last executing test programs: 13.534376938s ago: executing program 0 (id=162): pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) getsockopt(r0, 0x4, 0x0, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x155101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffff9, 0x1000, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000280)) io_uring_enter(r5, 0x468f, 0xc4bc, 0x2c, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x110003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 11.47613373s ago: executing program 4 (id=168): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0xfffffffffffffe03}}, 0xfffffdef) 11.419519914s ago: executing program 3 (id=169): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xef, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setparam(r1, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r7, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x64, r7, 0x33c, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0xa, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x3831354f}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) 10.840901995s ago: executing program 2 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x5, 0xb04, 0x2, 0x2, 0xe8, 0x7, 0x2}}, {0x8, 0x2, [0x3, 0xd]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f00000001c0)={0x2, 0x1}, 0x1) 10.708703392s ago: executing program 4 (id=173): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x5ec, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_emit_ethernet(0xa2, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb86dd607f00ef006c3c00fe8000000000000000000000000000bb0000000000000000000000000000000100000400000000000000000000649078020000000000000000000000f279da0a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fd27b60b8c69746126e0d966f0c3e56fc14dae18465161ec18b9e3b9589a839e395132418126d939bc090001004a40d488fa56645904447ffa429c4baf01b3cd5401b69ba7ac54f731a28f183454a6abdf"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4) 10.271424701s ago: executing program 0 (id=174): socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x16440, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000001700)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x2eda, 0x20000, 0x1, 0xc1}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x6e, 0x5, 0x0, 0x4, 0x0, 0xb4a, 0x9, 0x8, 0xfffffffd, 0x3}, 0x0) r7 = socket(0x25, 0x800, 0x9) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x30101) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount(&(0x7f0000000880)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000840)='sysfs\x00', 0x8000, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r8, 0xc0945662, &(0x7f00000003c0)={0x3, 0x0, '\x00', {0x0, @bt={0x1a8, 0x0, 0x0, 0x3, 0xb, 0x1, 0xfffffff7, 0x6, 0x1, 0x5, 0x0, 0x7d8, 0x1, 0x2, 0x10, 0x30, {0x9c73, 0x1}, 0x3, 0x67}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000002c0)=0x1) sendmsg$rds(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000680)=""/220, 0xdc}], 0x5, 0x0, 0x0, 0x4012}, 0x20044885) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 8.875004854s ago: executing program 1 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) unshare(0x20000400) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x2586, 0x0, 0xffffffff, 0x6b1}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000440)=0x91) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 8.339090449s ago: executing program 4 (id=177): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001240)={0x38, 0x3, 0x2, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0x4fa11, 0xfffffffe}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000011c0)={0x5, 0x0, &(0x7f0000001180)=[0xffffffffffffffff]}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r3, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000001200)={0x73622a85, 0xa, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x4, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r5) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x8cff) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, r6, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x551, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 8.130154983s ago: executing program 2 (id=178): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) sysinfo(&(0x7f0000000340)=""/193) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffa9, 0x0, 0x0, 0x0, 0xb709}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100), &(0x7f0000000480)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224-ce\x00'/79], &(0x7f0000000500), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x18e) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) 7.599962731s ago: executing program 2 (id=179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 7.466763633s ago: executing program 2 (id=180): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000ac0)=""/46) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000180)=0x40) 7.235475823s ago: executing program 0 (id=181): r0 = gettid() tkill(r0, 0x12) prlimit64(r0, 0xe, &(0x7f00000001c0)={0x8, 0xd6c2}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000004, 0x89, 0xfffffffd, 0x0, 0x20001e56, 0xb, 0xe69, 0x3c, 0x10008, 0x106, 0x8000000, 0xdffffff8]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xceb4, 0x800, 0x103fc, 0x4000159}) r4 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000140), 0x7, 0x620201) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 7.195149808s ago: executing program 3 (id=182): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], 0x0, 0x1, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r8, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r9}, 0x20) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x2008}, {r0, 0x5083}, {r0, 0x400}, {r0, 0x2442}], 0x4, &(0x7f00000000c0)={r10, r11+10000000}, &(0x7f0000000100)={[0xd]}, 0x8) 6.280722881s ago: executing program 2 (id=183): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x81, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@fwd={0x1}, @struct={0x3, 0x1, 0x0, 0x4, 0x1, 0xfde, [{0x1, 0x0, 0x7}]}, @func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x61, 0x0, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/255, 0x4e, 0xff, 0x1, 0x1}, 0x28) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000001400)={r0, r0, 0xffff, 0x22, &(0x7f00000013c0)="b7a0431d48db864b029451900945dee991d6fecea0dac0daa508cd08f4ed2abbc0ac", 0x1, 0x6, 0x4, 0x3, 0x5, 0x6, 0x7, 'syz1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={r1, 0x20, &(0x7f0000001300)={&(0x7f0000000200)=""/255, 0xff, 0x0, &(0x7f0000000300)=""/4096, 0x1000}}, 0x10) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0x4, 0x6, "144828", 0x6, 0x2}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x3, "8054a2", 0x4, 0x2}]}}}, 0x20) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x30, 0x7, 0x6, 0x5, 0x0, 0x0, {0x8, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040010) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000001380)=0x5, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x5) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, {[0x8000000000000001, 0x1c2e, 0x100000000, 0x7fff, 0xd61, 0x5, 0x7, 0xdc]}}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x32b200) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060300000000ea22010902240001000064000904340102d469e70009058a"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) io_setup(0x80000000, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) 6.267443457s ago: executing program 3 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/schedstat\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000800)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"000000000000000000006f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x8, &(0x7f0000002200)=0x1) 6.065761243s ago: executing program 1 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='O', 0x1, 0x5}]) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) read$msr(r2, &(0x7f0000034000)=""/102400, 0x19000) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) fcntl$getownex(r4, 0x10, &(0x7f0000000180)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r5, 0x3, &(0x7f00000002c0)) socket$inet6(0xa, 0xb, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket(0x3, 0x800000003, 0x3ffffffd) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7], 0x34}}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r9) 6.050590589s ago: executing program 4 (id=186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 4.64967037s ago: executing program 3 (id=187): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sndctrl(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980), 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000040)={'veth0_macvtap\x00', @ifru_flags=0x8000}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) 4.63828017s ago: executing program 0 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r4, 0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @sliced={0xf, [0x1, 0x800, 0x3c, 0x1, 0x6, 0x6, 0x1, 0x2, 0x9, 0xf8ae, 0x40, 0x3ff, 0x1, 0x9, 0x3, 0x3, 0x6b99, 0x8, 0x200, 0xf, 0x4, 0x9, 0xff, 0x9, 0x7, 0x7, 0x2, 0x9, 0x0, 0xb3, 0x3, 0x88, 0x3ff, 0x7, 0x4, 0x4, 0x200, 0x7, 0x4, 0x0, 0xfffb, 0x9000, 0xa, 0x0, 0xe, 0x9, 0x6ad2, 0x3], 0x800}}}) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x4, 0x5, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x80, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x0, 0x9) 3.684157867s ago: executing program 4 (id=189): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r4 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) pwritev(r4, &(0x7f00000002c0)=[{0x0}], 0x1, 0xfffffffffffffffb, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, 0x0]}, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.586934747s ago: executing program 0 (id=190): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(0x0) sync_file_range(0xffffffffffffffff, 0xff, 0x7, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) clock_gettime(0x5, &(0x7f0000000080)) 3.190603482s ago: executing program 1 (id=191): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r2 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r4, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000740)={{r1}, r5, 0x16, @unused=[0x3, 0xfffffffffffffffc, 0x1000, 0x5], @subvolid=0x7fffffffffffffff}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x1) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000140)="f762616e60993992fbaed505337d08adb74f9aba84c04441182c571bc2d340d13b20bc7b72c394304ae0bd", 