last executing test programs: 2m36.525990954s ago: executing program 1 (id=993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x29fb) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1, {[0xa4]}}, 0x5c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0xc03d1a3552b56c2f) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x4feff, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 2m35.661801304s ago: executing program 1 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000cd32ff0195"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x6, 0x506, {{0x12, 0x4, 0x2, 0x2b, 0x48, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@generic={0x86, 0x2}, @ssrr={0x89, 0x7, 0xb, [@local]}, @end, @rr={0x7, 0xb, 0x62, [@broadcast, @local]}, @ssrr={0x89, 0x1f, 0xb5, [@broadcast, @local, @remote, @multicast1, @empty, @remote, @empty]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x7}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2f0000000500000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4004804) r7 = fsmount(0xffffffffffffffff, 0x0, 0xf1) setpgid(r1, 0x0) fspick(r7, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xfffffffffffff6ff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x70335, 0x51a23}, [@IFLA_CARRIER={0x5, 0x21, 0x17}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000040) 2m32.575077097s ago: executing program 1 (id=1008): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0x70bd3d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x40000c9}, 0x240290c0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r1, 0x0, 0x100000000000000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000006301240000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$hiddev(r4, &(0x7f0000000340)=""/237, 0xed) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000440)={0x7b06, r4, 'id0\x00'}) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x4, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x884) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x18) getgroups(0x16, 0xfffffffffffffffe) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r8 = syz_open_dev$vcsu(&(0x7f0000000040), 0x8000000000000001, 0x8302) sendmmsg$unix(r8, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040055}}], 0x1, 0x2004c800) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000800) 2m30.422198533s ago: executing program 1 (id=1013): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x16f600, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="030303000000fddbdf253d0000002ef9b721e7c2b5df77b9b89aa6be2e0645c9f2d3898d506feb446fe1ae3b345d5cd48847eca95edba78bdd4464aa9c8cc6e6196e5ded8f86d17efc04901929d379f8e83e7b2028fa3d43a67017c71d2334cad85eb11ef324d15e3fdc204078014101d004d9bfa2ed80faed3df1bdf9"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200", 0x802042, 0x200068e}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d6ad4", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m29.522505152s ago: executing program 1 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300, 0x1000000}, 0x0) 2m29.270503836s ago: executing program 1 (id=1018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800e8ff1000010029bd00"/20, @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000014001680100001800c000500ffffffffff0f0000"], 0x48}}, 0x32e533a5332cd502) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = io_uring_setup(0x1148, &(0x7f0000000240)={0x0, 0xc95e, 0x1, 0x21, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x2c47f4, 0x5c8, 0x80000003, 0x6}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ce7600", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYBLOB="0300000005000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1e, &(0x7f00000002c0)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xb}], 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x21880, 0x58, '\x00', 0x0, @fallback=0xb, r5, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0xe61}, 0x10, r9, r5}, 0x94) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r10 = memfd_secret(0x80000) ftruncate(r10, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 2m13.909755471s ago: executing program 32 (id=1018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800e8ff1000010029bd00"/20, @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000014001680100001800c000500ffffffffff0f0000"], 0x48}}, 0x32e533a5332cd502) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r4 = io_uring_setup(0x1148, &(0x7f0000000240)={0x0, 0xc95e, 0x1, 0x21, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x2c47f4, 0x5c8, 0x80000003, 0x6}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ce7600", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYBLOB="0300000005000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1e, &(0x7f00000002c0)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xb}], 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x21880, 0x58, '\x00', 0x0, @fallback=0xb, r5, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0xe61}, 0x10, r9, r5}, 0x94) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r10 = memfd_secret(0x80000) ftruncate(r10, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0xffffd000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) 12.289026251s ago: executing program 4 (id=1400): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x54214bed}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000e4ffffff000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) socket(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) socket$netlink(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0xc2, 0x0, 0x7fff0005}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="021417c7220e734750b8d2256ce6df1000000004000000050000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7ffffb}, 0x8) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000340)="a59f9448b45c9d16c360ec687641e95db47ddae8c7b8475eacba3a77925b9215bbe52fc4a16fabd4a41023c486f80f5d08757808fba629a1820f38f7ad952190c0311b250aafa8669027c8dd01d954b31826b9108beb0863a3916c4eddde08254547c3796ce9e4a707a3b441beef57d5900f8b02a8bfe6cd496c9fb7a955f4f39557d1b99d9c91e4cb46fd15bee5bace4d6047465ab5ef47016db6b3efb92872e61b601f652b1f0bcc473c27ed5efdc014796667840a8c681869475ac7e9683b1db5", 0xc2}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 10.040786709s ago: executing program 2 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000680)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) (async) syz_usb_connect(0x0, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001ed472082a110500a81401020301090236000100000000090400", @ANYRES16=0x0], 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x3e) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB]) mount$tmpfs(0x0, 0x0, 0x0, 0x2b00ad, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x16, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0}, 0x40) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="1e", @ANYBLOB, @ANYRES32, @ANYRES64=r6], 0x20) (async) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/39, 0x27}], 0x1, 0x0, 0xfffffffd) (async) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)) 10.036655874s ago: executing program 5 (id=1405): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x16f600, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200", 0x802042, 0x200068e}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d6ad4", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.772968897s ago: executing program 2 (id=1406): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0xfe8a, 0x0, 0x1}, 0x28) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x4d) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r5, &(0x7f00000000c0)=""/68, 0x44) getdents64(r5, &(0x7f0000001f80)=""/4111, 0x100f) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 8.672484138s ago: executing program 5 (id=1408): mkdir(&(0x7f0000000100)='./bus\x00', 0x3eb) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = syz_open_dev$media(&(0x7f0000000280), 0x5, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r4, 0xc1007c00, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x43) lsetxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300), &(0x7f0000000100), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sched_setscheduler(0x0, 0x2, 0x0) 8.450963751s ago: executing program 0 (id=1409): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x16f600, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030303000000fddbdf253d0000002ef9b721e7c2b5df77b9b89aa6be2e0645c9f2d3898d506feb446fe1ae3b345d5cd48847eca95edba78bdd4464aa9c8cc6e6196e5ded8f86d17efc04901929d379f8e83e7b2028fa3d43a67017c71d2334cad85eb11ef324d15e3fdc204078014101d004d9bfa2ed80faed3df1bdf9"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) getpid() sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 8.154279688s ago: executing program 5 (id=1411): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_procfs$userns(0x0, &(0x7f00000003c0)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x34, &(0x7f0000000000)=0x80000000, 0x4) sendto$inet(r2, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) fsetxattr$security_evm(r0, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "217a92f38bb536ffac30ec37b8ddc44f"}, 0x11, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101302, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0000020000006a2ddcf6177a88641100d34a19d057"], 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.973721362s ago: executing program 4 (id=1412): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x60e000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44050}, 0x8000) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x68, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3fc}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3cf}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x400}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3d}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4802}, 0x8000001) r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x154c, 0xef91, 0x48, 0x0, 0x0) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, 0x0, &(0x7f00000000c0)) readv(r9, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) 6.743530011s ago: executing program 5 (id=1413): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x1, &(0x7f00000000c0)=[{@none}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x7a, 0xf4, 0x58, 0x40, 0x11ff, 0x5ad3, 0xf0d3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x4, 0x10, 0x80, [{{0x9, 0x4, 0xa9, 0x3, 0x2, 0xff, 0x5d, 0x81, 0x3, [], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x7f, 0x9, 0x2}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x7e, 0x3, 0x3}}]}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x1a, 0x0}) 6.459016254s ago: executing program 0 (id=1414): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000080)={'wg0\x00', @multicast}) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000180)="0d4508d8fa") ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) r5 = syz_open_dev$sg(&(0x7f00000001c0), 0x7, 0x20000) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000240)={0xc6, 0x3, 0xa, "24e663d907f783f549c8f52625f57bea13f1c2d489ab4ac868bea40c7828cae05b0ef60d5989bc120d5eaa64bb163b7956b571c8d0537b7f590a339e9cd4c5c8b08938e5b533396a3f4c80a194cd2c9b510f048872933e1b4c489079bcbca6cd90a05efe367ff029aa0f558044ae5b65fe5606732e4fac370427b0b7016186881813fd5b8188ad53708968442e0d591dd2f0d346dda443f480f67cb6de7de8d4c1767ed9e78b13bfd753a107da66633b57189c40ec949fbc8bfff5f94864885a5348521787d0"}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x2, 0x545, 0x7f, 0x80}, 0x10) 5.776873728s ago: executing program 0 (id=1415): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002140)=ANY=[@ANYBLOB="040100001a00070000000000fddbdf20e000000200000000000000000200000000000000000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d33c000000fc000000000000000000000000000000000000000000000000b40000000080000c00000000000000000000000000000000000000000000000000000000000000e5d9ffffffffffff0000000000000000000000000080000000002000000000000700000000000000fdffffffffffffff00000400000000000d00000000000000000000000a0002007957f1b978ba2b3414000e"], 0x104}}, 0x0) 5.776181293s ago: executing program 4 (id=1416): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0xcba1, 0x8, 0x3, 0x386}) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) ioctl$FICLONE(r3, 0x40049409, r1) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ff4000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80400004}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb8, r7, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x5d, 0xac, "558fa44dd2b79e255fd4d3a63a325b80b4c66786fce96df0b7630e62b8a95e818661fd60baedc93d334bf8b9510b7ab3a4ca2e5d171ee567be04186d6f443e3668c99ec69f4cb9edea5ccb76f0b21ba3f825d61858b5c019ba"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3}}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x24000095) syz_usb_connect(0x3, 0x6a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000c7baf82063074110bd640102030109025800010000e0000904b80006ff"], 0x0) 5.665641563s ago: executing program 0 (id=1417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b07, 0x0) syz_open_dev$usbmon(0x0, 0x17719ffffffffffd, 0x101900) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') write$uinput_user_dev(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000004) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x10001, 0x3447504d, 0x3, @discrete={0x1, 0x1}}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 5.29097308s ago: executing program 3 (id=1418): r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r4, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e20, 0x65210e9a, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r7}, 0xc) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "de674fc46c89bbf2", "1424be73666e6b3c386a67a680e4dfc8", "e851a49d", "423f025cc491fd11"}, 0x28) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="10000000042500000000000000000000af7d1ea2425ad3cf628b19b4116a62ec5f1373290204c44d814ac80ff46f818c70d98828782cccb6fbf1803f3b0171eb423363425923374c92202538451e52070f4e78176ef4916d72f052f33421b58b27e580a4b5e6f1a8d61889e2138be6e14e8058e8384a82af0df2b8536fe0f81d12bb1e285079fc1b06986e202283e2e4ae0c10ec309aea4cca9f70deb9d25f5a2e69239720dc6b091f259b2754021b9f07fe373c8d961f4f6c"], 0x10}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0xc000) r9 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000340)="7d7a68e25d38566c61856d6817441a9caa9b23557af3d00f974cd91d1b33a9d6077fd480051346d814913f8a3ef2e1a781a2bbfc8d55dca693d39139f04047784190", 0x42}], 0x1, 0x0, 0x0, 0x4004845}], 0x1, 0x48800) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r10, &(0x7f00000005c0)={0x0, 0xfffffffffffffe6d}, 0x0) 5.156778697s ago: executing program 3 (id=1419): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x16f600, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x1ff, 0x2, 0x7, "d171a6100600000009e49200", 0x802042, 0x200068e}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d6ad4", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.904254108s ago: executing program 3 (id=1420): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='numa_maps\x00') pread64(r0, &(0x7f0000002180)=""/4105, 0x137, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1d2}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x15) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0xf400, 0x0, 0x0, 0xf4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f0000000180)="a11f4b595bc17d4c52d2057515fc5a66844f58b7432b01f36a8370aa28f38c7e06000000000000007729259bfd9a47637e42ba04ade3ffff008476022f2e2252464c41d54f2e95efa545cf3b67d7ce7e00725bf813efdd2ba12104be4b0ed0056068a3d05e5573dd0eef1b", 0x6b, 0x24008891, 0x0, 0x0) shutdown(r9, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x1a1242, 0x1) 4.875003574s ago: executing program 2 (id=1421): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="ad", 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0xb, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0x8}, {0x5, 0x9, 0x10, '\x00', 0x6}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x40, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x5}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x6, 0xb6, 0x9}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0x1, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0xc, 0xa, '\x00', 0xf8}, {0x8, 0x2, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0xa}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]}) (fail_nth: 4) 4.394522158s ago: executing program 2 (id=1422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000180400000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/28], 0x50) 4.22968344s ago: executing program 0 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000540)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$9p_rdma(&(0x7f0000000280), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x10004, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x40}}, {@sq={'sq', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x80000000}}, {@sq={'sq', 0x3d, 0x6}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ']$'}}, {@obj_role={'obj_role', 0x3d, 'lowerdir'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x63, 0x39, 0x30, 0x31, 0x35, 0x36, 0xa], 0x2d, [0x36, 0x65, 0x52, 0x64], 0x2d, [0x0, 0x66, 0x36, 0x32], 0x2d, [0xfe, 0x37, 0x63, 0x64], 0x2d, [0x30, 0x32, 0x38, 0x31, 0x35, 0x61, 0x5, 0x63]}}}]}}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 4.162632859s ago: executing program 2 (id=1424): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fbffffff0000040000ffed0085000000bc0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x16f600, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="030303000000fddbdf253d0000002ef9b721e7c2b5df77b9b89aa6be2e0645c9f2d3898d506feb446fe1ae3b345d5cd48847eca95edba78bdd4464aa9c8cc6e6196e5ded8f86d17efc04901929d379f8e83e7b2028fa3d43a67017c71d2334cad85eb11ef324d15e3fdc204078014101d004d9bfa2ed80faed3df1bdf9"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82100, 0x0) getpid() sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.397800625s ago: executing program 5 (id=1425): r0 = open$dir(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x66a6, 0x40, 0x0, 0x31c}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000200)={0x8, 0xffffffff, 0x7}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r6, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x10}}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000008c0)}, 0x4048045) socket$packet(0x11, 0x2, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 3.199039595s ago: executing program 4 (id=1426): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) epoll_create1(0x0) syz_io_uring_setup(0x58f7, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmat(0x0, &(0x7f0000776000/0x4000)=nil, 0x5000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000000010104000000000000000002000000180001801400018008000100ac1414aa0800020000000000180002801400018008000100e000000108000200640101040800074000000000140010800800cd08000140000005ff"], 0x60}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000004c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x40, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3d1a800000000}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x40}}, 0x40040c0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) 2.504805955s ago: executing program 3 (id=1427): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7, 0x1f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) dup(r2) close_range(r0, 0xffffffffffffffff, 0xddffffff) 2.054231686s ago: executing program 0 (id=1428): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x6, 0x3, 0x0, 'syz1\x00', 0xfffffffd}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000006000000280000005a2ae78a070000000400000001000084fdf7ffff05000000020000000000008000000000000000010500000020000000006100"], 0x0, 0x47}, 0x28) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000047, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.004400766s ago: executing program 3 (id=1429): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0585611, 0x0) read(r1, &(0x7f00000001c0)=""/218, 0xda) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) eventfd(0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) 1.997544528s ago: executing program 5 (id=1430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x7, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, &(0x7f0000000780)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/33, 0x21) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="cfb6ffff", @ANYRES16=0x0, @ANYBLOB="59e3000000000000000008000000100004800900050073797a3000000000"], 0x24}}, 0x0) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x2) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}], 0x1, 0x40800) 1.818871127s ago: executing program 4 (id=1431): syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000008000000f7fffff700"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r6, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x7ffffbff}], 0x1, 0x14022, 0x0) 1.171691934s ago: executing program 3 (id=1432): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8014) sched_setattr(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x2000c844) sendto$inet(r4, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x10, 0x80000000, 0x4, 0x8, 0xfffffffffffffffc, 0x2, 0x5}, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad000000000000000000000000120000", 0x10) sendmmsg$unix(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 549.530155ms ago: executing program 4 (id=1433): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000042c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="f8b79ed249987404ab025e0268307ed37dd9e64f8604a2481f5683165ef6a9989c403bac7821feddfb9e526a89839999ae36a35137133692624be69c721095232fde53cea4653ec9d206af155c5de8e41f198b847fdd95f97ea8ca11661f4ac751ba8a8c42c38981a24572161cdd14ac07d4983f4463e77a6b2f", 0x7a}, {&(0x7f0000000140)="2c6b1e359c5907d3921c59383c1129a1206294ac231e9db27d47356b865d9b60f9f6", 0x22}, {&(0x7f0000000300)="95593436e78958c12a0872f31d6f3987d37eb6822717e3210c8be99b4540730cf41ea6ffd54c61c4a0f84f1f4d2e583fb26403a95d95581f4fc73e6d422d", 0x3e}, {&(0x7f0000000340)="293b7fe9df702c059b85723e0c12d588c16ec86d7cf0b802879a4019ac26eb4a4c05679601b1b8b39b009fe26ad205622c0b7aec324a77abe61f0a0c4d10b8456dfb92285317be771c0eaf9235068f3fb3fbc9a501d6f2aabd89c920e1465d689ffe8d831c597ac264409ac46a0dd2836aa64ffd96c09d14917f9b4669b751e8a42a088dce2cb6151334d85a7ba6b7e12d99d3d87a64a889719bb50d755c0a35b8298919054169716b627932194305baa5dd9e18d63ce5d692f3abb4a3", 0xbd}], 0x4}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x751f, @empty, 0x8}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000480)="f732c75bcb0939c9f9f0ae6729e0", 0xe}, {&(0x7f00000004c0)="57f0124133c87f9f9e81fd0b264846a686a333c0f7cde6d05613717917cd5621b11177027681dbfd1cc62caf2a695a314ff643cd7badadcb95b14b8e1efa46d2aade5696c865cc52692dc237f870c7744146a80ca82917c7ea7de238636709d39974c9924fb5a3b18be61b64", 0x6c}, {&(0x7f0000000540)="988aa160d16afad921134891e3d56b5d60d70511899a72f8bf9c834da3a0223614bc22aca4cc031b53a8981f9f7dc1fd6ec3439da06ea9cd50ad24b0cd730add71f7", 0x42}, {&(0x7f00000005c0)="594e97b1d318b61212f5344ebbac005b6dcc5f1c7b512706e37cf79d61f896d45e0b1b67ebddecfb33efdc90d4bce684982b3894a4f04018eb2ae57c504d79c22abdd305283b7d68d62081bbfe075f9a106d214365207a714b0c713ca2f44a1915c6e4", 0x63}, {&(0x7f0000000640)="9226ac47aadb53a9c2d07274141b3cdd710dd911c30bdeefa7d037ad686455def134211d87c96bd7c9c284fed4c4afb7bed777ba408745b7d3743cc73a18b42dcdbb8717bdf5cc80f90d105287ad2009cca976d1a93660a631f3cdce9e8322b8ecb7ea1c594eaa6029224033675611cc4b197d15850a87c3505e8e0209fa715436e8a33f05a0e6c285d8b047ef4d9e1f4305bf88ce4a7f7c880a9c01d220676b9bccdb239c137786fb965f22f49987c5c3739cdb15169519159f5afb4f7b75f5148c467d4062aa337b007aad08b12888f27d7acf36454725a48aaf", 0xdb}, {&(0x7f0000000740)="c05b06544cc3", 0x6}, {&(0x7f0000000780)="072ea75bfe954d69d1c4ee048c2df618083c17c399862784cf91e6d3c53e8a7fa7ae", 0x22}, {&(0x7f00000007c0)="dfbb15bdb2241a58fc4d3553c210730d9a5c9143627ca88e1057f914d7a11bbb335e6fa89834a12f14ba91c6a3d3fc4ef8c57216e09edc9527987858f8073dbb67d999b139f404cebe43990040f0daf623ddc09183e377cdf25a48d7a8a874a9cbbb4a4f671621454ea945ed2ea5cfedfefd075d5a6a14c4e730e8dd5918c45a547227348c2f596ab446e78fcf2d02c70edaca8058a76dc85c67bf480ed8c040b35d0783d045e81dbb27b4d8586691384407e1", 0xb3}, {&(0x7f0000000880)="dffa3bed1ba7a2af1253bbebffc298b4af7d92fd8557d848049601b14a48276f3e773dfa88e5c613347cf0652b70287a5e2a357c1c046b88f5f3af686620e4d6e439dbe9a31864aae323b60178acd57462cb62a083167c0cfb121bca9801b8e614f6e8d00a1bd85a3baba13f4dd25c4ea68e0a60a572d7015eeec15b99ec116e5422ea13c1f060b3401d915de5ed882bab4dd1ca8dc2710d", 0x98}], 0x9, &(0x7f0000004100)=[@dstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts={{0x80, 0x29, 0x36, {0x8, 0xc, '\x00', [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x7}, @jumbo, @calipso={0x7, 0x28, {0x1, 0x8, 0x3e, 0x3, [0x7, 0x7fff, 0x7, 0x6]}}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x20, {0x2, 0x6, 0x20, 0x8, [0x9, 0xf3b5, 0x6]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffa}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x33, 0x2, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @jumbo={0xc2, 0x4, 0x1000}]}}}, @dstopts={{0x40, 0x29, 0x37, {0x73, 0x4, '\x00', [@enc_lim, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0x7}, @pad1, @enc_lim={0x4, 0x1, 0x60}, @ra={0x5, 0x2, 0xacf4}]}}}], 0x138}}, {{&(0x7f0000000b40)={0xa, 0x4e24, 0x101, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000b80)="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", 0xfe}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000080000000000000002900000036000000670c00000000000005020002070000030e07ff03050000000000000002000000000000000800000000000000020000000000000009000000000000000a000000000000000900000000000000040180c910fe880000000000000000000000000001c204000007ff0001000000000040000000000000002900000036000000040500000000000004010804010507200000000306030500417480caffffffff0000000000000000fdffffffffffffff0000"], 0xd8}}, {{0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000004480)=ANY=[@ANYBLOB="90000000000000002900000004000000320e000000000000050200040502000dfb373b97ee8e9393b349a8063d040f6a6dc00468276e3747ac5be800bb9a38c27ca8f29f63c9ff102f6a52dfab1b082ac1e5a56eb8bbc5ceb2c910fc010000000000000000000000000001040107000100c910fe8000000000000000000000000000bb0401320001000000000000000024000000000000002900000032000000fe880000000000000000000000000101", @ANYRES32=0x0, @ANYBLOB="0000000068000000000000f7ae66d8ab000c0a000000000000040105c204000000010740000000020e1d661af3cd6a3cfeff0f050000000000000003000000000000000e040000000000000000000000000000fffbffffffffffff0900000000000000040000000000ca5ecf1f9de6bc8870f8ff7dfad4d4ff0f73d5d855540155762464b3256d3587393299b4878d11607ae2b7bbb886b26e825143dbe18daa0d2911a4e8ea9798274d4a22e0547ab55d8e5889da1bdecd4b21cf8b29967710c430c989bcaca45e71fb2816f0dabcafe748a4b55c1f5ec9408edb9a648818614c985e7b70b584c0074d0cd8b8c56857327807d70a1b5e155d13505b626fdc392f7a32bcb2de52c788897f8af03e31cd60c5889e59793364e988cd756c5dbfc9a3ca34ae55851e7ca82a74b7d7e2472b527c8e507b3f9fa9be87a27e6ca11fc42447604c909a367ec5207f3b771470b1"], 0x120}}, {{&(0x7f0000000f40)={0xa, 0x4e24, 0xf, @mcast2, 0x200}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000f80)="cd0d5df122e2ee89113246f09a4760a77821980525e90fa825c4e5a8b2f9388b88b6", 0x22}, {&(0x7f00000021c0)="3d8e8f83f68986fc5da16a7cf7c2967c36b08ea73e17a7b075704622dec8ff3377ca115de5b9cdbf8667b0ea91a2b06ac3d75b0b41bef9680788fc485c6c81f1aaa20bcb085447c1b07502abc9b61b455c21fb8f19c1ec951944f7a5390bf3e6022a75c3f6a2715c20533f1360544978b21c26f8f532c8ea056c6c51a25ae7612175d4ef2c399d73df96bc06eff6c68676dd207cafd29512483fefb53fbfb7c4a044471eccb235e8c5a4027807a2f9", 0xaf}, {&(0x7f0000002280)="2235638e520dd4a10a5d11dd9f51ae3e841c4e8ce2b7637a08c50aa29972bf664fab44fbe893f6f5eb6cba797bcaeff67f969dba237bc52bcf54a16a6d18d13f91d52366063f70b21cc2f9c9844d29b2cc6b27b01bcf058394f276ffe5db8bb4033a3844ee702265a865ba016a86df764905a7aa6d7da6daa98ae001b7b1915b9f7c38857d1563e28b41cb6ac47afdbc266d5803cd58a21d02833f4afd32d63031435ec77aeb4cc7be59fd85ed812e5f4363efde31c90a56012fe1d0fa827995ddbf6cfce0766c8ac1ff18c97bb7b0f9c981e0f6ed6222c8e9144341beb06032a43f410be5b87c0958a1ac5d", 0xec}, {&(0x7f0000000fc0)="448f67c6a88168c25ac262f8a04fc82c3ebee03528219d76854fd2f7fbbb1f323cb3bdb661fd2a8d8539e17ae7f786b13b9e58b61bc37e6e61dac55a4079a8e41cecec85a7efb301a6b1c1", 0x4b}, {&(0x7f0000002080)="5c6d322225a66326a58bb9d7f321407267ccb6ca5eb4b64dc0deb62091973917a33457711765458ef42466e1ef715c02971cab7e046421489f9679635f0680060628a45035a34f28ef41c8a8b7e8d124", 0x50}, {&(0x7f0000002380)="6dd2c22920c4750a5badd9d18fae89a6e2eb5201b5c6912da6b8bc", 0x1b}, {&(0x7f00000023c0)="c066b327cde4c4d88cb644b61b94012431bc06817a968ea63a5079dff7e004724c8bf3c3783abb67dd1c7553a1c8333f8f0b050b40d95ff5ea1f", 0x3a}], 0x7, &(0x7f0000002480)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x32, 0xe, 0x0, 0xfd, 0x0, [@mcast1, @empty, @mcast1, @remote, @dev={0xfe, 0x80, '\x00', 0x24}, @private0, @private1]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @hopopts={{0x30, 0x29, 0x36, {0xdabc39c9b25d78ae, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x118}}, {{&(0x7f0000003d00)={0xa, 0x4e24, 0x5, @loopback, 0x36}, 0x1c, &(0x7f0000004040)=[{&(0x7f0000003d40)="0dc65c0a", 0x4}, {&(0x7f0000003d80)="148cb1f2aec3cd851dced2d7c6cdbc70b6b7f1b0dca5b0e3326bea2b2b33013f5e38303c63ce9bcad5882c55e96a647851e2a2a47eb846598c8c6215ecd8edc1b07f969622dc6638cc6784745d6f456dfe544a52341cf30760a2a877ebfa17758c8cf5c1e64392dcf61acafb72a5fd6c078ace7fb8e069bdedbe03b2b737398cb150ed7c9895dce667e04b084ac6846f176f8304ca17713078f3e938ddc9c0128f837d89793c388fc3ccddd2c0402923", 0xb0}, {0x0}, {&(0x7f0000003f00)="deedf09b93816c7fe4d2e60d60219663f924e6baa817e7c9a089976f819d764c3e364ae52945344ac9f26daec53dd387f6da29403c02a8e68061fbdae94a26ec6cc794fa15bf8554d14329db0078f69401e5b2fe622f02a36b4b09d69b20ebb936a6b073b5fd4eac8048c60bf57b84947bd770b03bece9123ad458ddc2929bf999b1ffb1b9ce663bba9f62ca017824ff94bcfd491d8c22fd3ef079d330622406a2e836e883c6ef76d99c897d89ff83e432f3d98fd176b90dbd1296a6284da9f2546a3b42c971314a67ce3e2185e46c099b1b328e510da70e85435dbf21520883f670b9c6472b037e69c985a24d7cf79a48af7d5c72", 0xf5}, {&(0x7f0000004000)="cad629be7103b5a0197a7c9f49f763e2235a635e1aa10febd91059dac7beb46dbe430a164ac3f0322ecfac1310", 0x2d}], 0x5, &(0x7f00000040c0)=[@flowinfo={{0x14, 0x29, 0xb, 0xc59c}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x30}}], 0x6, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) socket(0x10, 0x803, 0x0) 0s ago: executing program 2 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b07, 0x0) syz_open_dev$usbmon(0x0, 0x17719ffffffffffd, 0x101900) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') write$uinput_user_dev(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x50, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000004) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x10001, 0x3447504d, 0x3, @discrete={0x1, 0x1}}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) kernel console output (not intermixed with test programs): ystem_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 244.596932][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.554'. [ 244.682407][ T8155] netlink: 'syz.0.554': attribute type 3 has an invalid length. [ 244.745200][ T30] audit: type=1400 audit(2000000119.920:809): avc: denied { accept } for pid=8151 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 245.708761][ T6248] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 245.739066][ T6248] usb 2-1: USB disconnect, device number 21 [ 246.888844][ T8171] ntfs3(loop1): try to read out of volume at offset 0x0 [ 247.930078][ T30] audit: type=1400 audit(2000000123.010:810): avc: denied { ioctl } for pid=8180 comm="syz.2.562" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.053290][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 248.214330][ T30] audit: type=1400 audit(2000000123.390:811): avc: denied { map } for pid=8183 comm="syz.4.561" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.238877][ T30] audit: type=1400 audit(2000000123.390:812): avc: denied { execute } for pid=8183 comm="syz.4.561" path="/dev/sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.543333][ T30] audit: type=1400 audit(2000000123.390:813): avc: denied { write } for pid=8183 comm="syz.4.561" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.573188][ T30] audit: type=1400 audit(2000000123.390:814): avc: denied { open } for pid=8183 comm="syz.4.561" path="/116/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 248.698581][ T8205] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 250.508725][ T30] audit: type=1400 audit(2000000125.250:815): avc: denied { connect } for pid=8206 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 250.551910][ T30] audit: type=1400 audit(2000000125.300:816): avc: denied { write } for pid=8206 comm="syz.2.