last executing test programs: 4m10.550526972s ago: executing program 0 (id=1063): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 4m9.443583973s ago: executing program 0 (id=1070): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0xba) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000d0c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x170, 0x0, 0xfd, [{{0x1, 0x2, 0x3, 0x8, 0x9, 0x8, {0x204, 0x6, 0x5, 0x7, 0x8000000000000000, 0x1, 0x3, 0x4, 0x7fff, 0xc000, 0xfffff843, r2, 0x0, 0x6, 0x200003}}, {0x0, 0xc7b, 0x1, 0x6, '.'}}, {{0x6, 0x0, 0x7d, 0xfff, 0x6, 0x2, {0x84, 0x0, 0x2b6a, 0x0, 0x4, 0x5, 0xb, 0x6c, 0x5, 0x8000, 0x4, 0x0, r3, 0x0, 0x6}}, {0x1, 0x2b96, 0x25, 0x4, '(\\\xab\x12(>D=t\v\x92\b\x9f\x8a\xf5\a\xa5\xdf\x80\xaf\x84\x83\x14(ouv\xab6\x1e\xe3\x92i\xf06\xbc!'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 4m8.742109151s ago: executing program 0 (id=1071): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500"], &(0x7f0000000180)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) syz_emit_ethernet(0x62, &(0x7f0000000380)=ANY=[], 0x0) 4m7.970245843s ago: executing program 0 (id=1075): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x5fb72000) time(&(0x7f0000000040)) 4m7.871037483s ago: executing program 0 (id=1076): r0 = fsopen(&(0x7f0000000540)='tracefs\x00', 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m7.713322556s ago: executing program 0 (id=1077): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='3', 0x1) 3m52.073178939s ago: executing program 32 (id=1077): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='3', 0x1) 2m47.308039877s ago: executing program 5 (id=1366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) 2m46.02318113s ago: executing program 5 (id=1369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m43.655940309s ago: executing program 5 (id=1378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xe}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) 2m42.005696142s ago: executing program 5 (id=1383): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) 2m40.64732036s ago: executing program 5 (id=1387): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020bb509050000002cbd7000fbdbdf39030002"], 0x28}}, 0x10) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, &(0x7f0000000180)={0x0, 0x21, 0x1}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m38.419296152s ago: executing program 5 (id=1393): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0xcd00) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {0x0}], 0x2) tkill(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400191440834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 2m23.249150168s ago: executing program 33 (id=1393): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0xcd00) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {0x0}], 0x2) tkill(0x0, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400191440834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 2m12.428915836s ago: executing program 2 (id=1486): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 2m12.263527697s ago: executing program 2 (id=1488): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b00010062726964676500004800028005001900020000000500"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2m12.196742304s ago: executing program 2 (id=1489): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)='\b', 0x1}], 0x1) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x8, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x92, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x10, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 2m12.075861932s ago: executing program 2 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001a40)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000, 0x0, 0x1}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000740)="5986c661ebb4fa6464cb14c75e9cfcd0c87d963c5f79227680b88d91ffce97afa404ce506c636d7edc5e22087a65633b94cdee29d97975aa7905b64cc8a1da29c7b4228fe35f3cf9351e377acfcce4079803e636b37d253db4084bbaa072917794b87e398d654c7970b8d907ea25c42b466116c0100a456e897e59ef282d4165978c6b26052d23a08264e673d53a443022bd4e5fb0d2e8f8cd56f16de1e4422331fba2f084a61ea3ef4b71e9c72fcf4d121f031a680406c377de80198e074f1bc747e77eff9a4316aafdc5f73218f38c6deb764ffd2fb0989fc9d7fc6c9e0000", 0xe0}], 0x1, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x8040010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000280), &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500), &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3, 0x0, 0xa}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x2, 0xb7, 0x7f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20, 0x700, 0x5, 0x39}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000680)={'syztnl2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002380)=@newtfilter={0xd6c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0x5}, {0x1, 0x3}}, [@filter_kind_options=@f_route={{0xa}, {0xd3c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9c}, @TCA_ROUTE4_POLICE={0x858, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x95a, 0x0, 0x6, 0x6, 0xffff6d2c, 0x81, 0x4, 0x5, 0xfffeffff, 0xcb, 0xe, 0x5b616068, 0xfffffff9, 0x8000, 0x2, 0x6, 0xffffffff, 0xae5, 0x400, 0x1, 0x294c, 0x6, 0x7e12, 0x4, 0x7, 0x0, 0xa, 0x3ff, 0x7, 0x40, 0x26, 0x85d827ea, 0x0, 0x5, 0x6, 0x3ff, 0x10001, 0x40, 0x7, 0x1, 0x9, 0x0, 0x8, 0x9, 0x7, 0x10000, 0x3, 0x7ff, 0x48000000, 0x6, 0x5, 0x2, 0x8, 0x4, 0x31, 0x3, 0x0, 0x0, 0x6, 0xfffff2d8, 0x5, 0x4, 0x1, 0xfa5, 0xfff, 0x5, 0x8001, 0x4, 0x8, 0x2, 0x7fff, 0x6, 0x84, 0x1000, 0x2, 0xffffc865, 0x1, 0x9, 0x0, 0x3, 0x9, 0x4, 0x580, 0x1, 0x1, 0x3, 0x8, 0x8, 0x8, 0x1000, 0x8, 0x952e, 0x7, 0x8, 0x8, 0x401, 0xfffffffc, 0x4, 0x1ff, 0x6416d30f, 0x0, 0x4, 0xeed8, 0x3ff, 0x77, 0x8, 0xe5a, 0x1, 0x1, 0xd, 0x1, 0x8, 0x6, 0x0, 0x3, 0x10, 0xffffffad, 0x7, 0x0, 0x6, 0x2, 0x6, 0xffffb000, 0xeebe, 0x84, 0x4, 0x1, 0x8, 0x8, 0xff, 0x9, 0x0, 0x10000, 0x8, 0x80800000, 0x1, 0x10, 0x400, 0x534, 0x7, 0xffffffff, 0x7, 0xa, 0x8, 0x0, 0x94, 0x8001, 0x8000, 0x6, 0x6, 0xfffffffc, 0xd460, 0x200, 0x80000001, 0x10, 0x2, 0x10008, 0x7, 0x7, 0x2, 0x7, 0x3, 0xfffffff7, 0xfffffe01, 0x400, 0x122, 0x7, 0x2, 0x9, 0x2, 0x6, 0xbd18, 0x4, 0x4, 0x400, 0x1000, 0x4, 0xfffffff5, 0x1e, 0x544, 0x0, 0x200, 0x80, 0xfffffff9, 0x4, 0xffffffc0, 0x5, 0x6, 0x9, 0x6831, 0x2, 0x6, 0x7fffffff, 0x9, 0x0, 0x9, 0xc, 0x6, 0xffff999f, 0x6, 0x0, 0x7, 0x9, 0x101, 0x223, 0x1, 0xe, 0x27d2, 0x3, 0x7, 0x8, 0x8, 0x3a, 0x0, 0x6, 0x3, 0x2, 0x7, 0x131bc6ab, 0x4, 0x3, 0x2, 0x10001, 0x709, 0x5, 0x8, 0x0, 0x7, 0x0, 0x9, 0x5, 0x4, 0x25df, 0x5, 0x9, 0xbfe5, 0x6f, 0x80, 0x10, 0x5, 0x8, 0x670b, 0x81, 0x6, 0xfffffff7, 0x8000, 0x5d426142, 0x5, 0x2, 0x10001, 0x9, 0xfffffcc7, 0xb0d, 0x8, 0xa, 0xfffffffe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x10000000, 0x9, 0x100, 0x9, {0x6, 0x0, 0x8001, 0x5, 0xf33, 0x67e2}, {0x9, 0x2, 0x3, 0x1, 0x6, 0x80}, 0x0, 0x200, 0x5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x80000000, 0x26, 0x7f56, 0x6, 0xf0a0, 0x2, 0x8, 0x80000000, 0x7, 0x101, 0x0, 0xffffffff, 0x80, 0x8, 0x1ff, 0xf, 0x6, 0x2, 0x7, 0x3, 0xde3, 0x7b, 0x1, 0x5, 0xa2, 0x8, 0x8001, 0x4, 0xffff, 0x672, 0xffff8325, 0x5, 0x4, 0x40, 0x5, 0x401, 0x3, 0x0, 0x2000200, 0x8, 0x3, 0x8, 0x4, 0x4, 0xfffffffb, 0x1, 0x7f, 0x5, 0x7, 0x7, 0x3, 0x1, 0x4db8, 0x589, 0x1ff, 0x100, 0x400, 0x2934, 0x9, 0x7, 0xff, 0x413, 0x7, 0x40, 0x9, 0x7, 0x3e, 0x63f, 0x400, 0x1, 0x3c9, 0xff, 0x9, 0x4, 0x81, 0x913, 0x8, 0x6, 0x0, 0x5, 0x6, 0xffffffff, 0x200, 0x0, 0x3ff, 0x9, 0x5, 0xc727, 0x8001, 0x8, 0x80, 0x143e, 0x8, 0x401, 0x2, 0x1, 0x3f, 0x200, 0x5, 0x1, 0x3, 0x6, 0xa, 0x4, 0x4, 0x401, 0x6, 0x9, 0x2, 0x0, 0x9, 0xc99, 0x800, 0x4, 0xc87da4, 0x925e, 0x9, 0x10000, 0x7ff, 0x401, 0x3c6, 0x4, 0x7, 0xea75, 0x100, 0x8894, 0x6, 0x7, 0xf7c, 0x9, 0x5, 0xfffffff9, 0xb, 0x3, 0x8, 0x5, 0xfffeffff, 0xb5, 0x0, 0x302, 0x1, 0x5, 0x3, 0x3, 0x401, 0x10001, 0x2, 0x0, 0x8, 0x6b, 0x4, 0x807e, 0xfffffb01, 0x4, 0x6, 0xd, 0x3ab, 0x2, 0xa, 0xfffffffc, 0x5, 0x401, 0x3, 0x80000000, 0x3e8, 0x9381, 0xffff, 0x2, 0x5, 0x6, 0x412, 0x4, 0x10000, 0x5b, 0x9e81, 0x0, 0x80000007, 0x62fa, 0x5, 0xc, 0x7fffffff, 0x80, 0x7, 0x4, 0x80, 0x2, 0x4, 0x8, 0xfffff8b3, 0x2f, 0x8001, 0x6, 0x9, 0x1, 0x8, 0x1, 0x1ff, 0x9, 0x800000, 0x20006, 0x2, 0xd09c, 0xe, 0x7, 0x1, 0x2, 0x7fff, 0x80000000, 0xd, 0x1, 0xfff, 0x3, 0x8, 0x3, 0xdce, 0x2, 0x80, 0x3, 0x8, 0xfffffc01, 0x202, 0xdc, 0xde4, 0x9, 0x5, 0x6, 0x9, 0x0, 0x43a, 0xfffffffd, 0x0, 0x5, 0x4, 0x9cb, 0x3, 0xc, 0x80000000, 0x9, 0x1, 0x32b5, 0xb02, 0x1, 0x3, 0x0, 0x8000, 0xd42, 0x4, 0x5, 0xc, 0xc, 0xb, 0x1, 0x1ff, 0x2c45ab02]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x8b}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8}, @TCA_ROUTE4_ACT={0xa8, 0x6, [@m_ife={0xa4, 0x2, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x10001, 0x4, 0x1, 0x400}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa87, 0xf82a, 0x10000000, 0x805, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x1, 0x0, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10001, 0x2, 0x2, 0x5, 0x3, 0x9, 0x7, 0x200, 0x0, 0x0, 0x2444, 0x1ff, 0x7ff, 0x1, 0x40, 0x46, 0xffffffff, 0x2, 0x7ab, 0x987, 0xff, 0x5, 0x9, 0x8, 0xf, 0x5, 0x8, 0x5, 0x2, 0x2, 0x9, 0x400, 0xb, 0x1, 0x4, 0x10001, 0x7, 0xffffffff, 0x6, 0x4, 0xbe3, 0x8001, 0x6, 0x42, 0x9, 0xffff0001, 0x4, 0x800, 0x2, 0x77, 0x9, 0x2, 0x1, 0x8, 0x77d, 0xf, 0x5b, 0x4, 0x5, 0x1, 0x2, 0x1, 0x1, 0x9, 0x8, 0x0, 0x6, 0x7d0d, 0x0, 0x78e, 0x5, 0x515c, 0x5, 0xe, 0x1, 0x5, 0xc6ab, 0x80000000, 0x0, 0x3, 0x2, 0x101, 0x80, 0xfffffff8, 0xc4, 0x276790e1, 0x3, 0xfffff175, 0x3, 0x6, 0x400, 0x6, 0x836, 0x0, 0x5, 0xfffffff3, 0x4, 0x9, 0x7483, 0x8, 0x6, 0x2, 0x1ff, 0x3, 0x5, 0x8, 0x2, 0x4, 0x10001, 0xf, 0x3, 0x2, 0x0, 0x6, 0x9, 0x100, 0x6, 0x9, 0x3, 0x5393, 0x76102963, 0x4, 0x4, 0x9d7, 0x6, 0x800, 0x10001, 0x9, 0x6, 0x4, 0x3, 0x200, 0x3, 0x6, 0xf86, 0x3, 0x1, 0x5, 0x9, 0x4, 0x7fff, 0x5, 0x81, 0x800, 0x6, 0x1, 0x5, 0x9, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x5, 0x800, 0x7, 0x10, 0x5, 0x8001, 0x8, 0xf, 0x738, 0x9, 0x8001, 0x9, 0xfffffff8, 0xfffffff8, 0x5, 0x9, 0x3, 0x5, 0xea, 0x4, 0x0, 0x401, 0x5, 0x9, 0x1f10b8ed, 0x1, 0x4, 0xc, 0x10, 0x5, 0xeb0f, 0x8, 0x8ba, 0x1, 0x10, 0x9, 0x4, 0x6, 0x8, 0x3, 0x4, 0x50, 0x2, 0x4, 0xf6, 0x54, 0x6, 0xfffffc00, 0x81, 0x5, 0x8, 0x9, 0x6, 0x1800, 0xa, 0x1, 0x7, 0xcb, 0xe, 0xd, 0x200, 0x2, 0x1e, 0x40, 0x2d, 0x5, 0x80000000, 0xffff, 0x3, 0x7fffffff, 0xb, 0x8, 0xa9e, 0x5, 0x8, 0x81, 0x8, 0xcaa, 0x9, 0x9, 0x8, 0x86dd, 0x0, 0x5, 0x5, 0x1, 0x6, 0xb, 0xfffffe23, 0x4, 0x0, 0x5, 0xfffffffb, 0x7, 0x8, 0x7, 0x3c, 0x6, 0x40, 0xb, 0x401, 0x9, 0x3]}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0xd6c}}, 0x800) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 2m10.323249901s ago: executing program 4 (id=1494): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r4}}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}, {0x0, 0x7, 0x3, 0x7}, {0x4, 0x5, 0x6, 0x6}, {0x868, 0x6, 0x96, 0x2}]}, 0x10) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 2m9.178185213s ago: executing program 2 (id=1498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xf00, 0x0, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 2m9.029786593s ago: executing program 2 (id=1501): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 2m4.078830049s ago: executing program 4 (id=1513): socket$alg(0x26, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x1, 0x970) sendfile(r1, r2, 0x0, 0xffffffff004) accept4$unix(r2, &(0x7f0000000240), &(0x7f0000000300)=0x6e, 0xc0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@local, 0x1}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "d20fac525dfe9fee", "51d58b2f32926cd175373bcf36f6e2bf", "a122a070", "66e171f3a1724eaf"}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x5, 0x77}, {@dev={0xac, 0x14, 0x14, 0x50}, 0x4e23, 0x1, 0xcd, 0x4}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0}, 0x0) 2m3.193349157s ago: executing program 4 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8a5}, 0xc890) 2m3.023257583s ago: executing program 4 (id=1518): socket$inet_mptcp(0x2, 0x1, 0x106) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0x4, &(0x7f0000000800)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14, 0x1}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc, 0x1}], {0x95, 0x0, 0x9}}, &(0x7f0000000880)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x1c}}, 0x0) syz_clone(0xc200000, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2m2.104930129s ago: executing program 4 (id=1522): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) 2m1.382117657s ago: executing program 4 (id=1523): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r2}}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}, {0x0, 0x7, 0x3, 0x7}, {0x4, 0x5, 0x6, 0x6}, {0x868, 0x6, 0x96, 0x2}]}, 0x10) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 1m53.897429293s ago: executing program 34 (id=1501): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') 1m46.260050191s ago: executing program 35 (id=1523): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {0x0, r2}}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000023c0)=[{0x6, 0x25, 0xd, 0x7}, {0x9, 0x4b, 0x9, 0x3}, {0x0, 0x7, 0x3, 0x7}, {0x4, 0x5, 0x6, 0x6}, {0x868, 0x6, 0x96, 0x2}]}, 0x10) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x1) 34.737838648s ago: executing program 8 (id=1631): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x4, &(0x7f0000000100)={0x16, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 33.295720126s ago: executing program 8 (id=1637): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/126, 0x7e, 0x80000402) 33.12617528s ago: executing program 8 (id=1638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 31.395445306s ago: executing program 8 (id=1642): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 28.981796399s ago: executing program 8 (id=1645): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000e3000000000000004e8441", @ANYRES32=0x0, @ANYRES32], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={0x0, 0x7fffffff}, &(0x7f0000000dc0)=0x8) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./rpc_pipe\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020bb509050000002cbd7000fbdbdf39030002"], 0x28}}, 0x10) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=2,proto=udp\x00') mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000500)='nfs4\x00', 0x0, &(0x7f0000000540)='addr=127.0.0.1,port=2049,proto=tcp,clientaddr=127.0.0.1\x00') timer_create(0x7, &(0x7f0000000180)={0x0, 0x21, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 27.603537585s ago: executing program 8 (id=1649): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) 11.833155081s ago: executing program 36 (id=1649): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) 9.334664232s ago: executing program 7 (id=1708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ptrace(0x10, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='my_configfs\x00', 0xc) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008a80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/250, 0xfa}], 0x1}, 0xffff}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)=""/76, 0x4c}], 0x1}, 0x2}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x40000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) 7.478997994s ago: executing program 1 (id=1711): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x800) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x309601, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x140008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4c090) 7.308022258s ago: executing program 7 (id=1713): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, 0x0, 0x0) socket(0x2, 0x2, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) madvise(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}}) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e2", 0x7}], 0x1}}], 0x1, 0x20008000) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r3, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 6.58461814s ago: executing program 1 (id=1714): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0xfff3, 0x2}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x895) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0xe) fallocate(r4, 0x1, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1, 0x9}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x20000050) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x4b9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526", 