0x2b}, {&(0x7f0000000280)="fd952a752fa8cb71ce13043ee83512f790d5ed1333b187d3a7e91e21898f716ac1d6534acc754dd82a07a7117ca70cd862fc5053aca2803de505c9b367d5f154d5d8c1787a7e5b6a639c5a09bb08546972dfe4f985c770e369f45f335381cf2caf5f1499a1ae067c7ba247302aed3b", 0x6f}, {&(0x7f0000000340)="a9ede876847ee771b6771d30c3b8664984cf1758cde6227821b7a1e3711de87b913588b2c9504fd3e89c569d7a5629f12256d93b5cf815682e690bbd09d6f8b3bb9c9cfa75aab231f81e8172cb4d8a69ceca63052b7138ca72be4b0b75173dd3deb39c84ed991b767bcc945bc7729b150ee10a4099b69b28a34707c27cb775536533", 0x82}, {&(0x7f0000000400)="0a15cacedf3bd9f33b8d75002cc929d41aa5a6f279114ccb67b1232532e019a1fd48e53ac2eab4b533523a3cbc082e1ad0f831877e3ac2525c6d724e1b79f32ac83ab401cbedcdc52395feca0976590fd12f", 0x52}, {&(0x7f0000000480)="b3d54332f54ac1fb4139f6bcfc530bca77a7a9e7d0cbdb1b7602541efb6861aada72d36d1e71e912c584d9", 0x2b}, {&(0x7f0000000640)="8a47d0b18ba53a2aaa53254e7bd990a1f17941cee049730df91581af3553a117e177240c5fb583e34e667107cfde264964dc3f37d414efd8fd6e1e05663059670cb788417fa027558d67ecf367841d5603120815e520baefe21476540438762f4541af33775dccf382b4d6f7f5acdd0a6c271f69e5954c4e7e640c38fa6ecb29fd760eed83c5548b03f1c4bbe85f68d79cbad12bc4a7186898fa0dc03ddb3dc7ad38d0caa2fc6ff1abbcc1f2bf5f499d9e2b69aa1f84", 0xb6}], 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) 2.319928732s ago: executing program 0 (id=192): setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000240)={0x8, 0x97, 0xffff}, 0xc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0xff75, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49", @ANYBLOB=',rootmo']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x4e1, &(0x7f0000000100)={0x0, 0x1ffff9, 0x10100, 0xfffffffe, 0x9}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x468f, 0xc4fc, 0x8, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x110003) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000002000)=""/102400, 0x19000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.222021305s ago: executing program 2 (id=193): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x41, 0xd1, 0xe0, 0x70, 0x403, 0xb810, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc1, 0xc3, 0x0, 0x53, 0x7e, 0xbc, 0x10}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) syz_usb_disconnect(r1) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffa) 2.0812093s ago: executing program 1 (id=194): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], 0x0, 0x1, r7}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r4}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r8, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r9}, 0x20) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r0, 0x2008}, {r0, 0x5083}, {r0, 0x400}, {r0, 0x2442}], 0x4, &(0x7f00000000c0)={r10, r11+10000000}, &(0x7f0000000100)={[0xd]}, 0x8) 1.793902109s ago: executing program 1 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) unshare(0x20000400) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x2586, 0x0, 0xffffffff, 0x6b1}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000440)=0x91) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000000080)) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) 140.431595ms ago: executing program 3 (id=196): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bridge_slave_0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x80047453, &(0x7f00000002c0)={0x18, 0x4000000, {0x4, @remote, 'erspan0\x00'}}) (fail_nth: 1) 133.017207ms ago: executing program 4 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) 101.770474ms ago: executing program 1 (id=198): r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, &(0x7f0000000040)=""/6, 0x6, 0x40000000, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x400, 0x70bd2d, 0x1000, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xa}, {0xffff, 0x800b}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000002207000000000000001000000200000000000000fdffffffffffffff00000000000000000000000000000000000800000000000006000000000000000000000000000000000000000000000001000200"], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 0s ago: executing program 3 (id=199): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 58.486428][ T30] audit: type=1400 audit(1761401980.772:62): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.511779][ T30] audit: type=1400 audit(1761401980.802:63): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.514387][ T5799] cgroup: Unknown subsys name 'net' [ 58.544052][ T30] audit: type=1400 audit(1761401980.822:64): avc: denied { unmount } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.699456][ T5799] cgroup: Unknown subsys name 'cpuset' [ 58.707907][ T5799] cgroup: Unknown subsys name 'rlimit' [ 58.844021][ T30] audit: type=1400 audit(1761401981.122:65): avc: denied { setattr } for pid=5799 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.880674][ T30] audit: type=1400 audit(1761401981.122:66): avc: denied { create } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.912035][ T30] audit: type=1400 audit(1761401981.122:67): avc: denied { write } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.934235][ T30] audit: type=1400 audit(1761401981.122:68): avc: denied { read } for pid=5799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.953486][ T5801] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 58.956457][ T30] audit: type=1400 audit(1761401981.132:69): avc: denied { mounton } for pid=5799 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.993797][ T30] audit: type=1400 audit(1761401981.132:70): avc: denied { mount } for pid=5799 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.019765][ T30] audit: type=1400 audit(1761401981.182:71): avc: denied { read } for pid=5481 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.962868][ T5799] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.053852][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.063918][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.074624][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.084758][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.095180][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.103836][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.110783][ T5817] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.126471][ T5817] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.135795][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.146638][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.154079][ T5817] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.156921][ T5137] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.169778][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.182890][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.192981][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.222774][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.232253][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.241311][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.248945][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.261860][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.270510][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.280545][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.289374][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.300156][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.308510][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.657493][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 62.669511][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 62.726484][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 62.862771][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.870078][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.877430][ T5809] bridge_slave_0: entered allmulticast mode [ 62.884043][ T5809] bridge_slave_0: entered promiscuous mode [ 62.894349][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.901477][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.908700][ T5809] bridge_slave_1: entered allmulticast mode [ 62.915251][ T5809] bridge_slave_1: entered promiscuous mode [ 62.925007][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.932140][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.939330][ T5819] bridge_slave_0: entered allmulticast mode [ 62.945913][ T5819] bridge_slave_0: entered promiscuous mode [ 62.953248][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.960349][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.967483][ T5819] bridge_slave_1: entered allmulticast mode [ 62.974071][ T5819] bridge_slave_1: entered promiscuous mode [ 62.998817][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 63.067757][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.084037][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.095039][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.131950][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.141593][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 63.150722][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.158218][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.165339][ T5821] bridge_slave_0: entered allmulticast mode [ 63.172359][ T5821] bridge_slave_0: entered promiscuous mode [ 63.179506][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.186770][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.193861][ T5821] bridge_slave_1: entered allmulticast mode [ 63.200825][ T5821] bridge_slave_1: entered promiscuous mode [ 63.237670][ T5809] team0: Port device team_slave_0 added [ 63.244778][ T5809] team0: Port device team_slave_1 added [ 63.261716][ T5819] team0: Port device team_slave_0 added [ 63.274950][ T5819] team0: Port device team_slave_1 added [ 63.320412][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.349362][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.356589][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.383161][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.398158][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.417417][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.424435][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.451703][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.463317][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.470455][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.496560][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.514475][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.521762][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.528946][ T5810] bridge_slave_0: entered allmulticast mode [ 63.535524][ T5810] bridge_slave_0: entered promiscuous mode [ 