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.225029][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 251.343652][ T8229] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 251.582947][ T7473] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 251.807281][ T7473] usb 2-1: device descriptor read/64, error -71 [ 252.323196][ T7473] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 252.380268][ T8237] batadv_slave_1: entered promiscuous mode [ 252.390156][ T8236] batadv_slave_1: left promiscuous mode [ 252.462968][ T7473] usb 2-1: device descriptor read/64, error -71 [ 252.573276][ T7473] usb usb2-port1: attempt power cycle [ 253.892952][ T7473] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 253.914953][ T30] audit: type=1400 audit(2000000129.090:817): avc: denied { create } for pid=8262 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.980641][ T7473] usb 2-1: device descriptor read/8, error -71 [ 254.103389][ T6248] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 254.123157][ T6858] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 254.253021][ T7473] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 255.341192][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.345210][ T7473] usb 2-1: device not accepting address 25, error -71 [ 255.348181][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.367454][ T7473] usb usb2-port1: unable to enumerate USB device [ 255.501781][ T6858] usb 5-1: Using ep0 maxpacket: 8 [ 255.527054][ T8251] NFSD: Failed to start, no listeners configured. [ 255.534423][ T6248] usb 3-1: Using ep0 maxpacket: 32 [ 255.545611][ T6858] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 255.556190][ T6248] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 255.583068][ T6248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.050526][ T6248] usb 3-1: config 0 has no interface number 0 [ 256.080776][ T6858] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 256.098586][ T6858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.121198][ T6858] usb 5-1: Product: syz [ 256.129802][ T6248] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 256.168065][ T6858] usb 5-1: Manufacturer: syz [ 256.203412][ T6858] usb 5-1: SerialNumber: syz [ 256.246266][ T6858] usb 5-1: config 0 descriptor?? [ 256.253849][ T6248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.265425][ T6248] usb 3-1: Product: syz [ 256.269993][ T6248] usb 3-1: Manufacturer: syz [ 256.281186][ T6858] usb 5-1: bad CDC descriptors [ 256.294561][ T6248] usb 3-1: SerialNumber: syz [ 256.307238][ T6248] usb 3-1: config 0 descriptor?? [ 256.316955][ T6248] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 256.503965][ T6858] usb 5-1: USB disconnect, device number 16 [ 256.541583][ T6248] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 256.548725][ T6248] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 256.639141][ T30] audit: type=1400 audit(2000000131.810:818): avc: denied { setopt } for pid=8285 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 256.711734][ T30] audit: type=1400 audit(2000000131.880:819): avc: denied { sqpoll } for pid=8287 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 257.398742][ T6758] usb 3-1: USB disconnect, device number 15 [ 257.642083][ T30] audit: type=1400 audit(2000000132.780:820): avc: denied { append } for pid=8294 comm="syz.0.590" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 258.654724][ T30] audit: type=1400 audit(2000000133.830:821): avc: denied { wake_alarm } for pid=8309 comm="syz.2.597" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.819386][ T8303] fuse: Unknown parameter 'ÿÿÿÿ0177777777777777777777718446744073709551615' [ 258.956891][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 261.459787][ T8338] batadv_slave_1: entered promiscuous mode [ 261.499997][ T8337] batadv_slave_1: left promiscuous mode [ 263.034765][ T8355] FAULT_INJECTION: forcing a failure. [ 263.034765][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.047894][ T8355] CPU: 0 UID: 0 PID: 8355 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT(full) [ 263.047914][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.047924][ T8355] Call Trace: [ 263.047930][ T8355] [ 263.047937][ T8355] dump_stack_lvl+0x16c/0x1f0 [ 263.047963][ T8355] should_fail_ex+0x512/0x640 [ 263.047992][ T8355] _copy_from_user+0x2e/0xd0 [ 263.048018][ T8355] wext_handle_ioctl+0xc2/0x2a0 [ 263.048044][ T8355] ? rcu_is_watching+0x12/0xc0 [ 263.048061][ T8355] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 263.048090][ T8355] ? sock_ioctl+0x154/0x6b0 [ 263.048116][ T8355] sock_ioctl+0x3a1/0x6b0 [ 263.048138][ T8355] ? __pfx_sock_ioctl+0x10/0x10 [ 263.048159][ T8355] ? hook_file_ioctl_common+0x144/0x410 [ 263.048191][ T8355] ? selinux_file_ioctl+0x180/0x270 [ 263.048213][ T8355] ? selinux_file_ioctl+0xb4/0x270 [ 263.048235][ T8355] ? __pfx_sock_ioctl+0x10/0x10 [ 263.048259][ T8355] __x64_sys_ioctl+0x18e/0x210 [ 263.048280][ T8355] do_syscall_64+0xcd/0xf80 [ 263.048303][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.048320][ T8355] RIP: 0033:0x7f1c59f8f749 [ 263.048333][ T8355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.048348][ T8355] RSP: 002b:00007f1c5ad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.048365][ T8355] RAX: ffffffffffffffda RBX: 00007f1c5a1e6180 RCX: 00007f1c59f8f749 [ 263.048376][ T8355] RDX: 0000200000000300 RSI: 0000000000008b06 RDI: 0000000000000008 [ 263.048386][ T8355] RBP: 00007f1c5ad75090 R08: 0000000000000000 R09: 0000000000000000 [ 263.048395][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.048404][ T8355] R13: 00007f1c5a1e6218 R14: 00007f1c5a1e6180 R15: 00007ffe3cf300f8 [ 263.048428][ T8355] [ 263.228068][ T8353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 263.642954][ T6025] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 264.692930][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 264.718751][ T6025] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.827080][ T6025] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 264.864140][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.887492][ T6025] usb 5-1: Product: syz [ 264.891804][ T6025] usb 5-1: Manufacturer: syz [ 265.023567][ T6025] usb 5-1: SerialNumber: syz [ 265.104005][ T8379] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 265.478983][ T8377] batadv_slave_1: entered promiscuous mode [ 265.487236][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 265.596545][ T8375] batadv_slave_1: left promiscuous mode [ 265.682717][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 266.005275][ T6025] usb 5-1: USB disconnect, device number 17 [ 266.047495][ T30] audit: type=1400 audit(2000000141.220:822): avc: denied { name_connect } for pid=8381 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 267.036661][ T30] audit: type=1400 audit(2000000142.210:823): avc: denied { execute } for pid=8410 comm="syz.2.626" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 267.085848][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 267.103609][ T8411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8411 comm=syz.2.626 [ 267.789924][ T3456] Bluetooth: hci5: Frame reassembly failed (-90) [ 267.849316][ T8417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.627'. [ 267.887013][ T6074] Bluetooth: hci5: Frame reassembly failed (-84) [ 268.637409][ T30] audit: type=1400 audit(2000000143.810:824): avc: denied { ioctl } for pid=8407 comm="syz.1.624" path="socket:[19586]" dev="sockfs" ino=19586 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.805984][ T30] audit: type=1400 audit(2000000143.980:825): avc: denied { ioctl } for pid=8422 comm="syz.2.628" path="socket:[18958]" dev="sockfs" ino=18958 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 268.980843][ T8428] batadv_slave_1: entered promiscuous mode [ 268.990786][ T8427] batadv_slave_1: left promiscuous mode [ 269.001207][ T8430] fuse: Bad value for 'fd' [ 269.649585][ T8438] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 270.003087][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 270.118673][ T8439] netlink: 'syz.0.633': attribute type 3 has an invalid length. [ 270.150931][ T30] audit: type=1400 audit(2000000145.300:826): avc: denied { connect } for pid=8436 comm="syz.0.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 270.873679][ T6248] libceph: connect (1)[c::]:6789 error -101 [ 270.879870][ T6248] libceph: mon0 (1)[c::]:6789 connect error [ 271.146378][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 271.164990][ T8447] ceph: No mds server is up or the cluster is laggy [ 271.330693][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 272.119552][ T30] audit: type=1400 audit(2000000147.290:827): avc: denied { getopt } for pid=8463 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.176546][ T8464] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 273.702299][ T30] audit: type=1400 audit(2000000148.860:828): avc: denied { getopt } for pid=8488 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 274.419660][ T1948] Bluetooth: hci5: Frame reassembly failed (-90) [ 274.428814][ T1948] Bluetooth: hci5: Frame reassembly failed (-84) [ 275.775112][ T30] audit: type=1400 audit(2000000150.610:829): avc: denied { create } for pid=8502 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.141096][ T30] audit: type=1400 audit(2000000150.620:830): avc: denied { ioctl } for pid=8502 comm="syz.1.651" path="socket:[19786]" dev="sockfs" ino=19786 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.302976][ T30] audit: type=1400 audit(2000000151.340:831): avc: denied { write } for pid=8509 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 276.325896][ T30] audit: type=1400 audit(2000000151.350:832): avc: denied { create } for pid=8509 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 276.350880][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 276.432995][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 276.433230][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.515778][ T8522] fuse: Bad value for 'fd' [ 277.295934][ T8528] batadv_slave_1: entered promiscuous mode [ 277.320172][ T8527] batadv_slave_1: left promiscuous mode [ 280.470615][ T30] audit: type=1400 audit(2000000155.640:833): avc: denied { write } for pid=8562 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.735408][ T8572] overlayfs: missing 'lowerdir' [ 280.771535][ T30] audit: type=1400 audit(2000000155.940:834): avc: denied { getopt } for pid=8531 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 282.288119][ T30] audit: type=1400 audit(2000000157.460:835): avc: denied { read append } for pid=8583 comm="syz.2.674" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 282.322549][ T30] audit: type=1400 audit(2000000157.480:836): avc: denied { open } for pid=8583 comm="syz.2.674" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 283.041092][ T3313] Bluetooth: Error in BCSP hdr checksum [ 283.633558][ T13] Bluetooth: Error in BCSP hdr checksum [ 283.896143][ T6255] Bluetooth: Error in BCSP hdr checksum [ 284.111517][ T3456] Bluetooth: hci6: Frame reassembly failed (-90) [ 284.119868][ T3456] Bluetooth: hci6: Frame reassembly failed (-84) [ 284.170082][ T13] Bluetooth: Error in BCSP hdr checksum [ 284.506877][ T6255] Bluetooth: Error in BCSP hdr checksum [ 284.552088][ T8620] loop8: detected capacity change from 0 to 7 [ 284.569232][ T8358] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 284.599477][ T8358] loop8: partition table partially beyond EOD, truncated [ 284.622697][ T8358] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 284.740774][ T8358] loop8: p2 start 956478 is beyond EOD, truncated [ 284.758918][ T8620] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 284.771529][ T8620] loop8: partition table partially beyond EOD, truncated [ 284.773166][ T13] Bluetooth: Error in BCSP hdr checksum [ 285.185171][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 285.189723][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.200394][ T8620] loop8: p1 size 3651402975 extends beyond EOD, truncated [ 285.278862][ T8620] loop8: p2 start 956478 is beyond EOD, truncated [ 285.295038][ T8626] 9p: Could not find request transport: rdm€ [ 285.343111][ T13] Bluetooth: Error in BCSP hdr checksum [ 285.377583][ T8388] udevd[8388]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 285.421221][ T8388] udevd[8388]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 286.000202][ T30] audit: type=1400 audit(2000000161.170:837): avc: denied { create } for pid=8643 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.000596][ T8642] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 286.130298][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 286.130325][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 286.136123][ T8646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 286.264989][ T30] audit: type=1400 audit(2000000161.210:838): avc: denied { setopt } for pid=8643 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.282959][ T8646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 286.412933][ T30] audit: type=1400 audit(2000000161.220:839): avc: denied { write } for pid=8643 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.576610][ T8654] syzkaller0: entered promiscuous mode [ 286.582095][ T8654] syzkaller0: entered allmulticast mode [ 287.785212][ T30] audit: type=1400 audit(2000000162.960:840): avc: denied { read } for pid=8671 comm="syz.0.699" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 287.809053][ T8668] vxcan1 speed is unknown, defaulting to 1000 [ 287.819599][ T30] audit: type=1400 audit(2000000162.960:841): avc: denied { open } for pid=8671 comm="syz.0.699" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 287.892594][ T30] audit: type=1400 audit(2000000162.960:842): avc: denied { write } for pid=8671 comm="syz.0.699" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 288.068771][ T30] audit: type=1400 audit(2000000163.240:843): avc: denied { map } for pid=8681 comm="syz.0.702" path="pipe:[3916]" dev="pipefs" ino=3916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 288.093174][ T5925] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 288.254631][ T5925] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 288.587292][ T5925] usb 5-1: config 0 has no interface number 1 [ 288.597043][ T5925] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 288.607580][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.668233][ T5925] usb 5-1: config 0 descriptor?? [ 288.693955][ T3456] Bluetooth: hci5: Frame reassembly failed (-84) [ 289.077797][ T5925] usb 5-1: USB disconnect, device number 18 [ 290.783061][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 290.789395][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 291.016890][ T8728] binder: 8727:8728 ioctl c018620c 200000000100 returned -22 [ 291.583260][ T8732] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 293.413658][ T30] audit: type=1400 audit(2000000168.590:844): avc: denied { bind } for pid=8763 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.542054][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 293.590916][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 294.050156][ T8775] fuse: Bad value for 'fd' [ 294.408206][ T8783] kernel profiling enabled (shift: 63) [ 294.408244][ T8783] profiling shift: 63 too large [ 294.737756][ T6858] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 294.746621][ T118] libceph: connect (1)[c::]:6789 error -101 [ 294.768616][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 294.932900][ T6858] usb 3-1: Using ep0 maxpacket: 16 [ 294.969355][ T6858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.044429][ T8793] ceph: No mds server is up or the cluster is laggy [ 295.064608][ T6858] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 295.119221][ T6858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.158717][ T6858] usb 3-1: config 0 descriptor?? [ 296.255367][ T6858] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 297.763876][ T8835] i2c i2c-1: unsupported multi-msg i2c transaction [ 299.778094][ T8860] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 300.131808][ T5891] usb 3-1: USB disconnect, device number 16 [ 303.160296][ T30] audit: type=1400 audit(2000000178.330:845): avc: denied { write } for pid=8906 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.337856][ T8907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.489338][ T5825] Bluetooth: hci4: command 0x0401 tx timeout [ 303.767354][ T30] audit: type=1400 audit(2000000178.470:846): avc: denied { bind } for pid=8906 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 303.809348][ T8907] bond0: (slave rose0): Enslaving as an active interface with an up link [ 303.941426][ T30] audit: type=1400 audit(2000000179.110:847): avc: denied { write } for pid=8906 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 304.977143][ T30] audit: type=1400 audit(2000000180.150:848): avc: denied { getopt } for pid=8906 comm="syz.4.754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.653039][ T30] audit: type=1400 audit(2000000180.760:849): avc: denied { name_bind } for pid=8935 comm="syz.3.759" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 306.025482][ T8946] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.078929][ T30] audit: type=1400 audit(2000000181.250:850): avc: denied { ioctl } for pid=8950 comm="syz.0.763" path="socket:[21606]" dev="sockfs" ino=21606 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 306.104602][ T8951] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 307.484948][ T8969] fuse: Bad value for 'fd' [ 308.644583][ T8996] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 308.766539][ T3456] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.896712][ T30] audit: type=1400 audit(2000000184.070:851): avc: denied { read } for pid=8995 comm="syz.1.776" lport=53778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.561941][ T30] audit: type=1400 audit(2000000185.730:852): avc: denied { setopt } for pid=9007 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.956140][ T30] audit: type=1400 audit(2000000185.740:853): avc: denied { shutdown } for pid=9007 comm="syz.0.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.294091][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 311.856075][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 313.464598][ T30] audit: type=1326 audit(2000000188.640:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.453156][ T6074] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.470752][ T30] audit: type=1326 audit(2000000188.660:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.511878][ T30] audit: type=1326 audit(2000000188.660:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.729427][ T30] audit: type=1326 audit(2000000188.660:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.787657][ T30] audit: type=1326 audit(2000000188.660:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.814987][ T30] audit: type=1326 audit(2000000188.670:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.846517][ T30] audit: type=1326 audit(2000000188.670:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.871230][ T30] audit: type=1326 audit(2000000188.670:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.955710][ T30] audit: type=1326 audit(2000000189.570:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x7ffc0000 [ 314.979175][ T30] audit: type=1326 audit(2000000189.620:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431bb8f34b code=0x7ffc0000 [ 315.345945][ T30] audit: type=1326 audit(2000000189.620:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.4.