0xf}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="2c00000040000100fcff0700040000000100000004004880080001800400829c0c0002000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={r7, 0x40007}, 0x8) 5.82135628s ago: executing program 6 (id=1718): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000002d01330080200900080211000001080211000000505050"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.639978827s ago: executing program 6 (id=1719): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) getdents(r1, &(0x7f00000001c0)=""/218, 0xda) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.670733077s ago: executing program 7 (id=1721): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.327881577s ago: executing program 3 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000a00)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20004004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.28671687s ago: executing program 3 (id=1723): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x800) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x309601, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x140008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c090) 3.168758635s ago: executing program 6 (id=1724): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) 3.14694178s ago: executing program 3 (id=1725): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20008084}, 0x0) 3.097418439s ago: executing program 7 (id=1726): writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="aaf9cbbebec1c21b2b97fe8378b1a6f9b362b0ce28d64dcae763a477474cd92e109fff8cbeb8da39e130c0e87879555d7d691c5ffa0ac0fa49a8957e4836da102348dff8d9bf765e0ac0d619a539ea3d1bf88e4ed805f6577386bc995636ac2cea14b9677bdfb1914b421322ef4e955bc5147abd6102bd0a10ee2e48b60974cdd83be5c49500f9b91f88934faad163a176b3a9e397069e026a81e8dc2d094d1ccf11663075c478f859ad127e9b4e7a57fb3b687a7028a38d612c45d10ae18ea4e356730bd5f16d03bd49200bb34d64d2a7b86ba5aef9f82143803c2eff377d13191b2201bbdcd953a6f40365c42d1dba0dbd4f199ab5447ff3d4a43c90cb5cebf0b33851e3e7e1d8fc9c23470ed8b99af94d0e2fa928c92ad57b8a411d39e08d6a347154ba5714dae3e3e5f6f2e634006b9bed44a08df2050dd90a4fab00e368fe552ebd1c3ec9884f7ced36521d94cb7462c54e1e6150445d75535d7777cdd4bd21cbebe7aa6c97866613122b8b938fc003f4e9196f75611c7c16e2354554fce9d84c21b7c1adcfdb51a1e3df4d167ca6c934564fef3929531eb1cc3ce256fb03fced3d8838def483c40a0d60b346848e8ce72ca24d3bbd9938ec7ae7be11631bccb7627edd71f7d0d4328d7dd1d264ae863bd7e272976ac6c56d3cce490e8863bfd04e3a100d02a589d2632ab53a3131a5e7770f33cd51ddc49374db0b9b9bb32fd4f5e41ca242a04f54cca872d1bbfe8c791d04ddec5b2974622f5fab7dc51888c804d84f360788a4102fe183976bc88ccf9f6640370aac22aef9c6817376031d9750943d8f71dadf79ee97f922cdf352353f67dc8caaaac0d995fde8723ec54021840fe07d7cdb5cf9cc0e1e7081366deff4", 0x274}, {&(0x7f00000005c0)="0456d4856c4b88b97e45594f0ae6bff7d3ae9a40b7bd9bc564c9516b939abd7e0e204453a9bffc037cb73bc5fef9de25180231f9dd5f0663c0093c594de5dc81cb1f638308ba1228e76cd56d8f18cf325b5608e2fd59232cdab01480b8e36c6b8b179ae19b388dea13c9a8429dd4e528929af3733ecd6b773c10132ee6bc3b7430be9233c4fcb610439ee8e2414966e88d0b05868fe5aa421397c33560a46fe8cbd9e02fda254d68d3308c0efc3c02c4845691aacc963d04f433dda8b8c0d00d0df4f8d165e0dd9ad1123fa4", 0xcc}], 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 2.904125857s ago: executing program 3 (id=1727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xe4}}, 0x0) 2.332162049s ago: executing program 7 (id=1728): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x10000, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x10, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0xfffffffc, r3}, 0x10) 2.303328678s ago: executing program 3 (id=1729): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.223467328s ago: executing program 6 (id=1730): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'macvlan1\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 2.087924027s ago: executing program 1 (id=1731): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x18) shutdown(r1, 0x0) 2.08236919s ago: executing program 6 (id=1732): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000808, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.043220388s ago: executing program 3 (id=1733): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) munmap(&(0x7f0000138000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) getdents(r1, &(0x7f00000001c0)=""/218, 0xda) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.562324607s ago: executing program 1 (id=1734): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x800) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x309601, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom0\x00', 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x140008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4c090) 1.553436236s ago: executing program 6 (id=1735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)=ANY=[], 0xa) 1.405502853s ago: executing program 1 (id=1736): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) ptrace(0x10, 0x0) socket(0x1e, 0x4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='my_configfs\x00', 0xc) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x203}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.395294042s ago: executing program 7 (id=1737): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x6, 0x2, 0x80000) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r3, 0x1269, &(0x7f00000000c0)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) socket$inet(0x2, 0x3, 0x0) 0s ago: executing program 1 (id=1738): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) kernel console output (not intermixed with test programs): ound at 0x00000128: 0x16f1 instead [ 213.324089][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 213.349214][ T7362] jffs2: Further such events for this erase block will not be printed [ 213.382066][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 213.403491][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 213.416677][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x5569 instead [ 213.427120][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0xc9b3 instead [ 213.445873][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 213.512756][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 213.525750][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 213.560249][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 213.572275][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 213.586671][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 213.673246][ T7362] jffs2: Further such events for this erase block will not be printed [ 213.768686][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 213.863566][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 213.898207][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x5569 instead [ 213.913413][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0xc9b3 instead [ 213.925151][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 213.974955][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 213.992992][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x5569 instead [ 214.003984][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0xc9b3 instead [ 214.008474][ T7395] FAULT_INJECTION: forcing a failure. [ 214.008474][ T7395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.017988][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 214.028284][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.3.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 214.028310][ T7395] Tainted: [L]=SOFTLOCKUP [ 214.028315][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 214.028325][ T7395] Call Trace: [ 214.028331][ T7395] [ 214.028338][ T7395] dump_stack_lvl+0x100/0x190 [ 214.028365][ T7395] should_fail_ex.cold+0x5/0xa [ 214.028387][ T7395] _copy_to_user+0x32/0xd0 [ 214.028413][ T7395] simple_read_from_buffer+0xcb/0x170 [ 214.028434][ T7395] proc_fail_nth_read+0x1af/0x230 [ 214.028461][ T7395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.028489][ T7395] ? rw_verify_area+0xce/0x6d0 [ 214.028512][ T7395] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.028538][ T7395] vfs_read+0x1e4/0xb40 [ 214.028566][ T7395] ? __pfx_vfs_read+0x10/0x10 [ 214.028590][ T7395] ? __fget_files+0x215/0x3d0 [ 214.028613][ T7395] ? __fget_files+0x21f/0x3d0 [ 214.028637][ T7395] ksys_read+0x12a/0x250 [ 214.028651][ T7395] ? __pfx_ksys_read+0x10/0x10 [ 214.028674][ T7395] do_syscall_64+0x115/0x870 [ 214.028693][ T7395] ? clear_bhb_loop+0x70/0xc0 [ 214.028713][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.028730][ T7395] RIP: 0033:0x7fedfcd5e90e [ 214.028744][ T7395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.028760][ T7395] RSP: 002b:00007fedfdb95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.028777][ T7395] RAX: ffffffffffffffda RBX: 00007fedfdb966c0 RCX: 00007fedfcd5e90e [ 214.028788][ T7395] RDX: 000000000000000f RSI: 00007fedfdb960a0 RDI: 0000000000000004 [ 214.028797][ T7395] RBP: 00007fedfdb96090 R08: 0000000000000000 R09: 0000000000000000 [ 214.028814][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.028823][ T7395] R13: 00007fedfd026038 R14: 00007fedfd025fa0 R15: 00007ffc12f537d8 [ 214.028847][ T7395] [ 214.233740][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 214.244266][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x5569 instead [ 214.255405][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0xc9b3 instead [ 214.266807][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 214.278195][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 214.371558][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x5569 instead [ 214.392815][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0xc9b3 instead [ 214.403648][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 214.434266][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 214.436339][ T5725] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 214.455584][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x5569 instead [ 214.466763][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0xc9b3 instead [ 214.478229][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 214.488680][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 214.499084][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x5569 instead [ 214.509514][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0xc9b3 instead [ 214.656318][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 214.667607][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 214.678590][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x5569 instead [ 214.689670][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0xc9b3 instead [ 214.694741][ T5725] usb 1-1: device descriptor read/64, error -71 [ 214.700502][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 214.717362][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 214.728165][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x5569 instead [ 214.738915][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0xc9b3 instead [ 214.754360][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 214.765252][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 214.780949][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x5569 instead [ 214.792562][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0xc9b3 instead [ 214.804078][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 214.815610][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 214.826388][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x5569 instead [ 214.837204][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0xc9b3 instead [ 214.848041][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 214.858921][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 214.869646][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x5569 instead [ 214.882243][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0xc9b3 instead [ 214.898681][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 214.909433][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 214.920086][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x5569 instead [ 214.930786][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0xc9b3 instead [ 214.941454][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 214.951937][ T5725] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 214.960905][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 214.971732][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x5569 instead [ 214.984759][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0xc9b3 instead [ 214.996410][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 215.010725][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 215.021475][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x5569 instead [ 215.032690][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0xc9b3 instead [ 215.043383][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 215.054091][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 215.064848][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x5569 instead [ 215.075660][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0xc9b3 instead [ 215.087076][ T5725] usb 1-1: device descriptor read/64, error -71 [ 215.095029][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 215.106627][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 215.121054][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x5569 instead [ 215.134137][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0xc9b3 instead [ 215.145130][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 215.155910][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 215.205029][ T5725] usb usb1-port1: attempt power cycle [ 215.272535][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x5569 instead [ 215.291052][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0xc9b3 instead [ 215.345909][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 215.357870][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 215.384452][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x5569 instead [ 215.412735][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0xc9b3 instead [ 215.438415][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 215.450871][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 215.461501][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x5569 instead [ 215.472237][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0xc9b3 instead [ 215.516178][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 215.541818][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 215.554942][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x5569 instead [ 215.565878][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0xc9b3 instead [ 215.577165][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 215.594393][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 215.605977][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x5569 instead [ 215.616512][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0xc9b3 instead [ 215.627123][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 215.635001][ T5725] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.638171][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 215.666802][ T5725] usb 1-1: device descriptor read/8, error -71 [ 215.671256][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x5569 instead [ 215.683708][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0xc9b3 instead [ 215.694290][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 215.705714][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 215.716215][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x5569 instead [ 215.727076][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0xc9b3 instead [ 215.737703][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 215.748330][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 215.759215][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5569 instead [ 215.786368][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0xc9b3 instead [ 215.800691][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 215.813989][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 215.824664][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x5569 instead [ 215.836087][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0xc9b3 instead [ 215.848382][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 215.859056][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 215.869789][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x5569 