last executing test programs: 2m42.959358022s ago: executing program 3 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', 0x0}) 2m42.751098354s ago: executing program 3 (id=254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000252000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x10010, 0xffffffffffffffff, 0x9d132000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea000000071"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r6, 0x540b, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000400)={0x18, "5660359c3245d1c42317afad7d48ed510000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}]}) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) 2m41.865039155s ago: executing program 3 (id=255): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) setresuid(0xee01, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x0, r8}) sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x1) 2m41.789119849s ago: executing program 3 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0xf5ffffff, 0x0, 0x4000850}, 0x40) 2m41.572112633s ago: executing program 3 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a, 0x8000000000000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x0, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x80, 0x80) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x1, 0x4063, "00000000004b6b6ac0e1216dc7000004", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1, 0x4}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000440)=0x2402a, 0x4) 2m40.764635743s ago: executing program 0 (id=262): syz_io_uring_setup(0x1d84, &(0x7f0000000740)={0x0, 0x1c2a, 0x240, 0xfffffffd, 0x2ac}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000004000000020000000000001104000000e9ffffff000061"], 0x0, 0x2c}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffcd7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x154}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xfff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x5, 0x401}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) 2m40.428851946s ago: executing program 3 (id=265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000002a00000095622793fa0f45f3310ba7b48e67956a00000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() r1 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000780)={'\x00', 0x0, 0x2, 0x1000, 0xffffffff947d5046, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x40, 0x20, 0x3, 0xfffffff4, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x66, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x35, [@multicast1]}, @lsrr={0x83, 0x3, 0xa6}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c01000000000000041d24ba19267201000000000000006c0b21bb6e802c5102fb7d488c4c2ce2c1398a2dc04baefc2b95cf07543bd890e96d4d1a5f0b795722c38e00000000000000da4371ac00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRESDEC=r3, @ANYRESHEX], 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2m39.220404017s ago: executing program 0 (id=270): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x14cc, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x14ac, 0x14c, 0x0, 0x1, [@nested={0x10b1, 0x14, 0x0, 0x1, [@generic="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", @generic="d6115a3a5552ea5eab9f1d6c", @nested={0x4, 0xf9}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x13c}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x5}, @generic="77e76885012f3c5ef9fbf4d4c639582a1a57b77fa0ba80cec32970c0f9f8b7eccefbc1137d50924f9ea8c2adcc382c42c8c3eb30f5ec6286908f81823f2f0ad1fc71294924cf696617c22393eedbee1a58ea4ba456b911f8c92d75206f19538ff4be958f1cbfb3edcbd7097b85a7fa24c217a61c893eb92f18", @typed={0x8, 0x124, 0x0, 0x0, @uid=r2}, @nested={0x4, 0xa2}]}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0xb4, 0x28, 0x0, 0x1, [@generic="edd326868a4b2887d00620403e09e17b2f3e3546edc517fc4367510aea87514d083136a5b936ba06514a6b14816cbc5df754b4d7aeff4df0f265e669d51909b2f32062ec2f", @typed={0x8, 0x46, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0xb6}, @generic="3af6df9869a1552bc771a123acfc9333234f3683ae7c13cc0194c26bbe8c8bdc4b69bdbdb0ac88d1db901b65acc48df4ef6bdf5d268428da276ae7bb80b1b61ec21e123f3effd5ce6318c0e6a021a971b861f43aeb9b9ba2253292224513bf"]}, @nested={0x212, 0xdc, 0x0, 0x1, [@typed={0x8, 0x38, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x33, 0x0, 0x0, @uid=r2}, @generic="4cbc1c0e938b72de1ca7555fe514998caa77cce470db6c9d367f5a7c9f81c76aee249f517628fd6f313e376b5693e27cfb3f6bb6b14fa3a390c3a57a451394f2927237a4687a6c1a8b", @typed={0x82, 0xc2, 0x0, 0x0, @binary="6340fbe037a48c5b3c064ce7c78c7b56ccd40b99dcfbba4ebe37d458e855ada424f99d18d4073ca98a71c159537b23887bb00c4bcbb00b6f0647a5768c46930ca8c549aaef5aae507a860538ec69a812d4a39c093c9fa6a9db9f432949889ffc1042ad6b16f7deabb11397e44c98691a2c85e3b97b676fe4d2e2785becf1"}, @typed={0x4, 0xa1}, @nested={0x4, 0x4b}, @generic="f11a571857b5043fad0d1ff117f5ae1b0ac954e949cf926d400f4c2b7361d2b8650fab02522102fbdc5b432bbc1e14115271f1a78881892675398994f2fd44f32c86f0404b7b60edb5e7e3a68a123f4ff5c49174cbce57a08dd8cb7f577e13ec14530f4033c70e47434e302ed266f4364b2711004e5d13a74663ea7a2e628dd632ef134b5dec", @generic="bd76e98df37dc21d0051f10c7503879f265544dbc0167b900e8174d3e7c48db8880e03c4bb1e5476da3685718e2e1fc3f90ca270dc7235a842b147f4e296ef3983fb6b3727b1877cb25746afca6b1489530f3ee6a7f32f4deeee94e19d26066577faa3082119fc096905a56b2b27a46e6e4171fdd1e25d507652b17ef9cee16f50f4496630324cac7643313fc19cbfc05fc43db43608ed5a099e224d6290780e61b8be"]}, @generic="aa", @generic="b32440ef1ba51e91afb2af2d17b9f355208df55a6e5b0238bf5479486c7cfb665904a58f3bb4c1b8401a8986231562e25555f3ef1eb732a0cbcf0822e79ab311e3b69ca23445c75e116c032f98ec6deb939301c3026c419851b17683663c48cc1e53810f1409cb09efbd2dd3b1a094af06c72c1a6b68d9cd5389b33576fce0ed726798f7", @generic="d878f6aafb589ac66d6f66c4505448a8bcc339c123997d1bff7c72eaf3d2b9a20c809adc29577c404ce23f1cc6fd9ab0a80146aa70766944eee9f2b771e701eaae97a5429c75ad6ab4d616fe1cbfbbf7030acec6f98827541a030a8115f9d0e9a9597cd54b725374ed2cb3b79e0a76504b1a5486c323cba7301b0cdf7e468aa05d2f42fe7c6b41b1603495dad5a184cabe3179"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x14cc}, 0x1, 0x0, 0x0, 0x4c000}, 0xc000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @mcast2, 0x8}, {0xa, 0x4e23, 0x3, @mcast1, 0x7}, r5, 0xffff51e2}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7, @mcast2, 0x8}, {0xa, 0x4e23, 0x3, @mcast1, 0x7}, r5, 0xffff51e2}}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) 2m36.84467143s ago: executing program 0 (id=280): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x80000000, @mcast1, 0x9}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x96}], 0x38) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x108, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) 2m36.055921571s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) (async) sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="9ce3609d5be6614a888e59cdf99ac9162ccfadd24ab7", 0x16}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x404c8d4) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) (async) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 2m35.916772254s ago: executing program 0 (id=287): write$dsp(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x6, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0), &(0x7f00000001c0)) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xb9}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xdd, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x0, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xf0, 0x5}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x9, 0x3, 0xf, 0x0, 0x9}, 0x159, &(0x7f0000000300)={0x5, 0xf, 0x159, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x100, 0xf, 0x2, [0xfe8000, 0xfe40]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0xf}, @generic={0x101, 0x10, 0x2, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "e88441e0b626f60fd326f2f05e4bad50"}, @ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x1, 0x0, 0x800, [0x80800f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "d30516f15bbacc609b90be6055955262"}]}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3009}}, {0x24, &(0x7f0000000480)=@string={0x24, 0x3, "1a30a91649eaa9b7ff57c6e3b818ac6eb92b6e3c19912e9425de707beb08224e4219"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c09}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "c7fe83202d3d8a2d7e7aaf7698d36f36e0ad3918a98633f613b3b914b5e7dfebd9c3d6ce1152caba041f86783e6de4072836dca673bed4e5d005d3a8d40b496771359231ed9a9f098c6b5067de9b3105b89ab70790c762db6d7f8001b43c8391c7d57aa79e5be623634af248be795e3461cf"}}, {0x11, &(0x7f0000000600)=@string={0x11, 0x3, "d432a671f166fa840f62b17a61e00e"}}, {0xe0, &(0x7f0000000640)=@string={0xe0, 0x3, "ead90579ecaea684b3a342d55149f7a065e0dd0a89503b94b2fededc1ec38adbed272c9fb9ba0022f3edbc19a31700bd53de31a38167ccb00fecc9f18cc84ca4245936bb215720de4156e33f8b12423f14e1e2d1ea591083748114e74a3eba70fcd1440beb44ae50e1f243a85607dd468219bc778692dcade79a599e9157673d1ff6f4c57abcf2a39c4b6391ad5fc66d9b3e953521f27ef708383f3d372ec64a9e210636b82fb48662fe402b5310496ba6fd99456a45ce003376c9e67e11d903b51a7b353dac37d030ec7eb7dba8c10a309b63f7067c083aab267ff1c0ac"}}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000b80)=0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdir(0x0, 0x0) io_submit(r8, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) 2m31.91511716s ago: executing program 0 (id=304): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001a00)={'dummy0\x00', &(0x7f00000019c0)=@ethtool_gfeatures}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000100005054405a3e84f84eb60000000000000073269a9a26f5f6e803a23d4bf406b85e95f9ecf57321ef7d1e0500e5e8345893eea935be4f3e240cde4cd18d0160699f8a4b656cbbed8dac9c8f35bdfe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@remote, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x40000, 0x0, 0x9}, {0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xff}, 0xa, @in6=@loopback, 0x0, 0x6, 0x2}}, 0xe8) r4 = syz_open_dev$loop(&(0x7f0000000540), 0xfffffffffffffff3, 0x593b80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b60102030109021200cfaef94884173012000015cc1c00"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x68000) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000000100)) read(r7, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12050102000000402505a8a440000102030109021b0001010d00210904007f0207010206090501022000040207"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0xfb, 0xfb, 0xff, 0x5}, 0xba, &(0x7f0000000280)=ANY=[@ANYBLOB="050fba0005211003ee827fc2821b5d46e1fd2339e3fe6226e5417a07788e8530c087cf2053700c100a00c00000000f00ef0203100b7b100bebf8e6477fd373c77b8be6a4e9bbd3de8c3762dd49c1231d4294f8ef4f4196403e3b79f610f595f1d3b71b8c9ace3a9b86b1aaae9a3e447109cdb1e0c85ae2439026d2bd74dcb2d557fb5b77b83bfaff9f7a54afe7252ab6751f932101e6b61e2aa85e2d3e406c7bd5d993e19aaea0d07e5874e3aaed6c4c0a1003020a00010102003376ce429c7e32ddad0464ccfb4a65568107021b7d5cd87301db24a1"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}]}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0x50}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) syz_usb_control_io(r6, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_emit_ethernet(0x9a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r13, r12}, 0xc) 2m25.2239877s ago: executing program 32 (id=265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000002a00000095622793fa0f45f3310ba7b48e67956a00000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() r1 = syz_open_dev$loop(&(0x7f0000000940), 0x7, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000780)={'\x00', 0x0, 0x2, 0x1000, 0xffffffff947d5046, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x40, 0x20, 0x3, 0xfffffff4, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x66, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x7, 0x35, [@multicast1]}, @lsrr={0x83, 0x3, 0xa6}]}}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c01000000000000041d24ba19267201000000000000006c0b21bb6e802c5102fb7d488c4c2ce2c1398a2dc04baefc2b95cf07543bd890e96d4d1a5f0b795722c38e00000000000000da4371ac00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRESDEC=r3, @ANYRESHEX], 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2m16.579489552s ago: executing program 33 (id=304): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001a00)={'dummy0\x00', &(0x7f00000019c0)=@ethtool_gfeatures}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000100005054405a3e84f84eb60000000000000073269a9a26f5f6e803a23d4bf406b85e95f9ecf57321ef7d1e0500e5e8345893eea935be4f3e240cde4cd18d0160699f8a4b656cbbed8dac9c8f35bdfe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@remote, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x87}, {0x1, 0x0, 0x0, 0x40000, 0x0, 0x9}, {0x0, 0x3, 0x8000000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xff}, 0xa, @in6=@loopback, 0x0, 0x6, 0x2}}, 0xe8) r4 = syz_open_dev$loop(&(0x7f0000000540), 0xfffffffffffffff3, 0x593b80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d8b60102030109021200cfaef94884173012000015cc1c00"], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x68000) ioctl$BLKROTATIONAL(r8, 0x127e, &(0x7f0000000100)) read(r7, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12050102000000402505a8a440000102030109021b0001010d00210904007f0207010206090501022000040207"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x0, 0xfb, 0xfb, 0xff, 0x5}, 0xba, &(0x7f0000000280)=ANY=[@ANYBLOB="050fba0005211003ee827fc2821b5d46e1fd2339e3fe6226e5417a07788e8530c087cf2053700c100a00c00000000f00ef0203100b7b100bebf8e6477fd373c77b8be6a4e9bbd3de8c3762dd49c1231d4294f8ef4f4196403e3b79f610f595f1d3b71b8c9ace3a9b86b1aaae9a3e447109cdb1e0c85ae2439026d2bd74dcb2d557fb5b77b83bfaff9f7a54afe7252ab6751f932101e6b61e2aa85e2d3e406c7bd5d993e19aaea0d07e5874e3aaed6c4c0a1003020a00010102003376ce429c7e32ddad0464ccfb4a65568107021b7d5cd87301db24a1"], 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}]}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_MPU={0x8, 0xe, 0x50}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) syz_usb_control_io(r6, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_emit_ethernet(0x9a, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r13, r12}, 0xc) 19.112512345s ago: executing program 6 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x0) mount$overlay(0x200000000000000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 15.612958631s ago: executing program 6 (id=784): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x118, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x44}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8300000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000002c0)={@local, @multicast1, 0xffffffffffffffff, "329fece3ad6500b40c88ea004aa94940871009ae0c6ed267f157d33fb772fd8e", 0x7, 0x9, 0xc6, 0x61}, 0x3c) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000080)=0x17a) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x23}, r5}, 0x14) read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) 12.565941036s ago: executing program 6 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='rxrpc_rx_packet\x00', r0, 0x0, 0xfff7fffffffbfff5}, 0x18) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="06005ef9f4f3eade7fc816e3166e4e3794917e4ce77797b1fb42f0b51419e172b8b0c75402ab4b5ac151d603c3e15ef5b48c2bb8f32131cd5e8649fb148b29a2ed0514e7037048c6e09a544154645496f96e35"], 0x9) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)) (async) syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xbd}, @l2cap_cid_signaling={{0xb9}, [@l2cap_conf_req={{0x4, 0xd, 0x65}, {0x9, 0xfff, [@l2cap_conf_efs={0x6, 0x10, {0x20, 0x0, 0x2, 0x3, 0x0, 0x3}}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x9, 0x4, 0xceb, 0x6, 0x80}}, @l2cap_conf_efs={0x6, 0x10, {0xe, 0x0, 0x6, 0xd, 0x8, 0x7}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0xfb, 0x5, 0x401, 0x0, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0xffff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x67, 0x2, 0xe81f, 0x4, 0x1, 0x6de}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x18, 0x3, 0x63ee, 0xa645, 0x9a66}}]}}, @l2cap_disconn_rsp={{0x7, 0x4, 0x4}, {0xa3d}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xff, 0x6}}, @l2cap_info_rsp={{0xb, 0x2, 0x29}, {0x5, 0x297c, "35d55bcb2482625ebf9b64aa15d167479f15ca28048b91cb9b5fc497f82ceb18c42c74f398"}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x7, 0x4c, 0x7, 0x80}}, @l2cap_disconn_req={{0x6, 0xa8, 0x4}, {0xffff, 0x6}}]}}, 0xc2) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x0, 0x4800) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_usb_connect(0x2, 0x3f, 0x0, 0x0) fchdir(r4) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async, rerun: 64) r5 = syz_open_procfs(r3, &(0x7f0000000040)='wchan\x00') (rerun: 64) pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x3) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x2, 0x8001, 0x0, 0x800000009, 0x2000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) (async) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x4000000000005, 0xd, 0x1000000000424, 0x40, 0xffffffffffffffff, 0x100, 0xfffffffffffffff9, 0x7, 0x3, 0x2, 0x7ff, 0x0, 0x5, 0x5, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x40000000, 0x5, 0x6}) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00008cc000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f00008d1000/0x2000)=nil) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r6], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) rename(0x0, &(0x7f0000000300)='./file0\x00') (async) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) 9.920995598s ago: executing program 4 (id=809): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x4, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffe, 0x1, 0xc, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="ea", 0x0, 0xffffff81, 0x10, 0x40002, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) setrlimit(0x2, &(0x7f0000000100)={0xe5, 0x6}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$vsock_stream(r1, 0x0, 0x0) socket(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b52, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000040)={0x2005}) 9.468079174s ago: executing program 6 (id=810): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x118, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x44}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8300000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000002c0)={@local, @multicast1, 0xffffffffffffffff, "329fece3ad6500b40c88ea004aa94940871009ae0c6ed267f157d33fb772fd8e", 0x7, 0x9, 0xc6, 0x61}, 0x3c) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000080)=0x17a) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x23}, r5}, 0x14) read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) 6.801398547s ago: executing program 4 (id=816): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800c300100005ff00000000000020000000004a", @ANYRES32=0x0, @ANYBLOB="000000000c010000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a000100e7"], 