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f431bb8f34b code=0x7ffc0000 [ 315.546576][ T9081] netlink: 71 bytes leftover after parsing attributes in process `syz.4.787'. [ 316.307011][ T9088] bond1 (unregistering): Released all slaves [ 316.609998][ T3456] Bluetooth: hci5: Frame reassembly failed (-90) [ 316.617768][ T3456] Bluetooth: hci5: Frame reassembly failed (-84) [ 316.662269][ T9093] kvm: kvm [9092]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80000000 [ 316.770548][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.777157][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.396545][ T9139] erofs (device loop4): cannot find valid erofs superblock [ 318.463801][ T9139] gretap0: entered promiscuous mode [ 318.494162][ T9139] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 318.511645][ T9139] netlink: 9 bytes leftover after parsing attributes in process `syz.4.804'. [ 318.592947][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.594487][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 319.012940][ T6369] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.037418][ T9159] netlink: 88 bytes leftover after parsing attributes in process `syz.2.810'. [ 319.046774][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 319.274363][ T6369] usb 5-1: config 0 has an invalid interface number: 244 but max is 0 [ 319.283049][ T6369] usb 5-1: config 0 has no interface number 0 [ 319.289246][ T6369] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 319.299065][ T6369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.346909][ T6369] usb 5-1: config 0 descriptor?? [ 319.372787][ T6369] flexcop_usb: set interface failed. [ 319.670830][ T6369] b2c2_flexcop_usb 5-1:0.244: probe with driver b2c2_flexcop_usb failed with error -22 [ 319.682404][ T6369] usb 5-1: USB disconnect, device number 19 [ 320.730922][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 321.941769][ T6026] Bluetooth: hci5: Frame reassembly failed (-90) [ 322.118242][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 322.118258][ T30] audit: type=1400 audit(2000000197.290:916): avc: denied { write } for pid=9194 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.212897][ T6369] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 322.523797][ T6369] usb 2-1: device descriptor read/64, error -71 [ 322.775829][ T6369] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 322.976821][ T6369] usb 2-1: device descriptor read/64, error -71 [ 323.440398][ T6369] usb usb2-port1: attempt power cycle [ 323.465745][ T30] audit: type=1400 audit(2000000198.640:917): avc: denied { read } for pid=9220 comm="syz.4.828" lport=23884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 323.520351][ T9224] FAULT_INJECTION: forcing a failure. [ 323.520351][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.536725][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.4.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.536744][ T9224] Tainted: [L]=SOFTLOCKUP [ 323.536748][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.536754][ T9224] Call Trace: [ 323.536757][ T9224] [ 323.536762][ T9224] dump_stack_lvl+0x16c/0x1f0 [ 323.536787][ T9224] should_fail_ex+0x512/0x640 [ 323.536808][ T9224] _copy_to_user+0x32/0xd0 [ 323.536824][ T9224] simple_read_from_buffer+0xcb/0x170 [ 323.536840][ T9224] proc_fail_nth_read+0x197/0x240 [ 323.536852][ T9224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.536863][ T9224] ? rw_verify_area+0xcf/0x6c0 [ 323.536874][ T9224] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.536885][ T9224] vfs_read+0x1e4/0xcf0 [ 323.536898][ T9224] ? __pfx___mutex_lock+0x10/0x10 [ 323.536914][ T9224] ? __pfx_vfs_read+0x10/0x10 [ 323.536930][ T9224] ? __fget_files+0x20e/0x3c0 [ 323.536944][ T9224] ? key_put+0x20/0x2c0 [ 323.536965][ T9224] ksys_read+0x12a/0x250 [ 323.536977][ T9224] ? __pfx_ksys_read+0x10/0x10 [ 323.536994][ T9224] do_syscall_64+0xcd/0xf80 [ 323.537009][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.537020][ T9224] RIP: 0033:0x7f431bb8e15c [ 323.537029][ T9224] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.537038][ T9224] RSP: 002b:00007f431ca9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.537048][ T9224] RAX: ffffffffffffffda RBX: 00007f431bde5fa0 RCX: 00007f431bb8e15c [ 323.537056][ T9224] RDX: 000000000000000f RSI: 00007f431ca9c0a0 RDI: 0000000000000005 [ 323.537065][ T9224] RBP: 00007f431ca9c090 R08: 0000000000000000 R09: 0000000000000000 [ 323.537075][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.537084][ T9224] R13: 00007f431bde6038 R14: 00007f431bde5fa0 R15: 00007ffeca423748 [ 323.537108][ T9224] [ 323.832940][ T6369] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 323.854041][ T6369] usb 2-1: device descriptor read/8, error -71 [ 323.900867][ T9233] x_tables: unsorted underflow at hook 3 [ 323.955049][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 323.961226][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 324.102913][ T6369] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 324.123329][ T6369] usb 2-1: device descriptor read/8, error -71 [ 324.192921][ T7007] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 324.225064][ T9242] batadv_slave_1: entered promiscuous mode [ 324.315627][ T6369] usb usb2-port1: unable to enumerate USB device [ 324.430908][ T9245] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 324.792946][ T7007] usb 5-1: Using ep0 maxpacket: 32 [ 324.799383][ T7007] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 324.827149][ T7007] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.854907][ T7007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.871119][ T7007] usb 5-1: config 1 has no interface number 0 [ 324.887497][ T7007] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.912033][ T7007] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 324.947433][ T7007] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 324.980286][ T7007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.133289][ T9246] vxcan1: entered promiscuous mode [ 325.748614][ T9246] team0: Device vxcan1 is of different type [ 325.758539][ T7007] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 325.770711][ T6025] vxcan1 speed is unknown, defaulting to 1000 [ 325.771134][ T30] audit: type=1400 audit(2000000200.940:918): avc: denied { write } for pid=9251 comm="syz.1.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 325.777903][ T6025] syz2: Port: 1 Link DOWN [ 325.800657][ T9252] xt_hashlimit: size too large, truncated to 1048576 [ 325.807401][ T118] vxcan1 speed is unknown, defaulting to 1000 [ 325.813688][ T5925] vxcan1 speed is unknown, defaulting to 1000 [ 325.819743][ T6369] vxcan1 speed is unknown, defaulting to 1000 [ 325.849746][ T9254] –: renamed from veth1_to_team [ 326.036471][ T7007] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 326.148311][ T9238] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 326.158271][ T9238] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 326.166822][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 326.425951][ T9238] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.431960][ T9238] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 326.453808][ T7007] usb 5-1: USB disconnect, device number 20 [ 326.474535][ T7007] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 326.570187][ T9238] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.606393][ T9238] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 326.665958][ T9238] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.692307][ T9238] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 327.016533][ T9238] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 327.037165][ T9238] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 327.112902][ T7007] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 327.298694][ T9282] vxcan1 speed is unknown, defaulting to 1000 [ 327.586545][ T9285] GUP no longer grows the stack in syz.1.842 (9285): 200000005000-200000008000 (200000004000) [ 328.009640][ T9285] CPU: 1 UID: 0 PID: 9285 Comm: syz.1.842 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.009678][ T9285] Tainted: [L]=SOFTLOCKUP [ 328.009685][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.009696][ T9285] Call Trace: [ 328.009702][ T9285] [ 328.009710][ T9285] dump_stack_lvl+0x16c/0x1f0 [ 328.009740][ T9285] gup_vma_lookup+0x1d2/0x220 [ 328.009763][ T9285] fixup_user_fault+0x26e/0x540 [ 328.009787][ T9285] ? futex_lock_pi+0x687/0x7c0 [ 328.009806][ T9285] fault_in_user_writeable+0x70/0xe0 [ 328.009830][ T9285] futex_lock_pi+0x690/0x7c0 [ 328.009851][ T9285] ? __pfx_futex_lock_pi+0x10/0x10 [ 328.009865][ T9285] ? __futex_wait+0x24b/0x2f0 [ 328.009897][ T9285] ? futex_private_hash_put+0x160/0x1b0 [ 328.009917][ T9285] ? __pfx_futex_wake_mark+0x10/0x10 [ 328.009942][ T9285] do_futex+0x11a/0x350 [ 328.009961][ T9285] ? __pfx_do_futex+0x10/0x10 [ 328.009979][ T9285] ? __vm_munmap+0x1d2/0x380 [ 328.009997][ T9285] __x64_sys_futex+0x1e0/0x4c0 [ 328.010018][ T9285] ? __pfx___x64_sys_futex+0x10/0x10 [ 328.010037][ T9285] ? xfd_validate_state+0x61/0x180 [ 328.010057][ T9285] do_syscall_64+0xcd/0xf80 [ 328.010077][ T9285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.010090][ T9285] RIP: 0033:0x7f1c59f8f749 [ 328.010101][ T9285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.010114][ T9285] RSP: 002b:00007f1c579f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 328.010128][ T9285] RAX: ffffffffffffffda RBX: 00007f1c5a1e6360 RCX: 00007f1c59f8f749 [ 328.010141][ T9285] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 328.010149][ T9285] RBP: 00007f1c5a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.010156][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.010164][ T9285] R13: 00007f1c5a1e63f8 R14: 00007f1c5a1e6360 R15: 00007ffe3cf300f8 [ 328.010184][ T9285] [ 329.056468][ T6074] Bluetooth: hci5: Frame reassembly failed (-90) [ 329.108762][ T6074] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.333657][ T9330] fuse: Bad value for 'fd' [ 331.173009][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.161399][ T9353] binder: 9343:9353 ioctl 400c620e 0 returned -14 [ 333.290327][ T7007] IPVS: starting estimator thread 0... [ 333.537241][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 333.632798][ T9372] IPVS: using max 71 ests per chain, 170400 per kthread [ 333.894721][ T9381] netlink: 52 bytes leftover after parsing attributes in process `syz.0.862'. [ 333.923094][ T7007] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 334.428048][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.862'. [ 334.452486][ T9389] fuse: Bad value for 'fd' [ 334.498046][ T7007] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.527445][ T7007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.631390][ T7007] usb 2-1: config 0 descriptor?? [ 334.868808][ T9386] hsr_slave_0: left promiscuous mode [ 334.953089][ T9386] hsr_slave_1: left promiscuous mode [ 335.167899][ T9375] vxcan1 speed is unknown, defaulting to 1000 [ 335.468192][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 335.479052][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 335.777989][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 335.786249][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 336.008316][ T9407] netlink: 'syz.3.871': attribute type 2 has an invalid length. [ 336.017190][ T9407] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 336.253637][ T9398] ceph: No mds server is up or the cluster is laggy [ 336.720992][ T7007] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 336.746619][ T7007] [drm:udl_init] *ERROR* Selecting channel failed [ 336.768526][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 336.789173][ T7007] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 336.796517][ T7007] [drm] Initialized udl on minor 2 [ 336.802762][ T7007] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.812577][ T7007] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 336.833598][ T5891] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 336.940203][ T30] audit: type=1400 audit(2000000212.110:919): avc: denied { remount } for pid=9417 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 336.940361][ T5891] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 336.978990][ T7007] usb 2-1: USB disconnect, device number 31 [ 337.104209][ T30] audit: type=1400 audit(2000000212.280:920): avc: denied { connect } for pid=9421 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 337.155830][ T50] Bluetooth: hci5: Frame reassembly failed (-90) [ 337.170221][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 337.170380][ T30] audit: type=1400 audit(2000000212.300:921): avc: denied { bind } for pid=9421 comm="syz.3.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 337.223123][ T5891] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 337.269098][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 337.404597][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.416792][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 337.427243][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 337.441949][ T5891] usb 3-1: Product: syz [ 337.454165][ T5891] usb 3-1: Manufacturer: syz [ 337.466450][ T5891] usb 3-1: SerialNumber: syz [ 337.509026][ T5891] usb 3-1: config 0 descriptor?? [ 337.570144][ T5891] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 337.933725][ T8351] udevd[8351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.972697][ T5891] usb 3-1: USB disconnect, device number 17 [ 338.232922][ T30] audit: type=1326 audit(2000000213.380:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.325165][ T30] audit: type=1326 audit(2000000213.380:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.360534][ T30] audit: type=1326 audit(2000000213.480:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.414162][ T30] audit: type=1326 audit(2000000213.480:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.438608][ T30] audit: type=1326 audit(2000000213.480:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.462261][ T30] audit: type=1326 audit(2000000213.480:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 338.501661][ T30] audit: type=1326 audit(2000000213.480:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9440 comm="syz.0.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59d498f749 code=0x7ffc0000 [ 339.167765][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 339.852457][ T9489] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.963127][ T6758] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 340.162929][ T6758] usb 3-1: Using ep0 maxpacket: 32 [ 340.179725][ T6758] usb 3-1: unable to get BOS descriptor or descriptor too short [ 340.203045][ T6758] usb 3-1: config 4 has an invalid interface number: 136 but max is 0 [ 340.251301][ T6758] usb 3-1: config 4 has no interface number 0 [ 340.271532][ T6758] usb 3-1: config 4 interface 136 has no altsetting 0 [ 340.307804][ T6758] usb 3-1: string descriptor 0 read error: -22 [ 340.350968][ T6758] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 340.378867][ T6758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.006106][ T6758] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 341.899207][ T6758] dvb-usb: bulk message failed: -22 (4/0) [ 341.905709][ T6758] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 341.916533][ T6758] dvb-usb: bulk message failed: -22 (5/0) [ 341.922261][ T6758] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 341.937344][ T6758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.029384][ T6758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.040218][ T6758] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 342.053014][ T6758] usb 3-1: media controller created [ 342.068388][ T6758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.159308][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 342.159338][ T30] audit: type=1400 audit(2000000217.330:938): avc: denied { bind } for pid=9484 comm="syz.2.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.502150][ T6758] ttusb2: set interface to alts=3 failed [ 342.728791][ T3313] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.743420][ T3313] Bluetooth: hci5: Frame reassembly failed (-84) [ 342.765515][ T6758] DVB: Unable to find symbol tda10023_attach() [ 342.771749][ T6758] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 342.993570][ T6758] rc_core: IR keymap rc-tt-1500 not found [ 343.055975][ T6758] Registered IR keymap rc-empty [ 343.106152][ T6758] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 343.185294][ T6758] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 343.218376][ T30] audit: type=1400 audit(2000000218.390:939): avc: denied { read } for pid=5172 comm="acpid" name="event4" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.276022][ T6758] dvb-usb: schedule remote query interval to 150 msecs. [ 343.300366][ T6758] dvb-usb: bulk message failed: -22 (4/0) [ 343.316705][ T6758] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 343.332797][ T30] audit: type=1400 audit(2000000218.390:940): avc: denied { open } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3036 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 343.356781][ T6758] dvb-usb: bulk message failed: -22 (5/0) [ 343.362604][ T6758] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 343.484266][ T118] dvb-usb: bulk message failed: -22 (4/0) [ 343.608712][ T9529] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 343.785694][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 344.486716][ T118] ttusb2: there might have been an error during control message transfer. (rlen = 9, was 0) [ 344.501313][ T6758] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 344.512475][ T118] dvb-usb: error -5 while querying for an remote control event. [ 344.613817][ T6758] usb 3-1: USB disconnect, device number 18 [ 344.672886][ T30] audit: type=1400 audit(2000000218.390:941): avc: denied { ioctl } for pid=5172 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3036 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.753170][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 344.761941][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 344.782310][ T6758] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 344.866437][ T118] libceph: connect (1)[c::]:6789 error -101 [ 345.159048][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 345.447047][ T6758] libceph: connect (1)[c::]:6789 error -101 [ 345.776929][ T6758] libceph: mon0 (1)[c::]:6789 connect error [ 345.808006][ T9534] ceph: No mds server is up or the cluster is laggy [ 348.306897][ T3456] Bluetooth: hci5: Frame reassembly failed (-90) [ 348.333806][ T3456] Bluetooth: hci5: Frame reassembly failed (-84) [ 350.353963][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 350.354111][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 352.042213][ T9649] netlink: 'syz.4.941': attribute type 10 has an invalid length. [ 352.111456][ T9649] veth1_macvtap: left promiscuous mode [ 354.290415][ T30] audit: type=1400 audit(2000000228.970:942): avc: denied { create } for pid=9663 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 354.377001][ T30] audit: type=1400 audit(2000000228.980:943): avc: denied { sys_admin } for pid=9663 comm="syz.4.946" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 354.473525][ T30] audit: type=1400 audit(2000000229.610:944): avc: denied { setopt } for pid=9668 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.111029][ T9680] fuse: Bad value for 'fd' [ 356.340156][ T9697] No such timeout policy "syz1" [ 356.347055][ T9697] devtmpfs: Unknown parameter '/dev/input/event#' [ 356.631107][ T3472] Bluetooth: hci5: Frame reassembly failed (-90) [ 356.746909][ T30] audit: type=1400 audit(2000000231.920:945): avc: denied { execute } for pid=9703 comm="syz.1.954" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.071870][ T9705] FAT-fs (nbd1): unable to read boot sector [ 358.716294][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 358.722650][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 359.380917][ T30] audit: type=1400 audit(2000000234.550:946): avc: denied { create } for pid=9729 comm="syz.3.