63.550528][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.557496][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.583370][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.605175][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.612401][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.619946][ T5810] bridge_slave_1: entered allmulticast mode [ 63.627294][ T5810] bridge_slave_1: entered promiscuous mode [ 63.658344][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.667092][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.675096][ T5822] bridge_slave_0: entered allmulticast mode [ 63.682942][ T5822] bridge_slave_0: entered promiscuous mode [ 63.691985][ T5821] team0: Port device team_slave_0 added [ 63.720368][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.734913][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.745804][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.753497][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.761118][ T5822] bridge_slave_1: entered allmulticast mode [ 63.769636][ T5822] bridge_slave_1: entered promiscuous mode [ 63.777936][ T5821] team0: Port device team_slave_1 added [ 63.841413][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.891360][ T5819] hsr_slave_0: entered promiscuous mode [ 63.899232][ T5819] hsr_slave_1: entered promiscuous mode [ 63.907872][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.930622][ T5809] hsr_slave_0: entered promiscuous mode [ 63.937361][ T5809] hsr_slave_1: entered promiscuous mode [ 63.943312][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 63.949299][ T5809] Cannot create hsr debugfs directory [ 63.955980][ T5810] team0: Port device team_slave_0 added [ 63.962777][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.969936][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.996570][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.008740][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.015837][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.044445][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.068503][ T5822] team0: Port device team_slave_0 added [ 64.076864][ T5810] team0: Port device team_slave_1 added [ 64.111112][ T5822] team0: Port device team_slave_1 added [ 64.165727][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.173009][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.199914][ T5817] Bluetooth: hci1: command tx timeout [ 64.200038][ T5137] Bluetooth: hci0: command tx timeout [ 64.211231][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.251113][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.258250][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.284887][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.284960][ T5137] Bluetooth: hci2: command tx timeout [ 64.303825][ T5821] hsr_slave_0: entered promiscuous mode [ 64.309951][ T5821] hsr_slave_1: entered promiscuous mode [ 64.316451][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 64.322169][ T5821] Cannot create hsr debugfs directory [ 64.332136][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.339126][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.365246][ T5137] Bluetooth: hci4: command tx timeout [ 64.365251][ T5817] Bluetooth: hci3: command tx timeout [ 64.365613][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.403746][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.410802][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.437323][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.508715][ T5810] hsr_slave_0: entered promiscuous mode [ 64.515824][ T5810] hsr_slave_1: entered promiscuous mode [ 64.522135][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 64.528638][ T5810] Cannot create hsr debugfs directory [ 64.611885][ T5822] hsr_slave_0: entered promiscuous mode [ 64.619097][ T5822] hsr_slave_1: entered promiscuous mode [ 64.624988][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 64.630980][ T5822] Cannot create hsr debugfs directory [ 64.857805][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.877806][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.887534][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.896444][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.948318][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.958077][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.970838][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.998754][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.028418][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.060665][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.070488][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.093871][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.104107][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.114153][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.138310][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.148064][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.220010][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.228768][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.242730][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.262798][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.277527][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.324189][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.360622][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.389016][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.396379][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.409878][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.416982][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.428450][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.444847][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.462499][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.469564][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.503881][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.524382][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.533205][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.540276][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.562117][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.569290][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.578862][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.585914][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.633747][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.653891][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.693552][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.693776][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.693787][ T30] audit: type=1400 audit(1761401987.972:86): avc: denied { sys_module } for pid=5809 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.702083][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.785844][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.793342][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.814115][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.842450][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.897941][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.905251][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.942323][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.949534][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.024587][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.169462][ T5809] veth0_vlan: entered promiscuous mode [ 66.208719][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.222191][ T5809] veth1_vlan: entered promiscuous mode [ 66.266995][ T5137] Bluetooth: hci1: command tx timeout [ 66.267650][ T5817] Bluetooth: hci0: command tx timeout [ 66.322345][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.341318][ T5809] veth0_macvtap: entered promiscuous mode [ 66.357016][ T5817] Bluetooth: hci2: command tx timeout [ 66.363402][ T5809] veth1_macvtap: entered promiscuous mode [ 66.426298][ T5817] Bluetooth: hci3: command tx timeout [ 66.427021][ T5137] Bluetooth: hci4: command tx timeout [ 66.437885][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.451444][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.465692][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.480436][ T5810] veth0_vlan: entered promiscuous mode [ 66.491648][ T3536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.510577][ T5810] veth1_vlan: entered promiscuous mode [ 66.518608][ T3536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.528566][ T3536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.546673][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.563211][ T3536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.604943][ T5819] veth0_vlan: entered promiscuous mode [ 66.635340][ T5810] veth0_macvtap: entered promiscuous mode [ 66.654118][ T5819] veth1_vlan: entered promiscuous mode [ 66.673388][ T5821] veth0_vlan: entered promiscuous mode [ 66.685415][ T5810] veth1_macvtap: entered promiscuous mode [ 66.746682][ T5821] veth1_vlan: entered promiscuous mode [ 66.757552][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.778238][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.795367][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.820844][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.844203][ T3536] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.859548][ T3536] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868937][ T3536] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.879058][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.887642][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.890825][ T5819] veth0_macvtap: entered promiscuous mode [ 66.904567][ T5821] veth0_macvtap: entered promiscuous mode [ 66.914858][ T3536] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.929149][ T5821] veth1_macvtap: entered promiscuous mode [ 66.952302][ T30] audit: type=1400 audit(1761401989.232:87): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.RKzviQ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 66.977842][ T30] audit: type=1400 audit(1761401989.232:88): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.982919][ T5819] veth1_macvtap: entered promiscuous mode [ 67.002063][ T30] audit: type=1400 audit(1761401989.232:89): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.RKzviQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.028508][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.040352][ T30] audit: type=1400 audit(1761401989.232:90): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.063386][ T30] audit: type=1400 audit(1761401989.232:91): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.RKzviQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.090726][ T30] audit: type=1400 audit(1761401989.232:92): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/root/syzkaller.RKzviQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.127123][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.134838][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.154149][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.156523][ T30] audit: type=1400 audit(1761401989.232:93): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.165038][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.197846][ T30] audit: type=1400 audit(1761401989.322:94): avc: denied { mounton } for pid=5809 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.230637][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.235416][ T30] audit: type=1400 audit(1761401989.322:95): avc: denied { mount } for pid=5809 comm="syz-executor" name="/" dev="gadgetfs" ino=8224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.254160][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.316719][ T5822] veth0_vlan: entered promiscuous mode [ 67.354185][ T3536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.385634][ T5822] veth1_vlan: entered promiscuous mode [ 67.401880][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.410359][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.419749][ T3536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.429297][ T3536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.467342][ T3536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.484589][ T3536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.553904][ T5923] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 67.592145][ T3536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.636476][ T3536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.669317][ T3536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.711225][ T5923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.797740][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.814551][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.040171][ T5822] veth0_macvtap: entered promiscuous mode [ 68.346238][ T5137] Bluetooth: hci0: command tx timeout [ 68.346444][ T5817] Bluetooth: hci1: command tx timeout [ 68.426979][ T5817] Bluetooth: hci2: command tx timeout [ 68.506489][ T5817] Bluetooth: hci4: command tx timeout [ 68.506724][ T5137] Bluetooth: hci3: command tx timeout [ 68.820548][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.846359][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.879689][ T5822] veth1_macvtap: entered promiscuous mode [ 68.924374][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.939775][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.983345][ T5950] Illegal XDP return value 777751982 on prog (id 2) dev N/A, expect packet loss! [ 68.985385][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.076202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.125734][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.137348][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.154468][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.388264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.064064][ T5961] loop2: detected capacity change from 0 to 7 [ 70.105301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.136192][ T5961] Dev loop2: unable to read RDB block 7 [ 70.169229][ T5961] loop2: AHDI p1 p2 p3 [ 70.180994][ T5961] loop2: partition table partially beyond EOD, truncated [ 70.233007][ T5961] loop2: p1 start 1601398130 is beyond EOD, truncated [ 70.240873][ T5961] loop2: p2 start 1702059890 is beyond EOD, truncated [ 70.426508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.436686][ T5137] Bluetooth: hci0: command tx timeout [ 70.436715][ T5817] Bluetooth: hci1: command tx timeout [ 70.456609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.470004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.479554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.488466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.498194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.508676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.551023][ T5817] Bluetooth: hci2: command tx timeout [ 70.586294][ T5817] Bluetooth: hci4: command tx timeout [ 70.587227][ T5137] Bluetooth: hci3: command tx timeout [ 70.929881][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.940643][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.438575][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.479821][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.530321][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.541006][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.719744][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 71.719754][ T30] audit: type=1400 audit(1761401994.002:128): avc: denied { create } for pid=5986 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.762506][ T5186] Dev loop2: unable to read RDB block 7 [ 71.793593][ T5186] loop2: AHDI p1 p2 p3 [ 72.230955][ T30] audit: type=1400 audit(1761401994.122:129): avc: denied { read write } for pid=5982 comm="syz.0.13" name="vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.255743][ T30] audit: type=1400 audit(1761401994.122:130): avc: denied { open } for pid=5982 comm="syz.0.13" path="/dev/vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.272095][ T5186] loop2: partition table partially beyond EOD, truncated [ 72.304811][ T5186] loop2: p1 start 1601398130 is beyond EOD, truncated [ 72.399437][ T30] audit: type=1400 audit(1761401994.142:131): avc: denied { ioctl } for pid=5982 comm="syz.0.13" path="/dev/vbi1" dev="devtmpfs" ino=953 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 72.508576][ T5186] loop2: p2 start 1702059890 is beyond EOD, truncated [ 72.547987][ T30] audit: type=1400 audit(1761401994.152:132): avc: denied { read append } for pid=5982 comm="syz.0.13" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.579936][ T6008] FAULT_INJECTION: forcing a failure. [ 72.579936][ T6008] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.646547][ T6008] CPU: 1 UID: 0 PID: 6008 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 72.646573][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.646583][ T6008] Call Trace: [ 72.646589][ T6008] [ 72.646596][ T6008] dump_stack_lvl+0x16c/0x1f0 [ 72.646631][ T6008] should_fail_ex+0x512/0x640 [ 72.646656][ T6008] _copy_from_iter+0x29f/0x1720 [ 72.646682][ T6008] ? __alloc_skb+0x200/0x380 [ 72.646706][ T6008] ? __pfx__copy_from_iter+0x10/0x10 [ 72.646727][ T6008] ? netlink_autobind.isra.0+0x158/0x370 [ 72.646764][ T6008] netlink_sendmsg+0x820/0xdd0 [ 72.646793][ T6008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.646828][ T6008] ____sys_sendmsg+0xa98/0xc70 [ 72.646858][ T6008] ? copy_msghdr_from_user+0x10a/0x160 [ 72.646881][ T6008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.646920][ T6008] ___sys_sendmsg+0x134/0x1d0 [ 72.646944][ T6008] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.646965][ T6008] ? __lock_acquire+0x622/0x1c90 [ 72.647025][ T6008] __sys_sendmsg+0x16d/0x220 [ 72.647048][ T6008] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.647087][ T6008] do_syscall_64+0xcd/0xfa0 [ 72.647114][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.647132][ T6008] RIP: 0033:0x7f558b78efc9 [ 72.647146][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.647161][ T6008] RSP: 002b:00007f558c5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.647178][ T6008] RAX: ffffffffffffffda RBX: 00007f558b9e6090 RCX: 00007f558b78efc9 [ 72.647190][ T6008] RDX: 0000000004040000 RSI: 0000200000000280 RDI: 0000000000000004 [ 72.647200][ T6008] RBP: 00007f558c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.647209][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.647219][ T6008] R13: 00007f558b9e6128 R14: 00007f558b9e6090 R15: 00007ffed77073d8 [ 72.647244][ T6008] [ 72.869608][ T30] audit: type=1400 audit(1761401994.152:133): avc: denied { open } for pid=5982 comm="syz.0.13" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.939866][ T30] audit: type=1400 audit(1761401995.222:134): avc: denied { create } for pid=6009 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.948267][ T6010] Bluetooth: MGMT ver 1.23 [ 72.959833][ T30] audit: type=1400 audit(1761401995.232:135): avc: denied { bind } for pid=6009 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.183599][ T30] audit: type=1400 audit(1761401995.232:136): avc: denied { write } for pid=6009 comm="syz.1.16" path="socket:[7779]" dev="sockfs" ino=7779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.235968][ T30] audit: type=1400 audit(1761401995.412:137): avc: denied { create } for pid=6006 comm="syz.0.15" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.372979][ T6014] veth0_to_team: mtu less than device minimum [ 73.396957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.427398][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.545715][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.581039][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.688052][ T910] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.959348][ T910] usb 3-1: device descriptor read/64, error -71 [ 74.101680][ T6027] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.496504][ T910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.635927][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 74.876107][ T910] usb 3-1: device descriptor read/64, error -71 [ 74.987304][ T910] usb usb3-port1: attempt power cycle [ 75.362188][ T5137] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 75.412813][ T5137] Bluetooth: hci2: command 0x0401 tx timeout [ 75.726080][ T910] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.068982][ T5137] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 76.069905][ T9] cfg80211: failed to load regulatory.db [ 76.079409][ T5137] CPU: 1 UID: 0 PID: 5137 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 76.079438][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.079453][ T5137] Workqueue: hci4 hci_rx_work [ 76.079487][ T5137] Call Trace: [ 76.079495][ T5137] [ 76.079503][ T5137] dump_stack_lvl+0x16c/0x1f0 [ 76.079534][ T5137] sysfs_warn_dup+0x7f/0xa0 [ 76.079559][ T5137] sysfs_create_dir_ns+0x24b/0x2b0 [ 76.079578][ T5137] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 76.079597][ T5137] ? find_held_lock+0x2b/0x80 [ 76.079627][ T5137] ? do_raw_spin_unlock+0x172/0x230 [ 76.079647][ T5137] kobject_add_internal+0x2c4/0x9b0 [ 76.079667][ T5137] kobject_add+0x16e/0x240 [ 76.079683][ T5137] ? __pfx_kobject_add+0x10/0x10 [ 76.079700][ T5137] ? do_raw_spin_unlock+0x172/0x230 [ 76.079718][ T5137] ? kobject_put+0xab/0x5a0 [ 76.079740][ T5137] device_add+0x288/0x1aa0 [ 76.079759][ T5137] ? __pfx_dev_set_name+0x10/0x10 [ 76.079779][ T5137] ? __pfx_device_add+0x10/0x10 [ 76.079797][ T5137] ? mgmt_send_event_skb+0x2fb/0x460 [ 76.079824][ T5137] hci_conn_add_sysfs+0x17e/0x230 [ 76.079848][ T5137] le_conn_complete_evt+0x1260/0x2150 [ 76.079875][ T5137] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 76.079895][ T5137] ? hci_event_packet+0x459/0x11c0 [ 76.079922][ T5137] hci_le_conn_complete_evt+0x23c/0x370 [ 76.079948][ T5137] hci_le_meta_evt+0x357/0x5e0 [ 76.079970][ T5137] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 76.079994][ T5137] hci_event_packet+0x685/0x11c0 [ 76.080014][ T5137] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 76.080037][ T5137] ? __pfx_hci_event_packet+0x10/0x10 [ 76.080060][ T5137] ? kcov_remote_start+0x3c9/0x6d0 [ 76.080078][ T5137] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.080105][ T5137] hci_rx_work+0x2c5/0x16b0 [ 76.080129][ T5137] ? rcu_is_watching+0x12/0xc0 [ 76.080151][ T5137] process_one_work+0x9cf/0x1b70 [ 76.080177][ T5137] ? __pfx_process_one_work+0x10/0x10 [ 76.080207][ T5137] ? assign_work+0x1a0/0x250 [ 76.080226][ T5137] worker_thread+0x6c8/0xf10 [ 76.080256][ T5137] ? __kthread_parkme+0x19e/0x250 [ 76.080287][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 76.080313][ T5137] kthread+0x3c5/0x780 [ 76.080329][ T5137] ? __pfx_kthread+0x10/0x10 [ 76.080345][ T5137] ? rcu_is_watching+0x12/0xc0 [ 76.080366][ T5137] ? __pfx_kthread+0x10/0x10 [ 76.080382][ T5137] ret_from_fork+0x675/0x7d0 [ 76.080396][ T5137] ? __pfx_kthread+0x10/0x10 [ 76.080411][ T5137] ret_from_fork_asm+0x1a/0x30 [ 76.080443][ T5137] [ 76.080519][ T5137] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.398680][ T5137] Bluetooth: hci4: failed to register connection device [ 76.476453][ T910] usb 3-1: device descriptor read/8, error -71 [ 76.771693][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 76.771711][ T30] audit: type=1400 audit(1761401999.052:163): avc: denied { ioctl } for pid=6060 comm="syz.2.29" path="socket:[7956]" dev="sockfs" ino=7956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.773029][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.29'. [ 76.840490][ T30] audit: type=1400 audit(1761401999.122:164): avc: denied { create } for pid=6064 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.875061][ T6065] syz_tun: entered allmulticast mode [ 76.970896][ T30] audit: type=1400 audit(1761401999.152:165): avc: denied { write } for pid=6064 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.141107][ T30] audit: type=1400 audit(1761401999.152:166): avc: denied { nlmsg_write } for pid=6064 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.415143][ T30] audit: type=1400 audit(1761401999.382:167): avc: denied { bind } for pid=6068 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.472547][ T30] audit: type=1400 audit(1761401999.452:168): avc: denied { create } for pid=6068 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.495158][ T30] audit: type=1400 audit(1761401999.732:169): avc: denied { create } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.637439][ T6079] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 77.648620][ T6079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 77.662037][ T6079] batadv0: entered promiscuous mode [ 77.668159][ T6079] batadv0: entered allmulticast mode [ 77.698791][ T6079] bridge0: port 3(batadv0) entered blocking state [ 77.705383][ T30] audit: type=1400 audit(1761401999.732:170): avc: denied { write } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.773472][ T6079] bridge0: port 3(batadv0) entered disabled state [ 77.790882][ T6079] bridge0: port 3(batadv0) entered blocking state [ 77.797698][ T6079] bridge0: port 3(batadv0) entered forwarding state [ 77.858081][ T6077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 77.875803][ T30] audit: type=1400 audit(1761401999.742:171): avc: denied { create } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.068160][ T6087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 78.304002][ T30] audit: type=1400 audit(1761401999.752:172): avc: denied { connect } for pid=6074 comm="syz.0.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.338852][ T1012] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 78.348850][ T1012] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 78.550468][ T6087] ALSA: mixer_oss: invalid OSS volume '' [ 79.763750][ T6102] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 79.796329][ T6103] netlink: 'syz.3.40': attribute type 29 has an invalid length. [ 79.836556][ T6102] netlink: 588 bytes leftover after parsing attributes in process `syz.3.40'. [ 80.693525][ T6120] ======================================================= [ 80.693525][ T6120] WARNING: The mand mount option has been deprecated and [ 80.693525][ T6120] and is ignored by this kernel. Remove the mand [ 80.693525][ T6120] option from the mount to silence this warning. [ 80.693525][ T6120] ======================================================= [ 81.173169][ T6123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.192515][ T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.370948][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.407340][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.450395][ T42] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 81.459614][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.505898][ T42] usb 3-1: config 0 descriptor?? [ 81.509122][ T6134] tipc: Started in network mode [ 81.516635][ T6134] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 81.529757][ T6134] tipc: Enabled bearer , priority 0 [ 82.548402][ T910] tipc: Node number set to 11578026 [ 82.586554][ T5137] Bluetooth: hci4: command 0x0406 tx timeout [ 82.963302][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 82.969894][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 83.031708][ T6148] fuse: Bad value for 'fd' [ 83.058990][ T42] usb 3-1: USB disconnect, device number 6 [ 83.069587][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 83.069600][ T30] audit: type=1400 audit(1761402005.352:194): avc: denied { allowed } for pid=6146 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.733525][ T30] audit: type=1400 audit(1761402005.352:195): avc: denied { map } for pid=6146 comm="syz.1.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.836140][ T30] audit: type=1400 audit(1761402005.352:196): avc: denied { read write } for pid=6146 comm="syz.1.51" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.866170][ T30] audit: type=1400 audit(1761402005.382:197): avc: denied { shutdown } for pid=6140 comm="syz.0.50" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.896762][ T30] audit: type=1400 audit(1761402005.382:198): avc: denied { read } for pid=6140 comm="syz.0.50" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.918881][ T30] audit: type=1400 audit(1761402005.662:199): avc: denied { read } for pid=6146 comm="syz.1.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.020028][ T30] audit: type=1400 audit(1761402006.292:200): avc: denied { create } for pid=6153 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 84.094383][ T6159] overlayfs: workdir and upperdir must be separate subtrees [ 84.181203][ T30] audit: type=1326 audit(1761402006.372:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ad8efc9 code=0x7ffc0000 [ 84.401764][ T30] audit: type=1326 audit(1761402006.372:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f805ad8efc9 code=0x7ffc0000 [ 84.425911][ T30] audit: type=1326 audit(1761402006.372:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f805ad8efc9 code=0x7ffc0000 [ 85.982646][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45329 sclass=netlink_route_socket pid=6181 comm=syz.0.58 [ 88.195344][ T6211] FAULT_INJECTION: forcing a failure. [ 88.195344][ T6211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.236950][ T6211] CPU: 0 UID: 0 PID: 6211 Comm: syz.2.63 Not tainted syzkaller #0 PREEMPT(full) [ 88.236974][ T6211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.236983][ T6211] Call Trace: [ 88.236989][ T6211] [ 88.236995][ T6211] dump_stack_lvl+0x16c/0x1f0 [ 88.237025][ T6211] should_fail_ex+0x512/0x640 [ 88.237048][ T6211] copy_fpstate_to_sigframe+0x854/0xaf0 [ 88.237075][ T6211] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 88.237096][ T6211] ? posixtimer_deliver_signal+0x105/0x6b0 [ 88.237120][ T6211] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 88.237145][ T6211] ? x86_task_fpu+0x5f/0x90 [ 88.237167][ T6211] get_sigframe+0x4a8/0x9c0 [ 88.237190][ T6211] ? __pfx_get_sigframe+0x10/0x10 [ 88.237211][ T6211] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.237232][ T6211] ? siginfo_layout+0x177/0x290 [ 88.237255][ T6211] x64_setup_rt_frame+0x12e/0xcf0 [ 88.237277][ T6211] ? __pfx___sys_recvfrom+0x10/0x10 [ 88.237299][ T6211] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 88.237325][ T6211] arch_do_signal_or_restart+0x5e4/0x7c0 [ 88.237347][ T6211] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 88.237372][ T6211] ? ksys_write+0x1ac/0x250 [ 88.237388][ T6211] ? __pfx_ksys_write+0x10/0x10 [ 88.237407][ T6211] exit_to_user_mode_loop+0x85/0x130 [ 88.237427][ T6211] do_syscall_64+0x426/0xfa0 [ 88.237454][ T6211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.237470][ T6211] RIP: 0033:0x7f558b78efc7 [ 88.237484][ T6211] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 88.237500][ T6211] RSP: 002b:00007f558c5c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 88.237517][ T6211] RAX: 000000000000002d RBX: 00007f558b9e5fa0 RCX: 00007f558b78efc9 [ 88.237527][ T6211] RDX: 0000000000000003 RSI: 00002000000000c0 RDI: 0000000000000003 [ 88.237537][ T6211] RBP: 00007f558c5c8090 R08: 0000000000000000 R09: 0000000000000000 [ 88.237546][ T6211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.237556][ T6211] R13: 00007f558b9e6038 R14: 00007f558b9e5fa0 R15: 00007ffed77073d8 [ 88.237579][ T6211] [ 88.554817][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 88.554832][ T30] audit: type=1400 audit(1761402010.832:244): avc: denied { setopt } for pid=6217 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.595103][ T30] audit: type=1400 audit(1761402010.862:245): avc: denied { write } for pid=6217 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 88.734686][ T30] audit: type=1400 audit(1761402010.862:246): avc: denied { name_connect } for pid=6217 comm="syz.3.67" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 