0x48}}, 0x0) 6.589031915s ago: executing program 4 (id=818): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x2e, 0x4608, @void}, 0x10) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000040)={0x4, 0x9, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fsopen(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdir(&(0x7f0000000100)='./cgroup/../file0/file0\x00', 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb2, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) 5.841101316s ago: executing program 6 (id=821): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000000c0)={0x0, 0x2, 0x1, 0x78, 0x200, 0x0}) 5.840358024s ago: executing program 1 (id=822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x8000, &(0x7f0000000180)=0x9, 0x0, 0x7) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x200}, 0x1c) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYRES64=r4, @ANYRESHEX=r4, @ANYRES16=r6, @ANYRESDEC=r3, @ANYRES16=r3, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/198) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r11, r12, 0x3, 0x0, 0xffffffff, 0x804, {0xac5c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x1f, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x4132, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.10300358s ago: executing program 4 (id=824): ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000000)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc3, 0xaa, 0x37, 0x40, 0x10d6, 0x2200, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x4, 0x0, 0xac, 0x4, 0x14}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010007bd7000fddbdf2555000000080001000e00000008000300", @ANYRES32=r5, @ANYBLOB="0c00a180ef556d336d99000b"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000051421"], 0x20}}, 0x40000) 4.921044397s ago: executing program 5 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a000000205800034824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00030d0000000000000069e3289b6c17a118d9", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x618a00, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x24, 0x0, 0xfffffffffffffffe) 3.970378477s ago: executing program 5 (id=827): r0 = syz_io_uring_setup(0x3dc8, &(0x7f0000002980)={0x0, 0x6983, 0x40, 0x0, 0x2b1}, &(0x7f0000002a00), &(0x7f0000002a40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) 3.876882885s ago: executing program 2 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0x8}, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 3.87650619s ago: executing program 5 (id=829): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0xfffff80000000001, r1, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume_offset', 0x140, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f00000002c0)={0x7, r0, 'id1\x00'}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x6) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000040)=""/65, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) syz_genetlink_get_family_id$nl80211(0x0, r5) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0403"], 0x4) 3.675184415s ago: executing program 2 (id=830): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = getpid() sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f000001c980)=ANY=[@ANYBLOB="801200000c08010105000000ffdbdf250300000308001800", @ANYRES32=r1, @ANYBLOB='\b\x00.\x00', @ANYRES32, @ANYRES32=r2, @ANYBLOB="3101cf805319436a40909c64f68758ca8786fd58ee9e6848d116c1deab0ff1054df0e1adc68498c81e1dcb5cff5c786cfa62095a99507f010de66a2823d2ebe16cd4881400a4000000000000000000000000000000000047c376b8af0e02a2562752d2c51ee24ecd87133f21d967fd583eafa089ec0af2d8fa85598c5bb8851b8f0e0643f040859af0e5fa684af34fe9e19a96c09997bd04eaf08275839965a618857fa038540486d5e7a34a1fa4f9b7683fcc88ada7d425f7abcb7819a51510677d622639f258a506df22a22ed755db7084d01271cf503773b0536e106e968d9e613e1557d40f144a2fdf938582b6d90aa2"], 0x1280}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008040) dup(r1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0xb, 0x3) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000500)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) dup(r7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 3.596443414s ago: executing program 5 (id=831): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x118, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x48c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2de}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30c}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x44}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8300000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4040010) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000002c0)={@local, @multicast1, 0xffffffffffffffff, "329fece3ad6500b40c88ea004aa94940871009ae0c6ed267f157d33fb772fd8e", 0x7, 0x9, 0xc6, 0x61}, 0x3c) ioctl$BLKRASET(r0, 0x1262, &(0x7f0000000080)=0x17a) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) read$FUSE(r0, &(0x7f0000004dc0)={0x2020}, 0x2020) 3.189616275s ago: executing program 5 (id=832): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e1e, @multicast1}, {0x1, @random}, 0x52, {0x2, 0x4e21, @empty}, 'vlan0\x00'}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81082, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000002200010600"], 0x24}], 0x1, 0x0, 0x0, 0x4000081}, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth0_to_team\x00'}, 0x18) 3.02433625s ago: executing program 2 (id=833): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.436866835s ago: executing program 6 (id=834): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000b0510000100000000007e3f24d70700000a140000001100450000000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e26, 0x0, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x2}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000340)={[0x115]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 2.016041837s ago: executing program 4 (id=835): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_emit_ethernet(0x239, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf881001d00080046030227006400000f2f90787f00000100000000000000000420880b0000000106db7ad80900080000100b6d57b448f5418e0005a17fc99de22f32aa6eed24bb5d6ce50835bd2354139b51e0fe166f6ec87a0e5b9d2af0e3d4ed45d7722b5ab4f6f96dbc59320a1e67fe64966ef27f5762b87775e8554eb2071c00f0c56bc17fbb285a47f521a33fba9a8106d750d6d8ae5d8055ee40c519e1802186008092600f8d712c651a7ee0a81ece05552af09c55332ac3b20e3845a7c9b08fa49a77ac8748d28e9f5c2fa613ce090086ddcdcfa2a62b57001152552e3de01d6cfaa33ad2cea88ef3feefdb6e4a11581372f5c01478dc0e8dcdb46880ec378568dabe0c7269b892e5080088be0000000217de420401000000ffffffff080022eb0000000423097b0202000000000000850fff160c08006558000000017cf6a00ccfaa61504459481a18d65432619ce038673e786439d961effde60d97fd4f67a352a1fe16a93314b6cd256be19fa96f35ac2a73ce56e8a2262a"], 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x424) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x6, 0x800) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x0, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="bc289597996583f628c4c41e16163719c085d39994fd4c34a0cfafb0e3e06ff06b54207b5ba6d20ba02354211f5e01df4b5b593eb5ae38373e2a4ee92809b770d850ffa5e9d70e84f13631ec796141b8e61ca5d1e46d3d6f6949b2d30d9e1e713aa9847ffe0274d749572604edc8448136a4630dcfdb88857ff5101b381559d6feb6e0cd0f67fbd7"], 0xe}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xbb}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001800)="bca784cc9a491783ce6f5772696ea92e8bf42f36fd4236708a64f184db7e9a56c4988df9275d11e3ebabbbd89fb741835265101da7f423cae6241b33d10fa7d440c051372b4da5d5e334478569f74b3ac9f500e9ad12f91cdbc9f45fad57d94c234844e3175733460919858fc47025eef83cb194d6a8bda3e62f48ba599aa42e217e05fbd33896545a1b70af123f0b35ec7cb2d5692b4df2baedb941dc8af14483c5b4d4fd5b95d3d1625241b2c241094ca7aa19c61a46507054dfdf37bba761d89d34dbe1dc984c450b46995cb22d831661b07dff6bd530df2bde59107a4d982ec838d5371cc0e8e8b0fc26bdeb353e04b18ee1e219388ad161ad8216b18eb76cdf1612e9e4acd9fbf0387be6ff91e6fb0aa12a5f09ec6cbedcf7f475c4e26f2318d740232a282719259f711a7646a49af17f02a1fe824ef90d9e8c4b575cb3e74878c0fc697a5d0a99ebe1c64f226d1e7951239a1949c8a9c18e50a8a9845347ac6326c6c9b6dd6c70bab222c02e676b1ecb72b3ebdce679729cc25a4dc18157299137fb380fce41ccdfb0ec960c7eae760bb00f368fdecb132296a8ea322c500008b388d10905bd1da32d99074604ad9e930ce8d74521b295b33003f91447c739a4ccc52d52fb0c4174b4f7dff280e8563cc2bccf9cbbcd7e719062b90cca8fc68c2544b996c6625621a6cda9d142085fb6087da9917381cea88144a0e0c46cc3f2073f64df5e2645b3e852ed7723f16bed759259f64a28858dc3fe6aace266f07ceaed525546c1a8cd20d54317ce561167523ef79b6b500d72af9ccb3ed41d18ee8456b0e294e2df7497a38cd70d58bbc4393ba53314e2969497d8002ddf15a346ec6db19c18370034f8be51d8104877e26168fc3941425ef59530bd16f300f917f2d0c5cec791344a3b7a9bd114e76846382c1f02f5f25c00b1c0946a4c3effad37feb40b721313998c8df325fb2251eab6c581ede4ceb17c518473536a4df282ab631b1e4f3a382578a028e70d8379ce7a7583d1382b55fccd4f9b0e13ffee510ffa5324f6d63d2d84cf6deff946419cf65192ac50b31b97fe30bfee5508bd33b464127c62d5d40f5b4485a92d6c16dcb92186b550b30524eaa4f94e50c12546ce522aa63c566e1fea762ceec243176d7b55c28235719f02de9a23dc46968fe79e6fffdf831c4c34309bd1094286acfad19d8e3ab4f58f618a48324444ec6fcead1ee77e2e041b117b976ae628e9b6cda6f65a1e5af52ff4a9bca1c0fb291fb8068c91245367e1cf100c7661b0e480fbb9f15313c7d52fc19693d64eb85c602942a2a67c0c8ede3dc600e20189c690224851477db533a263423612466da88677b07f7c5f5a5589649f11b2dabf8818653596400197c2d7fa80c561aa3f3615b0c9b2845112040a05e8645b19bc8a0a9e60458a31ef0af9d3d66e019a40fa4ff425c85b976a6e5749310576c49bf49cc91c8ca9342ff88904135458cc706610e3a2e67382c29228ba1cca967a37a6fde8039eeee573bac7ff81a382f67d89d03cb235eb89e48b9345cf876c65e5a64d97644801726152c4ce78d07c96760679b339357ded60f9a977b477c05635afd9e561071532a7b392de10e5434c4d1866a0bbf84ba0e003c250caedd46f170d9072f7fe27fc7561d9916bdb4a4b7ec9d3055169d4e7f5a749c664236ae4a774219964e8d5bb5ea3237516c62dc1162c0c7c8ff9ed60b4b6679a22930f228ee48be7e0adb9bda1b84a1f945c28a5dab89f0b35fb650892cc0d13741b967691a77c4ddde8b579446e04bcc57dcfa758bb38429d1551fc4502a48561c994fdbd91e405baa6b53f661beaa8cda459e1118e76472c37aaf96f671e01a53c3c6550ea348b5825b7abad178ef609b7d8aa7925f70de356c2e5bcb1e74bceef937c3dbf26c78e44e23c3d002291768e75c16ea2da02fb77c4634835622012fe79aa028de332d4c0ebcea1661e941caec510175bf5a8378cad518816d37c553cd306906486e1f67e7a81128005a1ebedc91b05a7f42fe2f6deab19c1950a2d3de58dd12ac4a4a2e0a389dd8508d30f9768aed01743ceb74b6703c079b59e0c81ad56abcdfab273ea184855e4ab1157c3540b4bae9d927371d20c2583885a2b0bbdd98a5bb458fd890e2dddc28da3a64b6a4ed2f1d0bfef8465c20822accabca87f596ee8de8093e5920730e766e6bc731001a54309948537061094ef7f89ba807f18692af4acde6d3942bb46619ec707e67b9c659bfe3edd76cab0b81d775a65d1943484c458536d88b2f0b585bebad089d3768cb44b8fe9db4caa94495497ed5211b50a6bf68ea5abf45cd13a75756bcbea10137085194842ad61c9213a5eb228fcb61543f9462671210b5015541fd733519060a13917e2075f0ca6c6d4285852aec1533f5977e3693ffddd900edaaad45c934addfdda20ce048387fdbd4ad0ee9e5ea9fca4d6cd7e0eb75258c5844fcdfa6e116db6abbe8bf84c183475fe2b326c18db2194909a6e476dff15f43676573ca25e6005c2d17004d42689f2c7112f11c3f48b35a7c43fc3662c97c291ea6996857a656e79814547bd9881887acc969fe6302be9423ff4a8c8df0f14e6e2265ad109362aa74375cc0ec959d6ba5d7d772219b378e6f356ba38b474e2f4290c294f6cc6616ea569cdb5953be7884fcd47645a926ef245294268953d17f9f0ce64a02c51982d399f1a5b7ad3e0b1b1d11bd5459ec9aad1f3f0c5f0bf2bf2375ca122ae23264f090c2ed3f39ce444b2537010b627307df91f445f2f373c639e1ac1519b553bd03c47b1745ffea20c5454d6e9777db2bec5ef6f6ba11b196b10e005f954523430841e06258acfad0257565d5ff4f3643425409d7851b91f62c84638130d0a038b6e468709030942311c032866660203e6655b4e8addf9988930c0002806c343800ec8003d1bcaa4443e401463802dd85892ca9a2b68a9d84bcfd7e14e83c39f5a144b1a2b503a3b20a3bbb1b5856233b3b670528e9b6d002224ac5068f3d8a3fc4bb65fdde57f318a73827b122eec5a4600ac9ab41b7cf85b9850738a6def18a5f855be31e81ff7977809378e94d92f05677b5b61bd199ae7972c6d817043dca6219ba4a8e2681a90c4cb9026e6077694d8bcfce358b157b4cd86c9fdc402b61a5946cad8a884ce29b6afd0cbbd91e3e17b30a383afd5730dd83f65ea5afc96fa007350388cdc7acb940d971b3d4d995aa2a629573bdeef8535a9e6be002d0a463b844c433e26e178b577078b536682e6f4ad43649912e3ec057897734464dc23b46aded5889a446978ce1faa25ab9910ff1d7f5296e14ef41139ae25d136d897e38a16b260dda8047d3bf0bc6f18533ac85cb919404470b177df5e0f158b240524bb4578178e341152367045f32880673b0f1d8b74a8111bf40908f5789c66dc8c48693236a3f6c4f13837a4b65732579aa01e9d41fc05d9bed2da41c4be81737b338924ba94d3f8650e4f8634e82ad0fddbd3591dc45c449dee1bfdec48751cfea671911e3f39a68215ea248f33f4fc439bae5f15c07dbff71a50fc1d56bf1c80968b1e578f8624dff314aa8923a767eef13841f8b7cfb128362f463e639da266d0791cf31f22a2d9a5ba9de531ab046580e47c7b7a8a809276c8a3e08e36be2ea622a3633c1f3841dc620ef0f723a21323d580f1a10654497dc873fc59db1e2e0642092144e4a64a6f98a319356afed78103686b803f704ab64ffdc773a3c1804f65bd2283768db49f46c51119718a6073462272b01864d2525f760836a98e303b4d385619ec505b096d892350f4f8a62774d2dc0eeec59bd286bb6755b146a3b4cc6fd77c1ca9956f8860a3f87237e3cdc12591bab6f7a5b677425fd7e576875cb9b8d84e4fd0c6180149ea478f76c8985b8c0d179ad2f6f6a05813a7d9ed5101cd977f0d57f5c82fa9e4d64c5b2697dcf74937f2761d504c7484ee65c9c802929a1aa91247947cb95c164db4f8755e63b4d1ce4ad4f028a3a37e9f9c4b054b2f598d004aa4403062418634c470b2eed22ad178d64af777a6c7bc0b87f12315645c625d6b6d9b61e19905c196b47ec4575d7de811ca1950312e99d1237ca68324c4428e4df8f4e75241a2634959986fc3b4ffcf056f7c064b138b", 0xb80}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x5}, 0x1c, &(0x7f0000002800)}}], 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x100, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) getsockopt$sock_buf(r0, 0x1, 0xccd4453e7e835cf8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4094) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$watch_queue(&(0x7f0000000140), 0x80) sendto(0xffffffffffffffff, &(0x7f0000000540)="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", 0x29d, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.578789545s ago: executing program 4 (id=836): ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) 1.500367672s ago: executing program 2 (id=837): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b0001010000000904"], 0x0) (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x45}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) removexattr(0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async, rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r1, 0x0) (async) dup(r1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f00000016c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001180)=[{0x0}, {&(0x7f0000001340)='Y', 0x1}], 0x2}}], 0x1, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fa2000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x51, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.38914826s ago: executing program 1 (id=838): r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0xfffffffffffffffe) 1.33229456s ago: executing program 2 (id=839): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0x1, {0x1, 0xf0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}, 0x1, 0x0, 0x0, 0xea}, 0xee) 1.331377695s ago: executing program 1 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x5, 0x8}, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) 1.131226519s ago: executing program 1 (id=841): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003800000038000000060000000b0000000000000c0400000004005f0000000e14cc1d8d214b78892282f30000010000000057002d00050000000000000c01000000030000000000001104"], &(0x7f0000000140)=""/121, 0x56, 0x79, 0x1, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e9ffffff00000061111c00000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0x0) (async) keyctl$chown(0x4, r2, 0xee00, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000014000000"]) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000014000000"]) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='nilfs2\x00', 0x208000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 864.969642ms ago: executing program 2 (id=842): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r1, 0x0, 0xfaf}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0xf4, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000300000020"}) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r11) 864.32099ms ago: executing program 1 (id=843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x9}, 0x50) 755.758527ms ago: executing program 1 (id=844): syz_open_dev$loop(&(0x7f0000000100), 0x93, 0x101002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) socket(0x11, 0x3, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(0x0, r0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept(r4, &(0x7f0000000240)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB="2019"], 0x16) 0s ago: executing program 5 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000002000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 154.272455][ T7094] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.283652][ T7100] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.301024][ T7094] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 154.528203][ T7094] usb 2-1: USB disconnect, device number 10 [ 154.572241][ T7241] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 154.572673][ T1590] usb 3-1: USB disconnect, device number 16 [ 154.579355][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 154.580759][ T7094] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 154.593157][ T1590] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 154.598353][ T7258] ldusb: No device or device unplugged -19 [ 156.566830][ T7062] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 156.726424][ T7062] usb 3-1: Using ep0 maxpacket: 16 [ 156.745241][ T7062] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.754264][ T7062] usb 3-1: config 42 has an invalid interface number: 214 but max is 0 [ 156.772284][ T7062] usb 3-1: config 42 has no interface number 0 [ 156.779590][ T7062] usb 3-1: config 42 interface 214 has no altsetting 0 [ 156.789683][ T7062] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=42.fb [ 156.798974][ T7062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.808818][ T7062] usb 3-1: Product: syz [ 156.813008][ T7062] usb 3-1: Manufacturer: syz [ 156.817701][ T7062] usb 3-1: SerialNumber: syz [ 157.410133][ T30] audit: type=1400 audit(1757581109.901:461): avc: denied { block_suspend } for pid=7275 comm="syz.1.315" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.883715][ T7282] input: syz1 as /devices/virtual/input/input10 [ 157.951774][ T7062] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 157.974583][ T7283] netlink: 72 bytes leftover after parsing attributes in process `syz.1.316'. [ 157.976441][ T7062] usb 3-1: No valid video chain found. [ 157.994609][ T7062] usb 3-1: USB disconnect, device number 17 [ 157.999534][ T30] audit: type=1400 audit(1757581110.821:462): avc: denied { write } for pid=7284 comm="syz.2.317" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 158.888712][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 159.245567][ T5863] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 159.262311][ T5863] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 159.270392][ T5863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 159.287579][ T5863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 159.295113][ T5863] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.324192][ T30] audit: type=1400 audit(1757581112.131:463): avc: denied { mounton } for pid=7296 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 159.667903][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 159.696460][ T7100] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 159.749677][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.758754][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.767294][ T7296] bridge_slave_0: entered allmulticast mode [ 159.774461][ T7296] bridge_slave_0: entered promiscuous mode [ 159.785502][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.793617][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.804268][ T7296] bridge_slave_1: entered allmulticast mode [ 159.812302][ T7296] bridge_slave_1: entered promiscuous mode [ 159.846633][ T7100] usb 3-1: Using ep0 maxpacket: 32 [ 159.855731][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.869814][ T7100] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 159.879257][ T7100] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 159.895808][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.905472][ T7100] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 159.920232][ T7100] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 8507, setting to 1024 [ 159.931773][ T7100] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 159.945155][ T7100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.959585][ T7296] team0: Port device team_slave_0 added [ 159.969236][ T7296] team0: Port device team_slave_1 added [ 159.971552][ T7100] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 159.985489][ T25] block nbd0: Possible stuck request ffff888026840000: control (read@0,1024B). Runtime 30 seconds [ 160.000407][ T25] block nbd0: Possible stuck request ffff8880268401c0: control (read@1024,1024B). Runtime 30 seconds [ 160.011459][ T25] block nbd0: Possible stuck request ffff888026840380: control (read@2048,1024B). Runtime 30 seconds [ 160.022491][ T25] block nbd0: Possible stuck request ffff888026840540: control (read@3072,1024B). Runtime 30 seconds [ 160.033418][ T7100] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 160.034887][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.041903][ T7100] usb 3-1: Product: syz [ 160.041920][ T7100] usb 3-1: Manufacturer: syz [ 160.041934][ T7100] usb 3-1: SerialNumber: syz [ 160.044697][ T7100] usb 3-1: config 0 descriptor?? [ 160.052327][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.058851][ T7100] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 160.063167][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.068914][ T7100] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 160.093599][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.095771][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.137832][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.167211][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.201233][ T7296] hsr_slave_0: entered promiscuous mode [ 160.207974][ T7296] hsr_slave_1: entered promiscuous mode [ 160.214215][ T7296] debugfs: 'hsr0' already exists in 'hsr' [ 160.220767][ T7296] Cannot create hsr debugfs directory [ 160.339416][ T7296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.349408][ T7296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.359457][ T7296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.369897][ T7296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.377930][ T7301] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 160.379135][ T7094] usb 3-1: USB disconnect, device number 18 [ 160.384973][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 160.406862][ T7310] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 160.414041][ T7094] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 160.432720][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.439971][ T7296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.448053][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.455201][ T7296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.494876][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.510998][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.522781][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.531174][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.550979][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.558079][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.571809][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.578967][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.611462][ T7296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.651421][ T30] audit: type=1400 audit(1757581113.471:464): avc: denied { sys_module } for pid=7296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 160.725379][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.875097][ T7296] veth0_vlan: entered promiscuous mode [ 160.884088][ T7296] veth1_vlan: entered promiscuous mode [ 160.905862][ T7296] veth0_macvtap: entered promiscuous mode [ 160.906896][ T5864] Bluetooth: hci5: command 0x1003 tx timeout [ 160.911745][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 160.929645][ T7296] veth1_macvtap: entered promiscuous mode [ 160.975281][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.986054][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.015523][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.025677][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.045181][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.054670][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.120870][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.140399][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.170346][ T30] audit: type=1400 audit(1757581113.991:465): avc: denied { create } for pid=7330 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.189643][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.229994][ T30] audit: type=1400 audit(1757581114.021:466): avc: denied { write } for pid=7330 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 161.231353][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.261625][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.266127][ T30] audit: type=1400 audit(1757581114.081:467): avc: denied { bind } for pid=7333 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.289240][ T30] audit: type=1400 audit(1757581114.101:468): avc: denied { connect } for pid=7333 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.387806][ T51] Bluetooth: hci6: command tx timeout [ 161.691902][ T7096] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 161.846487][ T7096] usb 3-1: device descriptor read/64, error -71 [ 162.007353][ T7350] random: crng reseeded on system resumption [ 162.129933][ T30] audit: type=1400 audit(1757581114.821:469): avc: denied { append } for pid=7348 comm="syz.1.330" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.226730][ T7096] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 162.429757][ T7096] usb 3-1: device descriptor read/64, error -71 [ 162.547951][ T7096] usb usb3-port1: attempt power cycle [ 162.966529][ T7096] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 162.988336][ T7096] usb 3-1: device descriptor read/8, error -71 [ 163.477521][ T51] Bluetooth: hci6: command tx timeout [ 163.666499][ T7096] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 163.699982][ T7096] usb 3-1: device descriptor read/8, error -71 [ 164.247406][ T7096] usb usb3-port1: unable to enumerate USB device [ 164.396493][ T7369] binder: 7368:7369 ioctl c0306201 0 returned -14 [ 164.919777][ T7380] netlink: 68 bytes leftover after parsing attributes in process `syz.2.338'. [ 165.256137][ T7382] netlink: 96 bytes leftover after parsing attributes in process `syz.1.337'. [ 165.548025][ T51] Bluetooth: hci6: command tx timeout [ 165.778628][ T7358] comedi comedi3: reset error (fatal) [ 166.439556][ T7409] vlan2: entered allmulticast mode [ 166.599054][ T7413] netlink: 'syz.4.349': attribute type 10 has an invalid length. [ 166.626207][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.651902][ T7413] bridge_slave_1: left allmulticast mode [ 166.716591][ T7413] bridge_slave_1: left promiscuous mode [ 166.734847][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.307171][ T7413] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 167.706690][ T51] Bluetooth: hci6: command tx timeout [ 167.949008][ T7096] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 168.116505][ T7096] usb 2-1: Using ep0 maxpacket: 16 [ 168.123982][ T7096] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 168.145756][ T7096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.192657][ T7096] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.215089][ T7096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.255784][ T7096] usb 2-1: Product: syz [ 168.303335][ T30] audit: type=1400 audit(1757581121.121:470): avc: denied { read } for pid=7437 comm="syz.5.357" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.330630][ T7096] usb 2-1: Manufacturer: syz [ 168.335259][ T7096] usb 2-1: SerialNumber: syz [ 168.352938][ T7436] netlink: 'syz.2.356': attribute type 33 has an invalid length. [ 168.374081][ T30] audit: type=1400 audit(1757581121.121:471): avc: denied { open } for pid=7437 comm="syz.5.357" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.419765][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.438405][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.447488][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.479982][ T7436] overlay: Unknown parameter 'fsuuid' [ 169.371872][ T30] audit: type=1400 audit(1757581121.231:472): avc: denied { mount } for pid=7437 comm="syz.5.357" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 169.411410][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.455633][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.472888][ T7096] usb 2-1: config 0 descriptor?? [ 169.559722][ T7096] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 169.588823][ T7096] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 169.928586][ T30] audit: type=1400 audit(1757581122.681:473): avc: denied { connect } for pid=7428 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 170.126094][ T7429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.137058][ T7429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.169216][ T30] audit: type=1400 audit(1757581122.751:474): avc: denied { setopt } for pid=7444 comm="syz.2.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.402288][ T7096] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 170.409591][ T7096] em28xx 2-1:0.0: Config register raw data: 0x41 [ 170.736715][ T5969] usb 2-1: USB disconnect, device number 11 [ 170.743161][ T5969] em28xx 2-1:0.0: Disconnecting em28xx [ 170.838687][ T5969] em28xx 2-1:0.0: Freeing device [ 170.927477][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 171.170610][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.183905][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.191883][ T7439] bridge_slave_0: entered allmulticast mode [ 171.199891][ T7439] bridge_slave_0: entered promiscuous mode [ 171.208080][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.215245][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.222743][ T7439] bridge_slave_1: entered allmulticast mode [ 171.230081][ T7439] bridge_slave_1: entered promiscuous mode [ 171.409174][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.561162][ T5864] Bluetooth: hci5: command tx timeout [ 171.658460][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.721729][ T7439] team0: Port device team_slave_0 added [ 171.730776][ T7439] team0: Port device team_slave_1 added [ 171.895897][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.908262][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.969739][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.027006][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.076102][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.146452][ T7480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.155465][ T7480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.186856][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.226867][ T7480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.270806][ T7480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.280871][ T7480] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 172.293744][ T7439] hsr_slave_0: entered promiscuous mode [ 172.307444][ T7439] hsr_slave_1: entered promiscuous mode [ 172.313427][ T7439] debugfs: 'hsr0' already exists in 'hsr' [ 172.323215][ T7439] Cannot create hsr debugfs directory [ 172.343486][ T7480] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 172.492145][ T7480] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 172.516986][ T7480] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 172.523067][ T7480] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 172.585226][ T7480] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 172.913792][ T7495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5132 sclass=netlink_tcpdiag_socket pid=7495 comm=syz.5.368 [ 173.637104][ T7100] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 173.819554][ T7439] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 173.868303][ T7100] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.893003][ T7439] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 173.903794][ T7100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 173.915702][ T7100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 174.014901][ T7439] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.031691][ T7100] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 174.186665][ T5864] Bluetooth: hci2: command 0x0c1a tx timeout [ 174.193089][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 174.270264][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 174.324649][ T7439] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.347041][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 174.353417][ T5864] Bluetooth: hci6: command 0x0c1a tx timeout [ 174.479708][ T7100] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.496884][ T7100] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.526383][ T7100] usb 6-1: Manufacturer: syz [ 174.548958][ T7100] usb 6-1: config 0 descriptor?? [ 174.569127][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.587064][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 174.603768][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.616640][ T4598] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.623770][ T4598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.642712][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.649845][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.825927][ T7513] : renamed from bridge_slave_0 (while UP) [ 175.036896][ T7100] rc_core: IR keymap rc-hauppauge not found [ 175.045738][ T7100] Registered IR keymap rc-empty [ 176.001339][ T7494] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7494 comm=syz.5.368 [ 176.029222][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 176.337296][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 176.378155][ T7100] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 176.397968][ T7100] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 176.427650][ T5864] Bluetooth: hci6: command 0x0c1a tx timeout [ 176.500637][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.515020][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 176.657716][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 176.666488][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 176.677113][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 176.706493][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.147913][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.196732][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.237065][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.307496][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.406473][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.430816][ T7100] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 177.478142][ T7100] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 177.493954][ T7100] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.519480][ T7100] usb 6-1: USB disconnect, device number 2 [ 178.013369][ T7547] netlink: 140 bytes leftover after parsing attributes in process `syz.5.378'. [ 178.054972][ T7439] veth0_vlan: entered promiscuous mode [ 178.062782][ T7092] kernel read not supported for file /vcs (pid: 7092 comm: kworker/1:11) [ 178.069514][ T7439] veth1_vlan: entered promiscuous mode [ 178.142937][ T7439] veth0_macvtap: entered promiscuous mode [ 178.165922][ T7439] veth1_macvtap: entered promiscuous mode [ 178.194627][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.213566][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.239446][ T3540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.240087][ T3540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.240742][ T3540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.241329][ T3540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.607382][ T5864] Bluetooth: hci6: command 0x0c1a tx timeout [ 178.746375][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 179.075179][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.075195][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.158808][ T7571] vivid-001: disconnect [ 179.582863][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.582886][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.709795][ T7564] vivid-001: reconnect [ 179.710562][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 179.797736][ T7580] tmpfs: Unknown parameter 'grpquota_inode_hardlimht' [ 179.974925][ T30] audit: type=1400 audit(1757581132.761:475): avc: denied { ioctl } for pid=7583 comm="syz.5.386" path="socket:[16556]" dev="sockfs" ino=16556 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.137685][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 181.209088][ T7601] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.239124][ T30] audit: type=1400 audit(1757581133.581:476): avc: denied { write } for pid=7594 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.385910][ T5969] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 181.595147][ T5969] usb 7-1: Using ep0 maxpacket: 