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 361.313406][ T9744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9744 comm=syz.3.963 [ 361.686449][ T30] audit: type=1400 audit(2000000236.860:947): avc: denied { listen } for pid=9747 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.113967][ T30] audit: type=1400 audit(2000000239.290:948): avc: denied { bind } for pid=9778 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 364.414464][ T30] audit: type=1400 audit(2000000239.590:949): avc: denied { create } for pid=9781 comm="syz.1.976" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 364.438855][ T9783] FAT-fs (loop3): unable to read boot sector [ 364.439840][ T30] audit: type=1400 audit(2000000239.610:950): avc: denied { mounton } for pid=9781 comm="syz.1.976" path="/172/file0" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 366.044392][ T30] audit: type=1400 audit(2000000241.180:951): avc: denied { unlink } for pid=5810 comm="syz-executor" name="file0" dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 367.922943][ T5932] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 368.096301][ T30] audit: type=1400 audit(2000000243.270:952): avc: denied { getopt } for pid=9824 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 368.139052][ T5932] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 368.207334][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.228191][ T5932] usb 2-1: config 0 descriptor?? [ 368.291971][ T9832] tmpfs: Bad value for 'mpol' [ 368.438798][ T9808] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 369.317129][ T5932] ath6kl: Failed to submit usb control message: -110 [ 369.360727][ T5932] ath6kl: unable to send the bmi data to the device: -110 [ 369.369027][ T5932] ath6kl: Unable to send get target info: -110 [ 369.400600][ T5932] ath6kl: Failed to init ath6kl core: -110 [ 369.463780][ T5932] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 370.276758][ T5932] usb 2-1: USB disconnect, device number 32 [ 370.308427][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 372.176689][ T9878] netlink: 88 bytes leftover after parsing attributes in process `syz.2.997'. [ 372.392996][ T5891] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 372.546294][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 372.886844][ T5891] usb 5-1: device descriptor read/64, error -32 [ 373.042239][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 373.142966][ T5891] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 373.183933][ T30] audit: type=1400 audit(2000000248.360:953): avc: denied { setopt } for pid=9883 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 373.273043][ T5813] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 373.292898][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 373.299536][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.312886][ T5891] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 373.322975][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.362740][ T5891] usb 5-1: config 0 descriptor?? [ 373.382724][ T5891] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 373.410125][ T5891] usb 5-1: Detected SIO [ 373.434473][ T5891] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 373.442559][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 373.464477][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 373.486534][ T5813] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 373.497149][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.505527][ T5813] usb 3-1: Product: syz [ 373.509804][ T5813] usb 3-1: Manufacturer: syz [ 373.514692][ T5813] usb 3-1: SerialNumber: syz [ 373.543368][ T5813] usb 3-1: config 0 descriptor?? [ 373.554467][ T5813] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 373.567839][ T5813] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 373.581160][ T9896] vxcan1 speed is unknown, defaulting to 1000 [ 373.589346][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 373.599634][ T5932] usb 5-1: USB disconnect, device number 22 [ 373.615265][ T5932] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 373.633353][ T5932] ftdi_sio 5-1:0.0: device disconnected [ 374.069432][ T30] audit: type=1400 audit(2000000249.240:954): avc: denied { lock } for pid=9902 comm="syz.3.1007" path="socket:[25148]" dev="sockfs" ino=25148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 374.144666][ T30] audit: type=1400 audit(2000000249.320:955): avc: denied { getopt } for pid=9900 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.166074][ T5813] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 374.319543][ T5813] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 374.335924][ T5813] em28xx 3-1:0.0: board has no eeprom [ 374.456248][ T5813] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 374.474806][ T5813] em28xx 3-1:0.0: dvb set to bulk mode. [ 374.480483][ T6369] em28xx 3-1:0.0: Binding DVB extension [ 374.493754][ T5813] usb 3-1: USB disconnect, device number 19 [ 374.500950][ T5813] em28xx 3-1:0.0: Disconnecting em28xx [ 376.201961][ T6369] em28xx 3-1:0.0: Registering input extension [ 376.230783][ T5813] em28xx 3-1:0.0: Closing input extension [ 376.262774][ T5813] em28xx 3-1:0.0: Freeing device [ 376.370547][ T30] audit: type=1326 audit(2000000251.540:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 376.560839][ T30] audit: type=1326 audit(2000000251.570:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 376.586340][ T6758] libceph: connect (1)[c::]:6789 error -101 [ 376.596887][ T6758] libceph: mon0 (1)[c::]:6789 connect error [ 376.869929][ T6758] libceph: connect (1)[c::]:6789 error -101 [ 377.045281][ T30] audit: type=1326 audit(2000000251.570:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 377.076161][ T30] audit: type=1326 audit(2000000251.570:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 377.080188][ T6758] libceph: mon0 (1)[c::]:6789 connect error [ 377.112531][ T30] audit: type=1326 audit(2000000251.570:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 377.141138][ T30] audit: type=1326 audit(2000000251.570:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 377.169947][ T30] audit: type=1326 audit(2000000251.570:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 377.415044][ T9926] ceph: No mds server is up or the cluster is laggy [ 378.196856][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.203284][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.316887][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 378.316901][ T30] audit: type=1326 audit(2000000253.490:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0ee4d8f807 code=0x7ffc0000 [ 378.392134][ T30] audit: type=1326 audit(2000000253.490:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0ee4d46bdd code=0x7ffc0000 [ 378.471688][ T30] audit: type=1326 audit(2000000253.490:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0ee4dc3e89 code=0x7ffc0000 [ 378.524110][ T9946] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1019'. [ 378.628439][ T30] audit: type=1326 audit(2000000253.490:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0ee4d46c47 code=0x7ffc0000 [ 378.765701][ T30] audit: type=1326 audit(2000000253.490:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0ee4d46357 code=0x7ffc0000 [ 378.945271][ T30] audit: type=1326 audit(2000000253.490:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 379.785822][ T30] audit: type=1326 audit(2000000253.490:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0ee4d463b6 code=0x7ffc0000 [ 379.957629][ T30] audit: type=1326 audit(2000000253.490:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 380.002993][ T30] audit: type=1326 audit(2000000253.490:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ee4d8f34b code=0x7ffc0000 [ 380.057139][ T30] audit: type=1326 audit(2000000253.490:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.2.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 380.212108][ T9975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37928 sclass=netlink_route_socket pid=9975 comm=syz.4.1025 [ 380.821340][ T9987] ubi0: attaching mtd0 [ 380.971895][ T9988] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 382.350381][T10004] sd 0:0:1:0: device reset [ 384.092858][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 384.092874][ T30] audit: type=1400 audit(2000000259.260:1300): avc: denied { name_bind } for pid=10011 comm="syz.2.1035" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 384.989224][T10025] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 385.015691][T10025] CIFS mount error: No usable UNC path provided in device string! [ 385.015691][T10025] [ 385.026004][T10025] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.116687][T10025] netlink: 6716 bytes leftover after parsing attributes in process `syz.0.1038'. [ 385.982443][ T30] audit: type=1400 audit(2000000261.150:1301): avc: denied { listen } for pid=10041 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.013013][ T30] audit: type=1400 audit(2000000261.180:1302): avc: denied { accept } for pid=10041 comm="syz.0.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.451982][ T30] audit: type=1400 audit(2000000261.620:1303): avc: denied { append } for pid=10041 comm="syz.0.1042" name="sg0" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.795141][T10060] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 386.953826][ T30] audit: type=1400 audit(2000000262.130:1304): avc: denied { read } for pid=10063 comm="syz.0.1049" path="socket:[25577]" dev="sockfs" ino=25577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 387.984797][T10084] sctp: [Deprecated]: syz.0.1054 (pid 10084) Use of int in maxseg socket option. [ 387.984797][T10084] Use struct sctp_assoc_value instead [ 388.515376][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 388.750638][T10096] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 389.375077][T10102] batadv_slave_1: entered promiscuous mode [ 389.404400][T10101] batadv_slave_1: left promiscuous mode [ 391.202892][ T5932] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 391.365408][ T5932] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 391.388703][ T5932] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 391.402923][ T5932] usb 5-1: config 1 interface 0 has no altsetting 0 [ 391.411455][ T5932] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 391.424069][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.432289][ T5932] usb 5-1: Product: syz [ 391.443945][ T5932] usb 5-1: Manufacturer: syz [ 391.454314][ T5932] usb 5-1: SerialNumber: syz [ 391.469842][T10118] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 391.483810][T10118] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 391.750641][ T6369] libceph: connect (1)[c::]:6789 error -101 [ 391.893737][ T6369] libceph: mon0 (1)[c::]:6789 connect error [ 392.419826][ T7007] libceph: connect (1)[c::]:6789 error -101 [ 392.426411][ T7007] libceph: mon0 (1)[c::]:6789 connect error [ 392.845874][T10126] ceph: No mds server is up or the cluster is laggy [ 393.287087][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.300072][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.308768][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.320263][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.329725][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.351573][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.362002][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.371170][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.384050][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.391545][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.473915][T10147] vxcan1 speed is unknown, defaulting to 1000 [ 393.490553][T10152] batadv_slave_1: entered promiscuous mode [ 393.544022][T10151] batadv_slave_1: left promiscuous mode [ 393.858121][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 394.146711][ T30] audit: type=1326 audit(2000000269.320:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.3.1075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa38f749 code=0x0 [ 394.243156][ T5932] rtl8150 5-1:1.0: couldn't reset the device [ 394.294506][ T5932] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 394.337892][ T5932] usb 5-1: USB disconnect, device number 23 [ 394.704685][T10170] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 394.841130][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 395.474494][ T5829] Bluetooth: hci6: command tx timeout [ 396.112180][T10147] chnl_net:caif_netlink_parms(): no params data found [ 396.223361][ T118] libceph: connect (1)[c::]:6789 error -101 [ 396.229409][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 397.098530][ T118] libceph: connect (1)[c::]:6789 error -101 [ 397.105061][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 397.249731][T10195] atomic_op ffff88807a404998 conn xmit_atomic 0000000000000000 [ 397.552978][ T5829] Bluetooth: hci6: command tx timeout [ 397.615170][ T118] libceph: connect (1)[c::]:6789 error -101 [ 397.706136][ T118] libceph: mon0 (1)[c::]:6789 connect error [ 397.718997][T10183] ceph: No mds server is up or the cluster is laggy [ 397.893708][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.026546][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.064811][T10147] bridge_slave_0: entered allmulticast mode [ 398.151597][T10147] bridge_slave_0: entered promiscuous mode [ 398.495090][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.521895][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.545302][T10147] bridge_slave_1: entered allmulticast mode [ 398.568896][T10147] bridge_slave_1: entered promiscuous mode [ 398.822148][T10147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.866220][T10147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.930260][T10147] team0: Port device team_slave_0 added [ 398.947951][T10147] team0: Port device team_slave_1 added [ 399.135005][T10147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.142076][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.234058][T10219] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1088'. [ 399.300241][T10147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.381005][T10147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.641409][T10147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.667392][ T5829] Bluetooth: hci6: command tx timeout [ 399.682846][T10147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.901744][T10147] hsr_slave_0: entered promiscuous mode [ 399.912703][T10147] hsr_slave_1: entered promiscuous mode [ 399.920935][T10147] debugfs: 'hsr0' already exists in 'hsr' [ 399.930267][T10147] Cannot create hsr debugfs directory [ 401.724018][ T5829] Bluetooth: hci6: command tx timeout [ 402.290832][T10147] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.403398][T10147] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.423233][T10147] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.461270][T10147] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.471085][ T5932] libceph: connect (1)[c::]:6789 error -22 [ 402.479527][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 402.510644][ T30] audit: type=1400 audit(2000000277.680:1306): avc: denied { append } for pid=10248 comm="syz.4.1095" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.740217][T10147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.747418][ T5925] libceph: connect (1)[c::]:6789 error -22 [ 402.761610][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 402.791693][T10147] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.862146][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.869268][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.949360][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.956450][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.246061][T10251] ceph: No mds server is up or the cluster is laggy [ 403.517482][T10147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.194290][ T5813] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 404.405957][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 404.456488][T10287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10287 comm=syz.0.1101 [ 404.478631][T10287] netlink: 'syz.0.1101': attribute type 21 has an invalid length. [ 404.527671][ T5813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 404.627188][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.709817][ T5813] usb 3-1: Product: syz [ 404.768716][ T5813] usb 3-1: Manufacturer: syz [ 404.812929][ T5813] usb 3-1: SerialNumber: syz [ 404.974055][ T5813] usb 3-1: config 0 descriptor?? [ 406.000895][ T5813] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 406.199897][T10294] netlink: 'syz.4.1104': attribute type 72 has an invalid length. [ 406.207842][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 407.056632][ T30] audit: type=1400 audit(2000000282.040:1307): avc: denied { bind } for pid=10295 comm="syz.3.