RSI: 0000000000000001 RDI: 0000000000000001 [ 451.656896][ C1] RBP: ffff88802637c800 R08: 0000000000000005 R09: 0000000000000000 [ 451.656904][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 451.656912][ C1] R13: 0000000000000003 R14: 0000000000000001 R15: ffffc9000c6f7835 [ 451.656923][ C1] ? mas_next_node+0x4ae/0xf50 [ 451.656942][ C1] mas_next_node+0x2f6/0xf50 [ 451.656961][ C1] mas_next_slot+0x646/0x21b0 [ 451.656980][ C1] ? __up_read+0x1f8/0x750 [ 451.656999][ C1] mas_find+0x2c6/0x530 [ 451.657017][ C1] validate_mm+0x12d/0x570 [ 451.657034][ C1] ? __pfx_validate_mm+0x10/0x10 [ 451.657048][ C1] ? __vma_enter_locked+0x163/0x3f0 [ 451.657065][ C1] ? vma_complete+0x9d8/0xe80 [ 451.657082][ C1] __split_vma+0xc39/0x1070 [ 451.657098][ C1] ? __pfx___split_vma+0x10/0x10 [ 451.657113][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 451.657130][ C1] vma_modify+0xee1/0x2030 [ 451.657147][ C1] ? __pfx_vma_modify+0x10/0x10 [ 451.657165][ C1] vma_modify_flags+0x212/0x2d0 [ 451.657181][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 451.657203][ C1] mprotect_fixup+0x2b3/0xb10 [ 451.657221][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 451.657235][ C1] ? selinux_file_mprotect+0x15b/0x600 [ 451.657255][ C1] do_mprotect_pkey+0x9ca/0xd50 [ 451.657273][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 451.657296][ C1] ? xfd_validate_state+0x61/0x180 [ 451.657313][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 451.657334][ C1] __x64_sys_mprotect+0x78/0xc0 [ 451.657348][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 451.657365][ C1] do_syscall_64+0xcd/0x4c0 [ 451.657383][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.657396][ C1] RIP: 0033:0x7f2c6c18e9e7 [ 451.657408][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.657419][ C1] RSP: 002b:00007ffe4bf5cda8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 451.657431][ C1] RAX: ffffffffffffffda RBX: 00007f2c6d0486c0 RCX: 00007f2c6c18e9e7 [ 451.657439][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f2c6d029000 [ 451.657447][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 451.657454][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe4bf5cf00 [ 451.657462][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 451.657476][ C1] [ 451.657550][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g28997 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 452.118533][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 452.128497][ C0] rcu: RCU grace-period kthread stack dump: [ 452.134371][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 452.147873][ C0] Call Trace: [ 452.151148][ C0] [ 452.154076][ C0] __schedule+0x116a/0x5de0 [ 452.158593][ C0] ? __lock_acquire+0x622/0x1c90 [ 452.163528][ C0] ? __pfx___schedule+0x10/0x10 [ 452.168382][ C0] ? find_held_lock+0x2b/0x80 [ 452.173058][ C0] ? schedule+0x2d7/0x3a0 [ 452.177391][ C0] schedule+0xe7/0x3a0 [ 452.181458][ C0] schedule_timeout+0x123/0x290 [ 452.186309][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 452.191680][ C0] ? __pfx_process_timeout+0x10/0x10 [ 452.196967][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 452.202773][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 452.208242][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 452.213008][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 452.218289][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.223489][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 452.228422][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 452.233277][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 452.239092][ C0] rcu_gp_kthread+0x270/0x380 [ 452.243763][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 452.248953][ C0] ? rcu_is_watching+0x12/0xc0 [ 452.253718][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.258929][ C0] ? __kthread_parkme+0x19e/0x250 [ 452.263956][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 452.269150][ C0] kthread+0x3c5/0x780 [ 452.273214][ C0] ? __pfx_kthread+0x10/0x10 [ 452.277801][ C0] ? rcu_is_watching+0x12/0xc0 [ 452.282564][ C0] ? __pfx_kthread+0x10/0x10 [ 452.287148][ C0] ret_from_fork+0x5d7/0x6f0 [ 452.291739][ C0] ? __pfx_kthread+0x10/0x10 [ 452.296325][ C0] ret_from_fork_asm+0x1a/0x30 [ 452.301096][ C0] [ 452.304109][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 452.310421][ C0] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00224-g379f604cc3dc #0 PREEMPT(full) [ 452.322565][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.332611][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 452.338161][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b bc a0 f5 cc [ 452.357765][ C0] RSP: 0018:ffffc90003c7f748 EFLAGS: 00000293 [ 452.363847][ C0] RAX: 0000000000000000 RBX: ffff8880b853fe20 RCX: ffffffff81afd92d [ 452.371816][ C0] RDX: ffff88807aaaa440 RSI: 0000000000000000 RDI: 0000000000000005 [ 452.379953][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 452.387914][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 452.395878][ C0] R13: 0000000000000003 R14: ffffed10170a7fc5 R15: ffff8880b843b580 [ 452.403869][ C0] FS: 0000555557b8a500(0000) GS:ffff888124713000(0000) knlGS:0000000000000000 [ 452.412791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.419368][ C0] CR2: 00007fcc0d8e56c0 CR3: 000000005c79f000 CR4: 00000000003526f0 [ 452.427341][ C0] Call Trace: [ 452.430612][ C0] [ 452.433537][ C0] smp_call_function_many_cond+0xd9d/0x1510 [ 452.439430][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 452.444638][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 452.450970][ C0] ? ldt_dup_context+0x1a2/0x300 [ 452.455909][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 452.461106][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 452.466219][ C0] flush_tlb_mm_range+0x4a0/0x1790 [ 452.471328][ C0] ? find_held_lock+0x2b/0x80 [ 452.476004][ C0] ? dup_mmap+0xf88/0x21d0 [ 452.480420][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 452.485967][ C0] ? up_write+0x1b2/0x520 [ 452.490299][ C0] dup_mmap+0xfa2/0x21d0 [ 452.494572][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 452.499260][ C0] copy_process+0x4081/0x7650 [ 452.503936][ C0] ? do_wp_page+0x1aa7/0x4f20 [ 452.508624][ C0] ? __pfx_copy_process+0x10/0x10 [ 452.513670][ C0] kernel_clone+0xfc/0x960 [ 452.518087][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 452.523126][ C0] ? css_rstat_updated+0x9d/0xd30 [ 452.528153][ C0] __do_sys_clone+0xce/0x120 [ 452.532741][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 452.537936][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 452.542881][ C0] ? do_user_addr_fault+0x843/0x1370 [ 452.548173][ C0] do_syscall_64+0xcd/0x4c0 [ 452.552682][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.558568][ C0] RIP: 0033:0x7fcc0cb85193 [ 452.562977][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 452.582577][ C0] RSP: 002b:00007fffa42c02e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 452.590985][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc0cb85193 [ 452.598951][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 452.606914][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 452.614875][ C0] R10: 0000555557b8a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 452.622852][ C0] R13: 0000555557b9d590 R14: 0000000000053c1b R15: 00007fffa42c0480 [ 452.630851][ C0]