instead [ 215.880299][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0xc9b3 instead [ 215.890657][ T5604] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 215.900964][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 215.912413][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 215.922932][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5569 instead [ 215.933514][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0xc9b3 instead [ 215.944293][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 215.955277][ T5725] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 215.960177][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 215.973383][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x5569 instead [ 215.983880][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0xc9b3 instead [ 215.986044][ T5725] usb 1-1: device descriptor read/8, error -71 [ 215.994501][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 216.012841][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 216.023365][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x5569 instead [ 216.033885][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0xc9b3 instead [ 216.044443][ T5604] usb 4-1: Using ep0 maxpacket: 32 [ 216.044449][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 216.044470][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 216.050620][ T5604] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 216.060175][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x5569 instead [ 216.071775][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 216.079604][ T7362] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0xc9b3 instead [ 216.090457][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 216.102513][ T7362] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 216.113450][ T5725] usb usb1-port1: unable to enumerate USB device [ 216.127527][ T7362] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 216.133913][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 216.158470][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 206, changing to 11 [ 216.170681][ T5604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 10124, setting to 1024 [ 216.184031][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.192398][ T5604] usb 4-1: Product: syz [ 216.196625][ T5604] usb 4-1: Manufacturer: syz [ 216.201231][ T5604] usb 4-1: SerialNumber: syz [ 216.208189][ T5604] usb 4-1: config 0 descriptor?? [ 216.419805][ T30] audit: type=1400 audit(1786988790.193:583): avc: denied { setopt } for pid=7411 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.430631][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 217.581777][ T30] audit: type=1400 audit(1786988791.343:584): avc: denied { setopt } for pid=7411 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 217.641984][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 218.054856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 218.817826][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -110 [ 218.834435][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 218.840865][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 218.851738][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 218.921134][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 218.968146][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.013986][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.042625][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.068034][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.097680][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.124199][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.153341][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.183940][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.219799][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.252976][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.285375][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.299403][ T5604] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 219.326970][ T5604] input input9: Timeout waiting for response from device. [ 220.280000][ T30] audit: type=1400 audit(1786988794.053:585): avc: denied { ioctl } for pid=7462 comm="syz.4.481" path="socket:[15882]" dev="sockfs" ino=15882 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.280194][ T7463] syzkaller0: entered promiscuous mode [ 220.335781][ T7463] syzkaller0: entered allmulticast mode [ 220.346652][ T29] usb 4-1: USB disconnect, device number 13 [ 220.446422][ T7464] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 220.492424][ T30] audit: type=1400 audit(1786988794.263:586): avc: denied { write } for pid=7436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.836950][ T30] audit: type=1400 audit(1786988794.603:587): avc: denied { write } for pid=7472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.040713][ T7476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.484'. [ 221.731130][ T7484] syzkaller0: entered promiscuous mode [ 221.747441][ T30] audit: type=1400 audit(1786988795.513:588): avc: denied { connect } for pid=7481 comm="syz.2.486" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.782463][ T7484] syzkaller0: entered allmulticast mode [ 221.797502][ T7491] FAULT_INJECTION: forcing a failure. [ 221.797502][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.969824][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.3.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.969860][ T7491] Tainted: [L]=SOFTLOCKUP [ 221.969868][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 221.969880][ T7491] Call Trace: [ 221.969888][ T7491] [ 221.969896][ T7491] dump_stack_lvl+0x100/0x190 [ 221.969932][ T7491] should_fail_ex.cold+0x5/0xa [ 221.969961][ T7491] _copy_from_iter+0x1f4/0x1690 [ 221.969998][ T7491] ? __pfx__copy_from_iter+0x10/0x10 [ 221.970027][ T7491] ? _parse_integer_limit+0x1ac/0x220 [ 221.970054][ T7491] ? _kstrtoull+0x13c/0x1f0 [ 221.970075][ T7491] ? __pfx__kstrtoull+0x10/0x10 [ 221.970099][ T7491] tun_get_user+0x265/0x3c20 [ 221.970129][ T7491] ? __lock_acquire+0x49f/0x1a40 [ 221.970161][ T7491] ? __pfx_tun_get_user+0x10/0x10 [ 221.970185][ T7491] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.970226][ T7491] ? find_held_lock+0x2b/0x80 [ 221.970246][ T7491] ? tun_get+0x191/0x370 [ 221.970266][ T7491] ? tun_get+0x191/0x370 [ 221.970293][ T7491] tun_chr_write_iter+0xdc/0x200 [ 221.970320][ T7491] vfs_write+0x6ac/0x1050 [ 221.970342][ T7491] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 221.970368][ T7491] ? __pfx_vfs_write+0x10/0x10 [ 221.970387][ T7491] ? find_held_lock+0x2b/0x80 [ 221.970426][ T7491] ksys_write+0x12a/0x250 [ 221.970447][ T7491] ? __pfx_ksys_write+0x10/0x10 [ 221.970476][ T7491] do_syscall_64+0x115/0x870 [ 221.970502][ T7491] ? clear_bhb_loop+0x70/0xc0 [ 221.970528][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.970551][ T7491] RIP: 0033:0x7fedfcd9e0d9 [ 221.970571][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.970593][ T7491] RSP: 002b:00007fedfaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.970615][ T7491] RAX: ffffffffffffffda RBX: 00007fedfd026090 RCX: 00007fedfcd9e0d9 [ 221.970629][ T7491] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 221.970643][ T7491] RBP: 00007fedfaff6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.970656][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.970668][ T7491] R13: 00007fedfd026128 R14: 00007fedfd026090 R15: 00007ffc12f537d8 [ 221.970705][ T7491] [ 222.207291][ T7496] netlink: 'syz.1.475': attribute type 11 has an invalid length. [ 222.215094][ T7496] netlink: 220 bytes leftover after parsing attributes in process `syz.1.475'. [ 222.340394][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 222.698787][ T30] audit: type=1400 audit(1786988796.393:589): avc: denied { write } for pid=7481 comm="syz.2.486" laddr=fe80::bc7d:6cff:fe48:7d44 lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.995465][ T7510] CacheFiles: No cache directory specified [ 223.019700][ T30] audit: type=1400 audit(1786988796.763:590): avc: denied { read write } for pid=7504 comm="syz.4.490" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 223.365852][ T30] audit: type=1400 audit(1786988796.763:591): avc: denied { open } for pid=7504 comm="syz.4.490" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 223.924375][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 223.981521][ T30] audit: type=1400 audit(1786988797.733:592): avc: denied { mounton } for pid=7516 comm="syz.3.494" path="/94/debug/fail_page_alloc/min-order" dev="debugfs" ino=2939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 225.173527][ T7535] netlink: 'syz.4.495': attribute type 11 has an invalid length. [ 225.181444][ T7535] netlink: 220 bytes leftover after parsing attributes in process `syz.4.495'. [ 225.893806][ T30] audit: type=1400 audit(1786988799.653:593): avc: denied { write } for pid=7485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.243018][ T30] audit: type=1400 audit(1786988800.013:594): avc: denied { write } for pid=7549 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.966537][ T6968] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 229.969598][ T6892] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 250.445645][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.451976][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.458643][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 293.650628][ T30] audit: type=1400 audit(1786988867.423:595): avc: denied { read write } for pid=7565 comm="syz.4.507" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 293.713044][ T7571] netlink: 100 bytes leftover after parsing attributes in process `syz.0.503'. [ 294.550515][ T30] audit: type=1400 audit(1786988867.423:596): avc: denied { open } for pid=7565 comm="syz.4.507" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 294.575417][ T30] audit: type=1400 audit(1786988867.713:597): avc: denied { ioctl } for pid=7569 comm="syz.0.503" path="socket:[17022]" dev="sockfs" ino=17022 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 294.609213][ T30] audit: type=1400 audit(1786988868.383:598): avc: denied { getopt } for pid=7583 comm="syz.4.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 295.606692][ T7595] FAULT_INJECTION: forcing a failure. [ 295.606692][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 295.619434][ T7595] CPU: 0 UID: 0 PID: 7595 Comm: syz.4.510 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.619466][ T7595] Tainted: [L]=SOFTLOCKUP [ 295.619473][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 295.619484][ T7595] Call Trace: [ 295.619491][ T7595] [ 295.619499][ T7595] dump_stack_lvl+0x100/0x190 [ 295.619531][ T7595] should_fail_ex.cold+0x5/0xa [ 295.619556][ T7595] should_failslab+0xc2/0x120 [ 295.619583][ T7595] kmem_cache_alloc_noprof+0x91/0x6a0 [ 295.619607][ T7595] ? __x64_sys_futex+0x34f/0x4d0 [ 295.619638][ T7595] ? __x64_sys_futex+0x358/0x4d0 [ 295.619666][ T7595] ? do_getname+0x35/0x390 [ 295.619704][ T7595] do_getname+0x35/0x390 [ 295.619733][ T7595] __x64_sys_unlinkat+0xa0/0x130 [ 295.619757][ T7595] do_syscall_64+0x115/0x870 [ 295.619780][ T7595] ? clear_bhb_loop+0x70/0xc0 [ 295.619805][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.619826][ T7595] RIP: 0033:0x7f7b3279e0d9 [ 295.619842][ T7595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.619861][ T7595] RSP: 002b:00007f7b335dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 295.619880][ T7595] RAX: ffffffffffffffda RBX: 00007f7b32a26180 RCX: 00007f7b3279e0d9 [ 295.619893][ T7595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 295.619904][ T7595] RBP: 00007f7b32835024 R08: 0000000000000000 R09: 0000000000000000 [ 295.619916][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.619927][ T7595] R13: 00007f7b32a26218 R14: 00007f7b32a26180 R15: 00007ffde71bd738 [ 295.619952][ T7595] [ 295.941163][ T30] audit: type=1400 audit(1786988869.713:599): avc: denied { write } for pid=7600 comm="syz.3.513" name="mcfilter6" dev="proc" ino=4026533431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 297.414890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 297.455078][ T30] audit: type=1400 audit(1786988870.723:600): avc: denied { shutdown } for pid=7600 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.476038][ T30] audit: type=1400 audit(1786988870.743:601): avc: denied { read write } for pid=7600 comm="syz.3.513" dev="sockfs" ino=16129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 298.170094][ T5604] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 298.405749][ T30] audit: type=1400 audit(1786988872.183:602): avc: denied { setopt } for pid=7624 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 298.656311][ T5604] usb 5-1: Using ep0 maxpacket: 8 [ 298.663157][ T5604] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.676128][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.726933][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.764272][ T5604] usb 5-1: config 0 descriptor?? [ 299.491225][ T30] audit: type=1400 audit(1786988872.853:603): avc: denied { read } for pid=7638 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.127857][ T5604] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 300.180782][ T7635] macsec1: entered promiscuous mode [ 300.218607][ T7635] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 300.359909][ T7635] macsec1: entered allmulticast mode [ 300.384886][ T7635] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 300.548470][ T7651] overlayfs: overlapping lowerdir path [ 300.902023][ T30] audit: type=1400 audit(1786988874.223:604): avc: denied { module_load } for pid=7644 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 300.940489][ T7635] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 301.767820][ T5604] usb 5-1: USB disconnect, device number 4 [ 301.903820][ T30] audit: type=1400 audit(1786988875.673:605): avc: denied { bind } for pid=7665 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 301.974011][ T30] audit: type=1400 audit(1786988875.693:606): avc: denied { append } for pid=7664 comm="syz.2.530" name="dvr0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 302.214670][ T30] audit: type=1400 audit(1786988875.983:607): avc: denied { read write } for pid=7668 comm="syz.1.529" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 302.714212][ T7671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.771667][ T30] audit: type=1400 audit(1786988875.983:608): avc: denied { open } for pid=7668 comm="syz.1.529" path="/107/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 303.891985][ T30] audit: type=1400 audit(1786988877.113:609): avc: denied { write } for pid=7675 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.977436][ T30] audit: type=1400 audit(1786988877.113:610): avc: denied { name_connect } for pid=7675 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 304.052215][ T30] audit: type=1400 audit(1786988877.643:611): avc: denied { append } for pid=7680 comm="syz.0.534" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 304.136046][ T30] audit: type=1400 audit(1786988877.743:612): avc: denied { mount } for pid=7682 comm="syz.4.535" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 305.670907][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 305.670925][ T30] audit: type=1400 audit(1786988879.443:619): avc: denied { ioctl } for pid=7700 comm="syz.1.541" path="socket:[16331]" dev="sockfs" ino=16331 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.654830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 309.411499][ T30] audit: type=1400 audit(1786988883.183:620): avc: denied { lock } for pid=7741 comm="syz.0.553" path="socket:[17343]" dev="sockfs" ino=17343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 309.971581][ T30] audit: type=1400 audit(1786988883.273:621): avc: denied { unmount } for pid=7738 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 310.910630][ T7750] netlink: 'syz.2.555': attribute type 2 has an invalid length. [ 310.924878][ T7750] : entered promiscuous mode [ 312.073678][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.094726][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.101348][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 312.413504][ T30] audit: type=1400 audit(1786988886.163:622): avc: denied { create } for pid=7758 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.817864][ T30] audit: type=1400 audit(1786988886.173:623): avc: denied { ioctl } for pid=7758 