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.416757][T10147] veth0_vlan: entered promiscuous mode [ 407.431621][T10307] geneve2: entered promiscuous mode [ 407.476093][T10147] veth1_vlan: entered promiscuous mode [ 407.595021][T10147] veth0_macvtap: entered promiscuous mode [ 407.625130][T10147] veth1_macvtap: entered promiscuous mode [ 407.674477][T10147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.705802][T10147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.752684][ T3472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.789137][ T3472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.817218][ T3472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.846813][ T3472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.953048][ T30] audit: type=1400 audit(2000000283.060:1308): avc: denied { bind } for pid=10269 comm="syz.2.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 408.080925][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.107474][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.184542][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.195301][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.210898][ T5813] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 408.231411][ T30] audit: type=1400 audit(2000000283.400:1309): avc: denied { mounton } for pid=10147 comm="syz-executor" path="/root/syzkaller.hENk5X/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 408.256202][ T5813] usb 3-1: USB disconnect, device number 20 [ 408.289047][ T30] audit: type=1400 audit(2000000283.430:1310): avc: denied { mounton } for pid=10147 comm="syz-executor" path="/root/syzkaller.hENk5X/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 408.331915][ T30] audit: type=1400 audit(2000000283.430:1311): avc: denied { mounton } for pid=10147 comm="syz-executor" path="/root/syzkaller.hENk5X/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 408.383724][ T30] audit: type=1400 audit(2000000283.440:1312): avc: denied { mounton } for pid=10147 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 408.552922][ T7007] IPVS: starting estimator thread 0... [ 408.643014][T10316] IPVS: using max 48 ests per chain, 115200 per kthread [ 410.249882][T10330] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 410.258327][T10330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1106'. [ 410.269554][T10330] dummy0: entered promiscuous mode [ 410.312493][T10330] bridge0: port 3(dummy0) entered blocking state [ 410.324506][T10330] bridge0: port 3(dummy0) entered disabled state [ 410.338252][T10330] dummy0: entered allmulticast mode [ 410.420206][T10330] bridge0: port 3(dummy0) entered blocking state [ 410.426780][T10330] bridge0: port 3(dummy0) entered forwarding state [ 412.114237][ T3313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.133075][ T6369] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 413.422878][ T6369] usb 3-1: Using ep0 maxpacket: 16 [ 413.874888][ T6369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 414.563003][ T6369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 414.576442][ T6369] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 414.588833][ T6369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.607771][ T6369] usb 3-1: Product: syz [ 414.613214][ T6369] usb 3-1: Manufacturer: syz [ 414.617847][ T6369] usb 3-1: SerialNumber: syz [ 414.653320][ T6369] usb 3-1: config 0 descriptor?? [ 414.666780][ T6369] hub 3-1:0.0: bad descriptor, ignoring hub [ 414.672785][ T6369] hub 3-1:0.0: probe with driver hub failed with error -5 [ 414.768586][ T6369] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.937242][T10374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 415.292545][ T6369] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 415.350091][T10036] udevd[10036]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.492877][ T7007] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 415.718220][T10381] netlink: 'syz.3.1127': attribute type 6 has an invalid length. [ 415.736128][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1127'. [ 415.738900][ T7007] usb 5-1: Using ep0 maxpacket: 32 [ 415.771376][ T7007] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 415.779484][T10382] netlink: 'syz.3.1127': attribute type 6 has an invalid length. [ 415.795872][ T7007] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.818503][ T7007] usb 5-1: config 0 has no interface number 0 [ 415.824682][T10382] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1127'. [ 415.838766][ T7007] usb 5-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 415.863207][ T7007] usb 5-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 415.918603][ T7007] usb 5-1: config 0 interface 8 has no altsetting 0 [ 415.959429][ T7007] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 415.983038][ T7007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.003160][ T7007] usb 5-1: Product: syz [ 416.015601][ T7007] usb 5-1: Manufacturer: syz [ 416.030873][ T7007] usb 5-1: SerialNumber: syz [ 416.064038][ T7007] usb 5-1: config 0 descriptor?? [ 416.486811][ T7007] ath6kl: Failed to submit usb control message: -71 [ 416.503393][ T7007] ath6kl: unable to send the bmi data to the device: -71 [ 416.578554][ T7007] ath6kl: Unable to send get target info: -71 [ 416.727509][ T7007] ath6kl: Failed to init ath6kl core: -71 [ 416.762325][ T7007] ath6kl_usb 5-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 416.834007][ T7007] usb 5-1: USB disconnect, device number 24 [ 416.873472][ T6758] usb 3-1: USB disconnect, device number 21 [ 417.383930][T10405] netlink: 'syz.5.1133': attribute type 10 has an invalid length. [ 417.770818][ T30] audit: type=1400 audit(2000000292.940:1313): avc: denied { getopt } for pid=10416 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.209330][T10405] veth0_vlan: left promiscuous mode [ 418.238267][ T30] audit: type=1400 audit(2000000293.410:1314): avc: denied { mounton } for pid=10416 comm="syz.2.1136" path="/201/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.244471][T10405] veth0_vlan: entered promiscuous mode [ 418.273021][T10417] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 418.287648][T10405] team0: Device veth0_vlan failed to register rx_handler [ 418.346991][ T30] audit: type=1400 audit(2000000293.440:1315): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.592901][ T30] audit: type=1400 audit(2000000293.480:1316): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.592938][ T30] audit: type=1400 audit(2000000293.480:1317): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.592968][ T30] audit: type=1400 audit(2000000293.480:1318): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.592997][ T30] audit: type=1400 audit(2000000293.480:1319): avc: denied { open } for pid=10416 comm="syz.2.1136" path="/201/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.593027][ T30] audit: type=1400 audit(2000000293.480:1320): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.593054][ T30] audit: type=1400 audit(2000000293.480:1321): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 418.593084][ T30] audit: type=1400 audit(2000000293.480:1322): avc: denied { read } for pid=10416 comm="syz.2.1136" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 420.289903][ T7473] libceph: connect (1)[c::]:6789 error -101 [ 420.290005][ T7473] libceph: mon0 (1)[c::]:6789 connect error [ 420.367570][T10441] ceph: No mds server is up or the cluster is laggy [ 421.888235][T10475] SET target dimension over the limit! [ 422.812303][T10485] mmap: syz.0.1154 (10485): VmData 25841664 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 423.525869][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 423.525887][ T30] audit: type=1400 audit(2000000298.620:1343): avc: denied { getopt } for pid=10490 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 423.659511][T10501] vxcan1 speed is unknown, defaulting to 1000 [ 424.492303][ T6369] libceph: connect (1)[c::]:6789 error -101 [ 424.510912][ T6369] libceph: mon0 (1)[c::]:6789 connect error [ 424.738381][T10518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.081450][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 425.090273][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 425.092103][T10504] ceph: No mds server is up or the cluster is laggy [ 426.533244][ T7473] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 426.558649][T10543] FAULT_INJECTION: forcing a failure. [ 426.558649][T10543] name failslab, interval 1, probability 0, space 0, times 0 [ 426.598720][T10543] CPU: 1 UID: 0 PID: 10543 Comm: syz.0.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.598746][T10543] Tainted: [L]=SOFTLOCKUP [ 426.598752][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 426.598761][T10543] Call Trace: [ 426.598767][T10543] [ 426.598773][T10543] dump_stack_lvl+0x16c/0x1f0 [ 426.598801][T10543] should_fail_ex+0x512/0x640 [ 426.598827][T10543] ? fs_reclaim_acquire+0xae/0x150 [ 426.598851][T10543] should_failslab+0xc2/0x120 [ 426.598874][T10543] __kmalloc_noprof+0xeb/0x910 [ 426.598900][T10543] ? tomoyo_encode2+0x100/0x3e0 [ 426.598928][T10543] ? tomoyo_encode2+0x100/0x3e0 [ 426.598948][T10543] tomoyo_encode2+0x100/0x3e0 [ 426.598975][T10543] tomoyo_encode+0x29/0x50 [ 426.598996][T10543] tomoyo_realpath_from_path+0x18f/0x6e0 [ 426.599021][T10543] ? tomoyo_profile+0x47/0x60 [ 426.599049][T10543] tomoyo_path_number_perm+0x245/0x580 [ 426.599068][T10543] ? tomoyo_path_number_perm+0x237/0x580 [ 426.599090][T10543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 426.599111][T10543] ? find_held_lock+0x2b/0x80 [ 426.599158][T10543] ? find_held_lock+0x2b/0x80 [ 426.599182][T10543] ? hook_file_ioctl_common+0x144/0x410 [ 426.599213][T10543] ? __fget_files+0x20e/0x3c0 [ 426.599249][T10543] security_file_ioctl+0x9b/0x240 [ 426.599273][T10543] __x64_sys_ioctl+0xb7/0x210 [ 426.599294][T10543] do_syscall_64+0xcd/0xf80 [ 426.599318][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.599335][T10543] RIP: 0033:0x7f59d498f749 [ 426.599349][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.599364][T10543] RSP: 002b:00007f59d58a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.599380][T10543] RAX: ffffffffffffffda RBX: 00007f59d4be5fa0 RCX: 00007f59d498f749 [ 426.599390][T10543] RDX: 0000200000000a00 RSI: 00000000000089e2 RDI: 0000000000000004 [ 426.599400][T10543] RBP: 00007f59d58a4090 R08: 0000000000000000 R09: 0000000000000000 [ 426.599409][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.599418][T10543] R13: 00007f59d4be6038 R14: 00007f59d4be5fa0 R15: 00007fff96a10bd8 [ 426.599443][T10543] [ 426.599461][T10543] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.784263][ T7473] usb 5-1: Using ep0 maxpacket: 32 [ 426.852945][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 427.196421][ T7473] usb 5-1: config 0 has an invalid descriptor of length 220, skipping remainder of the config [ 427.229995][ T7473] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.276126][ T7473] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 427.324595][ T7473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.335855][ T30] audit: type=1400 audit(2000000302.500:1344): avc: denied { read } for pid=10540 comm="syz.3.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 427.445372][ T7473] usb 5-1: config 0 descriptor?? [ 427.462882][ T6369] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 427.804272][ T6369] usb 3-1: Using ep0 maxpacket: 32 [ 427.864209][ T6369] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 427.893359][ T6369] usb 3-1: config 0 has no interface number 0 [ 427.899500][ T6369] usb 3-1: config 0 interface 225 has no altsetting 0 [ 427.987918][ T6369] usb 3-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=c3.d0 [ 428.008023][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1165'. [ 428.496592][ T6369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.515049][ T6369] usb 3-1: Product: syz [ 428.522537][ T6369] usb 3-1: Manufacturer: syz [ 428.527220][ T6369] usb 3-1: SerialNumber: syz [ 428.535821][ T6369] usb 3-1: config 0 descriptor?? [ 429.315275][ T6369] usb 3-1: USB disconnect, device number 22 [ 429.520533][ T5932] usb 5-1: USB disconnect, device number 25 [ 429.699587][ T7473] libceph: connect (1)[c::]:6789 error -101 [ 429.730846][ T7473] libceph: mon0 (1)[c::]:6789 connect error [ 430.155434][ T7473] libceph: connect (1)[c::]:6789 error -101 [ 430.200758][ T7473] libceph: mon0 (1)[c::]:6789 connect error [ 430.456696][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1186'. [ 430.492989][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1186'. [ 430.539325][ T30] audit: type=1400 audit(2000000305.710:1345): avc: denied { listen } for pid=10600 comm="syz.5.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 430.783493][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 430.889495][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 430.903938][ T30] audit: type=1400 audit(2000000305.740:1346): avc: denied { accept } for pid=10600 comm="syz.5.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 431.073516][T10579] ceph: No mds server is up or the cluster is laggy [ 431.245504][T10611] binder: 10609:10611 ioctl 8008662c 200000000240 returned -22 [ 432.242351][ T30] audit: type=1326 audit(2000000307.410:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 432.262311][T10623] CIFS: VFS: Malformed UNC in devname [ 432.792603][ T30] audit: type=1326 audit(2000000307.410:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 432.871099][ T30] audit: type=1326 audit(2000000307.410:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 432.907270][ T6369] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 432.916165][ T30] audit: type=1326 audit(2000000307.410:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 433.064674][ T30] audit: type=1326 audit(2000000307.900:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ee4d8f783 code=0x7ffc0000 [ 433.088509][ T6369] usb 6-1: Using ep0 maxpacket: 16 [ 433.097045][ T6369] usb 6-1: config 0 interface 0 has no altsetting 0 [ 433.104337][ T6369] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 433.147401][ T6369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.178927][ T6369] usb 6-1: config 0 descriptor?? [ 433.188996][ T30] audit: type=1326 audit(2000000307.900:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ee4d8f783 code=0x7ffc0000 [ 433.265042][ T30] audit: type=1326 audit(2000000307.920:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ee4d8f749 code=0x7ffc0000 [ 433.396547][ T30] audit: type=1326 audit(2000000307.920:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.2.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0ee4d8f783 code=0x7ffc0000 [ 433.735641][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.756007][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.809160][T10642] xt_socket: unknown flags 0x50 [ 434.168253][ T6369] hid (null): global environment stack underflow [ 434.186059][ T6369] hid (null): unknown global tag 0xc [ 434.218570][ T6369] hid (null): global environment stack underflow [ 434.262941][ T6369] hid (null): unknown global tag 0xd [ 434.268265][ T6369] hid (null): unknown global tag 0xc [ 434.298002][ T6369] hid (null): report_id 3104 is invalid [ 434.342959][ T6369] hid (null): unknown global tag 0xc [ 434.362876][ T6369] hid (null): unknown global tag 0xe [ 434.390125][ T6369] hid (null): unknown global tag 0x3b [ 434.413643][ T6369] hid (null): unknown global tag 0xc [ 434.430232][ T6369] hid (null): report_id 0 is invalid [ 434.462935][ T6369] hid (null): unknown global tag 0xa7 [ 434.478890][ T6369] hid (null): report_id 0 is invalid [ 434.504377][ T6369] hid (null): global environment stack overflow [ 434.528203][ T6369] hid (null): unknown global tag 0xc [ 434.546037][ T6369] hid (null): report_id 25068 is invalid [ 434.566133][ T6369] hid (null): global environment stack overflow [ 434.639916][ T6369] hid (null): report_id 0 is invalid [ 434.660122][ T6369] hid (null): global environment stack overflow [ 434.681532][ T6369] hid (null): unknown global tag 0xc [ 434.705120][ T6369] hid (null): unknown global tag 0x58 [ 434.820355][ T6369] usb 6-1: USB disconnect, device number 2 [ 437.958474][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 437.958489][ T30] audit: type=1400 audit(2000000313.130:1434): avc: denied { create } for pid=10681 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 438.996555][ T30] audit: type=1400 audit(2000000313.220:1435): avc: denied { bind } for pid=10681 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.016675][ T30] audit: type=1400 audit(2000000313.220:1436): avc: denied { connect } for pid=10681 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.042891][ T30] audit: type=1400 audit(2000000313.230:1437): avc: denied { write } for pid=10681 comm="syz.4.