16 [ 181.726040][ T5969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.761231][ T5969] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 181.783032][ T5969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.856389][ T7096] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.908239][ T5969] usb 7-1: config 0 descriptor?? [ 182.732973][ T7096] usb 6-1: Using ep0 maxpacket: 32 [ 182.750805][ T7096] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 182.763947][ T7096] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 182.783559][ T7096] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 182.899637][ T7096] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 8507, setting to 1024 [ 183.011233][ T7096] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 183.076843][ T7096] usb 6-1: config 0 interface 0 has no altsetting 0 [ 183.131273][ T7096] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 183.170415][ T7096] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 183.212078][ T7096] usb 6-1: Product: syz [ 183.306536][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 183.344754][ T7096] usb 6-1: Manufacturer: syz [ 183.353917][ T7096] usb 6-1: SerialNumber: syz [ 183.369385][ T7096] usb 6-1: config 0 descriptor?? [ 183.386000][ T7096] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 183.527440][ T7096] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 183.600042][ T7638] overlayfs: failed to resolve './file1': -2 [ 183.787107][ T7608] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 183.794355][ T7096] usb 6-1: USB disconnect, device number 3 [ 183.794909][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 183.817255][ T7611] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 183.822285][ T5969] usbhid 7-1:0.0: can't add hid device: -71 [ 183.887519][ T5969] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 184.048618][ T7096] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 184.066692][ T5969] usb 7-1: USB disconnect, device number 2 [ 184.128361][ T7636] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.262591][ T7636] team0: Port device batadv1 added [ 184.935809][ T30] audit: type=1400 audit(1757581137.751:477): avc: denied { append } for pid=7653 comm="syz.4.404" name="video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 184.958754][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.544867][ T7062] kernel read not supported for file /dsp1 (pid: 7062 comm: kworker/0:8) [ 185.764442][ T30] audit: type=1326 audit(1757581138.581:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7667 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 185.764708][ T30] audit: type=1326 audit(1757581138.581:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7667 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 185.764900][ T30] audit: type=1326 audit(1757581138.581:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7667 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 185.818415][ T7675] ======================================================= [ 185.818415][ T7675] WARNING: The mand mount option has been deprecated and [ 185.818415][ T7675] and is ignored by this kernel. Remove the mand [ 185.818415][ T7675] option from the mount to silence this warning. [ 185.818415][ T7675] ======================================================= [ 185.823998][ T30] audit: type=1400 audit(1757581138.641:481): avc: denied { remount } for pid=7667 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 186.010307][ T30] audit: type=1326 audit(1757581138.831:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7667 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 186.010546][ T30] audit: type=1326 audit(1757581138.831:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7667 comm="syz.2.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 186.398517][ T7675] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 186.753995][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.042654][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.086518][ T7707] overlayfs: failed to resolve './file1': -2 [ 188.687675][ T7705] warning: `syz.6.411' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 189.705437][ T7726] netlink: 'syz.6.417': attribute type 1 has an invalid length. [ 189.738796][ T7726] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.417'. [ 190.031194][ T25] block nbd0: Possible stuck request ffff888026840000: control (read@0,1024B). Runtime 60 seconds [ 190.031274][ T25] block nbd0: Possible stuck request ffff8880268401c0: control (read@1024,1024B). Runtime 60 seconds [ 190.031295][ T25] block nbd0: Possible stuck request ffff888026840380: control (read@2048,1024B). Runtime 60 seconds [ 190.031316][ T25] block nbd0: Possible stuck request ffff888026840540: control (read@3072,1024B). Runtime 60 seconds [ 190.088651][ T7740] netlink: 'syz.2.421': attribute type 22 has an invalid length. [ 190.246448][ T7062] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 190.826472][ T7062] usb 2-1: device descriptor read/64, error -71 [ 191.107081][ T7062] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 191.533782][ T7062] usb 2-1: device descriptor read/64, error -71 [ 191.697926][ T7062] usb usb2-port1: attempt power cycle [ 192.086771][ T7062] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 192.117087][ T7062] usb 2-1: device descriptor read/8, error -71 [ 192.393339][ T7773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.526483][ T7062] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.547059][ T7062] usb 2-1: device descriptor read/8, error -71 [ 192.682201][ T7062] usb usb2-port1: unable to enumerate USB device [ 193.141973][ T30] audit: type=1400 audit(1757581145.961:484): avc: denied { write } for pid=7800 comm="syz.5.438" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.200183][ T30] audit: type=1400 audit(1757581145.961:485): avc: denied { ioctl } for pid=7800 comm="syz.5.438" path="/dev/usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 193.272258][ T7807] Illegal XDP return value 4294967294 on prog (id 82) dev N/A, expect packet loss! [ 193.342925][ T30] audit: type=1400 audit(1757581146.141:486): avc: denied { connect } for pid=7794 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 193.396349][ T7062] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 193.525998][ T5969] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 193.556336][ T7062] usb 6-1: Using ep0 maxpacket: 32 [ 193.563065][ T7062] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.576752][ T7062] usb 6-1: config 0 has no interface number 0 [ 193.800359][ T7094] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 193.873771][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.880102][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.910212][ T7062] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.923103][ T7062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.931745][ T7062] usb 6-1: Product: syz [ 193.935903][ T7062] usb 6-1: Manufacturer: syz [ 193.944511][ T7062] usb 6-1: SerialNumber: syz [ 193.961302][ T7062] usb 6-1: config 0 descriptor?? [ 193.966884][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 193.974889][ T7062] smsc95xx v2.0.0 [ 193.988686][ T7094] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.988801][ T5969] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 194.025724][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.037609][ T5969] usb 2-1: Product: syz [ 194.041794][ T5969] usb 2-1: Manufacturer: syz [ 194.059689][ T5969] usb 2-1: SerialNumber: syz [ 194.074927][ T5969] usb 2-1: config 0 descriptor?? [ 194.107731][ T5969] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 194.135473][ T5969] usb 2-1: Detected FT-X [ 194.147448][ T7094] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 194.203755][ T30] audit: type=1400 audit(1757581147.021:487): avc: denied { ioctl } for pid=7812 comm="syz.4.441" path="socket:[17307]" dev="sockfs" ino=17307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 194.228193][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.243946][ T7092] libceph: connect (1)[c::]:6789 error -101 [ 194.253161][ T7812] mmap: syz.4.441 (7812): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 194.267636][ T7094] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 194.299473][ T7817] netlink: set zone limit has 4 unknown bytes [ 194.299688][ T7092] libceph: mon0 (1)[c::]:6789 connect error [ 194.323212][ T5969] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 194.333762][ T7094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.354654][ T7813] ceph: No mds server is up or the cluster is laggy [ 194.424936][ T7094] usb 3-1: config 0 descriptor?? [ 194.445582][ T7094] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 194.490710][ T7094] dvb-usb: bulk message failed: -22 (3/0) [ 194.532950][ T7094] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 194.546803][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 194.567731][ T7094] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 194.579136][ T7094] usb 3-1: media controller created [ 194.586186][ T7094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.603548][ T7094] dvb-usb: bulk message failed: -22 (6/0) [ 195.577865][ T5969] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 195.592994][ T30] audit: type=1400 audit(1757581147.501:488): avc: denied { map } for pid=7800 comm="syz.5.438" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 195.647200][ T7062] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 195.661992][ T7062] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 195.676523][ T7062] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 195.696632][ T7062] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 195.697148][ T7094] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 195.718247][ T7062] usb 6-1: USB disconnect, device number 4 [ 195.808808][ T7096] usb 2-1: USB disconnect, device number 16 [ 195.862233][ T7094] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 195.885933][ T7094] dvb-usb: schedule remote query interval to 150 msecs. [ 195.894990][ T7096] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 195.905400][ T7094] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 195.943020][ T7096] ftdi_sio 2-1:0.0: device disconnected [ 196.066724][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 196.072519][ T7094] dvb-usb: error while querying for an remote control event. [ 196.306369][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 196.312317][ T7096] dvb-usb: error while querying for an remote control event. [ 196.474792][ T30] audit: type=1400 audit(1757581149.291:489): avc: denied { create } for pid=7840 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 196.516823][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 196.784937][ T7096] dvb-usb: error while querying for an remote control event. [ 196.886569][ T30] audit: type=1400 audit(1757581149.681:490): avc: denied { ioctl } for pid=7838 comm="syz.4.451" path="socket:[17909]" dev="sockfs" ino=17909 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.310810][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 197.345980][ T7096] dvb-usb: error while querying for an remote control event. [ 197.475824][ T7062] usb 3-1: USB disconnect, device number 23 [ 197.621650][ T7858] overlayfs: failed to resolve './file0': -2 [ 198.782398][ T7062] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 199.306671][ T7094] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 199.882678][ T7094] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.910385][ T7094] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.946363][ T7094] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 200.004109][ T7094] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.038010][ T7094] usb 7-1: config 0 descriptor?? [ 200.082907][ T7094] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 200.115429][ T7094] dvb-usb: bulk message failed: -22 (3/0) [ 200.212679][ T7094] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 200.254755][ T7094] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 200.276186][ T7094] usb 7-1: media controller created [ 200.336107][ T7094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.456808][ T7094] dvb-usb: bulk message failed: -22 (6/0) [ 200.526706][ T7094] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 200.623775][ T7094] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 200.669288][ T7094] dvb-usb: schedule remote query interval to 150 msecs. [ 200.720371][ T7094] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 200.822229][ T7866] syz.5.453 (7866): drop_caches: 2 [ 200.877144][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 200.883101][ T7094] dvb-usb: error while querying for an remote control event. [ 201.019540][ T30] audit: type=1400 audit(1757581153.841:491): avc: denied { read } for pid=7887 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 201.044239][ T7889] nvme_fabrics: unknown parameter or missing value 'É' in ctrl creation request [ 201.168421][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 201.174179][ T7094] dvb-usb: error while querying for an remote control event. [ 201.336359][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 201.353498][ T7094] dvb-usb: error while querying for an remote control event. [ 201.378299][ T30] audit: type=1400 audit(1757581154.181:492): avc: denied { mounton } for pid=7882 comm="syz.2.462" path="/94/file1" dev="autofs" ino=18528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 201.986912][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 202.011227][ T7094] dvb-usb: error while querying for an remote control event. [ 202.207726][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 202.260903][ T7094] dvb-usb: error while querying for an remote control event. [ 202.437538][ T7094] dvb-usb: bulk message failed: -22 (1/0) [ 202.443424][ T7094] dvb-usb: error while querying for an remote control event. [ 202.596747][ T30] audit: type=1400 audit(1757581155.311:493): avc: denied { mount } for pid=7904 comm="syz.1.468" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 202.922489][ T7094] usb 7-1: USB disconnect, device number 3 [ 202.994667][ T7094] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 203.030058][ T30] audit: type=1400 audit(1757581155.851:494): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 203.101575][ T7909] nft_compat: unsupported protocol 0 [ 203.833069][ T7931] FAULT_INJECTION: forcing a failure. [ 203.833069][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 203.845789][ T7931] CPU: 1 UID: 0 PID: 7931 Comm: syz.5.475 Not tainted syzkaller #0 PREEMPT(full) [ 203.845813][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.845823][ T7931] Call Trace: [ 203.845829][ T7931] [ 203.845836][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 203.845862][ T7931] should_fail_ex+0x512/0x640 [ 203.845884][ T7931] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 203.845906][ T7931] should_failslab+0xc2/0x120 [ 203.845926][ T7931] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 203.845944][ T7931] ? __pfx___might_resched+0x10/0x10 [ 203.845965][ T7931] ? alloc_vmap_area+0x645/0x29c0 [ 203.845992][ T7931] alloc_vmap_area+0x645/0x29c0 [ 203.846024][ T7931] ? __pfx_alloc_vmap_area+0x10/0x10 [ 203.846053][ T7931] __get_vm_area_node+0x1ca/0x330 [ 203.846080][ T7931] __vmalloc_node_range_noprof+0x271/0x14b0 [ 203.846105][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 203.846128][ T7931] ? avc_has_perm_noaudit+0x117/0x3b0 [ 203.846148][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 203.846167][ T7931] ? __pfx___schedule+0x10/0x10 [ 203.846190][ T7931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.846224][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 203.846241][ T7931] __vmalloc_node_noprof+0xad/0xf0 [ 203.846267][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 203.846287][ T7931] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 203.846312][ T7931] bpf_prog_alloc+0x3b/0x230 [ 203.846327][ T7931] ? __pfx_bpf_prog_alloc+0x10/0x10 [ 203.846345][ T7931] bpf_prog_load+0x1a04/0x2490 [ 203.846373][ T7931] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.846397][ T7931] ? avc_has_perm+0x144/0x1f0 [ 203.846427][ T7931] ? selinux_bpf+0xde/0x130 [ 203.846444][ T7931] ? bpf_lsm_bpf+0x9/0x10 [ 203.846469][ T7931] __sys_bpf+0x4a3f/0x4de0 [ 203.846494][ T7931] ? __pfx___sys_bpf+0x10/0x10 [ 203.846520][ T7931] ? __pfx___schedule+0x10/0x10 [ 203.846566][ T7931] __x64_sys_bpf+0x78/0xc0 [ 203.846589][ T7931] do_syscall_64+0xcd/0x4c0 [ 203.846614][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.846631][ T7931] RIP: 0033:0x7f292058eba9 [ 203.846646][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.846662][ T7931] RSP: 002b:00007f2921353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.846679][ T7931] RAX: ffffffffffffffda RBX: 00007f29207d6180 RCX: 00007f292058eba9 [ 203.846690][ T7931] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 203.846701][ T7931] RBP: 00007f2921353090 R08: 0000000000000000 R09: 0000000000000000 [ 203.846711][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.846721][ T7931] R13: 00007f29207d6218 R14: 00007f29207d6180 R15: 00007ffc9146bb68 [ 203.846745][ T7931] [ 204.120752][ T7931] syz.5.475: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 204.137649][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.5.475 Not tainted syzkaller #0 PREEMPT(full) [ 204.137674][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.137687][ T7931] Call Trace: [ 204.137693][ T7931] [ 204.137700][ T7931] dump_stack_lvl+0x16c/0x1f0 [ 204.137726][ T7931] warn_alloc+0x248/0x3a0 [ 204.137746][ T7931] ? __pfx_warn_alloc+0x10/0x10 [ 204.137765][ T7931] ? kfree+0x2b4/0x4d0 [ 204.137794][ T7931] ? __get_vm_area_node+0x208/0x330 [ 204.137818][ T7931] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 204.137845][ T7931] ? avc_has_perm_noaudit+0x117/0x3b0 [ 204.137863][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 204.137882][ T7931] ? __pfx___schedule+0x10/0x10 [ 204.137903][ T7931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.137931][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 204.137946][ T7931] __vmalloc_node_noprof+0xad/0xf0 [ 204.137968][ T7931] ? bpf_prog_alloc_no_stats+0x54/0x5d0 [ 204.137988][ T7931] bpf_prog_alloc_no_stats+0x54/0x5d0 [ 204.138007][ T7931] bpf_prog_alloc+0x3b/0x230 [ 204.138021][ T7931] ? __pfx_bpf_prog_alloc+0x10/0x10 [ 204.138040][ T7931] bpf_prog_load+0x1a04/0x2490 [ 204.138067][ T7931] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.138092][ T7931] ? avc_has_perm+0x144/0x1f0 [ 204.138123][ T7931] ? selinux_bpf+0xde/0x130 [ 204.138150][ T7931] ? bpf_lsm_bpf+0x9/0x10 [ 204.138176][ T7931] __sys_bpf+0x4a3f/0x4de0 [ 204.138201][ T7931] ? __pfx___sys_bpf+0x10/0x10 [ 204.138228][ T7931] ? __pfx___schedule+0x10/0x10 [ 204.138273][ T7931] __x64_sys_bpf+0x78/0xc0 [ 204.138297][ T7931] do_syscall_64+0xcd/0x4c0 [ 204.138321][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.138339][ T7931] RIP: 0033:0x7f292058eba9 [ 204.138353][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.138370][ T7931] RSP: 002b:00007f2921353038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.138385][ T7931] RAX: ffffffffffffffda RBX: 00007f29207d6180 RCX: 00007f292058eba9 [ 204.138396][ T7931] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 204.138406][ T7931] RBP: 00007f2921353090 R08: 0000000000000000 R09: 0000000000000000 [ 204.138416][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.138425][ T7931] R13: 00007f29207d6218 R14: 00007f29207d6180 R15: 00007ffc9146bb68 [ 204.138448][ T7931] [ 204.138502][ T7931] Mem-Info: [ 204.210250][ T7931] active_anon:17060 inactive_anon:0 isolated_anon:0 [ 204.210250][ T7931] active_file:11070 inactive_file:40646 isolated_file:0 [ 204.210250][ T7931] unevictable:768 dirty:538 writeback:0 [ 204.210250][ T7931] slab_reclaimable:12456 slab_unreclaimable:105044 [ 204.210250][ T7931] mapped:46885 shmem:7069 pagetables:1392 [ 204.210250][ T7931] sec_pagetables:0 bounce:0 [ 204.210250][ T7931] kernel_misc_reclaimable:0 [ 204.210250][ T7931] free:1267002 free_pcp:14079 free_cma:0 [ 204.253155][ T30] audit: type=1400 audit(1757581157.031:495): avc: denied { connect } for pid=7933 comm="syz.6.