comm="syz.0.558" path="socket:[17385]" dev="sockfs" ino=17385 ioctlcmd=0x89fa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.894781][ T30] audit: type=1400 audit(1786988886.663:624): avc: denied { bind } for pid=7764 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.001415][ T30] audit: type=1400 audit(1786988886.773:625): avc: denied { create } for pid=7768 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.144784][ T30] audit: type=1400 audit(1786988886.773:626): avc: denied { setopt } for pid=7768 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.128581][ T30] audit: type=1400 audit(1786988888.873:627): avc: denied { read } for pid=7787 comm="syz.4.568" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 315.398443][ T30] audit: type=1400 audit(1786988888.873:628): avc: denied { open } for pid=7787 comm="syz.4.568" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 315.772305][ T30] audit: type=1400 audit(1786988888.893:629): avc: denied { ioctl } for pid=7787 comm="syz.4.568" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 316.355887][ T30] audit: type=1400 audit(1786988890.133:630): avc: denied { read } for pid=7792 comm="syz.0.570" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 316.444162][ T30] audit: type=1400 audit(1786988890.133:631): avc: denied { open } for pid=7792 comm="syz.0.570" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.079341][ T7848] netlink: 64 bytes leftover after parsing attributes in process `syz.2.589'. [ 321.090205][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 321.090220][ T30] audit: type=1400 audit(1786988894.863:633): avc: denied { bind } for pid=7845 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.189822][ T30] audit: type=1400 audit(1786988894.963:634): avc: denied { connect } for pid=7845 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 321.431651][ T30] audit: type=1400 audit(1786988894.963:635): avc: denied { write } for pid=7845 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 323.502876][ T7864] fuse: fd is not a fuse device [ 324.510715][ T7876] bond0: entered promiscuous mode [ 324.519482][ T7879] netlink: 52 bytes leftover after parsing attributes in process `syz.2.602'. [ 324.528564][ T7876] bond_slave_0: entered promiscuous mode [ 324.534510][ T7876] bond_slave_1: entered promiscuous mode [ 324.541027][ T7876] bridge0: entered promiscuous mode [ 324.556496][ T7876] batadv0: entered promiscuous mode [ 324.565085][ T7876] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 324.577697][ T7876] bond0: left promiscuous mode [ 324.582694][ T7876] bond_slave_0: left promiscuous mode [ 324.590190][ T7876] bond_slave_1: left promiscuous mode [ 324.597433][ T7876] bridge0: left promiscuous mode [ 324.614749][ T7876] batadv0: left promiscuous mode [ 324.640117][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.649849][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.009961][ T30] audit: type=1400 audit(1786988899.523:636): avc: denied { ioctl } for pid=7892 comm="syz.1.597" path="socket:[18587]" dev="sockfs" ino=18587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.230372][ T30] audit: type=1400 audit(1786988899.523:637): avc: denied { write } for pid=7892 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.250765][ T30] audit: type=1400 audit(1786988899.523:638): avc: denied { read } for pid=7892 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 326.341729][ T30] audit: type=1400 audit(1786988900.113:639): avc: denied { watch watch_reads } for pid=7900 comm="syz.4.607" path="/109/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 326.379471][ T30] audit: type=1400 audit(1786988900.153:640): avc: denied { bind } for pid=7902 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 326.385277][ T7903] tipc: Started in network mode [ 326.431731][ T7903] tipc: Node identity 2d2e60dcabcee6f2002e, cluster identity 4711 [ 328.757683][ T30] audit: type=1400 audit(1786988902.483:641): avc: denied { wake_alarm } for pid=7926 comm="syz.0.618" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.792484][ T5605] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 330.694804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 330.930241][ T30] audit: type=1400 audit(1786988904.703:642): avc: denied { write } for pid=7948 comm="syz.1.627" name="core" dev="configfs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.970972][ T7955] fuse: fd is not a fuse device [ 331.004928][ T30] audit: type=1400 audit(1786988904.703:643): avc: denied { write } for pid=7948 comm="syz.1.627" name="functions" dev="configfs" ino=12802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.101516][ T30] audit: type=1400 audit(1786988904.703:644): avc: denied { write } for pid=7948 comm="syz.1.627" name="target" dev="configfs" ino=2790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 331.179682][ T30] audit: type=1400 audit(1786988904.723:645): avc: denied { write } for pid=7948 comm="syz.1.627" name="usb_gadget" dev="configfs" ino=17881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 332.478109][ T7970] evm: overlay not supported [ 332.514469][ T30] audit: type=1400 audit(1786988904.733:646): avc: denied { write } for pid=7948 comm="syz.1.627" name="naa.6001405123456789" dev="configfs" ino=17883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 332.539180][ T30] audit: type=1400 audit(1786988904.753:647): avc: denied { read } for pid=7948 comm="syz.1.627" name="nexus" dev="configfs" ino=17893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 332.677103][ T30] audit: type=1800 audit(1786988904.753:648): pid=7949 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.627" name="nexus" dev="configfs" ino=17893 res=0 errno=0 [ 334.024955][ T30] audit: type=1400 audit(1786988906.153:649): avc: denied { watch } for pid=7969 comm="syz.3.636" path="/120/net_prio.prioidx" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 334.093127][ T30] audit: type=1400 audit(1786988906.153:650): avc: denied { watch_sb watch_reads } for pid=7969 comm="syz.3.636" path="/120/net_prio.prioidx" dev="tmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 334.154008][ T30] audit: type=1400 audit(1786988907.923:651): avc: denied { cmd } for pid=7989 comm="iou-wrk-7990" path="socket:[17964]" dev="sockfs" ino=17964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 335.264110][ T30] audit: type=1400 audit(1786988908.413:652): avc: denied { read } for pid=7995 comm="syz.3.644" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 335.344729][ T30] audit: type=1400 audit(1786988908.413:653): avc: denied { open } for pid=7995 comm="syz.3.644" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 335.608450][ T8009] netlink: 'syz.0.647': attribute type 2 has an invalid length. [ 335.707942][ T8009] : entered promiscuous mode [ 341.716788][ T30] audit: type=1400 audit(1786988915.443:654): avc: denied { bind } for pid=8046 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 341.904665][ T8054] netlink: 'syz.4.660': attribute type 2 has an invalid length. [ 341.975819][ T8054] : entered promiscuous mode [ 346.393866][ T8085] fuse: fd is not a fuse device [ 348.203179][ T8113] netlink: 'syz.4.681': attribute type 10 has an invalid length. [ 348.253201][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 348.291394][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 348.614868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 349.244258][ T8121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.681'. [ 349.281137][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 349.332768][ T8121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8121 comm=syz.4.681 [ 350.452434][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.4.692'. [ 351.799505][ T8157] autofs: Unknown parameter '' [ 352.385800][ T30] audit: type=1400 audit(1786988925.613:655): avc: denied { append } for pid=8149 comm="syz.0.696" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 352.781091][ T8163] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 354.441476][ T8163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.492106][ T8169] bond1: (slave geneve2): making interface the new active one [ 354.545334][ T8169] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 355.028206][ T8180] overlayfs: overlapping lowerdir path [ 355.445872][ T8187] Cannot find del_set index 0 as target [ 357.664379][ T8209] autofs: Unknown parameter '' [ 362.125019][ T8252] autofs: Unknown parameter '' [ 363.894309][ T30] audit: type=1800 audit(1786988937.663:656): pid=8268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.728" name="nexus" dev="configfs" ino=18325 res=0 errno=0 [ 364.384650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 366.109775][ T30] audit: type=1400 audit(1786988939.883:657): avc: denied { read write } for pid=8283 comm="syz.4.724" name="mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 366.151097][ T30] audit: type=1400 audit(1786988939.883:658): avc: denied { open } for pid=8283 comm="syz.4.724" path="/dev/input/mouse0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 366.232186][ T8289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 369.094843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 369.526164][ T30] audit: type=1400 audit(1786988943.213:659): avc: denied { connect } for pid=8321 comm="syz.2.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.834821][ T8332] binfmt_misc: register: failed to install interpreter file ./file0 [ 371.614899][ T8344] input: syz0 as /devices/virtual/input/input13 [ 371.986676][ T8354] netlink: 'syz.3.756': attribute type 2 has an invalid length. [ 372.003609][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.746'. [ 373.264964][ T8354] : entered promiscuous mode [ 373.326851][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.333291][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.344491][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 374.545390][ T30] audit: type=1400 audit(1786988948.313:660): avc: denied { write } for pid=8351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.764682][ T5778] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 374.775029][ T5605] Bluetooth: hci0: command 0x0406 tx timeout [ 374.797188][ T30] audit: type=1400 audit(1786988948.573:661): avc: denied { mount } for pid=8390 comm="syz.0.767" name="/" dev="overlay" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 374.807498][ T5778] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 374.973602][ T8403] overlayfs: failed to clone lowerpath [ 375.540320][ T30] audit: type=1400 audit(1786988949.223:662): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 375.614718][ T30] audit: type=1400 audit(1786988949.353:663): avc: denied { write } for pid=8404 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.773269][ T8412] input: syz0 as /devices/virtual/input/input14 [ 376.297140][ T8413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.770'. [ 376.790629][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.771'. [ 377.404699][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 377.411516][ T5778] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 378.514642][ T5778] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 378.884189][ T30] audit: type=1400 audit(1786988952.653:664): avc: denied { write } for pid=8418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.026219][ T30] audit: type=1400 audit(1786988952.803:665): avc: denied { write } for pid=8450 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.288760][ T8470] netlink: 'syz.0.774': attribute type 2 has an invalid length. [ 381.204560][ T30] audit: type=1400 audit(1786988954.973:666): avc: denied { write } for pid=8453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.478089][ T30] audit: type=1400 audit(1786988955.153:667): avc: denied { write } for pid=8494 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.590596][ T8504] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.302903][ T30] audit: type=1400 audit(1786988958.063:668): avc: denied { write } for pid=8500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.364075][ T8536] netlink: 'syz.4.802': attribute type 2 has an invalid length. [ 384.997501][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 385.072485][ T30] audit: type=1400 audit(1786988958.843:669): avc: denied { write } for pid=8547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.443297][ T8560] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.803829][ T30] audit: type=1400 audit(1786988961.573:670): avc: denied { write } for pid=8552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.554633][ T30] audit: type=1400 audit(1786988962.323:671): avc: denied { write } for pid=8599 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.327130][ T8607] netlink: 'syz.2.820': attribute type 2 has an invalid length. [ 391.173253][ T8631] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 391.854987][ T30] audit: type=1400 audit(1786988965.623:672): avc: denied { write } for pid=8603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.619666][ T30] audit: type=1400 audit(1786988966.393:673): avc: denied { write } for pid=8642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.740799][ T8654] input: syz0 as /devices/virtual/input/input15 [ 393.847282][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.817'. [ 395.207627][ T5776] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 395.606664][ T5776] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 396.449717][ T5776] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 396.468224][ T5776] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.486399][ T5776] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.923515][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.964907][ T8682] netlink: 48 bytes leftover after parsing attributes in process `syz.1.837'. [ 397.310555][ T5776] usb 1-1: can't set config #27, error -71 [ 397.348317][ T5776] usb 1-1: USB disconnect, device number 18 [ 406.616915][ T8759] netlink: 48 bytes leftover after parsing attributes in process `syz.0.864'. [ 408.849577][ T8785] overlayfs: overlapping lowerdir path [ 412.028895][ T8828] ceph: No mds server is up or the cluster is laggy [ 412.327901][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 412.476966][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 412.727456][ T30] audit: type=1400 audit(1786988986.493:674): avc: denied { setattr } for pid=8834 comm="syz.2.886" name="TIPC" dev="sockfs" ino=20234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.845776][ T30] audit: type=1400 audit(1786988986.493:675): avc: denied { connect } for pid=8834 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 412.886651][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 412.892688][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 413.890832][ T8848] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 414.671518][ T8847] netlink: 48 bytes leftover after parsing attributes in process `syz.4.883'. [ 414.835547][ T8857] fuse: fd is not a fuse device [ 416.185262][ T8873] input: syz0 as /devices/virtual/input/input16 [ 416.504417][ T8873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.900'. [ 416.739001][ T8879] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 418.785739][ T8890] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'. [ 419.299245][ T8896] ceph: No mds server is up or the cluster is laggy [ 419.371060][ T5778] libceph: connect (1)[c::]:6789 error -101 [ 419.484778][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 421.530072][ T8914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.911'. [ 421.810603][ T8920] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.171099][ T8949] netlink: 52 bytes leftover after parsing attributes in process `syz.3.926'. [ 429.426484][ T30] audit: type=1400 audit(1786989003.203:676): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 429.489305][ T8989] overlayfs: failed to clone upperpath [ 429.633549][ T30] audit: type=1400 audit(1786989003.373:677): avc: denied { listen } for pid=8992 comm="syz.1.918" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 430.273396][ T9003] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 430.921764][ T30] audit: type=1326 audit(1786989003.513:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.1.918" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17d299e0d9 code=0x0 [ 431.023960][ T30] audit: type=1800 audit(1786989004.653:679): pid=9006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.941" name="nexus" dev="configfs" ino=21491 