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 439.712989][ T6369] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 439.891744][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.898778][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.202869][ T6369] usb 3-1: Using ep0 maxpacket: 16 [ 440.256298][ T30] audit: type=1400 audit(2000000315.370:1438): avc: denied { getopt } for pid=10699 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 440.443279][ T6369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.510873][ T6369] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 440.568573][ T6369] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.690744][ T6369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.908701][ T30] audit: type=1400 audit(2000000315.990:1439): avc: denied { bind } for pid=10707 comm="syz.0.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 441.255775][ T6369] usb 3-1: config 0 descriptor?? [ 441.300831][ T30] audit: type=1400 audit(2000000316.470:1440): avc: denied { write } for pid=10713 comm="syz.5.1215" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 441.642312][T10723] fuse: Bad value for 'fd' [ 442.599766][ T6369] usbhid 3-1:0.0: can't add hid device: -71 [ 442.654768][ T6369] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 442.803488][ T6369] usb 3-1: USB disconnect, device number 23 [ 443.238798][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1224'. [ 443.365956][T10740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1223'. [ 443.383154][ T6369] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 443.535227][ T6369] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 443.535363][ T6369] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 443.535384][ T6369] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.538551][ T6369] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.538627][ T6369] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.538669][ T6369] usb 5-1: Product: syz [ 443.538707][ T6369] usb 5-1: Manufacturer: syz [ 443.538776][ T6369] usb 5-1: SerialNumber: syz [ 443.614429][T10740] 9pnet_fd: Insufficient options for proto=fd [ 443.642728][ T6369] usb 5-1: config 0 descriptor?? [ 443.704227][ T6369] hub 5-1:0.0: bad descriptor, ignoring hub [ 443.704308][ T6369] hub 5-1:0.0: probe with driver hub failed with error -5 [ 443.785214][ T6369] usb 5-1: selecting invalid altsetting 0 [ 443.901119][ T30] audit: type=1400 audit(2000000319.040:1441): avc: denied { map } for pid=10732 comm="syz.4.1222" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 443.978168][T10742] tmpfs: Bad value for 'mpol' [ 443.997535][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 444.078177][ T30] audit: type=1400 audit(2000000319.250:1442): avc: denied { connect } for pid=10743 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 445.877446][T10762] xt_connbytes: Forcing CT accounting to be enabled [ 445.893835][ T5891] usb 5-1: USB disconnect, device number 26 [ 446.001438][T10765] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 446.042659][T10766] batadv_slave_1: entered promiscuous mode [ 446.044580][T10764] batadv_slave_1: left promiscuous mode [ 446.770214][ T3004] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.933254][ T30] audit: type=1400 audit(2000000324.760:1443): avc: denied { ioctl } for pid=10777 comm="syz.3.1234" path="socket:[29524]" dev="sockfs" ino=29524 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.263018][ T5978] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 450.465521][T10798] batadv_slave_1: entered promiscuous mode [ 450.485201][ T5978] usb 3-1: device descriptor read/64, error -71 [ 450.492611][T10797] batadv_slave_1: left promiscuous mode [ 450.714333][ T5891] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 450.765498][ T5978] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 450.892858][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 450.906145][ T5891] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 450.922100][ T5891] usb 5-1: config 0 has no interface number 0 [ 450.928914][ T5978] usb 3-1: device descriptor read/64, error -71 [ 450.942874][ T5891] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 450.968014][ T5891] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 450.991234][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.024740][ T5891] usb 5-1: Product: syz [ 451.043594][ T5978] usb usb3-port1: attempt power cycle [ 451.049127][ T5891] usb 5-1: Manufacturer: syz [ 451.175938][ T5891] usb 5-1: SerialNumber: syz [ 451.207650][ T5891] usb 5-1: config 0 descriptor?? [ 451.231544][T10801] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.479843][T10801] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.528607][ T30] audit: type=1400 audit(2000000326.670:1444): avc: denied { create } for pid=10806 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 452.160300][T10801] input: syz0 as /devices/virtual/input/input16 [ 452.174017][ T5891] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 452.384012][ T5891] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 452.428171][ T5891] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 452.512189][T10817] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 452.840746][ T5891] asix 5-1:0.188: probe with driver asix failed with error -71 [ 452.851719][ T5891] usb 5-1: USB disconnect, device number 27 [ 453.348745][T10821] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 455.272073][ T30] audit: type=1400 audit(2000000330.440:1445): avc: denied { mounton } for pid=10829 comm="syz.5.1249" path="/28/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 455.480958][T10837] batadv_slave_1: entered promiscuous mode [ 455.527865][T10836] batadv_slave_1: left promiscuous mode [ 455.554388][T10840] fuse: Bad value for 'fd' [ 459.637373][T10877] batadv_slave_1: entered promiscuous mode [ 459.670729][T10876] batadv_slave_1: left promiscuous mode [ 459.753177][ T5891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 459.892947][ T5891] usb 5-1: device descriptor read/64, error -71 [ 460.034090][T10881] netlink: 'syz.5.1265': attribute type 30 has an invalid length. [ 460.088329][T10880] netlink: 'syz.5.1265': attribute type 30 has an invalid length. [ 460.174456][T10882] 9pnet_virtio: no channels available for device syz [ 461.165262][T10889] /dev/nullb0: Can't lookup blockdev [ 461.263799][T10888] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 461.272024][T10891] fuse: Bad value for 'fd' [ 461.277275][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 461.433275][ T5891] usb 5-1: device descriptor read/64, error -71 [ 461.554939][ T5891] usb usb5-port1: attempt power cycle [ 461.763058][T10895] fuse: Bad value for 'fd' [ 462.023226][ T5891] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 462.147741][ T5891] usb 5-1: device descriptor read/8, error -71 [ 462.422935][ T5891] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 462.966565][ T5891] usb 5-1: device descriptor read/8, error -71 [ 463.114809][ T5891] usb usb5-port1: unable to enumerate USB device [ 463.754387][T10913] vxcan1 speed is unknown, defaulting to 1000 [ 463.767292][T10918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=10918 comm=syz.5.1276 [ 464.181386][ T30] audit: type=1400 audit(2000000339.350:1446): avc: denied { unmount } for pid=10923 comm="syz.3.1277" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 464.267748][ T30] audit: type=1400 audit(2000000339.400:1447): avc: denied { read } for pid=10925 comm="syz.0.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 464.333916][T10929] veth0_macvtap: left promiscuous mode [ 464.540888][T10929] macvtap0: entered allmulticast mode [ 466.690748][ T30] audit: type=1400 audit(2000000341.450:1448): avc: denied { map } for pid=10951 comm="syz.5.1285" path="socket:[31006]" dev="sockfs" ino=31006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.900234][T10961] lo speed is unknown, defaulting to 1000 [ 466.906061][T10961] lo speed is unknown, defaulting to 1000 [ 466.913041][T10961] lo speed is unknown, defaulting to 1000 [ 466.921914][T10961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 466.936423][T10961] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 467.037288][T10961] lo speed is unknown, defaulting to 1000 [ 467.044754][T10961] lo speed is unknown, defaulting to 1000 [ 467.051749][T10961] lo speed is unknown, defaulting to 1000 [ 467.058834][T10961] lo speed is unknown, defaulting to 1000 [ 467.065952][T10961] lo speed is unknown, defaulting to 1000 [ 467.073205][T10961] lo speed is unknown, defaulting to 1000 [ 467.080244][T10961] lo speed is unknown, defaulting to 1000 [ 467.159272][ T30] audit: type=1400 audit(2000000341.450:1449): avc: denied { accept } for pid=10951 comm="syz.5.1285" path="socket:[31006]" dev="sockfs" ino=31006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 467.644001][T10977] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1291'. [ 467.682977][ T5925] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 468.106835][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 468.158196][ T30] audit: type=1400 audit(2000000343.330:1450): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 468.163150][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 468.266683][ T5924] libceph: connect (1)[c::]:6789 error -22 [ 468.273487][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 468.318916][ T5925] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 468.337397][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.357823][ T5925] usb 5-1: Product: syz [ 468.409226][ T5925] usb 5-1: Manufacturer: syz [ 468.414411][ T5925] usb 5-1: SerialNumber: syz [ 468.431578][ T5925] usb 5-1: config 0 descriptor?? [ 468.444770][ T5925] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 468.553408][ T5924] libceph: connect (1)[c::]:6789 error -22 [ 468.676238][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 468.745938][T10970] tmpfs: Bad value for 'nr_blocks' [ 469.135713][T10984] ceph: No mds server is up or the cluster is laggy [ 470.096385][ T5924] libceph: connect (1)[c::]:6789 error -22 [ 470.102537][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 471.543861][ T5925] usb 5-1: USB disconnect, device number 32 [ 472.262620][T11016] fuse: Unknown parameter '0xffffffffffffffffp' [ 473.061717][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1300'. [ 473.070885][T11023] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 473.928935][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1305'. [ 474.005198][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1305'. [ 475.514100][ T30] audit: type=1400 audit(2000000350.690:1451): avc: denied { mounton } for pid=11047 comm="syz.5.1309" path="/proc/156" dev="proc" ino=30552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 475.542509][T11049] 0x00000000000a-0x000000020000 : "" [ 475.653921][T11049] ftl_cs: FTL header corrupt! [ 475.815620][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=11043 comm=syz.2.1304 [ 475.963401][ T30] audit: type=1400 audit(2000000350.710:1452): avc: denied { ioctl } for pid=11047 comm="syz.5.1309" path="/45/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 476.004210][T11044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=11044 comm=syz.2.1304 [ 476.124868][ T30] audit: type=1400 audit(2000000350.730:1453): avc: denied { create } for pid=11046 comm="syz.4.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.472638][T11065] FAULT_INJECTION: forcing a failure. [ 476.472638][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.485851][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.0.1301 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.485874][T11065] Tainted: [L]=SOFTLOCKUP [ 476.485878][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.485883][T11065] Call Trace: [ 476.485888][T11065] [ 476.485892][T11065] dump_stack_lvl+0x16c/0x1f0 [ 476.485910][T11065] should_fail_ex+0x512/0x640 [ 476.485929][T11065] _copy_from_user+0x2e/0xd0 [ 476.485946][T11065] copy_msghdr_from_user+0x98/0x160 [ 476.485958][T11065] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 476.485970][T11065] ? __lock_acquire+0x436/0x2890 [ 476.485983][T11065] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 476.485998][T11065] ___sys_sendmsg+0xfe/0x1d0 [ 476.486010][T11065] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.486020][T11065] ? find_held_lock+0x2b/0x80 [ 476.486050][T11065] __sys_sendmsg+0x16d/0x220 [ 476.486061][T11065] ? __pfx___sys_sendmsg+0x10/0x10 [ 476.486070][T11065] ? irqentry_exit+0x1dd/0x8c0 [ 476.486083][T11065] ? rcu_is_watching+0x12/0xc0 [ 476.486098][T11065] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 476.486112][T11065] do_syscall_64+0xcd/0xf80 [ 476.486127][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.486138][T11065] RIP: 0033:0x7f59d498f749 [ 476.486146][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.486155][T11065] RSP: 002b:00007f59d5883038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.486166][T11065] RAX: ffffffffffffffda RBX: 00007f59d4be6090 RCX: 00007f59d498f749 [ 476.486172][T11065] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 476.486177][T11065] RBP: 00007f59d5883090 R08: 0000000000000000 R09: 0000000000000000 [ 476.486183][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.486189][T11065] R13: 00007f59d4be6128 R14: 00007f59d4be6090 R15: 00007fff96a10bd8 [ 476.486203][T11065] [ 478.272659][T11071] vxcan1 speed is unknown, defaulting to 1000 [ 478.633372][T11092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1314'. [ 480.156010][T11071] lo speed is unknown, defaulting to 1000 [ 481.004595][T11120] syz.2.1321 (11120): drop_caches: 2 [ 482.457235][ T30] audit: type=1400 audit(2000000357.630:1454): avc: denied { read write } for pid=11110 comm="syz.4.1319" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 482.525041][T11130] Bluetooth: Invalid esc byte 0xff [ 482.603951][ T50] Bluetooth: (null): Invalid header checksum [ 482.772943][ T50] Bluetooth: (null): Invalid header checksum [ 482.802901][ T50] Bluetooth: (null): Invalid header checksum [ 482.916105][ T30] audit: type=1400 audit(2000000358.090:1455): avc: denied { open } for pid=11110 comm="syz.4.1319" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 483.630879][T11141] Driver unsupported XDP return value 0 on prog (id 275) dev N/A, expect packet loss! [ 483.675179][T11142] sp0: Synchronizing with TNC [ 483.857624][ T30] audit: type=1400 audit(2000000358.970:1456): avc: denied { mount } for pid=11139 comm="syz.5.1327" name="/" dev="rpc_pipefs" ino=30669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 484.301069][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1328'. [ 484.510475][T11139] [U] è` [ 486.136334][T11170] fuse: Bad value for 'fd' [ 488.319024][ T30] audit: type=1400 audit(2000000363.490:1457): avc: denied { connect } for pid=11182 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 488.434391][ T30] audit: type=1400 audit(2000000363.490:1458): avc: denied { write } for pid=11182 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 488.996163][T11192] vxcan1 speed is unknown, defaulting to 1000 [ 489.256631][T11201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1342'. [ 490.517799][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 490.533030][T11211] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.678992][T11192] lo speed is unknown, defaulting to 1000 [ 490.763331][ T5813] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 490.944653][ T5813] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 490.983243][ T5813] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.037977][ T5813] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.075543][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.178761][T11192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.327089][ T5813] usb 3-1: usb_control_msg returned -32 [ 491.329682][T11209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.332851][ T5813] usbtmc 3-1:16.0: can't read capabilities [ 491.343654][T11209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.051226][ T30] audit: type=1400 audit(2000000367.220:1459): avc: denied { setattr } for pid=11218 comm="syz.0.1346" name="BNEP" dev="sockfs" ino=31880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 492.439194][T11224] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 492.705656][T11227] IPVS: Error connecting to the multicast addr [ 492.788039][T11227] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 493.706640][ T118] usb 3-1: USB disconnect, device number 27 [ 494.954994][T11238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.230480][ T118] lo speed is unknown, defaulting to 1000 [ 498.655200][T11265] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1359'. [ 498.903073][ T5891] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 499.272928][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 499.285097][ T5891] usb 5-1: config 0 has an invalid interface number: 191 but max is 0 [ 499.328890][ T5891] usb 5-1: config 0 has no interface number 0 [ 499.526606][T11274] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1360'. [ 499.543955][ T5891] usb 5-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 499.582468][ T5891] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 499.600877][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.623358][ T5891] usb 5-1: Product: syz [ 499.741922][ T5891] usb 5-1: Manufacturer: syz [ 499.775300][ T5891] usb 5-1: SerialNumber: syz [ 500.286301][T11274] syz.3.1360 (11274) used greatest stack depth: 19688 bytes left [ 500.315164][ T5891] usb 5-1: config 0 descriptor?? [ 500.327803][T11267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 500.433629][ T5891] asix 5-1:0.191: probe with driver asix failed with error -22 [ 500.821464][T11290] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 501.218531][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.226536][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.191670][ T5891] usb 5-1: USB disconnect, device number 33 [ 502.644532][T11303] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 503.724147][T11312] program syz.4.