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 204.255067][ T7931] Node 0 active_anon:68240kB inactive_anon:0kB active_file:44172kB inactive_file:162384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:187432kB dirty:2148kB writeback:0kB shmem:26740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13604kB pagetables:5448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.483419][ T7931] Node 1 active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.513649][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.519867][ T7931] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.548691][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.566384][ T7931] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 204.572326][ T7931] Node 0 DMA32 free:1161916kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68512kB inactive_anon:0kB active_file:44172kB inactive_file:161076kB unevictable:1536kB writepending:2216kB present:3129332kB managed:2539336kB mlocked:0kB bounce:0kB free_pcp:32280kB local_pcp:21048kB free_cma:0kB [ 204.604929][ T7931] lowmem_reserve[]: 0 0 1 1 1 [ 204.609928][ T7931] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 204.639348][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 204.644209][ T7931] Node 1 Normal free:3887636kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:108kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:24256kB local_pcp:10432kB free_cma:0kB [ 204.676184][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 204.681255][ T7931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.693942][ T7931] Node 0 DMA32: 1949*4kB (UM) 845*8kB (UME) 270*16kB (UME) 250*32kB (UME) 43*64kB (UME) 6*128kB (UM) 16*256kB (M) 6*512kB (ME) 6*1024kB (UME) 4*2048kB (M) 271*4096kB (M) = 1161916kB [ 204.712156][ T7931] Node 0 Normal: 1*4kB (M) 2*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 204.724483][ T7931] Node 1 Normal: 201*4kB (UME) 42*8kB (UME) 52*16kB (UME) 109*32kB (UME) 31*64kB (UE) 14*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3887636kB [ 204.742563][ T7931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.752434][ T7931] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 204.761921][ T7931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.771540][ T7931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 204.780924][ T7931] 58810 total pagecache pages [ 204.785626][ T7931] 0 pages in swap cache [ 204.789966][ T7931] Free swap = 124996kB [ 204.794181][ T7931] Total swap = 124996kB [ 204.798422][ T7931] 2097051 pages RAM [ 204.802295][ T7931] 0 pages HighMem/MovableOnly [ 204.807024][ T7931] 430255 pages reserved [ 204.811222][ T7931] 0 pages cma reserved [ 205.119988][ T30] audit: type=1400 audit(1757581157.941:496): avc: denied { bind } for pid=7946 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.144530][ T30] audit: type=1400 audit(1757581157.971:497): avc: denied { setopt } for pid=7946 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.163756][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.199864][ T30] audit: type=1400 audit(1757581158.001:498): avc: denied { connect } for pid=7946 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.199905][ T30] audit: type=1400 audit(1757581158.011:499): avc: denied { ioctl } for pid=7946 comm="syz.4.479" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x4b31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 205.248490][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.424570][ T7952] netlink: 256 bytes leftover after parsing attributes in process `syz.2.482'. [ 205.988856][ T30] audit: type=1400 audit(1757581158.811:500): avc: denied { accept } for pid=7953 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 206.166362][ T7063] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 206.316510][ T7063] usb 3-1: device descriptor read/64, error -71 [ 206.567195][ T7968] sp0: Synchronizing with TNC [ 207.127796][ T7063] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 207.278537][ T7063] usb 3-1: device descriptor read/64, error -71 [ 207.501478][ T7063] usb usb3-port1: attempt power cycle [ 207.686658][ T30] audit: type=1400 audit(1757581160.491:501): avc: denied { append } for pid=7981 comm="syz.4.491" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 207.973859][ T7063] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 207.993834][ T30] audit: type=1400 audit(1757581160.821:502): avc: denied { map } for pid=7985 comm="syz.4.492" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 208.026604][ T7063] usb 3-1: device descriptor read/8, error -71 [ 208.286140][ T7063] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 208.332385][ T7063] usb 3-1: device descriptor read/8, error -71 [ 208.447718][ T7063] usb usb3-port1: unable to enumerate USB device [ 209.612506][ T8005] trusted_key: encrypted_key: master key parameter is missing [ 209.777014][ T8012] FAULT_INJECTION: forcing a failure. [ 209.777014][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 209.792672][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.6.499 Not tainted syzkaller #0 PREEMPT(full) [ 209.792695][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.792704][ T8012] Call Trace: [ 209.792709][ T8012] [ 209.792715][ T8012] dump_stack_lvl+0x16c/0x1f0 [ 209.792742][ T8012] should_fail_ex+0x512/0x640 [ 209.792765][ T8012] should_failslab+0xc2/0x120 [ 209.792779][ T8012] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 209.792791][ T8012] ? skb_clone+0x190/0x3f0 [ 209.792806][ T8012] skb_clone+0x190/0x3f0 [ 209.792819][ T8012] netlink_deliver_tap+0xabd/0xd30 [ 209.792836][ T8012] netlink_unicast+0x64c/0x870 [ 209.792852][ T8012] ? __pfx_netlink_unicast+0x10/0x10 [ 209.792869][ T8012] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 209.792896][ T8012] netlink_sendmsg+0x8d1/0xdd0 [ 209.792920][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.792944][ T8012] ____sys_sendmsg+0xa98/0xc70 [ 209.792961][ T8012] ? copy_msghdr_from_user+0x10a/0x160 [ 209.792974][ T8012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.792996][ T8012] ___sys_sendmsg+0x134/0x1d0 [ 209.793010][ T8012] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.793039][ T8012] __sys_sendmsg+0x16d/0x220 [ 209.793052][ T8012] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.793074][ T8012] do_syscall_64+0xcd/0x4c0 [ 209.793090][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.793101][ T8012] RIP: 0033:0x7f541698eba9 [ 209.793110][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.793120][ T8012] RSP: 002b:00007f54177e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.793131][ T8012] RAX: ffffffffffffffda RBX: 00007f5416bd5fa0 RCX: 00007f541698eba9 [ 209.793137][ T8012] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 209.793143][ T8012] RBP: 00007f54177e4090 R08: 0000000000000000 R09: 0000000000000000 [ 209.793149][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.793155][ T8012] R13: 00007f5416bd6038 R14: 00007f5416bd5fa0 R15: 00007ffd172eff38 [ 209.793168][ T8012] [ 210.536567][ T30] audit: type=1400 audit(1757581163.351:503): avc: denied { mount } for pid=8013 comm="syz.6.500" name="/" dev="ramfs" ino=18368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 210.766530][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.025309][ T1590] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 211.613787][ T30] audit: type=1400 audit(1757581164.431:504): avc: denied { bind } for pid=8032 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.614035][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 211.649887][ T1590] usb 2-1: Using ep0 maxpacket: 16 [ 211.657074][ T1590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.668722][ T1590] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.681334][ T1590] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 211.700612][ T1590] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.804424][ T7063] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 211.817225][ T1590] usb 2-1: config 0 descriptor?? [ 211.833609][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.505'. [ 211.845753][ T30] audit: type=1400 audit(1757581164.651:505): avc: denied { execute } for pid=8032 comm="syz.4.505" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 212.405809][ T30] audit: type=1400 audit(1757581164.661:506): avc: denied { read } for pid=8032 comm="syz.4.505" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.429523][ T30] audit: type=1400 audit(1757581164.661:507): avc: denied { open } for pid=8032 comm="syz.4.505" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.446335][ T7063] usb 6-1: Using ep0 maxpacket: 32 [ 212.458437][ T30] audit: type=1400 audit(1757581164.661:508): avc: denied { ioctl } for pid=8032 comm="syz.4.505" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 212.637427][ T7063] usb 6-1: config 0 interface 0 has no altsetting 0 [ 212.669300][ T7063] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 212.690937][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.698180][ T7063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.709275][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.716067][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.723525][ T7063] usb 6-1: Product: syz [ 212.728118][ T7063] usb 6-1: Manufacturer: syz [ 212.732713][ T7063] usb 6-1: SerialNumber: syz [ 212.738703][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.745495][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.754671][ T7063] usb 6-1: config 0 descriptor?? [ 212.761239][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.768841][ T7063] gs_usb 6-1:0.0: Required endpoints not found [ 212.778258][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.785055][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.935087][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 212.946919][ T7092] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 213.031563][ T30] audit: type=1400 audit(1757581165.841:509): avc: denied { connect } for pid=8046 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 213.296425][ T1590] asus 0003:048D:CE50.0004: unknown main item tag 0x0 [ 213.310667][ T7092] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.327973][ T7092] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.335107][ T30] audit: type=1400 audit(1757581166.151:510): avc: denied { watch watch_reads } for pid=8028 comm="syz.5.504" path="pipe:[13895]" dev="pipefs" ino=13895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 213.360039][ T1590] asus 0003:048D:CE50.0004: hidraw0: USB HID v0.01 Device [HID 048d:ce50] on usb-dummy_hcd.1-1/input0 [ 213.373264][ T7063] usb 6-1: USB disconnect, device number 5 [ 213.382483][ T7092] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.399898][ T7092] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 213.410037][ T7092] usb 7-1: Product: syz [ 213.414660][ T7092] usb 7-1: Manufacturer: syz [ 213.420260][ T7092] usb 7-1: SerialNumber: syz [ 213.453749][ T1590] asus 0003:048D:CE50.0004: Asus input not registered [ 213.470148][ T1590] asus 0003:048D:CE50.0004: probe with driver asus failed with error -12 [ 213.501845][ T1590] usb 2-1: USB disconnect, device number 17 [ 213.502969][ T7092] usb 7-1: config 0 descriptor?? [ 213.573705][ T7092] usb 7-1: selecting invalid altsetting 0 [ 213.597952][ T8052] fido_id[8052]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 213.714851][ T30] audit: type=1400 audit(1757581166.531:511): avc: denied { getopt } for pid=8053 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.051024][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.513'. [ 214.558550][ T8071] bridge0: port 3(gretap0) entered blocking state [ 214.565372][ T8071] bridge0: port 3(gretap0) entered disabled state [ 214.572632][ T8071] gretap0: entered allmulticast mode [ 214.586311][ T8071] gretap0: entered promiscuous mode [ 214.593365][ T8071] bridge0: port 3(gretap0) entered blocking state [ 214.599890][ T8071] bridge0: port 3(gretap0) entered forwarding state [ 215.806159][ T7094] usb 7-1: USB disconnect, device number 4 [ 217.376701][ T30] audit: type=1400 audit(1757581170.151:512): avc: denied { bind } for pid=8101 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 217.568138][ T8111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2080 sclass=netlink_route_socket pid=8111 comm=syz.4.525 [ 219.435898][ T8142] FAULT_INJECTION: forcing a failure. [ 219.435898][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 220.171232][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.4.537 Not tainted syzkaller #0 PREEMPT(full) [ 220.171260][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.171270][ T8142] Call Trace: [ 220.171276][ T8142] [ 220.171283][ T8142] dump_stack_lvl+0x16c/0x1f0 [ 220.171310][ T8142] should_fail_ex+0x512/0x640 [ 220.171332][ T8142] ? fs_reclaim_acquire+0xae/0x150 [ 220.171356][ T8142] ? tomoyo_encode2+0x100/0x3e0 [ 220.171381][ T8142] should_failslab+0xc2/0x120 [ 220.171402][ T8142] __kmalloc_noprof+0xd2/0x510 [ 220.171419][ T8142] ? tomoyo_encode2+0x6c/0x3e0 [ 220.171448][ T8142] tomoyo_encode2+0x100/0x3e0 [ 220.171477][ T8142] tomoyo_encode+0x29/0x50 [ 220.171500][ T8142] tomoyo_realpath_from_path+0x18f/0x6e0 [ 220.171529][ T8142] ? tomoyo_profile+0x47/0x60 [ 220.171548][ T8142] tomoyo_path_number_perm+0x245/0x580 [ 220.171570][ T8142] ? tomoyo_path_number_perm+0x237/0x580 [ 220.171592][ T8142] ? rcu_watching_snap_stopped_since+0xb4/0x110 [ 220.171617][ T8142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.171640][ T8142] ? __bpf_get_stack+0x347/0xa10 [ 220.171680][ T8142] ? find_held_lock+0x2b/0x80 [ 220.171701][ T8142] ? hook_file_ioctl_common+0x145/0x410 [ 220.171726][ T8142] ? __fget_files+0x20e/0x3c0 [ 220.171743][ T8142] ? _raw_spin_unlock_irq+0x30/0x50 [ 220.171767][ T8142] security_file_ioctl+0x9b/0x240 [ 220.171794][ T8142] __x64_sys_ioctl+0xb7/0x210 [ 220.171822][ T8142] do_syscall_64+0xcd/0x4c0 [ 220.171846][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.171864][ T8142] RIP: 0033:0x7efca278eba9 [ 220.171878][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.171894][ T8142] RSP: 002b:00007efca36fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.171917][ T8142] RAX: ffffffffffffffda RBX: 00007efca29d5fa0 RCX: 00007efca278eba9 [ 220.171929][ T8142] RDX: 0000200000000080 RSI: 00000000c020aa04 RDI: 0000000000000005 [ 220.171939][ T8142] RBP: 00007efca36fc090 R08: 0000000000000000 R09: 0000000000000000 [ 220.171949][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.171959][ T8142] R13: 00007efca29d6038 R14: 00007efca29d5fa0 R15: 00007ffd75285028 [ 220.171984][ T8142] [ 220.172001][ T8142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.599723][ T25] block nbd0: Possible stuck request ffff888026840000: control (read@0,1024B). Runtime 90 seconds [ 220.610412][ T25] block nbd0: Possible stuck request ffff8880268401c0: control (read@1024,1024B). Runtime 90 seconds [ 220.622575][ T30] audit: type=1400 audit(1757581173.441:513): avc: denied { listen } for pid=8136 comm="syz.6.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.641921][ T25] block nbd0: Possible stuck request ffff888026840380: control (read@2048,1024B). Runtime 90 seconds [ 220.652962][ T25] block nbd0: Possible stuck request ffff888026840540: control (read@3072,1024B). Runtime 90 seconds [ 220.674439][ T30] audit: type=1400 audit(1757581173.491:514): avc: denied { accept } for pid=8136 comm="syz.6.