88.787319][ T30] audit: type=1400 audit(1761402010.982:247): avc: denied { execute } for pid=6215 comm="syz.1.66" name="file1" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.878256][ T30] audit: type=1400 audit(1761402011.052:248): avc: denied { execute_no_trans } for pid=6215 comm="syz.1.66" path="/11/file1" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.212114][ T6229] netlink: 88 bytes leftover after parsing attributes in process `syz.3.69'. [ 89.858170][ T6236] mmap: syz.2.71 (6236) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.297443][ T6233] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 90.316113][ T30] audit: type=1400 audit(1761402012.582:249): avc: denied { mounton } for pid=6205 comm="syz.4.64" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 90.342314][ T6233] exFAT-fs (nullb0): invalid boot record signature [ 90.460881][ T6233] exFAT-fs (nullb0): failed to read boot sector [ 90.504942][ T6233] exFAT-fs (nullb0): failed to recognize exfat type [ 92.226158][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.75'. [ 92.567370][ T30] audit: type=1400 audit(1761402014.692:250): avc: denied { bind } for pid=6246 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.786606][ T30] audit: type=1400 audit(1761402014.872:251): avc: denied { create } for pid=6244 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.844502][ T30] audit: type=1400 audit(1761402014.922:252): avc: denied { bind } for pid=6244 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.864364][ T30] audit: type=1400 audit(1761402014.932:253): avc: denied { write } for pid=6244 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.014196][ T6251] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.715083][ T6251] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.256901][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 94.256910][ T30] audit: type=1400 audit(1761402016.542:256): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 94.658922][ T6251] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.689785][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.734008][ T30] audit: type=1400 audit(1761402017.012:257): avc: denied { create } for pid=6281 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.846176][ T30] audit: type=1400 audit(1761402017.032:258): avc: denied { ioctl } for pid=6281 comm="syz.3.82" path="socket:[9580]" dev="sockfs" ino=9580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.898156][ T6251] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.916113][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 94.930929][ T5869] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 94.960209][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.987127][ T30] audit: type=1400 audit(1761402017.252:259): avc: denied { sys_module } for pid=6281 comm="syz.3.82" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.012892][ T5869] usb 5-1: Product: syz [ 95.034923][ T5869] usb 5-1: Manufacturer: syz [ 95.056124][ T5869] usb 5-1: SerialNumber: syz [ 95.086755][ T5869] usb 5-1: config 0 descriptor?? [ 95.098892][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.109174][ T5869] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 95.143839][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.272455][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.732667][ T5869] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 96.126122][ T30] audit: type=1400 audit(1761402018.402:260): avc: denied { create } for pid=6292 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 96.126127][ T5869] visor 5-1:0.0: probe with driver visor failed with error -5 [ 96.147668][ T3507] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279866][ T30] audit: type=1400 audit(1761402018.562:261): avc: denied { getopt } for pid=6274 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.405447][ T6299] batman_adv: batadv0: Adding interface: gretap1 [ 96.423577][ T6299] batman_adv: batadv0: Interface activated: gretap1 [ 97.052154][ T30] audit: type=1400 audit(1761402019.322:262): avc: denied { open } for pid=6306 comm="syz.0.86" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 97.086066][ T30] audit: type=1400 audit(1761402019.362:263): avc: denied { read write } for pid=6306 comm="syz.0.86" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.111272][ T30] audit: type=1400 audit(1761402019.362:264): avc: denied { open } for pid=6306 comm="syz.0.86" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.134872][ T30] audit: type=1400 audit(1761402019.362:265): avc: denied { ioctl } for pid=6306 comm="syz.0.86" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 97.203369][ T6308] input: syz0 as /devices/virtual/input/input6 [ 99.756012][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 99.756026][ T30] audit: type=1400 audit(1761402022.032:268): avc: denied { read } for pid=6292 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 99.852474][ T9] usb 5-1: USB disconnect, device number 2 [ 100.048767][ T30] audit: type=1400 audit(1761402022.332:269): avc: denied { create } for pid=6321 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 101.068620][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 101.120747][ T30] audit: type=1400 audit(1761402023.352:270): avc: denied { ioctl } for pid=6343 comm="syz.4.94" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 102.428394][ T30] audit: type=1400 audit(1761402024.712:271): avc: denied { read write } for pid=6356 comm="syz.1.97" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.609843][ T30] audit: type=1400 audit(1761402024.712:272): avc: denied { open } for pid=6356 comm="syz.1.97" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 102.635362][ T30] audit: type=1400 audit(1761402024.782:273): avc: denied { ioctl } for pid=6358 comm="syz.3.98" path="socket:[10541]" dev="sockfs" ino=10541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.667043][ T30] audit: type=1400 audit(1761402024.952:274): avc: denied { create } for pid=6358 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 102.897017][ T30] audit: type=1400 audit(1761402024.992:275): avc: denied { connect } for pid=6358 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.926057][ T30] audit: type=1400 audit(1761402024.992:276): avc: denied { write } for pid=6358 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.985180][ T6365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 103.153683][ T30] audit: type=1400 audit(1761402025.422:277): avc: denied { read } for pid=6369 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 103.346223][ T5814] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 103.529901][ T5814] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.542135][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.836015][ T5814] usb 5-1: Product: syz [ 103.857216][ T5814] usb 5-1: Manufacturer: syz [ 103.866783][ T5814] usb 5-1: SerialNumber: syz [ 103.940561][ T5814] usb 5-1: config 0 descriptor?? [ 103.983612][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.106'. [ 104.194950][ T5814] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.459615][ T6404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.470195][ T6404] block device autoloading is deprecated and will be removed. [ 106.234353][ T6421] Zero length message leads to an empty skb [ 106.444790][ T6393] futex_wake_op: syz.4.102 tries to shift op by -1; fix this program [ 106.459507][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 106.459520][ T30] audit: type=1400 audit(1761402028.722:280): avc: denied { block_suspend } for pid=6368 comm="syz.4.102" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.592986][ T30] audit: type=1400 audit(1761402028.842:281): avc: denied { ioctl } for pid=6414 comm="syz.1.113" path="socket:[9879]" dev="sockfs" ino=9879 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.895685][ T5814] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 106.952246][ T30] audit: type=1326 audit(1761402029.222:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6414 comm="syz.1.113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c3b58efc9 code=0x0 [ 106.976588][ T5814] usb 5-1: USB disconnect, device number 3 [ 107.057215][ T30] audit: type=1326 audit(1761402029.332:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.2.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558b78efc9 code=0x0 [ 107.205394][ T5817] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 107.215491][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 107.215515][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.215523][ T5817] Workqueue: hci2 hci_rx_work [ 107.215543][ T5817] Call Trace: [ 107.215547][ T5817] [ 107.215551][ T5817] dump_stack_lvl+0x16c/0x1f0 [ 107.215570][ T5817] sysfs_warn_dup+0x7f/0xa0 [ 107.215584][ T5817] sysfs_create_dir_ns+0x24b/0x2b0 [ 107.215598][ T5817] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 107.215610][ T5817] ? find_held_lock+0x2b/0x80 [ 107.215627][ T5817] ? do_raw_spin_unlock+0x172/0x230 [ 107.215639][ T5817] kobject_add_internal+0x2c4/0x9b0 [ 107.215651][ T5817] kobject_add+0x16e/0x240 [ 107.215661][ T5817] ? __pfx_kobject_add+0x10/0x10 [ 107.215673][ T5817] ? do_raw_spin_unlock+0x172/0x230 [ 107.215685][ T5817] ? kobject_put+0xab/0x5a0 [ 107.215698][ T5817] device_add+0x288/0x1aa0 [ 107.215710][ T5817] ? __pfx_dev_set_name+0x10/0x10 [ 107.215723][ T5817] ? __pfx_device_add+0x10/0x10 [ 107.215735][ T5817] ? mgmt_send_event_skb+0x2fb/0x460 [ 107.215752][ T5817] hci_conn_add_sysfs+0x17e/0x230 [ 107.215768][ T5817] le_conn_complete_evt+0x1260/0x2150 [ 107.215785][ T5817] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 107.215800][ T5817] ? hci_event_packet+0x459/0x11c0 [ 107.215818][ T5817] hci_le_conn_complete_evt+0x23c/0x370 [ 107.215835][ T5817] hci_le_meta_evt+0x357/0x5e0 [ 107.215850][ T5817] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 107.215866][ T5817] hci_event_packet+0x685/0x11c0 [ 107.215879][ T5817] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 107.215902][ T5817] ? __pfx_hci_event_packet+0x10/0x10 [ 107.215918][ T5817] ? kcov_remote_start+0x3c9/0x6d0 [ 107.215932][ T5817] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.215950][ T5817] hci_rx_work+0x2c5/0x16b0 [ 107.215967][ T5817] ? rcu_is_watching+0x12/0xc0 [ 107.215995][ T5817] process_one_work+0x9cf/0x1b70 [ 107.216024][ T5817] ? __pfx_process_one_work+0x10/0x10 [ 107.216048][ T5817] ? assign_work+0x1a0/0x250 [ 107.216065][ T5817] worker_thread+0x6c8/0xf10 [ 107.216081][ T5817] ? __pfx_worker_thread+0x10/0x10 [ 107.216092][ T5817] kthread+0x3c5/0x780 [ 107.216103][ T5817] ? __pfx_kthread+0x10/0x10 [ 107.216113][ T5817] ? rcu_is_watching+0x12/0xc0 [ 107.216126][ T5817] ? __pfx_kthread+0x10/0x10 [ 107.216136][ T5817] ret_from_fork+0x675/0x7d0 [ 107.216144][ T5817] ? __pfx_kthread+0x10/0x10 [ 107.216154][ T5817] ret_from_fork_asm+0x1a/0x30 [ 107.216175][ T5817] [ 107.539730][ T5817] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 107.555401][ T5817] Bluetooth: hci2: failed to register connection device [ 107.772108][ T30] audit: type=1400 audit(1761402030.052:284): avc: denied { read } for pid=6435 comm="syz.4.115" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 107.837173][ T30] audit: type=1400 audit(1761402030.052:285): avc: denied { open } for pid=6435 comm="syz.4.115" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.010671][ T6441] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 108.038790][ T6441] CIFS: Unable to determine destination address [ 108.105083][ T6444] fuse: Bad value for 'user_id' [ 108.105166][ T6444] fuse: Bad value for 'user_id' [ 108.145404][ T30] audit: type=1400 audit(1761402030.402:286): avc: denied { create } for pid=6443 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.145447][ T30] audit: type=1400 audit(1761402030.402:287): avc: denied { bind } for pid=6443 comm="syz.4.