res=0 errno=0 [ 432.340669][ T9017] ceph: No mds server is up or the cluster is laggy [ 432.363059][ T87] libceph: connect (1)[c::]:6789 error -101 [ 432.441560][ T87] libceph: mon0 (1)[c::]:6789 connect error [ 433.154159][ T87] libceph: connect (1)[c::]:6789 error -101 [ 433.228902][ T87] libceph: mon0 (1)[c::]:6789 connect error [ 434.765559][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.772092][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.779770][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 437.709505][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 437.726083][ T9073] ceph: No mds server is up or the cluster is laggy [ 437.802543][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 440.633705][ T9117] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 443.590320][ T9148] overlayfs: failed to clone upperpath [ 444.505859][ T9165] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 448.126862][ T9224] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 450.929971][ T30] audit: type=1400 audit(1786989024.703:680): avc: denied { read } for pid=9252 comm="syz.3.1017" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 451.069794][ T30] audit: type=1400 audit(1786989024.703:681): avc: denied { open } for pid=9252 comm="syz.3.1017" path="/194/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 451.565207][ T30] audit: type=1400 audit(1786989024.853:682): avc: denied { ioctl } for pid=9252 comm="syz.3.1017" path="/194/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 455.168273][ T9292] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1032'. [ 459.585019][ T29] libceph: connect (1)[c::]:6789 error -101 [ 459.767750][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 459.990781][ T9321] ceph: No mds server is up or the cluster is laggy [ 460.099746][ T29] libceph: connect (1)[c::]:6789 error -101 [ 460.119526][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 461.386780][ T9340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1047'. [ 464.327227][ T9355] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 467.628693][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1062'. [ 468.875169][ T9411] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 471.496657][ T9450] fuse: fd is not a fuse device [ 472.504050][ T9461] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 475.287477][ T9491] fuse: fd is not a fuse device [ 475.504522][ T9495] netlink: 'syz.3.1093': attribute type 2 has an invalid length. [ 476.617349][ T9506] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.681596][ T9534] fuse: fd is not a fuse device [ 479.728331][ T9546] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 479.946467][ T9552] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 482.297064][ T9582] overlayfs: failed to clone upperpath [ 486.342293][ T9611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1129'. [ 486.420362][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.430752][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.442131][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.452766][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.463439][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 486.614839][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 486.628674][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 486.714878][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 486.734345][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 486.743432][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.884412][ T5611] Bluetooth: hci5: command tx timeout [ 489.758622][ T30] audit: type=1800 audit(1786989063.533:683): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1140" name="nexus" dev="configfs" ino=23122 res=0 errno=0 [ 489.861762][ T9680] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 490.031676][ T9612] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.059321][ T9612] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.096639][ T9612] bridge_slave_0: entered allmulticast mode [ 490.131685][ T9612] bridge_slave_0: entered promiscuous mode [ 490.165034][ T9612] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.196138][ T9612] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.231892][ T9612] bridge_slave_1: entered allmulticast mode [ 490.258800][ T9612] bridge_slave_1: entered promiscuous mode [ 490.386083][ T9612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.451934][ T9612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.565312][ T9692] fuse: fd is not a fuse device [ 490.595071][ T9612] team0: Port device team_slave_0 added [ 490.616067][ T9612] team0: Port device team_slave_1 added [ 490.719771][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.740939][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.808982][ T9612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.871275][ T9612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.894986][ T9612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.924886][ T5611] Bluetooth: hci5: command tx timeout [ 490.969138][ T9612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.723202][ T9612] hsr_slave_0: entered promiscuous mode [ 491.733549][ T9612] hsr_slave_1: entered promiscuous mode [ 491.740088][ T9612] debugfs: 'hsr0' already exists in 'hsr' [ 491.746103][ T9612] Cannot create hsr debugfs directory [ 492.728198][ T9708] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 493.006220][ T5611] Bluetooth: hci5: command tx timeout [ 494.226747][ T9612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.286108][ T9612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.316845][ T9612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 494.373795][ T9612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.400138][ T9612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 494.414731][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1158'. [ 494.445987][ T9612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.475421][ T9612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.509510][ T9612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.690028][ T9612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.747516][ T9612] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.777446][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.784635][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.942914][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.950140][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.094955][ T5611] Bluetooth: hci5: command tx timeout [ 495.189835][ T9746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 496.241173][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.248497][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.279250][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 496.942561][ T9765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1169'. [ 497.402777][ T9784] fuse: Bad value for 'fd' [ 497.525427][ T9787] fuse: fd is not a fuse device [ 497.566967][ T9612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.178226][ T9612] veth0_vlan: entered promiscuous mode [ 498.212053][ T9612] veth1_vlan: entered promiscuous mode [ 498.299192][ T9612] veth0_macvtap: entered promiscuous mode [ 498.336360][ T9612] veth1_macvtap: entered promiscuous mode [ 498.382555][ T9612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.414437][ T9612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.529193][ T6195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.608065][ T6195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.707508][ T5924] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.748495][ T5924] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.909675][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.949216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.004095][ T5778] libceph: connect (1)[c::]:6789 error -101 [ 499.039530][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 499.129508][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.162938][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.270271][ T30] audit: type=1400 audit(1786989073.043:684): avc: denied { mounton } for pid=9612 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 499.326992][ T5778] libceph: connect (1)[c::]:6789 error -101 [ 500.034993][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 500.060855][ T9809] ceph: No mds server is up or the cluster is laggy [ 500.561727][ T9826] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1183'. [ 510.675242][ T9905] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 511.358352][ T9913] input: syz0 as /devices/virtual/input/input18 [ 512.661416][ T30] audit: type=1400 audit(1786989086.413:685): avc: denied { mounton } for pid=9921 comm="syz.5.1210" path="/8/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 518.396431][ T9981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'. [ 520.433320][T10004] netlink: 'syz.1.1233': attribute type 2 has an invalid length. [ 520.444270][T10004] : entered promiscuous mode [ 522.116984][T10026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1243'. [ 527.117635][ T30] audit: type=1800 audit(1786989100.893:686): pid=10080 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1255" name="nexus" dev="configfs" ino=24916 res=0 errno=0 [ 529.801508][T10121] input: syz0 as /devices/virtual/input/input19 [ 531.295033][T10143] block device autoloading is deprecated and will be removed. [ 533.921369][T10171] netlink: 'syz.2.1284': attribute type 2 has an invalid length. [ 535.107405][ T30] audit: type=1400 audit(1786989108.753:687): avc: denied { shutdown } for pid=10179 comm="syz.5.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.154720][T10203] fuse: fd is not a fuse device [ 536.359500][T10208] netlink: 'syz.2.1305': attribute type 2 has an invalid length. [ 539.739679][T10246] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 539.766024][T10245] netlink: 'syz.5.1318': attribute type 2 has an invalid length. [ 539.776698][T10245] : entered promiscuous mode [ 540.723513][ T30] audit: type=1800 audit(1786989114.493:688): pid=10263 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1323" name="nexus" dev="configfs" ino=26025 res=0 errno=0 [ 542.584884][T10285] syz.5.1331 (10285): attempted to duplicate a private mapping with mremap. This is not supported. [ 542.793097][T10294] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 543.029018][T10305] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 543.582522][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 543.596239][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 543.611046][T10308] netlink: 'syz.2.1337': attribute type 5 has an invalid length. [ 543.637685][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 543.685375][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1337'. [ 543.733222][T10308] netlink: 'syz.2.1337': attribute type 5 has an invalid length. [ 545.883037][T10334] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 546.031284][T10334] kvm: pic: single mode not supported [ 546.145330][ T2159] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 546.345528][ T2159] usb 4-1: Using ep0 maxpacket: 8 [ 546.358395][ T2159] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 546.394130][ T2159] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 546.411687][ T2159] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 15 [ 546.434385][ T2159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.464226][ T2159] usb 4-1: Product: syz [ 546.484582][ T2159] usb 4-1: Manufacturer: syz [ 546.502167][ T2159] usb 4-1: SerialNumber: syz [ 546.520475][ T2159] usb 4-1: config 0 descriptor?? [ 547.538151][ T5705] usb 4-1: USB disconnect, device number 14 [ 547.580254][ T30] audit: type=1400 audit(1786989121.333:689): avc: denied { setopt } for pid=10357 comm="syz.1.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 547.649902][T10360] tipc: Started in network mode [ 547.679254][T10360] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 547.703243][T10360] tipc: Enabled bearer , priority 10 [ 547.806349][T10364] fuse: fd is not a fuse device [ 548.195981][T10372] overlayfs: failed to clone lowerpath [ 548.818793][ T5691] tipc: Node number set to 4269801488 [ 548.971796][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1355'. [ 549.374571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 551.770370][ T30] audit: type=1400 audit(1786989125.093:690): avc: denied { ioctl } for pid=10398 comm="syz.1.1365" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 552.454672][ T30] audit: type=1400 audit(1786989126.223:691): avc: denied { nlmsg_write } for pid=10413 comm="syz.3.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 553.856351][T10431] PKCS7: Unknown OID: [4] 0.0 [ 553.862474][T10431] PKCS7: Only support pkcs7_signedData type [ 553.875286][T10431] xt_policy: output policy not valid in PREROUTING and INPUT [ 554.419904][ T30] audit: type=1400 audit(1786989128.193:692): avc: denied { read } for pid=10433 comm="syz.3.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 556.050014][T10450] fuse: fd is not a fuse device [ 556.057819][ T30] audit: type=1400 audit(1786989129.833:693): avc: denied { create } for pid=10449 comm="syz.2.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 557.665147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.671725][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.689601][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 561.283580][ T30] audit: type=1800 audit(1786989135.053:694): pid=10504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1397" name="nexus" dev="configfs" ino=26562 res=0 errno=0 [ 562.428952][T10520] netlink: 'syz.4.1404': attribute type 12 has an invalid length. [ 562.591458][ T30] audit: type=1400 audit(1786989136.333:695): avc: denied { cmd } for pid=10517 comm="syz.1.1403" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 564.733452][T10531] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 565.224657][ T5778] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 566.294039][T10554] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1416'. [ 566.303194][ T30] audit: type=1400 audit(1786989140.073:696): avc: denied { getopt } for pid=10549 comm="syz.2.1414" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 566.327966][T10554] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1416'. [ 566.339606][ T30] audit: type=1400 audit(1786989140.113:697): avc: denied { watch } for pid=10553 comm="syz.4.1416" path="/271/file0" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 566.365188][ T5778] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 566.384593][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 566.394309][ T5778] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 566.404380][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.511847][T10557] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1417'. [ 566.521248][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.528571][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.729294][T10560] input: syz0 as /devices/virtual/input/input20 [ 566.942892][ T5778] usb 2-1: USB disconnect, device number 6 [ 567.190198][ T30] audit: type=1800 audit(1786989140.963:698): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1422" name="nexus" dev="configfs" ino=27720 res=0 errno=0 [ 567.994613][ T5778] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 568.090145][T10586] netlink: 'syz.3.1428': attribute type 4 has an invalid length. [ 568.107388][T10586] netlink: 'syz.3.1428': attribute type 4 has an invalid length. [ 568.167926][ T5778] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 568.185506][ T5778] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 568.215603][ T5778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.384603][ T5704] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 568.545064][ T5704] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 568.556713][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.564875][ T5704] usb 4-1: Product: syz [ 568.569048][ T5704] usb 4-1: Manufacturer: syz [ 568.574037][ T5704] usb 4-1: SerialNumber: syz [ 568.584087][ T5704] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 568.594617][ T5704] scsi host1: usb-storage 4-1:1.0 [ 568.655596][ T5778] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 568.835245][ T5778] lg-g15 0003:046D:C222.0001: Error getting LED brightness: -71 [ 568.850987][ T5778] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -71 [ 568.867715][ T5778] usb 2-1: USB disconnect, device number 7 [ 568.875170][ T5704] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 568.897195][ T5704] usb 4-1: USB disconnect, device number 15 [ 569.196316][ T87] libceph: connect (1)[c::]:6789 error -101 [ 569.202459][ T87] libceph: mon0 (1)[c::]:6789 connect error [ 569.222135][T10597] ceph: No mds server is up or the cluster is laggy [ 570.957449][T10612] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1437'. [ 574.342731][T10652] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1450'. [ 575.189674][T10661] input: syz0 as /devices/virtual/input/input22 [ 575.864024][T10671] PKCS7: Unknown OID: [4] 0.0 [ 575.917895][T10671] PKCS7: Only support pkcs7_signedData type [ 577.978183][ T5611] Bluetooth: hci5: command 0x0c1a tx timeout [ 577.978247][ T5776] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 578.063804][ T5776] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 578.457464][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.475946][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.489194][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.497660][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.506687][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 578.531981][T10684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 578.547165][T10684] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 578.554350][T10684] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 578.563025][T10684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 578.571218][T10684] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 578.882420][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 578.922931][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 578.955831][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 578.988807][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.017220][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.052529][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.086448][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.116711][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.158011][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.208494][T10699] netlink: 'syz.2.1462': attribute type 3 has an invalid length. [ 579.271656][T10704] syzkaller0: entered promiscuous mode [ 579.288866][T10704] syzkaller0: entered allmulticast mode [ 580.377849][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.420239][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.473367][T10665] bridge_slave_0: entered allmulticast mode [ 580.525372][T10665] bridge_slave_0: entered promiscuous mode [ 580.587617][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.609663][T10684] Bluetooth: hci6: command tx timeout [ 580.629871][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.724769][T10665] bridge_slave_1: entered allmulticast mode [ 580.814445][T10665] bridge_slave_1: entered promiscuous mode [ 580.931581][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.976158][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.096649][T10665] team0: Port device team_slave_0 added [ 581.121186][T10665] team0: Port device team_slave_1 added [ 581.212531][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.233802][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.465017][T10734] overlayfs: failed to clone upperpath [ 582.253939][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.317874][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.340303][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.439086][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.585553][T10665] hsr_slave_0: entered promiscuous mode [ 582.607833][T10665] hsr_slave_1: entered promiscuous mode [ 582.627962][T10665] debugfs: 'hsr0' already exists in 'hsr' [ 582.648595][T10665] Cannot create hsr debugfs directory [ 582.684645][T10684] Bluetooth: hci6: command tx timeout [ 583.506275][T10665] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.583546][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.716710][T10665] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.776869][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 583.801272][T10665] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.828060][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 583.848967][T10665] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.877838][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.004976][ T2159] libceph: connect (1)[c::]:6789 error -101 [ 584.029551][ T2159] libceph: mon0 (1)[c::]:6789 connect error [ 584.042365][T10773] ceph: No mds server is up or the cluster is laggy [ 584.102621][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.149540][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.186063][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.193175][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.240948][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.248090][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.724650][T10787] overlayfs: failed to clone upperpath [ 584.765417][T10684] Bluetooth: hci6: command tx timeout [ 585.529733][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.868648][T10817] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1488'. [ 586.034017][T10821] kAFS: unable to lookup cell 'ÿ' [ 586.081300][T10821] kAFS: unable to lookup cell '(,c¾Ì' [ 586.132750][T10665] veth0_vlan: entered promiscuous mode [ 586.206878][T10665] veth1_vlan: entered promiscuous mode [ 586.215853][T10821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1487'. [ 586.227816][ T30] audit: type=1400 audit(1786989159.983:699): avc: denied { setopt } for pid=10823 comm="syz.2.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 586.345055][T10665] veth0_macvtap: entered promiscuous mode [ 586.384197][T10665] veth1_macvtap: entered promiscuous mode [ 586.500671][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.562400][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.634202][ T3321] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.716576][ T5924] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.811779][ T133] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.857061][T10684] Bluetooth: hci6: command tx timeout [ 587.782703][ T3321] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.855497][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.913105][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.979907][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.032127][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.492100][ T30] audit: type=1800 audit(1786989162.263:700): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1451" name="nexus" dev="configfs" ino=28688 res=0 errno=0 [ 588.881062][ T30] audit: type=1800 audit(1786989162.653:701): pid=10853 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1497" name="nexus" dev="configfs" ino=28740 res=0 errno=0 [ 590.165592][T10871] fuse: Bad value for 'fd' [ 591.237254][T10878] netlink: 9144 bytes leftover after parsing attributes in process `syz.6.1505'. [ 591.433246][T10880] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1506'. [ 591.504621][ T5725] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 591.686206][ T5725] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 591.727066][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.752672][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.796421][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.824772][ T5725] usb 7-1: config 0 descriptor?? [ 592.244818][ T5705] libceph: connect (1)[c::]:6789 error -101 [ 592.253027][T10888] ceph: No mds server is up or the cluster is laggy [ 592.307845][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 592.574760][ T30] audit: type=1400 audit(1786989166.243:702): avc: denied { watch watch_reads } for pid=10877 comm="syz.6.1505" path="pipe:[27837]" dev="pipefs" ino=27837 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 592.637726][ T5705] libceph: connect (1)[c::]:6789 error -101 [ 592.694538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 593.412594][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 593.470690][T10878] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 593.526127][ T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.549917][ T5725] usbhid 7-1:0.0: can't add hid device: -71 [ 593.558566][ T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.581886][ T5725] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 593.602599][ T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.630809][ T5725] usb 7-1: USB disconnect, device number 2 [ 593.647726][ T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.725704][ T30] audit: type=1800 audit(1786989167.503:703): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1510" name="nexus" dev="configfs" ino=28817 res=0 errno=0 [ 594.184599][ T5725] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 594.379175][T10916] PKCS7: Unknown OID: [4] 0.0 [ 594.383969][T10916] PKCS7: Only support pkcs7_signedData type [ 594.422918][T10916] xt_policy: output policy not valid in PREROUTING and INPUT [ 594.805068][ T5725] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 594.818876][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.827678][ T5725] usb 4-1: Product: syz [ 594.831971][ T5725] usb 4-1: Manufacturer: syz [ 594.836994][ T5725] usb 4-1: SerialNumber: syz [ 594.850445][ T5725] ums_eneub6250 4-1:1.0: USB Mass Storage device detected [ 594.864209][ T5725] scsi host1: usb-storage 4-1:1.0 [ 595.199697][T10928] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1517'. [ 595.213804][ T5725] ums_eneub6250 4-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 595.278764][ T5725] usb 4-1: USB disconnect, device number 16 [ 595.292156][T10930] validate_nla: 43 callbacks suppressed [ 595.292174][T10930] netlink: 'syz.4.1518': attribute type 2 has an invalid length. [ 599.156480][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1530'. [ 600.494225][T10973] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 602.204723][ T2159] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 602.379462][ T2159] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.404577][ T2159] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 602.427263][ T2159] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 602.454586][ T2159] usb 4-1: config 12 has no interface number 0 [ 602.471574][ T2159] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 602.496058][ T2159] usb 4-1: config 12 interface 99 has no altsetting 0 [ 602.514324][ T2159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.535067][ T2159] usb 4-1: Product: syz [ 602.547104][ T2159] usb 4-1: Manufacturer: syz [ 602.559649][ T2159] usb 4-1: SerialNumber: syz [ 602.919845][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1532'. [ 602.978699][ T2159] usb 4-1: no audio or video endpoints found [ 603.021632][ T2159] usb 4-1: USB disconnect, device number 17 [ 603.622939][T10993] fuse: Invalid rootmode [ 604.371247][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 604.379355][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 604.387339][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 604.396747][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 604.404123][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 604.921235][T11021] input: syz0 as /devices/virtual/input/input23 [ 605.521545][ T30] audit: type=1400 audit(1786989179.273:704): avc: denied { ioctl } for pid=11023 comm="syz.6.1541" path="/dev/sg0" dev="devtmpfs" ino=788 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 606.049141][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.074171][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.099898][ T30] audit: type=1400 audit(1786989179.873:705): avc: denied { write } for pid=11045 comm="syz.3.1547" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 606.136856][T11003] bridge_slave_0: entered allmulticast mode [ 606.159490][T11003] bridge_slave_0: entered promiscuous mode [ 606.210291][ T30] audit: type=1400 audit(1786989179.983:706): avc: denied { create } for pid=11045 comm="syz.3.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 606.235294][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.270156][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.312272][T11003] bridge_slave_1: entered allmulticast mode [ 606.335071][ T2159] IPVS: starting estimator thread 0... [ 606.336237][T11003] bridge_slave_1: entered promiscuous mode [ 606.402587][T11003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.426963][T11003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.436183][T11055] IPVS: using max 77 ests per chain, 184800 per kthread [ 606.444631][ T5605] Bluetooth: hci7: command tx timeout [ 606.506903][T11003] team0: Port device team_slave_0 added [ 606.583474][T11003] team0: Port device team_slave_1 added [ 606.650545][T11003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.672285][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.740216][T11003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.762830][T11003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.780654][T11003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.817062][T11003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.944326][T11003] hsr_slave_0: entered promiscuous mode [ 606.965829][T11003] hsr_slave_1: entered promiscuous mode [ 606.985563][T11003] debugfs: 'hsr0' already exists in 'hsr' [ 607.007352][T11003] Cannot create hsr debugfs directory [ 607.084685][ T5605] Bluetooth: hci6: command 0x0c1a tx timeout [ 607.090827][ T5691] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 607.100927][ T5691] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 608.324637][ T87] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 608.390600][T11003] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 608.409864][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.426740][T11003] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 608.441386][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.455423][T11003] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 608.479333][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.496212][ T87] usb 2-1: unable to get BOS descriptor or descriptor too short [ 608.496224][T11003] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 608.524630][ T5605] Bluetooth: hci7: command tx timeout [ 608.540259][ T87] usb 2-1: not running at top speed; connect to a high speed hub [ 608.551250][ T87] usb 2-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=f9.d2 [ 608.574460][ T87] usb 2-1: config 160 has an invalid interface number: 100 but max is 0 [ 608.576375][T11003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.582967][ T87] usb 2-1: config 160 has no interface number 0 [ 608.623334][ T87] usb 2-1: config 160 interface 100 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 608.646189][ T87] usb 2-1: config 160 interface 100 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 608.678698][ T87] usb 2-1: config 160 interface 100 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 608.716659][ T87] usb 2-1: config 160 interface 100 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 608.759098][ T87] usb 2-1: config 160 interface 100 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 608.806472][ T87] usb 2-1: config 160 interface 100 has no altsetting 0 [ 608.841096][ T87] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.876575][ T87] usb 2-1: Product: syz [ 608.888337][ T87] usb 2-1: Manufacturer: syz [ 608.911506][ T87] usb 2-1: SerialNumber: syz [ 609.416825][T11064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.490830][T11064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 609.609012][T11003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.639621][T11003] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.662603][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.669706][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.732443][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.739650][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.771488][ T87] usb 2-1: USB disconnect, device number 8 [ 610.053790][T11084] input: syz0 as /devices/virtual/input/input25 [ 610.126973][ T5691] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 610.252442][ T5691] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 611.022201][ T30] audit: type=1400 audit(1786989184.793:707): avc: denied { setopt } for pid=11102 comm="syz.1.