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.754704][ T30] audit: type=1400 audit(1757581173.551:515): avc: denied { mount } for pid=8136 comm="syz.6.536" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 221.216381][ T5969] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 221.398778][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.423336][ T5969] usb 6-1: not running at top speed; connect to a high speed hub [ 221.460697][ T5969] usb 6-1: config 191 has an invalid descriptor of length 0, skipping remainder of the config [ 221.508500][ T5969] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=6a.34 [ 221.518471][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.536933][ T5969] usb 6-1: Product: syz [ 221.541868][ T5969] usb 6-1: Manufacturer: syz [ 221.551514][ T5969] usb 6-1: SerialNumber: syz [ 221.633872][ T8176] overlayfs: failed to resolve './file1': -2 [ 222.004111][ T5969] usb 6-1: USB disconnect, device number 6 [ 223.617784][ T8203] netlink: 'syz.5.552': attribute type 10 has an invalid length. [ 223.625562][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.5.552'. [ 223.993706][ T8203] team0: Port device geneve0 added [ 224.702263][ T8199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.135055][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.555'. [ 225.150405][ T8199] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 225.230488][ T8199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 225.287282][ T8199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.293513][ T8199] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 225.299955][ T8199] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 225.349459][ T8199] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 225.355531][ T8199] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 225.378829][ T8199] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 225.386378][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.418296][ T8219] overlayfs: failed to resolve './file1': -2 [ 225.447137][ T8212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.461187][ T8200] block device autoloading is deprecated and will be removed. [ 225.894988][ T8230] fuse: Bad value for 'fd' [ 226.113879][ T8239] input: syz1 as /devices/virtual/input/input14 [ 226.435680][ T8243] netlink: 72 bytes leftover after parsing attributes in process `syz.2.561'. [ 227.306730][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.312759][ T5864] Bluetooth: hci3: command 0x0c1a tx timeout [ 227.315960][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 227.386547][ T5863] Bluetooth: hci5: command 0x040f tx timeout [ 227.392590][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 227.466465][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 227.475825][ T8257] FAULT_INJECTION: forcing a failure. [ 227.475825][ T8257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.489526][ T8257] CPU: 0 UID: 0 PID: 8257 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT(full) [ 227.489552][ T8257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.489562][ T8257] Call Trace: [ 227.489567][ T8257] [ 227.489573][ T8257] dump_stack_lvl+0x16c/0x1f0 [ 227.489600][ T8257] should_fail_ex+0x512/0x640 [ 227.489626][ T8257] _copy_to_user+0x32/0xd0 [ 227.489652][ T8257] simple_read_from_buffer+0xcb/0x170 [ 227.489672][ T8257] proc_fail_nth_read+0x197/0x240 [ 227.489693][ T8257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.489715][ T8257] ? rw_verify_area+0xcf/0x6c0 [ 227.489740][ T8257] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.489759][ T8257] vfs_read+0x1e1/0xcf0 [ 227.489779][ T8257] ? __pfx___mutex_lock+0x10/0x10 [ 227.489801][ T8257] ? __pfx_vfs_read+0x10/0x10 [ 227.489826][ T8257] ? __fget_files+0x20e/0x3c0 [ 227.489853][ T8257] ksys_read+0x12a/0x250 [ 227.489870][ T8257] ? __pfx_ksys_read+0x10/0x10 [ 227.489888][ T8257] ? fput+0x9b/0xd0 [ 227.489914][ T8257] do_syscall_64+0xcd/0x4c0 [ 227.489939][ T8257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.489956][ T8257] RIP: 0033:0x7f053918d5bc [ 227.489974][ T8257] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.489991][ T8257] RSP: 002b:00007f05373ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.490008][ T8257] RAX: ffffffffffffffda RBX: 00007f05393d5fa0 RCX: 00007f053918d5bc [ 227.490024][ T8257] RDX: 000000000000000f RSI: 00007f05373ee0a0 RDI: 0000000000000003 [ 227.490034][ T8257] RBP: 00007f05373ee090 R08: 0000000000000000 R09: 0000000000000000 [ 227.490044][ T8257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.490054][ T8257] R13: 00007f05393d6038 R14: 00007f05393d5fa0 R15: 00007ffeaeec6fa8 [ 227.490077][ T8257] [ 228.491426][ T8275] input: syz1 as /devices/virtual/input/input15 [ 228.499921][ T8275] input: failed to attach handler leds to device input15, error: -6 [ 228.936549][ T30] audit: type=1400 audit(1757581181.731:516): avc: denied { setopt } for pid=8270 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.971498][ T30] audit: type=1400 audit(1757581181.741:517): avc: denied { mounton } for pid=8272 comm="syz.1.573" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 229.280438][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 229.396886][ T5863] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.561082][ T5863] Bluetooth: hci5: command 0x040f tx timeout [ 231.277109][ T8276] kexec: Could not allocate control_code_buffer [ 231.850595][ T8311] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 231.857133][ T8311] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 231.864945][ T8311] vhci_hcd vhci_hcd.0: Device attached [ 232.128689][ T30] audit: type=1400 audit(1757581184.941:518): avc: denied { append } for pid=8318 comm="syz.4.584" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 232.151533][ T5969] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 232.236328][ T7063] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 232.406493][ T7096] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 232.471824][ T8327] 9pnet_fd: Insufficient options for proto=fd [ 232.610224][ T7063] usb 7-1: Using ep0 maxpacket: 16 [ 232.625460][ T7063] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 232.634480][ T7063] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 232.644270][ T7063] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 232.656098][ T7063] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 232.675292][ T7063] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 232.715735][ T7063] usb 7-1: config 1 interface 0 has no altsetting 0 [ 232.726507][ T7063] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 232.744374][ T7063] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.780618][ T8329] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 232.903888][ T7063] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 232.905906][ T7096] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 232.953648][ T30] audit: type=1400 audit(1757581185.751:519): avc: denied { bind } for pid=8324 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.956368][ T7096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.981824][ T30] audit: type=1400 audit(1757581185.751:520): avc: denied { listen } for pid=8324 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.001396][ T30] audit: type=1400 audit(1757581185.761:521): avc: denied { write } for pid=8324 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.021607][ T30] audit: type=1400 audit(1757581185.761:522): avc: denied { accept } for pid=8324 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.041205][ T30] audit: type=1400 audit(1757581185.761:523): avc: denied { read } for pid=8324 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 233.239430][ T7096] usb 3-1: Product: syz [ 233.248392][ T7096] usb 3-1: Manufacturer: syz [ 233.263348][ T7096] usb 3-1: SerialNumber: syz [ 233.302933][ T7096] usb 3-1: config 0 descriptor?? [ 234.091404][ T8339] netlink: 'syz.2.583': attribute type 29 has an invalid length. [ 234.267040][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 234.394992][ T8342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.668501][ T8312] vhci_hcd: connection reset by peer [ 234.685624][ T80] vhci_hcd: stop threads [ 234.703774][ T7063] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 234.712355][ T80] vhci_hcd: release socket [ 234.729135][ T80] vhci_hcd: disconnect device [ 234.752367][ T7063] usb 7-1: USB disconnect, device number 5 [ 235.139686][ T30] audit: type=1400 audit(1757581187.961:524): avc: denied { create } for pid=8354 comm="syz.6.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 235.904061][ T8355] netlink: 'syz.6.593': attribute type 13 has an invalid length. [ 236.344748][ T8355] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.352287][ T8355] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.520633][ T7062] usb 3-1: USB disconnect, device number 28 [ 236.996720][ T8379] tty tty31: ldisc open failed (-12), clearing slot 30 [ 237.206531][ T7100] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 237.573459][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.576484][ T5969] vhci_hcd: vhci_device speed not set [ 237.620752][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.843101][ T2902] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.887408][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.952988][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.491344][ T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.820838][ T30] audit: type=1400 audit(1757581192.641:525): avc: denied { ioctl } for pid=8409 comm="syz.5.608" path="socket:[20896]" dev="sockfs" ino=20896 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 240.883776][ T30] audit: type=1400 audit(1757581193.701:526): avc: denied { module_request } for pid=8426 comm="syz.4.614" kmod="netdev-dvmrp0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 241.651752][ T8431] syz.4.614 (8431) used greatest stack depth: 20072 bytes left [ 243.284492][ T30] audit: type=1400 audit(1757581195.631:527): avc: denied { lock } for pid=8441 comm="syz.5.617" path="socket:[20925]" dev="sockfs" ino=20925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 245.236345][ T5864] Bluetooth: hci6: command 0x0c1a tx timeout [ 245.546984][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 245.865023][ T7062] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 245.886153][ T30] audit: type=1400 audit(1757581198.651:528): avc: denied { listen } for pid=8473 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 245.939983][ T30] audit: type=1400 audit(1757581198.651:529): avc: denied { accept } for pid=8473 comm="syz.5.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 246.025256][ T30] audit: type=1326 audit(1757581198.841:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 246.624936][ T30] audit: type=1326 audit(1757581198.841:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 246.627476][ T7062] usb 7-1: Using ep0 maxpacket: 8 [ 246.659225][ T7062] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 246.669961][ T7062] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.684622][ T7062] usb 7-1: config 1 interface 0 has no altsetting 0 [ 246.694647][ T7062] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 246.801573][ T7062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.809847][ T7062] usb 7-1: Product: syz [ 246.813983][ T7062] usb 7-1: Manufacturer: syz [ 246.818724][ T7062] usb 7-1: SerialNumber: syz [ 246.835806][ T8471] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 246.843262][ T8471] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 246.880870][ T30] audit: type=1326 audit(1757581198.841:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 246.972289][ T30] audit: type=1326 audit(1757581198.841:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 247.002323][ T30] audit: type=1326 audit(1757581198.841:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 247.063980][ T7062] usb 7-1: USB disconnect, device number 6 [ 247.110508][ T30] audit: type=1326 audit(1757581198.841:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 247.194892][ T30] audit: type=1326 audit(1757581198.841:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 247.252624][ T30] audit: type=1326 audit(1757581198.841:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053918eba9 code=0x7ffc0000 [ 247.298407][ T30] audit: type=1326 audit(1757581198.841:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8467 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0539190ac7 code=0x7ffc0000 [ 247.847453][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 247.881486][ T8507] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 247.899993][ T8506] loop6: detected capacity change from 0 to 524287999 [ 250.878926][ T25] block nbd0: Possible stuck request ffff888026840000: control (read@0,1024B). Runtime 120 seconds [ 250.890643][ T25] block nbd0: Possible stuck request ffff8880268401c0: control (read@1024,1024B). Runtime 120 seconds [ 250.890674][ T25] block nbd0: Possible stuck request ffff888026840380: control (read@2048,1024B). Runtime 120 seconds [ 250.890698][ T25] block nbd0: Possible stuck request ffff888026840540: control (read@3072,1024B). Runtime 120 seconds [ 250.981509][ T8536] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 251.100825][ T8540] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 251.108975][ T8540] netlink: 2 bytes leftover after parsing attributes in process `syz.4.642'. [ 251.113443][ T8536] batman_adv: batadv0: Adding interface: team0 [ 251.132696][ T8536] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.157823][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.639497][ T8536] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 251.691392][ T8540] team0: entered promiscuous mode [ 251.698658][ T8540] team_slave_0: entered promiscuous mode [ 251.708324][ T8540] team_slave_1: entered promiscuous mode [ 251.716531][ T8540] bond0: entered promiscuous mode [ 251.724617][ T8540] bond_slave_0: entered promiscuous mode [ 251.731512][ T8540] bond_slave_1: entered promiscuous mode [ 251.738503][ T8540] bridge_slave_1: entered promiscuous mode [ 252.285054][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 252.285070][ T30] audit: type=1400 audit(1757581204.921:557): avc: denied { getopt } for pid=8543 comm="syz.6.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 252.286698][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.372740][ T8540] batman_adv: batadv0: Interface activated: team0 [ 252.426301][ T8540] batman_adv: batadv0: Interface deactivated: team0 [ 252.456382][ T8540] batman_adv: batadv0: Removing interface: team0 [ 252.484059][ T8540] bridge0: port 2(team0) entered blocking state [ 252.511544][ T8540] bridge0: port 2(team0) entered disabled state [ 252.559783][ T8540] team0: entered allmulticast mode [ 252.578277][ T8540] team_slave_0: entered allmulticast mode [ 252.587587][ T8540] team_slave_1: entered allmulticast mode [ 252.593312][ T8540] bond0: entered allmulticast mode [ 252.604479][ T8540] bond_slave_0: entered allmulticast mode [ 252.621155][ T8540] bond_slave_1: entered allmulticast mode [ 252.630246][ T8540] bridge_slave_1: entered allmulticast mode [ 252.661978][ T8540] bridge0: port 2(team0) entered blocking state [ 252.668333][ T8540] bridge0: port 2(team0) entered forwarding state [ 252.735571][ T8558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.083914][ T30] audit: type=1400 audit(1757581206.901:558): avc: denied { append } for pid=8575 comm="syz.2.652" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 255.344912][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.369042][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.669707][ T5969] hid_parser_main: 150 callbacks suppressed [ 256.669726][ T5969] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 256.696284][ T30] audit: type=1400 audit(1757581209.481:559): avc: denied { read write } for pid=8608 comm="syz.4.660" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.800873][ T5969] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.841195][ T30] audit: type=1400 audit(1757581209.481:560): avc: denied { open } for pid=8608 comm="syz.4.660" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.864430][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.906348][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 257.276208][ T5863] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 258.958836][ T5969] libceph: connect (1)[b::]:6789 error -101 [ 258.964830][ T5969] libceph: mon0 (1)[b::]:6789 connect error [ 258.979704][ T30] audit: type=1400 audit(1757581211.801:561): avc: denied { write } for pid=8649 comm="syz.1.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.228328][ T7063] libceph: connect (1)[b::]:6789 error -101 [ 259.241878][ T7063] libceph: mon0 (1)[b::]:6789 connect error [ 259.429459][ T8651] ceph: No mds server is up or the cluster is laggy [ 259.640057][ T7063] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 259.913290][ T7063] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.941126][ T7063] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 260.370943][ T7063] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.380050][ T7063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.390455][ T7063] usb 6-1: config 0 descriptor?? [ 260.437596][ T7063] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 260.456476][ T7063] dvb-usb: bulk message failed: -22 (3/0) [ 260.481687][ T7063] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 260.529485][ T7063] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 260.540349][ T7063] usb 6-1: media controller created [ 260.555642][ T7063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.598693][ T7063] dvb-usb: bulk message failed: -22 (6/0) [ 260.646348][ T7063] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 260.675377][ T7063] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 260.732138][ T8672] ubi: mtd0 is already attached to ubi31 [ 260.763961][ T7063] dvb-usb: schedule remote query interval to 150 msecs. [ 260.806936][ T7063] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 260.981236][ T1590] dvb-usb: bulk message failed: -22 (1/0) [ 261.073995][ T1590] dvb-usb: error while querying for an remote control event. [ 261.208455][ T7096] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 261.268266][ T7063] dvb-usb: bulk message failed: -22 (1/0) [ 261.380173][ T7063] dvb-usb: error while querying for an remote control event. [ 261.482526][ T7096] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 261.493628][ T7096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.505826][ T7096] usb 2-1: Product: syz [ 261.513797][ T30] audit: type=1400 audit(1757581214.341:562): avc: denied { ioctl } for pid=8682 comm="syz.4.683" path="socket:[21419]" dev="sockfs" ino=21419 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.543854][ T7096] usb 2-1: Manufacturer: syz [ 261.552911][ T7096] usb 2-1: SerialNumber: syz [ 261.569147][ T1590] dvb-usb: bulk message failed: -22 (1/0) [ 261.574697][ T7096] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 261.597589][ T1590] dvb-usb: error while querying for an remote control event. [ 261.617069][ T30] audit: type=1400 audit(1757581214.411:563): avc: denied { firmware_load } for pid=7089 comm="kworker/1:9" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 261.673696][ T7089] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 261.822137][ T1590] dvb-usb: bulk message failed: -22 (1/0) [ 261.923928][ T1590] dvb-usb: error while querying for an remote control event. [ 262.089009][ T7063] dvb-usb: bulk message failed: -22 (1/0) [ 262.103704][ T7063] dvb-usb: error while querying for an remote control event. [ 262.281393][ T7063] dvb-usb: bulk message failed: -22 (1/0) [ 262.308104][ T7063] dvb-usb: error while querying for an remote control event. [ 262.842774][ T7063] dvb-usb: bulk message failed: -22 (1/0) [ 262.849786][ T7063] dvb-usb: error while querying for an remote control event. [ 262.882844][ T7096] usb 6-1: USB disconnect, device number 8 [ 262.905376][ T7096] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 263.067354][ T7089] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 263.271075][ T7089] ath9k_htc: Failed to initialize the device [ 263.442830][ T7089] usb 2-1: ath9k_htc: USB layer deinitialized [ 263.987264][ T8710] mkiss: ax0: crc mode is auto. [ 264.031065][ T30] audit: type=1400 audit(1757581216.831:564): avc: denied { listen } for pid=8705 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.054865][ T30] audit: type=1400 audit(1757581216.831:565): avc: denied { accept } for pid=8705 comm="syz.5.