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 504.258739][T11314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.452328][T11314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.564897][ T5924] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 504.601922][T11314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.734193][ T5924] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 504.898801][T11314] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 504.972907][ T6370] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 505.101886][ T1973] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.127528][ T5924] usb 6-1: config 0 has no interface number 0 [ 505.155121][ T5924] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9 [ 505.162183][ T1973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.177902][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.197135][ T5924] usb 6-1: Product: syz [ 505.206085][ T5924] usb 6-1: Manufacturer: syz [ 505.227005][ T5924] usb 6-1: SerialNumber: syz [ 505.236096][ T3565] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.253604][ T5924] usb 6-1: config 0 descriptor?? [ 505.265085][ T6370] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 505.265517][ T5924] xr_serial 6-1:0.46: More than one union descriptor, skipping ... [ 505.284654][ T3565] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.355278][ T6370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.410380][ T6370] usb 5-1: Product: syz [ 505.427542][ T6370] usb 5-1: Manufacturer: syz [ 505.432150][ T6370] usb 5-1: SerialNumber: syz [ 505.471476][ T5924] usb 6-1: USB disconnect, device number 3 [ 506.934133][ T6370] rtl8150 5-1:1.0: couldn't reset the device [ 506.952662][ T6370] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 508.303421][T11345] fuse: Bad value for 'fd' [ 508.330526][T11347] fuse: Bad value for 'fd' [ 508.941369][T11355] syz2: rxe_newlink: already configured on vxcan1 [ 510.396581][T11360] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1386'. [ 510.437705][T11360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.762373][ T6370] usb 5-1: USB disconnect, device number 34 [ 510.952902][ T5891] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 511.134453][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 511.232013][ T5891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 511.232122][ T30] audit: type=1400 audit(2000000386.350:1460): avc: denied { ioctl } for pid=11367 comm="syz.4.1388" path="uts:[4026532809]" dev="nsfs" ino=4026532809 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 511.403181][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.432880][ T5891] usb 6-1: Product: syz [ 511.442907][ T5891] usb 6-1: Manufacturer: syz [ 511.447538][ T5891] usb 6-1: SerialNumber: syz [ 511.985534][ T30] audit: type=1326 audit(2000000386.930:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.4.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f431bb8f749 code=0x0 [ 512.110611][ T5891] usb 6-1: config 0 descriptor?? [ 512.506227][ T5891] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 512.573170][ T30] audit: type=1400 audit(2000000387.740:1462): avc: denied { accept } for pid=11388 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.963381][T11408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=11408 comm=syz.0.1398 [ 514.590271][T11416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.631191][T11415] gretap0: left promiscuous mode [ 514.707531][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.714824][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.250666][ T5891] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 516.761256][ T5925] usb 6-1: USB disconnect, device number 4 [ 516.788002][T11432] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 516.874430][T11437] kAFS: unable to lookup cell '(,' [ 518.065536][T11415] bridge_slave_0: left allmulticast mode [ 518.125998][T11415] bridge_slave_0: left promiscuous mode [ 518.183069][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.276709][T11454] overlayfs: invalid origin (0000) [ 518.297927][T11415] bridge_slave_1: left allmulticast mode [ 518.317389][T11415] bridge_slave_1: left promiscuous mode [ 518.371991][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.422029][T11415] bond0: (slave 30): Releasing backup interface [ 518.603065][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 518.648129][T11415] bond0: (slave bond_slave_1): Releasing backup interface [ 518.847407][T11415] team0: Port device team_slave_0 removed [ 519.026598][T11415] team0: Port device team_slave_1 removed [ 519.111668][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.223677][T11415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.398928][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.590186][T11415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.725813][T11415] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 521.032869][ T5932] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 521.296350][ T5932] usb 6-1: unable to get BOS descriptor or descriptor too short [ 521.314527][ T5932] usb 6-1: config 4 has an invalid interface number: 169 but max is 0 [ 521.381170][T11486] xt_socket: unknown flags 0x50 [ 521.389268][ T5932] usb 6-1: config 4 has no interface number 0 [ 521.396226][ T5932] usb 6-1: config 4 interface 169 altsetting 3 endpoint 0x5 has an invalid bInterval 126, changing to 10 [ 521.408992][ T5932] usb 6-1: config 4 interface 169 has no altsetting 0 [ 521.434755][ T5932] usb 6-1: New USB device found, idVendor=11ff, idProduct=5ad3, bcdDevice=f0.d3 [ 521.456851][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.475865][ T5932] usb 6-1: Product: syz [ 521.485167][ T5932] usb 6-1: Manufacturer: syz [ 521.494846][ T5932] usb 6-1: SerialNumber: syz [ 521.841013][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 522.002908][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 522.016727][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 522.034524][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.054378][ T10] usb 5-1: config 0 has no interface number 0 [ 522.061000][ T10] usb 5-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 522.079112][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=64.bd [ 522.088532][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.096955][ T10] usb 5-1: Product: syz [ 522.101246][ T10] usb 5-1: Manufacturer: syz [ 522.192963][ T10] usb 5-1: SerialNumber: syz [ 522.206290][ T10] usb 5-1: config 0 descriptor?? [ 522.234855][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 522.357567][ T10] snd-usb-audio 5-1:0.184: probe with driver snd-usb-audio failed with error -2 [ 522.450402][ T10] usb 5-1: USB disconnect, device number 35 [ 522.731107][T11504] udevd[11504]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.436492][T11519] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 523.450250][ T30] audit: type=1400 audit(2000000398.620:1463): avc: denied { mounton } for pid=11509 comm="syz.0.1423" path="/284/file0" dev="ramfs" ino=32659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 523.567560][ T5932] usb 6-1: USB disconnect, device number 5 [ 523.661690][ T30] audit: type=1400 audit(2000000398.680:1464): avc: denied { create } for pid=11509 comm="syz.0.1423" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 524.284275][ T30] audit: type=1400 audit(2000000398.680:1465): avc: denied { link } for pid=11509 comm="syz.0.1423" name="file1" dev="ramfs" ino=32660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 524.343251][ T30] audit: type=1400 audit(2000000398.680:1466): avc: denied { rename } for pid=11509 comm="syz.0.1423" name="file1" dev="overlay" ino=32660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 524.656616][ T30] audit: type=1400 audit(2000000398.680:1467): avc: denied { unlink } for pid=11509 comm="syz.0.1423" name="file0" dev="overlay" ino=32660 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 524.739976][ T30] audit: type=1400 audit(2000000398.680:1468): avc: denied { setattr } for pid=11509 comm="syz.0.1423" name="#1d" dev="tmpfs" ino=1577 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 524.915007][ T30] audit: type=1400 audit(2000000400.090:1469): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 525.701677][ T6758] libceph: connect (1)[c::]:6789 error -101 [ 525.713195][ T6758] libceph: mon0 (1)[c::]:6789 connect error [ 526.257899][ T6758] libceph: connect (1)[c::]:6789 error -101 [ 526.286678][ T6758] libceph: mon0 (1)[c::]:6789 connect error [ 526.323847][T11549] fuse: Bad value for 'fd' [ 526.843589][ T5925] libceph: connect (1)[c::]:6789 error -101 [ 526.861743][ T5925] libceph: mon0 (1)[c::]:6789 connect error [ 527.105019][T11554] xt_socket: unknown flags 0x50 [ 527.313003][ T31] INFO: task syz.1.1018:9952 blocked for more than 143 seconds. [ 527.320964][ T31] Tainted: G L syzkaller #0 [ 527.328569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 527.337263][ T31] task:syz.1.1018 state:D stack:29064 pid:9952 tgid:9942 ppid:5810 task_flags:0x400140 flags:0x00080002 [ 527.349296][ T31] Call Trace: [ 527.352591][ T31] [ 527.355587][ T31] ? __schedule+0x10b9/0x6150 [ 527.361004][ T31] __schedule+0x1139/0x6150 [ 527.383710][ T31] ? __pfx___schedule+0x10/0x10 [ 527.418687][ T31] ? find_held_lock+0x2b/0x80 [ 527.461511][ T31] ? schedule+0x2d7/0x3a0 [ 527.488635][ T31] schedule+0xe7/0x3a0 [ 527.507273][ T31] schedule_preempt_disabled+0x13/0x30 [ 527.534280][T11539] ceph: No mds server is up or the cluster is laggy [ 527.545758][ T31] __mutex_lock+0xc69/0x1ca0 [ 527.562396][ T31] ? blk_trace_ioctl+0xfb/0x300 [ 527.581793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 527.606537][ T31] ? avc_has_extended_perms+0x47c/0x1090 [ 527.630915][ T31] ? blk_trace_ioctl+0xfb/0x300 [ 527.653751][ T31] blk_trace_ioctl+0xfb/0x300 [ 527.672893][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 527.693516][ T31] blkdev_common_ioctl+0x2275/0x2b80 [ 527.710340][ T31] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 527.728932][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 527.746537][ T31] ? do_vfs_ioctl+0x128/0x14f0 [ 527.764887][ T31] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 527.780765][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 527.799950][ T31] blkdev_ioctl+0x2b5/0x6e0 [ 527.804861][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 527.809955][ T31] ? selinux_file_ioctl+0x180/0x270 [ 527.816129][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 527.821620][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 527.827044][ T31] __x64_sys_ioctl+0x18e/0x210 [ 527.834645][ T31] do_syscall_64+0xcd/0xf80 [ 527.850329][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.862895][ T31] RIP: 0033:0x7f1c59f8f749 [ 527.882659][ T31] RSP: 002b:00007f1c5ad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 527.922844][ T31] RAX: ffffffffffffffda RBX: 00007f1c5a1e6180 RCX: 00007f1c59f8f749 [ 527.930840][ T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000008 [ 527.977451][ T31] RBP: 00007f1c5a013f91 R08: 0000000000000000 R09: 0000000000000000 [ 527.996215][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.013285][ T31] R13: 00007f1c5a1e6218 R14: 00007f1c5a1e6180 R15: 00007ffe3cf300f8 [ 528.030025][ T31] [ 528.040973][ T31] [ 528.040973][ T31] Showing all locks held in the system: [ 528.063831][ T31] 2 locks held by kworker/u8:0/12: [ 528.083092][ T31] #0: ffff8881446bf148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 528.114110][ T31] #1: ffffc90000117c90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 528.148113][ T31] 1 lock held by khungtaskd/31: [ 528.167994][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 528.192988][ T31] 3 locks held by kswapd0/88: [ 528.202214][ T31] 2 locks held by getty/5576: [ 528.215721][ T31] #0: ffff88814e6e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 528.237230][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 528.250959][ T31] 3 locks held by syz.1.1018/9948: [ 528.256692][ T31] 1 lock held by syz.1.1018/9952: [ 528.261804][ T31] #0: ffff888026113888 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xfb/0x300 [ 528.271998][ T31] 3 locks held by syz.2.1434/11553: [ 528.278114][ T31] [ 528.280497][ T31] ============================================= [ 528.280497][ T31] [ 528.342977][ T31] NMI backtrace for cpu 0 [ 528.342998][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 528.343020][ T31] Tainted: [L]=SOFTLOCKUP [ 528.343026][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.343035][ T31] Call Trace: [ 528.343040][ T31] [ 528.343048][ T31] dump_stack_lvl+0x116/0x1f0 [ 528.343075][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 528.343092][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 528.343111][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 528.343130][ T31] sys_info+0x133/0x180 [ 528.343153][ T31] watchdog+0xe66/0x1180 [ 528.343177][ T31] ? rcu_is_watching+0x12/0xc0 [ 528.343193][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.343209][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.343232][ T31] ? __kthread_parkme+0x19e/0x250 [ 528.343250][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.343268][ T31] kthread+0x3c5/0x780 [ 528.343287][ T31] ? __pfx_kthread+0x10/0x10 [ 528.343307][ T31] ? rcu_is_watching+0x12/0xc0 [ 528.343322][ T31] ? __pfx_kthread+0x10/0x10 [ 528.343341][ T31] ret_from_fork+0x983/0xb10 [ 528.343357][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.343375][ T31] ? __switch_to+0x7af/0x10d0 [ 528.343393][ T31] ? __pfx_kthread+0x10/0x10 [ 528.343412][ T31] ret_from_fork_asm+0x1a/0x30 [ 528.343448][ T31] [ 528.343454][ T31] Sending NMI from CPU 0 to CPUs 1: [ 528.483521][ C1] NMI backtrace for cpu 1 [ 528.483536][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.483553][ C1] Tainted: [L]=SOFTLOCKUP [ 528.483558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.483565][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 528.483586][ C1] Code: 86 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f9 11 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 528.483598][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 528.483609][ C1] RAX: 000000000245862d RBX: 0000000000000001 RCX: ffffffff8b7866d9 [ 528.483617][ C1] RDX: 0000000000000000 RSI: ffffffff8daceab2 RDI: ffffffff8bf2b480 [ 528.483625][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 528.483633][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 528.483641][ C1] R13: ffff88801dac24c0 R14: ffffffff9088bdd0 R15: 0000000000000000 [ 528.483649][ C1] FS: 0000000000000000(0000) GS:ffff8881249f4000(0000) knlGS:0000000000000000 [ 528.483662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.483670][ C1] CR2: 00007fb2ab228f98 CR3: 000000002a0de000 CR4: 00000000003526f0 [ 528.483677][ C1] Call Trace: [ 528.483682][ C1] [ 528.483686][ C1] default_idle+0x13/0x20 [ 528.483703][ C1] default_idle_call+0x6c/0xb0 [ 528.483720][ C1] do_idle+0x38d/0x510 [ 528.483744][ C1] ? __pfx_do_idle+0x10/0x10 [ 528.483765][ C1] cpu_startup_entry+0x4f/0x60 [ 528.483782][ C1] start_secondary+0x21d/0x2d0 [ 528.483795][ C1] ? __pfx_start_secondary+0x10/0x10 [ 528.483809][ C1] common_startup_64+0x13e/0x148 [ 528.483831][ C1] [ 528.710346][T11558] trusted_key: syz.3.1432 sent an empty control message without MSG_MORE. [ 528.731836][T11558] netlink: 'syz.3.1432': attribute type 10 has an invalid length. [ 528.771983][T11558] bridge0: port 3(dummy0) entered disabled state [ 528.780437][T11558] dummy0: left allmulticast mode [ 528.785847][T11558] dummy0: left promiscuous mode [ 528.815807][T11558] bridge0: port 3(dummy0) entered disabled state [ 528.822351][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 528.829196][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 528.839875][ T31] Tainted: [L]=SOFTLOCKUP [ 528.844189][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.854218][ T31] Call Trace: [ 528.857481][ T31] [ 528.860393][ T31] dump_stack_lvl+0x3d/0x1f0 [ 528.864961][ T31] vpanic+0x640/0x6f0 [ 528.868921][ T31] panic+0xca/0xd0 [ 528.872618][ T31] ? __pfx_panic+0x10/0x10 [ 528.877004][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 528.882959][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 528.889097][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 528.895236][ T31] ? watchdog+0xe83/0x1180 [ 528.899636][ T31] ? watchdog+0xe76/0x1180 [ 528.904026][ T31] watchdog+0xe94/0x1180 [ 528.908243][ T31] ? rcu_is_watching+0x12/0xc0 [ 528.912993][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.917666][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.922859][ T31] ? __kthread_parkme+0x19e/0x250 [ 528.927860][ T31] ? __pfx_watchdog+0x10/0x10 [ 528.932509][ T31] kthread+0x3c5/0x780 [ 528.936552][ T31] ? __pfx_kthread+0x10/0x10 [ 528.941115][ T31] ? rcu_is_watching+0x12/0xc0 [ 528.945849][ T31] ? __pfx_kthread+0x10/0x10 [ 528.950414][ T31] ret_from_fork+0x983/0xb10 [ 528.954979][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 528.960062][ T31] ? __switch_to+0x7af/0x10d0 [ 528.964714][ T31] ? __pfx_kthread+0x10/0x10 [ 528.969277][ T31] ret_from_fork_asm+0x1a/0x30 [ 528.974026][ T31] [ 528.977302][ T31] Kernel Offset: disabled [ 528.981600][ T31] Rebooting in 86400 seconds..