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 611.351614][T11003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.459987][T11108] kAFS: unable to lookup cell 'ÿ' [ 611.689116][T11123] netlink: 'syz.6.1559': attribute type 2 has an invalid length. [ 612.665759][T11003] veth0_vlan: entered promiscuous mode [ 612.723114][T11003] veth1_vlan: entered promiscuous mode [ 612.741796][T10684] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 612.756097][T10684] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 612.769023][T10684] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 612.776752][T10684] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 612.788956][T10684] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 612.840564][ T5605] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 612.850049][ T5605] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 612.860892][ T5605] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 612.876537][ T5605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 612.892049][ T5605] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 612.942955][T11003] veth0_macvtap: entered promiscuous mode [ 612.972071][T11003] veth1_macvtap: entered promiscuous mode [ 613.067868][T11003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.104196][T11003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.205933][ T135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.233778][ T135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.425076][ T3321] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.494682][ T6195] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.637139][ T3321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.662869][ T3321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.773247][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.801248][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.925346][T10684] Bluetooth: hci8: command tx timeout [ 615.253501][T11134] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.294212][T11134] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.329283][T11134] bridge_slave_0: entered allmulticast mode [ 615.358166][T11134] bridge_slave_0: entered promiscuous mode [ 615.378431][T11134] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.401083][T11134] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.429976][T11134] bridge_slave_1: entered allmulticast mode [ 615.454782][T11134] bridge_slave_1: entered promiscuous mode [ 615.584779][T11134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.635355][T11134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.761410][T11161] netlink: 9144 bytes leftover after parsing attributes in process `syz.3.1566'. [ 615.869449][T11134] team0: Port device team_slave_0 added [ 616.055830][T11167] overlayfs: overlapping lowerdir path [ 616.382884][T11134] team0: Port device team_slave_1 added [ 616.540632][T11134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.556530][T11134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.656514][T11134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.761337][T11134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.770882][T11134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.798500][T11134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.322838][T10684] Bluetooth: hci8: command tx timeout [ 617.487114][T11134] hsr_slave_0: entered promiscuous mode [ 617.575849][T11134] hsr_slave_1: entered promiscuous mode [ 618.135885][T11184] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1570'. [ 618.199055][T11134] debugfs: 'hsr0' already exists in 'hsr' [ 618.214571][T11134] Cannot create hsr debugfs directory [ 618.227955][T11181] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 619.027019][T11134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 619.060570][T11134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.075551][T11134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 619.090230][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.097288][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.103787][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 619.132977][T11134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.147037][T11134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 619.200524][T11134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.215637][T11134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 619.243313][T11134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.401089][T11134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.409883][T10684] Bluetooth: hci8: command tx timeout [ 619.435002][T11134] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.464832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.471905][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.533552][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.540748][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.611219][T11134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.630958][T11134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.080312][T11134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.216611][T11134] veth0_vlan: entered promiscuous mode [ 620.226402][T11134] veth1_vlan: entered promiscuous mode [ 620.251483][T11134] veth0_macvtap: entered promiscuous mode [ 620.260093][T11134] veth1_macvtap: entered promiscuous mode [ 620.272960][T11134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.288472][T11134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.376132][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.389359][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.409937][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.418299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.434847][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.443624][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.459776][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.485343][ T5924] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.485039][T10684] Bluetooth: hci8: command tx timeout [ 666.422118][T11238] PKCS7: Unknown OID: [4] 0.0 [ 666.426921][T11238] PKCS7: Only support pkcs7_signedData type [ 666.459698][T11238] xt_policy: output policy not valid in PREROUTING and INPUT [ 669.374781][ T5704] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 669.438663][T11258] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 670.260544][ T5704] usb 7-1: unable to get BOS descriptor or descriptor too short [ 670.268378][ T5704] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 670.376586][ T5704] usb 7-1: config 12 has an invalid interface number: 99 but max is 0 [ 670.461533][ T5704] usb 7-1: config 12 has no interface number 0 [ 670.532846][ T5704] usb 7-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 670.633790][ T5704] usb 7-1: config 12 interface 99 has no altsetting 0 [ 670.742174][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.821305][ T5704] usb 7-1: Product: syz [ 670.877744][ T5704] usb 7-1: Manufacturer: syz [ 670.914575][ T5704] usb 7-1: SerialNumber: syz [ 671.443654][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1582'. [ 671.521135][T11280] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 671.611585][ T5704] usb 7-1: no audio or video endpoints found [ 672.136852][ T5704] usb 7-1: USB disconnect, device number 3 [ 673.519187][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1597'. [ 675.869052][T11333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1607'. [ 675.902623][T11333] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.910962][T11333] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.820328][T11339] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1610'. [ 678.384636][T11357] overlayfs: overlapping lowerdir path [ 679.294714][ T5725] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 679.565408][ T5725] usb 9-1: not running at top speed; connect to a high speed hub [ 679.593144][ T5725] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 679.627613][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.651892][ T5725] usb 9-1: Product: syz [ 679.665253][ T5725] usb 9-1: Manufacturer: syz [ 679.682216][ T5725] usb 9-1: SerialNumber: syz [ 679.726342][ T5725] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 679.817459][ T5725] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 679.938499][ T5725] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 679.955783][ C1] usb 9-1: malformed indat packet [ 679.961018][ C1] usb 9-1: malformed indat packet [ 679.966491][ C1] usb 9-1: malformed indat packet [ 679.971684][ C1] usb 9-1: malformed indat packet [ 679.976891][ C1] usb 9-1: malformed indat packet [ 679.982222][ C1] usb 9-1: malformed indat packet [ 679.987457][ C1] usb 9-1: malformed indat packet [ 680.019025][ T5725] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 680.036870][ T30] audit: type=1400 audit(1786989253.813:708): avc: denied { write } for pid=11381 comm="syz.7.1623" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 680.060444][ T5725] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 680.112585][ T30] audit: type=1400 audit(1786989253.853:709): avc: denied { map } for pid=11381 comm="syz.7.1623" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 680.388851][ T5691] usb 9-1: USB disconnect, device number 2 [ 680.526396][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.533159][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.589056][T11388] PKCS7: Unknown OID: [4] 0.0 [ 680.593790][T11388] PKCS7: Only support pkcs7_signedData type [ 680.624754][T11388] xt_policy: output policy not valid in PREROUTING and INPUT [ 680.675439][ T1300] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 681.050726][ T5691] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 681.105048][ T5691] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 681.152851][ T5691] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 681.193005][ T5691] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 681.263865][ T5691] keyspan 9-1:1.0: device disconnected [ 681.899417][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 681.944600][T11400] ceph: No mds server is up or the cluster is laggy [ 681.964360][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 682.961667][T11411] overlayfs: overlapping lowerdir path [ 683.578064][ T5691] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 683.708387][ T5725] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 683.774957][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 683.804148][ T5691] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 683.847652][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 683.901513][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.945857][ T5691] usb 4-1: Product: syz [ 683.955206][ T5725] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 683.967209][ T5691] usb 4-1: Manufacturer: syz [ 683.978377][ T5725] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.987357][ T5725] usb 9-1: Product: syz [ 683.992182][ T5691] usb 4-1: SerialNumber: syz [ 684.000101][ T5725] usb 9-1: Manufacturer: syz [ 684.005813][ T5725] usb 9-1: SerialNumber: syz [ 684.019552][ T5725] usb 9-1: config 0 descriptor?? [ 684.031416][ T5691] usb 4-1: config 0 descriptor?? [ 684.033208][ T5725] hub 9-1:0.0: bad descriptor, ignoring hub [ 684.048534][ T5725] hub 9-1:0.0: probe with driver hub failed with error -5 [ 684.064385][ T5691] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 684.091500][ T5691] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 684.228850][ T5725] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 684.285532][ T5704] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 684.401441][ T5725] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 684.426447][ T5725] dib0700: firmware download failed at 7 with -22 [ 684.444712][ T5704] usb 7-1: Using ep0 maxpacket: 8 [ 684.465581][ T5704] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 684.481995][ T5725] usb 9-1: USB disconnect, device number 3 [ 684.518103][ T5704] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 684.547756][ T5704] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.572426][ T5704] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 684.592565][ T5704] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 684.618111][ T5704] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.650941][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.681651][ T5691] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 684.896244][ T5704] usb 7-1: usb_control_msg returned -32 [ 684.914540][ T5704] usbtmc 7-1:16.0: can't read capabilities [ 685.235579][ T5691] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 685.287599][ T5691] em28xx 4-1:0.0: board has no eeprom [ 685.657832][T11448] block device autoloading is deprecated and will be removed. [ 686.587761][ T5691] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 686.614355][ T5691] em28xx 4-1:0.0: dvb set to bulk mode. [ 686.626136][ T5778] em28xx 4-1:0.0: Binding DVB extension [ 686.659309][ T5691] usb 4-1: USB disconnect, device number 18 [ 686.687060][ T5691] em28xx 4-1:0.0: Disconnecting em28xx [ 686.833036][ T5704] libceph: connect (1)[c::]:6789 error -101 [ 686.872839][T11457] ceph: No mds server is up or the cluster is laggy [ 686.913215][ T5704] libceph: mon0 (1)[c::]:6789 connect error [ 687.247914][ T2159] libceph: connect (1)[c::]:6789 error -101 [ 687.259411][ T2159] libceph: mon0 (1)[c::]:6789 connect error [ 687.584755][ T5778] em28xx 4-1:0.0: Registering input extension [ 687.600530][ T5691] em28xx 4-1:0.0: Closing input extension [ 687.659881][ T5691] em28xx 4-1:0.0: Freeing device [ 687.716542][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1642'. [ 688.289362][T11469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1643'. [ 690.285018][T11430] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 690.441146][ T2159] usb 7-1: USB disconnect, device number 4 [ 692.351423][ T30] audit: type=1400 audit(1786989266.123:710): avc: denied { setopt } for pid=11496 comm="syz.3.