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.876561][ T7089] usb 2-1: USB disconnect, device number 18 [ 266.148478][ T8742] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.216260][ T30] audit: type=1400 audit(1757581218.961:566): avc: denied { mount } for pid=8727 comm="syz.1.697" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 266.250837][ T30] audit: type=1400 audit(1757581218.991:567): avc: denied { mounton } for pid=8727 comm="syz.1.697" path="/157/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 266.929793][ T8755] netlink: 'syz.4.705': attribute type 22 has an invalid length. [ 269.635429][ T8790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'. [ 269.736374][ T7100] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 269.831246][ T30] audit: type=1400 audit(1757581222.651:568): avc: denied { create } for pid=8791 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 269.934712][ T30] audit: type=1400 audit(1757581222.711:569): avc: denied { setopt } for pid=8791 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 269.956635][ T7100] usb 2-1: device descriptor read/64, error -71 [ 270.013027][ T8793] netlink: 204 bytes leftover after parsing attributes in process `syz.4.716'. [ 270.171289][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.186443][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.204173][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.212719][ T7100] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 270.220724][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.236365][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.254264][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.274463][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.282124][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.289756][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.298502][ T7089] hid-generic 0002:10008:0003.0006: unknown main item tag 0x0 [ 270.317234][ T7089] hid-generic 0002:10008:0003.0006: hidraw0: HID v200.05 Device [sy] on syz0 [ 270.376316][ T7100] usb 2-1: device descriptor read/64, error -71 [ 270.433712][ T8795] fido_id[8795]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.451028][ T8797] syzkaller1: entered promiscuous mode [ 270.456756][ T8797] syzkaller1: entered allmulticast mode [ 270.506752][ T7100] usb usb2-port1: attempt power cycle [ 270.844132][ T8804] netlink: 'syz.4.719': attribute type 29 has an invalid length. [ 270.852050][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 270.873201][ T7100] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 271.328504][ T7100] usb 2-1: device descriptor read/8, error -71 [ 271.850497][ T7094] libceph: connect (1)[c::]:6789 error -101 [ 271.883765][ T7094] libceph: mon0 (1)[c::]:6789 connect error [ 271.893643][ T7089] libceph: connect (1)[b::]:6789 error -101 [ 271.914261][ T8799] ceph: No mds server is up or the cluster is laggy [ 271.924086][ T8800] ceph: No mds server is up or the cluster is laggy [ 271.940459][ T7089] libceph: mon0 (1)[b::]:6789 connect error [ 271.966556][ T7100] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 272.076821][ T7100] usb 2-1: device descriptor read/8, error -71 [ 272.188445][ T7100] usb usb2-port1: unable to enumerate USB device [ 272.326127][ T30] audit: type=1400 audit(1757581225.061:570): avc: denied { mount } for pid=8816 comm="syz.5.722" name="/" dev="rpc_pipefs" ino=22426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 272.349124][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.071748][ T8836] sctp: [Deprecated]: syz.5.727 (pid 8836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.071748][ T8836] Use struct sctp_sack_info instead [ 274.986371][ T7063] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 275.419830][ T7063] usb 6-1: Using ep0 maxpacket: 8 [ 275.455510][ T7063] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.484347][ T7063] usb 6-1: config 0 has no interfaces? [ 275.502352][ T7063] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 275.518290][ T7063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.539060][ T7063] usb 6-1: Product: syz [ 275.550489][ T7063] usb 6-1: Manufacturer: syz [ 275.566110][ T7063] usb 6-1: SerialNumber: syz [ 275.592472][ T7063] usb 6-1: config 0 descriptor?? [ 275.878183][ T8871] netlink: 176 bytes leftover after parsing attributes in process `syz.5.732'. [ 275.887511][ T8871] ip6gretap0: entered promiscuous mode [ 275.895886][ T8871] netlink: 176 bytes leftover after parsing attributes in process `syz.5.732'. [ 276.596354][ T7089] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 276.869860][ T7089] usb 3-1: Using ep0 maxpacket: 8 [ 276.882443][ T7089] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.902360][ T7089] usb 3-1: config 0 has no interfaces? [ 276.913095][ T7089] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 276.928403][ T7089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.962975][ T7089] usb 3-1: Product: syz [ 276.967326][ T7089] usb 3-1: Manufacturer: syz [ 276.972086][ T7089] usb 3-1: SerialNumber: syz [ 276.985792][ T7089] usb 3-1: config 0 descriptor?? [ 277.664024][ T5969] usb 6-1: USB disconnect, device number 9 [ 277.951444][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 278.627817][ T8905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.646780][ T8905] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 279.188163][ T5969] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 279.347544][ T5969] usb 6-1: Using ep0 maxpacket: 8 [ 279.358606][ T5969] usb 6-1: unable to get BOS descriptor or descriptor too short [ 279.372646][ T7092] usb 3-1: USB disconnect, device number 29 [ 279.375661][ T5969] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 279.800910][ T5969] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 279.811091][ T5969] usb 6-1: config 4 has no interface number 0 [ 279.819547][ T5969] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 279.828815][ T5969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.853474][ T5969] usb 6-1: Product: syz [ 279.858455][ T5969] usb 6-1: Manufacturer: syz [ 279.863060][ T5969] usb 6-1: SerialNumber: syz [ 280.105998][ T5969] uvcvideo 6-1:4.147: probe with driver uvcvideo failed with error -22 [ 280.118016][ T5969] usb 6-1: USB disconnect, device number 10 [ 280.836447][ T5864] Bluetooth: hci5: command 0x040f tx timeout [ 280.913334][ T25] block nbd0: Possible stuck request ffff888026840000: control (read@0,1024B). Runtime 150 seconds [ 280.929664][ T25] block nbd0: Possible stuck request ffff8880268401c0: control (read@1024,1024B). Runtime 150 seconds [ 280.941047][ T25] block nbd0: Possible stuck request ffff888026840380: control (read@2048,1024B). Runtime 150 seconds [ 280.953799][ T25] block nbd0: Possible stuck request ffff888026840540: control (read@3072,1024B). Runtime 150 seconds [ 280.986344][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.056304][ T7092] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 281.229795][ T7092] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.245570][ T7092] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 281.265040][ T7092] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 281.315009][ T7092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.435493][ T7092] usb 2-1: config 0 descriptor?? [ 281.453202][ T7092] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 281.467139][ T7092] dvb-usb: bulk message failed: -22 (3/0) [ 281.509202][ T7092] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 281.558726][ T7092] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 281.589064][ T7092] usb 2-1: media controller created [ 281.607833][ T7092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.737238][ T7092] dvb-usb: bulk message failed: -22 (6/0) [ 281.743109][ T7092] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 281.758980][ T7092] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 281.780171][ T51] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 281.817036][ T7092] dvb-usb: schedule remote query interval to 150 msecs. [ 281.824068][ T7092] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 281.995437][ T7092] dvb-usb: bulk message failed: -22 (1/0) [ 282.120508][ T7092] dvb-usb: error while querying for an remote control event. [ 282.202860][ T30] audit: type=1326 audit(1757581234.811:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.263544][ T30] audit: type=1326 audit(1757581234.811:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.288222][ T7092] dvb-usb: bulk message failed: -22 (1/0) [ 282.329233][ T7092] dvb-usb: error while querying for an remote control event. [ 282.338997][ T30] audit: type=1326 audit(1757581234.811:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.363960][ T30] audit: type=1326 audit(1757581234.811:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.516559][ T7092] dvb-usb: bulk message failed: -22 (1/0) [ 282.522319][ T7092] dvb-usb: error while querying for an remote control event. [ 282.681904][ T30] audit: type=1326 audit(1757581234.811:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.796595][ T30] audit: type=1326 audit(1757581234.811:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.825712][ T8960] FAULT_INJECTION: forcing a failure. [ 282.825712][ T8960] name failslab, interval 1, probability 0, space 0, times 0 [ 282.851354][ T8960] CPU: 1 UID: 0 PID: 8960 Comm: syz.5.764 Not tainted syzkaller #0 PREEMPT(full) [ 282.851378][ T8960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.851394][ T8960] Call Trace: [ 282.851400][ T8960] [ 282.851407][ T8960] dump_stack_lvl+0x16c/0x1f0 [ 282.851434][ T8960] should_fail_ex+0x512/0x640 [ 282.851456][ T8960] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 282.851479][ T8960] should_failslab+0xc2/0x120 [ 282.851498][ T8960] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 282.851516][ T8960] ? __alloc_skb+0x2b2/0x380 [ 282.851541][ T8960] __alloc_skb+0x2b2/0x380 [ 282.851560][ T8960] ? __pfx___alloc_skb+0x10/0x10 [ 282.851578][ T8960] ? __pfx___mutex_trylock_common+0x10/0x10 [ 282.851609][ T8960] ? __pfx___might_resched+0x10/0x10 [ 282.851636][ T8960] netlink_dump+0x19b/0xd30 [ 282.851661][ T8960] ? __pfx_netlink_dump+0x10/0x10 [ 282.851703][ T8960] __netlink_dump_start+0x6d6/0x990 [ 282.851728][ T8960] ? __pfx_tc_dump_chain+0x10/0x10 [ 282.851751][ T8960] rtnetlink_rcv_msg+0xb3e/0xe90 [ 282.851773][ T8960] ? __pfx_tc_dump_chain+0x10/0x10 [ 282.851796][ T8960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.851819][ T8960] ? __pfx_rtnl_dumpit+0x10/0x10 [ 282.851835][ T8960] ? __pfx_tc_dump_chain+0x10/0x10 [ 282.851861][ T8960] ? ref_tracker_free+0x37c/0x830 [ 282.851888][ T8960] netlink_rcv_skb+0x155/0x420 [ 282.851910][ T8960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 282.851934][ T8960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 282.851967][ T8960] ? netlink_deliver_tap+0x1ae/0xd30 [ 282.851992][ T8960] netlink_unicast+0x5aa/0x870 [ 282.852017][ T8960] ? __pfx_netlink_unicast+0x10/0x10 [ 282.852037][ T8960] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 282.852064][ T8960] netlink_sendmsg+0x8d1/0xdd0 [ 282.852087][ T8960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.852119][ T8960] ____sys_sendmsg+0xa98/0xc70 [ 282.852146][ T8960] ? copy_msghdr_from_user+0x10a/0x160 [ 282.852167][ T8960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 282.852205][ T8960] ___sys_sendmsg+0x134/0x1d0 [ 282.852229][ T8960] ? __pfx____sys_sendmsg+0x10/0x10 [ 282.852284][ T8960] __sys_sendmsg+0x16d/0x220 [ 282.852306][ T8960] ? __pfx___sys_sendmsg+0x10/0x10 [ 282.852343][ T8960] do_syscall_64+0xcd/0x4c0 [ 282.852370][ T8960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.852393][ T8960] RIP: 0033:0x7f292058eba9 [ 282.852408][ T8960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.852424][ T8960] RSP: 002b:00007f2921395038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.852441][ T8960] RAX: ffffffffffffffda RBX: 00007f29207d5fa0 RCX: 00007f292058eba9 [ 282.852452][ T8960] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000006 [ 282.852462][ T8960] RBP: 00007f2921395090 R08: 0000000000000000 R09: 0000000000000000 [ 282.852472][ T8960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.852481][ T8960] R13: 00007f29207d6038 R14: 00007f29207d5fa0 R15: 00007ffc9146bb68 [ 282.852505][ T8960] [ 282.855962][ T30] audit: type=1326 audit(1757581234.811:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.926809][ T51] Bluetooth: hci5: command 0x040f tx timeout [ 282.927536][ T7100] dvb-usb: bulk message failed: -22 (1/0) [ 282.935223][ T30] audit: type=1326 audit(1757581234.811:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 282.937176][ T7100] dvb-usb: error while querying for an remote control event. [ 283.216840][ T7100] dvb-usb: bulk message failed: -22 (1/0) [ 283.222598][ T7100] dvb-usb: error while querying for an remote control event. [ 283.231252][ T30] audit: type=1326 audit(1757581234.811:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 283.254515][ T30] audit: type=1326 audit(1757581234.811:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.4.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efca278eba9 code=0x7ffc0000 [ 283.389692][ T7100] dvb-usb: bulk message failed: -22 (1/0) [ 283.395546][ T7100] dvb-usb: error while querying for an remote control event. [ 283.556638][ T7100] dvb-usb: bulk message failed: -22 (1/0) [ 283.562379][ T7100] dvb-usb: error while querying for an remote control event. [ 284.028874][ T7100] dvb-usb: bulk message failed: -22 (1/0) [ 284.039846][ T7100] dvb-usb: error while querying for an remote control event. [ 284.066463][ T7063] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 284.093506][ T7100] usb 2-1: USB disconnect, device number 23 [ 284.144579][ T7100] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 284.238160][ T7063] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.246562][ T7063] usb 6-1: config 0 has no interface number 0 [ 284.316549][ T7063] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.337410][ T7063] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.472174][ T7063] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 284.596720][ T7063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.779516][ T7063] usb 6-1: config 0 descriptor?? [ 284.964642][ T8979] ubi: mtd0 is already attached to ubi31 [ 285.048537][ T8971] netlink: 'syz.2.767': attribute type 10 has an invalid length. [ 285.059154][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.067179][ T8971] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 285.362902][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.374294][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.659024][ T7063] prodikeys 0003:041E:2801.0007: item fetching failed at offset 5/7 [ 285.691408][ T7063] prodikeys 0003:041E:2801.0007: hid parse failed [ 285.706127][ T7063] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 285.716464][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.773'. [ 285.727329][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 287.035186][ T7063] usb 6-1: USB disconnect, device number 11 [ 288.506662][ T7094] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 288.514355][ T5864] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.863240][ T7094] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 288.881302][ T9035] netlink: 'syz.1.790': attribute type 4 has an invalid length. [ 288.896762][ T7094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.908031][ T9036] ubi: mtd0 is already attached to ubi31 [ 288.923006][ T7094] usb 3-1: Product: syz [ 288.927583][ T7094] usb 3-1: Manufacturer: syz [ 288.937421][ T7094] usb 3-1: SerialNumber: syz [ 288.951800][ T7094] usb 3-1: config 0 descriptor?? [ 288.958896][ T7094] hub 3-1:0.0: bad descriptor, ignoring hub [ 289.002385][ T7094] hub 3-1:0.0: probe with driver hub failed with error -5 [ 289.011492][ T7094] f81232 3-1:0.0: f81534a converter detected [ 289.215606][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'. [ 289.282866][ T9021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.334802][ T9021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.813828][ T7094] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 289.823258][ T7094] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 289.865529][ T7094] usb 3-1: USB disconnect, device number 30 [ 289.883526][ T7094] f81232 3-1:0.0: device disconnected [ 291.834845][ T9073] block nbd5: Attempted send on invalid socket [ 291.843014][ T9073] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.864325][ T9073] block nbd5: Attempted send on invalid socket [ 291.896418][ T9073] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.916429][ T7094] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 292.001676][ T9073] Mount JFS Failure: -5 [ 292.125092][ T7094] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.179393][ T9076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=20684 sclass=netlink_tcpdiag_socket pid=9076 comm=syz.5.804 [ 292.403455][ T7094] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 292.414267][ T7094] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.426130][ T7094] usb 2-1: config 0 descriptor?? [ 292.747971][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.013063][ T9065] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 293.308431][ T7094] hid_parser_main: 18 callbacks suppressed [ 293.308451][ T7094] razer 0003:1532:010E.0008: unknown main item tag 0x1 [ 293.891343][ T9065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 293.900195][ T9065] overlayfs: missing 'lowerdir' [ 293.915155][ T7094] razer 0003:1532:010E.0008: failed to enable macro keys: -71 [ 293.936282][ T5969] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 293.978615][ T7094] razer 0003:1532:010E.0008: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 294.036371][ T7096] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 294.075195][ T7094] usb 2-1: USB disconnect, device number 24 [ 294.091021][ T5969] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.101381][ T5969] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.191926][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 294.191936][ T30] audit: type=1400 audit(1757581247.011:616): avc: denied { create } for pid=9102 comm="syz.4.