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 692.372278][T11500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 693.694910][T10678] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 693.891042][T10678] usb 2-1: not running at top speed; connect to a high speed hub [ 693.918836][T10678] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 693.977687][T10678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.014296][T10678] usb 2-1: Product: syz [ 694.044399][T10678] usb 2-1: Manufacturer: syz [ 694.069413][T10678] usb 2-1: SerialNumber: syz [ 694.113774][T10678] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 694.164084][T10678] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 694.207893][T10678] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 694.241240][T10678] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 694.286488][T10678] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 694.314550][ T2159] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 694.374925][T10678] usb 2-1: USB disconnect, device number 9 [ 694.462251][T10678] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 694.496439][ T2159] usb 8-1: Using ep0 maxpacket: 8 [ 694.526356][ T2159] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 694.549674][ T2159] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 694.570541][ T2159] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 694.573880][T11521] binder: 11520:11521 ioctl c0306201 200000000180 returned -11 [ 694.603181][T10678] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 694.603214][ T2159] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 694.660102][T10678] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 694.682556][ T2159] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 694.709483][ T2159] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 694.748571][ T2159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.748705][T10678] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 694.841373][T10678] keyspan 2-1:1.0: device disconnected [ 695.037212][ T2159] usb 8-1: usb_control_msg returned -32 [ 695.914027][ T2159] usbtmc 8-1:16.0: can't read capabilities [ 695.994560][ T2159] usb 8-1: USB disconnect, device number 2 [ 696.431384][T11540] PKCS7: Unknown OID: [4] 0.0 [ 696.436204][T11540] PKCS7: Only support pkcs7_signedData type [ 696.453248][T11540] xt_policy: output policy not valid in PREROUTING and INPUT [ 696.869497][T11541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1665'. [ 698.430907][T11565] PKCS7: Unknown OID: [4] 0.0 [ 698.435678][T11565] PKCS7: Only support pkcs7_signedData type [ 698.445796][T11565] xt_policy: output policy not valid in PREROUTING and INPUT [ 700.507824][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1679'. [ 700.690878][T11590] PKCS7: Unknown OID: [4] 0.0 [ 700.695973][T11590] PKCS7: Only support pkcs7_signedData type [ 700.726964][T11590] xt_policy: output policy not valid in PREROUTING and INPUT [ 701.225909][T11592] block device autoloading is deprecated and will be removed. [ 702.076392][T11602] netlink: 'syz.7.1682': attribute type 2 has an invalid length. [ 702.084569][ T87] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 702.170020][T11604] PKCS7: Unknown OID: [4] 0.0 [ 702.174877][T11604] PKCS7: Only support pkcs7_signedData type [ 702.185663][T11604] xt_policy: output policy not valid in PREROUTING and INPUT [ 703.078633][T11602] : entered promiscuous mode [ 703.172114][ T87] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 703.493882][ T87] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 703.626945][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 703.675790][ T87] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.704605][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 703.728255][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 703.745537][ T87] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 703.753414][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 703.765580][ T87] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 703.778247][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 703.850299][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 703.969768][ T87] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 704.019773][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 704.153225][ T87] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.265936][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 704.348051][ T87] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 704.421051][ T87] usb 4-1: string descriptor 0 read error: -22 [ 704.457319][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.586953][ T87] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 705.710887][T11639] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 705.867751][T11641] overlayfs: overlapping lowerdir path [ 707.096509][ T5725] usb 4-1: USB disconnect, device number 19 [ 707.943463][ T5605] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 707.959563][ T5605] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 707.968958][ T5605] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 707.979653][ T5605] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 707.987479][ T5605] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 708.363678][T11679] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 709.993098][T11695] overlayfs: overlapping lowerdir path [ 710.446199][T10684] Bluetooth: hci9: command tx timeout [ 711.740825][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.767479][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.817552][T11660] bridge_slave_0: entered allmulticast mode [ 711.836350][T11720] netlink: 'syz.1.1714': attribute type 2 has an invalid length. [ 711.870397][T11660] bridge_slave_0: entered promiscuous mode [ 711.887543][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.903227][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.916069][T11660] bridge_slave_1: entered allmulticast mode [ 711.930751][T11660] bridge_slave_1: entered promiscuous mode [ 711.986210][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.019963][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.142170][T11660] team0: Port device team_slave_0 added [ 712.167055][T11660] team0: Port device team_slave_1 added [ 712.244408][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.256391][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.284106][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.298296][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.307871][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.348096][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.463495][T11660] hsr_slave_0: entered promiscuous mode [ 712.473804][T11660] hsr_slave_1: entered promiscuous mode [ 712.481490][T11660] debugfs: 'hsr0' already exists in 'hsr' [ 712.488276][T11660] Cannot create hsr debugfs directory [ 712.524998][T10684] Bluetooth: hci9: command tx timeout [ 714.677238][ T5605] Bluetooth: hci9: command tx timeout [ 714.807107][T11660] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 714.820728][T11660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 714.829178][T11660] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 714.856535][T11660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 714.866391][T11660] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 714.894063][T11660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 714.934132][T11660] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 715.033076][T11660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.955447][T11767] netlink: 'syz.6.1730': attribute type 12 has an invalid length. [ 715.989554][T11660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.050473][T11660] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.092735][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.099886][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.199073][ T30] audit: type=1400 audit(1786989289.973:711): avc: denied { shutdown } for pid=11770 comm="syz.1.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 716.508694][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.515863][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.581621][ T30] audit: type=1400 audit(1786989290.343:712): avc: denied { bind } for pid=11764 comm="syz.7.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 716.685029][ T5605] Bluetooth: hci9: command tx timeout [ 717.023655][ T30] audit: type=1400 audit(1786989290.713:713): avc: denied { create } for pid=11787 comm="syz.7.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 717.178408][T11795] 0x000000000007-0x000000020000 : "" [ 717.356155][ T30] audit: type=1400 audit(1786989290.933:714): avc: denied { write } for pid=11787 comm="syz.7.1737" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 717.380726][ T30] audit: type=1400 audit(1786989290.933:715): avc: denied { open } for pid=11787 comm="syz.7.1737" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 718.499664][T11795] ftl_cs: FTL header corrupt! [ 718.596768][ T31] INFO: task syz-executor:9612 blocked for more than 143 seconds. [ 718.701416][ T30] audit: type=1400 audit(1786989290.953:716): avc: denied { ioctl } for pid=11787 comm="syz.7.1737" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 718.728422][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 718.770583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 718.887234][ T31] task:syz-executor state:D stack:23344 pid:9612 tgid:9612 ppid:1 task_flags:0x400140 flags:0x00080002 [ 718.937180][ T31] Call Trace: [ 718.946708][ T31] [ 718.954636][ T31] __schedule+0x125c/0x6730 [ 718.960943][ T31] ? __pfx___schedule+0x10/0x10 [ 718.966438][ T31] ? find_held_lock+0x2b/0x80 [ 718.971147][ T31] ? schedule+0x225/0x2c0 [ 718.975754][ T31] schedule+0xdd/0x2c0 [ 718.979843][ T31] schedule_preempt_disabled+0x13/0x30 [ 718.985515][ T31] __mutex_lock+0xccc/0x1bd0 [ 718.990123][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 718.996073][ T31] ? __lock_acquire+0x49f/0x1a40 [ 719.001060][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 719.006321][ T31] ? net_generic+0xea/0x2a0 [ 719.012332][ T31] ? net_generic+0xea/0x2a0 [ 719.017203][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 719.022626][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 719.030471][ T31] nfsd_umount+0x3b/0x60 [ 719.035380][ T31] deactivate_locked_super+0xc1/0x1b0 [ 719.041532][ T31] deactivate_super+0xe7/0x110 [ 719.049276][ T31] cleanup_mnt+0x21f/0x450 [ 719.053729][ T31] task_work_run+0x150/0x240 [ 719.064577][ T31] ? __pfx_task_work_run+0x10/0x10 [ 719.072355][ T31] exit_to_user_mode_loop+0x1d8/0x700 [ 719.078362][ T31] ? rcu_is_watching+0x12/0xc0 [ 719.083861][ T31] do_syscall_64+0x666/0x870 [ 719.097959][ T31] ? clear_bhb_loop+0x70/0xc0 [ 719.116769][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.128554][ T31] RIP: 0033:0x7f2c18d9f317 [ 719.135542][ T31] RSP: 002b:00007ffd7fb2b6a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 719.143996][ T31] RAX: 0000000000000000 RBX: 00007f2c18e34474 RCX: 00007f2c18d9f317 [ 719.167742][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7fb2b760 [ 719.191146][ T31] RBP: 00007ffd7fb2b760 R08: 00007ffd7fb2c760 R09: 00000000ffffffff [ 719.199212][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd7fb2c7f0 [ 719.207480][ T31] R13: 00007f2c18e34474 R14: 000000000008891a R15: 00007ffd7fb2c830 [ 719.215511][ T31] [ 719.227419][ T31] [ 719.227419][ T31] Showing all locks held in the system: [ 719.274524][ T31] 2 locks held by ksoftirqd/0/15: [ 719.305641][ T31] 3 locks held by kworker/1:1/29: [ 719.317842][ T31] #0: ffff88801c04b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 719.377337][ T31] #1: ffffc90000a57d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 719.437410][ T31] #2: ffffffff8edf3ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 719.474606][ T31] 1 lock held by khungtaskd/31: [ 719.489236][ T31] #0: ffffffff8ede8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 719.552483][ T31] 4 locks held by kworker/0:2/87: [ 719.587614][ T31] 2 locks held by getty/5355: [ 719.605801][ T31] #0: ffff88803783f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 719.651871][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 719.682878][ T31] 2 locks held by syz-executor/5593: [ 719.698054][ T31] #0: ffff888075e260d8 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 719.725279][ T31] #1: ffffffff8f2724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 719.744605][ T31] 3 locks held by syz.0.1077/9440: [ 719.756502][ T31] #0: ffff88807edddeb0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 719.774583][ T31] #1: ffff8880275ac450 (sb_writers#23){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 719.795453][ T31] #2: ffffffff8f2724c0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xa5/0xcc0 [ 719.804267][ T31] 2 locks held by syz-executor/9612: [ 719.809906][ T31] #0: ffff88804e22c0d8 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 719.820640][ T31] #1: ffffffff8f2724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 719.830327][ T31] 1 lock held by syz-executor/10665: [ 719.835640][ T31] #0: ffff888052d64ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 719.845334][ T31] 2 locks held by syz.2.1501/10862: [ 719.850519][ T31] #0: ffff8880537400d8 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 719.860811][ T31] #1: ffffffff8f2724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 719.870476][ T31] 2 locks held by syz-executor/11134: [ 719.875877][ T31] #0: ffff88806b0520d8 (&type->s_umount_key#85){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 719.886397][ T31] #1: ffffffff8f2724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 719.896173][ T31] 1 lock held by syz-executor/11660: [ 719.901523][ T31] #0: ffff88804d670ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 719.911374][ T31] 1 lock held by syz.7.1737/11795: [ 719.916903][ T31] #0: ffff888068848ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 719.926605][ T31] 1 lock held by syz.1.1738/11801: [ 719.931730][ T31] #0: ffff88807ace8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 719.941372][ T31] [ 719.947422][ T31] ============================================= [ 719.947422][ T31] [ 719.956571][ T31] NMI backtrace for cpu 1 [ 719.956589][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 719.956613][ T31] Tainted: [L]=SOFTLOCKUP [ 719.956618][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 719.956629][ T31] Call Trace: [ 719.956634][ T31] [ 719.956641][ T31] dump_stack_lvl+0x100/0x190 [ 719.956668][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 719.956690][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.956714][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 719.956744][ T31] sys_info+0x141/0x190 [ 719.956762][ T31] watchdog+0xcb1/0x1030 [ 719.956777][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 719.956789][ T31] ? __pfx_watchdog+0x10/0x10 [ 719.956802][ T31] ? __kthread_parkme+0x18c/0x230 [ 719.956819][ T31] ? kthread+0x13a/0x450 [ 719.956828][ T31] ? __pfx_watchdog+0x10/0x10 [ 719.956839][ T31] kthread+0x370/0x450 [ 719.956849][ T31] ? __pfx_kthread+0x10/0x10 [ 719.956860][ T31] ret_from_fork+0x72b/0xd50 [ 719.956875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 719.956891][ T31] ? __switch_to+0x800/0x10f0 [ 719.956902][ T31] ? __pfx_kthread+0x10/0x10 [ 719.956913][ T31] ret_from_fork_asm+0x1a/0x30 [ 719.956934][ T31] [ 719.956939][ T31] Sending NMI from CPU 1 to CPUs 0: [ 720.090069][ C0] NMI backtrace for cpu 0 [ 720.090083][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 720.090103][ C0] Tainted: [L]=SOFTLOCKUP [ 720.090108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 720.090116][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 720.090137][ C0] Code: e5 aa 02 e9 83 4b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 1f 2f 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 720.090149][ C0] RSP: 0018:ffffffff8ea07e10 EFLAGS: 00000242 [ 720.090161][ C0] RAX: 0000000002336f79 RBX: ffffffff8ea91480 RCX: ffffffff8bbc8345 [ 720.090171][ C0] RDX: 0000000000000000 RSI: ffffffff8e3acef2 RDI: ffffffff8c600380 [ 720.090180][ C0] RBP: fffffbfff1d52290 R08: 0000000000000001 R09: ffffed101708678d [ 720.090188][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 720.090196][ C0] R13: 0000000000000000 R14: 1ffffffff1d40fc6 R15: dffffc0000000000 [ 720.090205][ C0] FS: 0000000000000000(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000 [ 720.090219][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 720.090228][ C0] CR2: 0000560e8585b918 CR3: 000000007f35c000 CR4: 00000000003526f0 [ 720.090236][ C0] Call Trace: [ 720.090241][ C0] [ 720.090245][ C0] default_idle+0x9/0x10 [ 720.090261][ C0] default_idle_call+0x6c/0xb0 [ 720.090277][ C0] do_idle+0x3a7/0x5b0 [ 720.090296][ C0] ? __pfx_do_idle+0x10/0x10 [ 720.090317][ C0] cpu_startup_entry+0x4f/0x60 [ 720.090336][ C0] rest_init+0x251/0x260 [ 720.090353][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 720.090369][ C0] start_kernel+0x48e/0x490 [ 720.090383][ C0] x86_64_start_reservations+0x24/0x30 [ 720.090397][ C0] x86_64_start_kernel+0x12b/0x130 [ 720.090412][ C0] common_startup_64+0x13e/0x158 [ 720.090429][ C0] [ 720.296065][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 720.302959][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 720.313634][ T31] Tainted: [L]=SOFTLOCKUP [ 720.317933][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 720.327975][ T31] Call Trace: [ 720.331231][ T31] [ 720.334136][ T31] dump_stack_lvl+0x100/0x190 [ 720.338795][ T31] vpanic+0x552/0x970 [ 720.342750][ T31] ? __pfx_vpanic+0x10/0x10 [ 720.347227][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 720.353361][ T31] panic+0xd1/0xe0 [ 720.357067][ T31] ? __pfx_panic+0x10/0x10 [ 720.361457][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 720.367586][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 720.373732][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 720.379862][ T31] ? watchdog.cold+0x1ec/0x234 [ 720.384599][ T31] ? watchdog+0xcc1/0x1030 [ 720.388992][ T31] watchdog.cold+0x1fd/0x234 [ 720.393557][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 720.399347][ T31] ? __pfx_watchdog+0x10/0x10 [ 720.404010][ T31] ? __kthread_parkme+0x18c/0x230 [ 720.409041][ T31] ? kthread+0x13a/0x450 [ 720.413273][ T31] ? __pfx_watchdog+0x10/0x10 [ 720.417933][ T31] kthread+0x370/0x450 [ 720.421983][ T31] ? __pfx_kthread+0x10/0x10 [ 720.426555][ T31] ret_from_fork+0x72b/0xd50 [ 720.431138][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 720.436242][ T31] ? __switch_to+0x800/0x10f0 [ 720.440917][ T31] ? __pfx_kthread+0x10/0x10 [ 720.445487][ T31] ret_from_fork_asm+0x1a/0x30 [ 720.450248][ T31] [ 720.453429][ T31] Kernel Offset: disabled [ 720.457726][ T31] Rebooting in 86400 seconds..