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.218337][ T5969] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 294.226173][ T7096] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.250976][ T5969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.251080][ T7096] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 294.279994][ T5969] usb 6-1: config 0 descriptor?? [ 294.289793][ T7096] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 294.304136][ T5969] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 294.311971][ T5969] dvb-usb: bulk message failed: -22 (3/0) [ 294.314877][ T7096] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.343727][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 294.362860][ T5969] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 294.375552][ T5969] usb 6-1: media controller created [ 294.387758][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.411644][ T7096] usb 3-1: config 0 descriptor?? [ 294.441170][ T5969] dvb-usb: bulk message failed: -22 (6/0) [ 294.449421][ T5969] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 294.457375][ T7096] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 294.480093][ T7096] dvb-usb: bulk message failed: -22 (3/0) [ 294.501969][ T7096] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 294.533774][ T7096] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 294.555878][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 294.585064][ T7096] usb 3-1: media controller created [ 294.659840][ T5969] dvb-usb: schedule remote query interval to 150 msecs. [ 294.686737][ T7096] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.700895][ T5969] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 294.735016][ T7096] dvb-usb: bulk message failed: -22 (6/0) [ 294.744804][ T7096] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 294.778429][ T7096] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 294.836520][ T7096] dvb-usb: schedule remote query interval to 150 msecs. [ 294.843667][ T7096] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 294.856497][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 294.866010][ T5969] dvb-usb: error while querying for an remote control event. [ 295.018350][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 295.024080][ T7096] dvb-usb: error while querying for an remote control event. [ 295.096534][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 295.109268][ T5969] dvb-usb: error while querying for an remote control event. [ 295.189991][ T7089] dvb-usb: bulk message failed: -22 (1/0) [ 295.197969][ T7089] dvb-usb: error while querying for an remote control event. [ 295.276426][ T7062] dvb-usb: bulk message failed: -22 (1/0) [ 295.286263][ T7062] dvb-usb: error while querying for an remote control event. [ 295.366866][ T7089] dvb-usb: bulk message failed: -22 (1/0) [ 295.372748][ T7089] dvb-usb: error while querying for an remote control event. [ 295.470293][ T7062] dvb-usb: bulk message failed: -22 (1/0) [ 295.477767][ T7062] dvb-usb: error while querying for an remote control event. [ 295.536340][ T7089] dvb-usb: bulk message failed: -22 (1/0) [ 295.542142][ T7089] dvb-usb: error while querying for an remote control event. [ 295.636277][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 295.642063][ T5969] dvb-usb: error while querying for an remote control event. [ 295.718965][ T9117] ubi: mtd0 is already attached to ubi31 [ 295.746382][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 295.752242][ T7096] dvb-usb: error while querying for an remote control event. [ 295.806674][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 295.812540][ T5969] dvb-usb: error while querying for an remote control event. [ 295.916425][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 295.922224][ T7096] dvb-usb: error while querying for an remote control event. [ 295.976419][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 295.990087][ T5969] dvb-usb: error while querying for an remote control event. [ 296.122869][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 296.128830][ T7096] dvb-usb: error while querying for an remote control event. [ 296.195004][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 296.200804][ T5969] dvb-usb: error while querying for an remote control event. [ 296.342718][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 296.349810][ T7096] dvb-usb: error while querying for an remote control event. [ 296.366363][ T5969] dvb-usb: bulk message failed: -22 (1/0) [ 296.396269][ T5969] dvb-usb: error while querying for an remote control event. [ 296.486837][ T5969] usb 6-1: USB disconnect, device number 12 [ 296.526336][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 296.535837][ T7096] dvb-usb: error while querying for an remote control event. [ 296.711395][ T5969] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 296.722904][ T7062] usb 3-1: USB disconnect, device number 31 [ 297.084648][ T7096] dvb-usb: bulk message failed: -22 (1/0) [ 297.096282][ T7096] dvb-usb: error while querying for an remote control event. [ 297.159007][ T7062] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 297.976730][ T30] audit: type=1326 audit(1757581250.771:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 297.999956][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.123146][ T30] audit: type=1326 audit(1757581250.771:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123188][ T30] audit: type=1326 audit(1757581250.771:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123220][ T30] audit: type=1326 audit(1757581250.781:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123252][ T30] audit: type=1326 audit(1757581250.781:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123286][ T30] audit: type=1326 audit(1757581250.781:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123324][ T30] audit: type=1326 audit(1757581250.781:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123358][ T30] audit: type=1326 audit(1757581250.781:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.123388][ T30] audit: type=1326 audit(1757581250.781:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9133 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 298.829803][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.875777][ T7096] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 299.026932][ T7096] usb 2-1: Using ep0 maxpacket: 8 [ 299.148835][ T7096] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 299.168473][ T7096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.176762][ T7096] usb 2-1: Product: syz [ 299.181052][ T7096] usb 2-1: Manufacturer: syz [ 299.185615][ T7096] usb 2-1: SerialNumber: syz [ 299.636456][ T7096] usb 2-1: config 0 descriptor?? [ 299.686544][ T7096] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 299.820950][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 299.820964][ T30] audit: type=1400 audit(1757581252.641:631): avc: denied { read } for pid=9152 comm="syz.2.826" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 299.831336][ T9153] 9pnet_fd: Insufficient options for proto=fd [ 299.851355][ T30] audit: type=1400 audit(1757581252.641:632): avc: denied { open } for pid=9152 comm="syz.2.826" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 299.891833][ T30] audit: type=1400 audit(1757581252.651:633): avc: denied { write } for pid=9152 comm="syz.2.826" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 299.933675][ T30] audit: type=1400 audit(1757581252.741:634): avc: denied { remount } for pid=9152 comm="syz.2.826" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 300.013355][ T30] audit: type=1400 audit(1757581252.831:635): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 300.179078][ T9157] ubi: mtd0 is already attached to ubi31 [ 300.294441][ T5863] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 301.025050][ T9173] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 301.121422][ T30] audit: type=1326 audit(1757581253.901:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 301.388381][ T7096] gspca_sonixj: reg_w1 err -110 [ 301.393320][ T7096] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 301.420838][ T30] audit: type=1326 audit(1757581253.911:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 301.450374][ T30] audit: type=1326 audit(1757581253.921:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 301.508543][ T30] audit: type=1326 audit(1757581253.921:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 301.532292][ T30] audit: type=1326 audit(1757581253.921:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9140 comm="syz.1.822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5bf8eba9 code=0x7ffc0000 [ 302.114680][ T9180] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 302.529325][ T7062] usb 2-1: USB disconnect, device number 25 [ 302.732275][ T9194] ubi: mtd0 is already attached to ubi31 [ 302.805837][ T9195] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 303.915306][ T5863] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 303.935086][ T9204] tipc: Enabling of bearer rejected, failed to enable media [ 303.950011][ T31] INFO: task syz.3.265:7045 blocked for more than 143 seconds. [ 303.973227][ T31] Not tainted syzkaller #0 [ 303.981342][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.993293][ T31] task:syz.3.265 state:D stack:27096 pid:7045 tgid:7044 ppid:5853 task_flags:0x400140 flags:0x00004004 [ 304.008092][ T31] Call Trace: [ 304.012062][ T31] [ 304.015085][ T31] __schedule+0x1190/0x5de0 [ 304.021998][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 304.030675][ T31] ? __pfx___schedule+0x10/0x10 [ 304.036028][ T31] ? find_held_lock+0x2b/0x80 [ 304.042874][ T31] ? schedule+0x2d7/0x3a0 [ 304.050448][ T31] ? sync_bdevs+0xfd/0x360 [ 304.054931][ T31] schedule+0xe7/0x3a0 [ 304.060278][ T31] schedule_preempt_disabled+0x13/0x30 [ 304.071424][ T31] __mutex_lock+0x81b/0x1060 [ 304.076045][ T31] ? sync_bdevs+0xfd/0x360 [ 304.081836][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 304.089114][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 304.095531][ T31] ? iput+0xd3/0x880 [ 304.101082][ T31] ? sync_bdevs+0xfd/0x360 [ 304.108680][ T31] sync_bdevs+0xfd/0x360 [ 304.114095][ T31] ksys_sync+0xb2/0x150 [ 304.120635][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 304.160866][ T31] ? rcu_is_watching+0x12/0xc0 [ 304.168560][ T31] ? do_syscall_64+0x91/0x4c0 [ 304.174363][ T31] __do_sys_sync+0xe/0x20 [ 304.181639][ T31] do_syscall_64+0xcd/0x4c0 [ 304.192797][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.199482][ T31] RIP: 0033:0x7f52b7f8eba9 [ 304.204621][ T31] RSP: 002b:00007f52b8de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 304.213425][ T31] RAX: ffffffffffffffda RBX: 00007f52b81d5fa0 RCX: 00007f52b7f8eba9 [ 304.221800][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.229974][ T31] RBP: 00007f52b81d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 304.238129][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.246229][ T31] R13: 00007f52b81d6038 R14: 00007f52b81d5fa0 R15: 00007fff362047f8 [ 304.254244][ T31] [ 304.257529][ T31] INFO: task syz.0.304:7209 blocked for more than 143 seconds. [ 304.265116][ T31] Not tainted syzkaller #0 [ 304.270550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.279410][ T31] task:syz.0.304 state:D stack:27144 pid:7209 tgid:7208 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 304.291563][ T31] Call Trace: [ 304.294843][ T31] [ 304.302318][ T31] __schedule+0x1190/0x5de0 [ 304.307100][ T31] ? __pfx___schedule+0x10/0x10 [ 304.311982][ T31] ? find_held_lock+0x2b/0x80 [ 304.316942][ T31] ? schedule+0x2d7/0x3a0 [ 304.321272][ T31] ? bdev_open+0x41a/0xe40 [ 304.325663][ T31] schedule+0xe7/0x3a0 [ 304.329751][ T31] schedule_preempt_disabled+0x13/0x30 [ 304.335204][ T31] __mutex_lock+0x81b/0x1060 [ 304.339849][ T31] ? bdev_open+0x41a/0xe40 [ 304.344267][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 304.349403][ T31] ? __pfx_ilookup+0x10/0x10 [ 304.353998][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 304.359389][ T31] ? bdev_open+0x41a/0xe40 [ 304.363813][ T31] bdev_open+0x41a/0xe40 [ 304.368118][ T31] blkdev_open+0x34e/0x4f0 [ 304.372534][ T31] do_dentry_open+0x982/0x1530 [ 304.377439][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 304.382381][ T31] vfs_open+0x82/0x3f0 [ 304.386503][ T31] path_openat+0x1de4/0x2cb0 [ 304.391108][ T31] ? __pfx_path_openat+0x10/0x10 [ 304.396038][ T31] do_filp_open+0x20b/0x470 [ 304.400626][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 304.405671][ T31] ? alloc_fd+0x471/0x7d0 [ 304.410026][ T31] do_sys_openat2+0x11b/0x1d0 [ 304.414702][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.419978][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 304.425444][ T31] __x64_sys_openat+0x174/0x210 [ 304.430359][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.435734][ T31] do_syscall_64+0xcd/0x4c0 [ 304.440301][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.446185][ T31] RIP: 0033:0x7fa2ba38d510 [ 304.450661][ T31] RSP: 002b:00007fa2bb2dbb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 304.459169][ T31] RAX: ffffffffffffffda RBX: 0000000000068000 RCX: 00007fa2ba38d510 [ 304.467183][ T31] RDX: 0000000000068000 RSI: 00007fa2bb2dbc10 RDI: 00000000ffffff9c [ 304.475168][ T31] RBP: 00007fa2bb2dbc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 304.483198][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 304.491238][ T31] R13: 00007fa2ba5d6038 R14: 00007fa2ba5d5fa0 R15: 00007ffeec7c3998 [ 304.499303][ T31] [ 304.502383][ T31] [ 304.502383][ T31] Showing all locks held in the system: [ 304.533641][ T31] 2 locks held by kworker/u8:1/13: [ 304.539588][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 304.551056][ T31] #1: ffffc90000127d10 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 304.561683][ T31] 1 lock held by khungtaskd/31: [ 304.566664][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 304.577524][ T31] 2 locks held by kworker/u8:3/49: [ 304.593550][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 304.603854][ T31] #1: ffffc90000b97d10 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 304.614479][ T31] 2 locks held by getty/5608: [ 304.619342][ T31] #0: ffff88814d5c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 304.629204][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 304.639510][ T31] 1 lock held by udevd/5859: [ 304.644115][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 304.654160][ T31] 3 locks held by kworker/u8:9/6006: [ 304.659510][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 304.671207][ T31] #1: ffffc9000482fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 304.681669][ T31] #2: ffffffff90384c48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 304.691059][ T31] 1 lock held by udevd/6681: [ 304.695697][ T31] #0: ffff88802667b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 304.706128][ T31] 1 lock held by syz.3.265/7045: [ 304.712402][ T31] #0: ffff88802667b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 304.721919][ T31] 1 lock held by syz.0.304/7209: [ 304.728012][ T31] #0: ffff88802667b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 304.738399][ T31] 2 locks held by syz.2.842/9203: [ 304.743414][ T31] #0: ffffffff90384c48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 304.752559][ T31] #1: ffffffff8e5cc7f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 304.762734][ T31] [ 304.765054][ T31] ============================================= [ 304.765054][ T31] [ 304.774367][ T31] NMI backtrace for cpu 1 [ 304.774381][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 304.774400][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.774410][ T31] Call Trace: [ 304.774415][ T31] [ 304.774422][ T31] dump_stack_lvl+0x116/0x1f0 [ 304.774449][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 304.774464][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 304.774485][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 304.774513][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 304.774532][ T31] watchdog+0xf0e/0x1260 [ 304.774554][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.774572][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.774594][ T31] ? __kthread_parkme+0x19e/0x250 [ 304.774620][ T31] ? __pfx_watchdog+0x10/0x10 [ 304.774637][ T31] kthread+0x3c2/0x780 [ 304.774655][ T31] ? __pfx_kthread+0x10/0x10 [ 304.774673][ T31] ? rcu_is_watching+0x12/0xc0 [ 304.774694][ T31] ? __pfx_kthread+0x10/0x10 [ 304.774712][ T31] ret_from_fork+0x5d4/0x6f0 [ 304.774729][ T31] ? __pfx_kthread+0x10/0x10 [ 304.774746][ T31] ret_from_fork_asm+0x1a/0x30 [ 304.774777][ T31] [ 304.774782][ T31] Sending NMI from CPU 1 to CPUs 0: [ 304.899052][ C0] NMI backtrace for cpu 0 [ 304.899066][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 304.899082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.899090][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 304.899110][ C0] Code: bc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 a3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 304.899123][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 304.899134][ C0] RAX: 0000000000e4fafb RBX: 0000000000000000 RCX: ffffffff8b946c29 [ 304.899143][ C0] RDX: 0000000000000000 RSI: ffffffff8de52620 RDI: ffffffff8c162d80 [ 304.899151][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 304.899159][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 304.899167][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6d90 R15: 0000000000000000 [ 304.899176][ C0] FS: 0000000000000000(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 304.899190][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.899198][ C0] CR2: 00007fff88261ea8 CR3: 000000007efa3000 CR4: 00000000003526f0 [ 304.899206][ C0] Call Trace: [ 304.899210][ C0] [ 304.899215][ C0] default_idle+0x13/0x20 [ 304.899233][ C0] default_idle_call+0x6d/0xb0 [ 304.899250][ C0] do_idle+0x391/0x510 [ 304.899267][ C0] ? __pfx_do_idle+0x10/0x10 [ 304.899282][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 304.899298][ C0] cpu_startup_entry+0x4f/0x60 [ 304.899312][ C0] rest_init+0x16b/0x2b0 [ 304.899329][ C0] ? acpi_subsystem_init+0x133/0x180 [ 304.899344][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 304.899361][ C0] start_kernel+0x3ee/0x4d0 [ 304.899376][ C0] x86_64_start_reservations+0x18/0x30 [ 304.899391][ C0] x86_64_start_kernel+0x130/0x190 [ 304.899406][ C0] common_startup_64+0x13e/0x148 [ 304.899424][ C0] [ 304.900756][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 305.096531][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 305.105620][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.115655][ T31] Call Trace: [ 305.118915][ T31] [ 305.121826][ T31] dump_stack_lvl+0x3d/0x1f0 [ 305.126408][ T31] vpanic+0x6e8/0x7a0 [ 305.130386][ T31] ? __pfx_vpanic+0x10/0x10 [ 305.134874][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 305.140842][ T31] panic+0xca/0xd0 [ 305.144547][ T31] ? __pfx_panic+0x10/0x10 [ 305.148945][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 305.154304][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 305.160435][ T31] ? watchdog+0xd78/0x1260 [ 305.164832][ T31] ? watchdog+0xd6b/0x1260 [ 305.169227][ T31] watchdog+0xd89/0x1260 [ 305.173449][ T31] ? __pfx_watchdog+0x10/0x10 [ 305.178103][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.183282][ T31] ? __kthread_parkme+0x19e/0x250 [ 305.188291][ T31] ? __pfx_watchdog+0x10/0x10 [ 305.192953][ T31] kthread+0x3c2/0x780 [ 305.197002][ T31] ? __pfx_kthread+0x10/0x10 [ 305.201570][ T31] ? rcu_is_watching+0x12/0xc0 [ 305.206319][ T31] ? __pfx_kthread+0x10/0x10 [ 305.210886][ T31] ret_from_fork+0x5d4/0x6f0 [ 305.215452][ T31] ? __pfx_kthread+0x10/0x10 [ 305.220018][ T31] ret_from_fork_asm+0x1a/0x30 [ 305.224774][ T31] [ 305.227980][ T31] Kernel Offset: disabled [ 305.232276][ T31] Rebooting in 86400 seconds..