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 108.292103][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.306257][ T30] audit: type=1400 audit(1761402030.592:288): avc: denied { mount } for pid=6448 comm="syz.3.119" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.508081][ T910] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.629287][ T6457] FAULT_INJECTION: forcing a failure. [ 108.629287][ T6457] name failslab, interval 1, probability 0, space 0, times 1 [ 108.642518][ T6457] CPU: 0 UID: 0 PID: 6457 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(full) [ 108.642549][ T6457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.642562][ T6457] Call Trace: [ 108.642569][ T6457] [ 108.642578][ T6457] dump_stack_lvl+0x16c/0x1f0 [ 108.642617][ T6457] should_fail_ex+0x512/0x640 [ 108.642644][ T6457] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 108.642682][ T6457] should_failslab+0xc2/0x120 [ 108.642709][ T6457] kmem_cache_alloc_noprof+0x75/0x6e0 [ 108.642741][ T6457] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.642773][ T6457] ? getname_flags.part.0+0x4c/0x550 [ 108.642810][ T6457] ? getname_flags.part.0+0x4c/0x550 [ 108.642839][ T6457] getname_flags.part.0+0x4c/0x550 [ 108.642873][ T6457] getname_flags+0x93/0xf0 [ 108.642902][ T6457] do_sys_openat2+0xb8/0x1d0 [ 108.642931][ T6457] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.642964][ T6457] ? __fget_files+0x20e/0x3c0 [ 108.642992][ T6457] __x64_sys_openat+0x174/0x210 [ 108.643022][ T6457] ? __pfx___x64_sys_openat+0x10/0x10 [ 108.643050][ T6457] ? ksys_write+0x1ac/0x250 [ 108.643081][ T6457] do_syscall_64+0xcd/0xfa0 [ 108.643115][ T6457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.643137][ T6457] RIP: 0033:0x7f20b198d810 [ 108.643154][ T6457] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 108.643174][ T6457] RSP: 002b:00007f20b277bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 108.643195][ T6457] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f20b198d810 [ 108.643208][ T6457] RDX: 0000000000000002 RSI: 00007f20b277bfa0 RDI: 00000000ffffff9c [ 108.643221][ T6457] RBP: 00007f20b277bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 108.643233][ T6457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 108.643245][ T6457] R13: 00007f20b1be6218 R14: 00007f20b1be6180 R15: 00007ffd4ac64458 [ 108.643275][ T6457] [ 108.886192][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.057849][ T910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 109.069664][ T910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 109.081249][ T910] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 109.093476][ T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.107605][ T910] usb 5-1: config 0 descriptor?? [ 109.116079][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 109.136342][ T9] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.153213][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.160509][ T9] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 109.170769][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.185301][ T9] usb 3-1: config 0 descriptor?? [ 110.097342][ T6474] fuse: Unknown parameter 'g00000000000000000000' [ 110.358287][ T910] ath6kl: Failed to submit usb control message: -110 [ 110.373198][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 110.384619][ T910] ath6kl: unable to send the bmi data to the device: -110 [ 110.396799][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 110.925627][ T910] ath6kl: Unable to send get target info: -110 [ 111.008914][ T9] usb 3-1: USB disconnect, device number 7 [ 111.097967][ T910] ath6kl: Failed to init ath6kl core: -110 [ 111.169858][ T910] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 111.271642][ T30] audit: type=1400 audit(1761402033.552:289): avc: denied { name_bind } for pid=6484 comm="syz.3.127" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 111.272409][ T910] usb 5-1: USB disconnect, device number 4 [ 111.293821][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.752751][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 111.752769][ T30] audit: type=1400 audit(1761402034.032:291): avc: denied { search } for pid=6491 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.790310][ T30] audit: type=1400 audit(1761402034.032:292): avc: denied { search } for pid=6491 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.856174][ T30] audit: type=1400 audit(1761402034.032:293): avc: denied { search } for pid=6491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.113294][ T30] audit: type=1400 audit(1761402034.032:294): avc: denied { search } for pid=6491 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.215793][ T30] audit: type=1400 audit(1761402034.032:295): avc: denied { read open } for pid=6492 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.286311][ T6512] fuse: Unknown parameter 'g' [ 112.316986][ T6508] syzkaller0: entered promiscuous mode [ 112.336255][ T6508] syzkaller0: entered allmulticast mode [ 112.540372][ T30] audit: type=1400 audit(1761402034.032:296): avc: denied { getattr } for pid=6492 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.568272][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.627722][ T30] audit: type=1400 audit(1761402034.072:297): avc: denied { getattr } for pid=6492 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.659759][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.906125][ T30] audit: type=1400 audit(1761402034.492:298): avc: denied { read } for pid=6501 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.929721][ T30] audit: type=1400 audit(1761402034.492:299): avc: denied { open } for pid=6501 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.932641][ T6511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 112.958514][ T30] audit: type=1400 audit(1761402034.592:300): avc: denied { write } for pid=6494 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.728061][ T5817] Bluetooth: hci2: command 0x0401 tx timeout [ 115.194573][ T6542] fuse: Bad value for 'user_id' [ 115.200072][ T6542] fuse: Bad value for 'user_id' [ 117.151987][ T6556] loop6: detected capacity change from 0 to 524288000 [ 117.371305][ T6554] ALSA: mixer_oss: invalid OSS volume '' [ 117.888486][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.013689][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 119.064178][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.088988][ T6594] overlayfs: failed to clone upperpath [ 119.100772][ T10] usb 2-1: Product: syz [ 119.109717][ T10] usb 2-1: Manufacturer: syz [ 119.119780][ T10] usb 2-1: SerialNumber: syz [ 119.138581][ T10] usb 2-1: config 0 descriptor?? [ 119.926859][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 119.926874][ T30] audit: type=1400 audit(1761402042.202:320): avc: denied { ioctl } for pid=6572 comm="syz.1.143" path="socket:[11309]" dev="sockfs" ino=11309 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 119.933908][ T10] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 120.286090][ T10] airspy 2-1:0.0: Could not detect board [ 120.306753][ T10] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 120.835441][ T10] usb 2-1: USB disconnect, device number 2 [ 120.876173][ T30] audit: type=1400 audit(1761402043.132:321): avc: denied { ioctl } for pid=6620 comm="syz.3.152" path="socket:[11099]" dev="sockfs" ino=11099 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.611559][ T30] audit: type=1400 audit(1761402043.882:322): avc: denied { write } for pid=6631 comm="syz.1.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.724130][ T30] audit: type=1326 audit(1761402044.002:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.0.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20b198efc9 code=0x0 [ 121.790515][ T30] audit: type=1400 audit(1761402044.072:324): avc: denied { ioctl } for pid=6631 comm="syz.1.155" path="socket:[11131]" dev="sockfs" ino=11131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.831868][ T5137] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 121.843467][ T5137] CPU: 0 UID: 0 PID: 5137 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 121.843496][ T5137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.843509][ T5137] Workqueue: hci3 hci_rx_work [ 121.843543][ T5137] Call Trace: [ 121.843550][ T5137] [ 121.843558][ T5137] dump_stack_lvl+0x16c/0x1f0 [ 121.843590][ T5137] sysfs_warn_dup+0x7f/0xa0 [ 121.843615][ T5137] sysfs_create_dir_ns+0x24b/0x2b0 [ 121.843640][ T5137] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 121.843664][ T5137] ? find_held_lock+0x2b/0x80 [ 121.843695][ T5137] ? do_raw_spin_unlock+0x172/0x230 [ 121.843718][ T5137] kobject_add_internal+0x2c4/0x9b0 [ 121.843742][ T5137] kobject_add+0x16e/0x240 [ 121.843770][ T5137] ? __pfx_kobject_add+0x10/0x10 [ 121.843791][ T5137] ? do_raw_spin_unlock+0x172/0x230 [ 121.843814][ T5137] ? kobject_put+0xab/0x5a0 [ 121.843840][ T5137] device_add+0x288/0x1aa0 [ 121.843865][ T5137] ? __pfx_dev_set_name+0x10/0x10 [ 121.843893][ T5137] ? __pfx_device_add+0x10/0x10 [ 121.843917][ T5137] ? mgmt_send_event_skb+0x2fb/0x460 [ 121.843953][ T5137] hci_conn_add_sysfs+0x17e/0x230 [ 121.843982][ T5137] le_conn_complete_evt+0x1260/0x2150 [ 121.844011][ T5137] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 121.844032][ T5137] ? hci_event_packet+0x459/0x11c0 [ 121.844060][ T5137] hci_le_conn_complete_evt+0x23c/0x370 [ 121.844088][ T5137] hci_le_meta_evt+0x357/0x5e0 [ 121.844111][ T5137] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 121.844134][ T5137] hci_event_packet+0x685/0x11c0 [ 121.844156][ T5137] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 121.844180][ T5137] ? __pfx_hci_event_packet+0x10/0x10 [ 121.844206][ T5137] ? kcov_remote_start+0x3c9/0x6d0 [ 121.844228][ T5137] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.844260][ T5137] hci_rx_work+0x2c5/0x16b0 [ 121.844286][ T5137] ? rcu_is_watching+0x12/0xc0 [ 121.844311][ T5137] process_one_work+0x9cf/0x1b70 [ 121.844340][ T5137] ? __pfx_process_one_work+0x10/0x10 [ 121.844367][ T5137] ? assign_work+0x1a0/0x250 [ 121.844389][ T5137] worker_thread+0x6c8/0xf10 [ 121.844414][ T5137] ? __kthread_parkme+0x19e/0x250 [ 121.844445][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 121.844465][ T5137] kthread+0x3c5/0x780 [ 121.844484][ T5137] ? __pfx_kthread+0x10/0x10 [ 121.844506][ T5137] ? rcu_is_watching+0x12/0xc0 [ 121.844530][ T5137] ? __pfx_kthread+0x10/0x10 [ 121.844550][ T5137] ret_from_fork+0x675/0x7d0 [ 121.844566][ T5137] ? __pfx_kthread+0x10/0x10 [ 121.844584][ T5137] ret_from_fork_asm+0x1a/0x30 [ 121.844619][ T5137] [ 121.844749][ T5137] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.104103][ T5137] Bluetooth: hci3: failed to register connection device [ 122.355754][ T30] audit: type=1400 audit(1761402044.632:325): avc: denied { read } for pid=6657 comm="syz.4.158" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.459669][ T30] audit: type=1400 audit(1761402044.632:326): avc: denied { open } for pid=6657 comm="syz.4.158" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 122.545023][ T30] audit: type=1400 audit(1761402044.772:327): avc: denied { ioctl } for pid=6657 comm="syz.4.158" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 124.657690][ T6706] netlink: 7 bytes leftover after parsing attributes in process `syz.2.165'. [ 125.319950][ T30] audit: type=1400 audit(1761402047.492:328): avc: denied { mounton } for pid=6704 comm="syz.2.165" path="cgroup:[4026532896]" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 125.493033][ T30] audit: type=1400 audit(1761402047.502:329): avc: denied { execute } for pid=6704 comm="syz.2.165" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=11440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 125.576211][ T30] audit: type=1400 audit(1761402047.542:330): avc: denied { associate } for pid=6704 comm="syz.2.165" name="bus" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 125.806057][ T30] audit: type=1400 audit(1761402048.082:331): avc: denied { ioctl } for pid=6722 comm="syz.2.170" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.000987][ T6729] tipc: Started in network mode [ 126.066646][ T6729] tipc: Node identity 322edc8182c3, cluster identity 4711 [ 126.262636][ T6729] tipc: Enabled bearer , priority 0 [ 126.429583][ T6733] syzkaller0: entered promiscuous mode [ 126.453698][ T6733] syzkaller0: entered allmulticast mode [ 126.478190][ T6720] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 126.674924][ T30] audit: type=1400 audit(1761402048.952:332): avc: denied { unlink } for pid=6738 comm="syz.4.173" name="#1" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.922255][ T30] audit: type=1400 audit(1761402048.952:333): avc: denied { mount } for pid=6738 comm="syz.4.173" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 127.617766][ T5983] tipc: Node number set to 2968378497 [ 127.710264][ T6720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.751948][ T30] audit: type=1400 audit(1761402050.022:334): avc: denied { create } for pid=6741 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 127.887264][ T6730] bond1: (slave veth3): Enslaving as an active interface with a down link [ 127.923606][ T30] audit: type=1400 audit(1761402050.022:335): avc: denied { mount } for pid=6741 comm="syz.0.174" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.086072][ T30] audit: type=1400 audit(1761402050.192:336): avc: denied { read } for pid=6741 comm="syz.0.174" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.109380][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.154001][ T6746] bond1: (slave dummy0): making interface the new active one [ 128.172012][ T30] audit: type=1400 audit(1761402050.192:337): avc: denied { open } for pid=6741 comm="syz.0.174" path="/dev/v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.195580][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.226359][ T6746] dummy0: entered promiscuous mode [ 128.236543][ T6746] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 128.267393][ T5137] Bluetooth: hci3: command 0x0406 tx timeout [ 128.356765][ T6727] tipc: Resetting bearer [ 128.465234][ T6727] tipc: Disabling bearer [ 129.085364][ T6754] bond1 (unregistering): (slave veth3): Releasing active interface [ 129.110675][ T6754] bond1 (unregistering): (slave dummy0): Releasing active interface [ 129.140986][ T6754] bond1 (unregistering): Released all slaves [ 130.682357][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 130.682377][ T30] audit: type=1400 audit(1761402052.962:341): avc: denied { write } for pid=6794 comm="syz.2.183" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 132.352742][ T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 132.354341][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.371089][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.428890][ T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 133.438628][ T24] usb 3-1: config 0 has an invalid descriptor of length 58, skipping remainder of the config [ 133.463438][ T24] usb 3-1: config 0 has no interface number 0 [ 133.473587][ T24] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 25697, setting to 64 [ 133.552944][ T24] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.941717][ T30] audit: type=1326 audit(1761402056.222:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 133.944606][ T24] usb 3-1: config 0 interface 52 has no altsetting 0 [ 134.002617][ T6825] overlayfs: workdir and upperdir must be separate subtrees [ 134.345676][ T30] audit: type=1326 audit(1761402056.222:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.410748][ T24] usb 3-1: string descriptor 0 read error: -71 [ 134.420515][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 134.449993][ T24] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 134.468058][ T30] audit: type=1326 audit(1761402056.262:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.526179][ T30] audit: type=1326 audit(1761402056.262:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.631423][ T24] usb 3-1: config 0 descriptor?? [ 134.657957][ T24] usb 3-1: can't set config #0, error -71 [ 134.680154][ T24] usb 3-1: USB disconnect, device number 8 [ 134.690407][ T30] audit: type=1326 audit(1761402056.262:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.936067][ T30] audit: type=1326 audit(1761402056.262:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.970644][ T30] audit: type=1326 audit(1761402056.262:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 134.994300][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.068437][ T30] audit: type=1326 audit(1761402056.262:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 135.096070][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 135.129436][ T30] audit: type=1326 audit(1761402056.262:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6823 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c3b58efc9 code=0x7ffc0000 [ 135.324711][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 135.347328][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 135.436857][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 135.456128][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 135.465129][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.532381][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 135.617913][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 135.648416][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 135.657902][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.683388][ T24] usb 3-1: config 0 descriptor?? [ 136.137684][ T24] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 136.213318][ T24] usb 3-1: USB disconnect, device number 9 [ 136.253045][ T24] usblp0: removed [ 136.656258][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 137.027127][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 137.059200][ T24] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.116452][ T24] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.170940][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.214511][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.224776][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.235169][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.248374][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.257708][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.268002][ T24] usb 3-1: config 0 descriptor?? [ 137.285687][ T6855] ------------[ cut here ]------------ [ 137.291434][ T6855] WARNING: CPU: 1 PID: 6855 at net/ipv4/route.c:1270 ip_rt_bug+0x2b/0x120 [ 137.300237][ T6855] Modules linked in: [ 137.304359][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) [ 137.313676][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.324052][ T6855] RIP: 0010:ip_rt_bug+0x2b/0x120 [ 137.329081][ T6855] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 3c 34 ff f7 66 90 e8 35 34 ff f7 ba 02 00 00 00 48 89 de 31 ff e8 66 a5 6e ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 0e 34 ff [ 137.348828][ T6855] RSP: 0018:ffffc90003e7f3b8 EFLAGS: 00010287 [ 137.354953][ T6855] RAX: 0000000000000f11 RBX: ffff888059a69000 RCX: ffffc9000d57b000 [ 137.363118][ T6855] RDX: 0000000000080000 RSI: ffffffff89bdd62a RDI: ffffffff8bf06cc0 [ 137.371149][ T6855] RBP: ffff888059a69000 R08: 0000000000000001 R09: 0000000000000001 [ 137.379170][ T6855] R10: ffffc90003e7f368 R11: ffffffff81000130 R12: ffff88807ac38000 [ 137.387298][ T6855] R13: ffff888145aaa580 R14: ffff888054772f00 R15: ffff888059a69058 [ 137.396169][ T6855] FS: 00007f8c397d56c0(0000) GS:ffff888124b0a000(0000) knlGS:0000000000000000 [ 137.405247][ T6855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.411944][ T6855] CR2: 0000200000000240 CR3: 0000000053040000 CR4: 00000000003526f0 [ 137.420009][ T6855] Call Trace: [ 137.423323][ T6855] [ 137.426329][ T6855] ip_push_pending_frames+0x419/0x5d0 [ 137.431790][ T6855] icmp_push_reply+0x308/0x440 [ 137.436626][ T6855] __icmp_send+0xce3/0x19c0 [ 137.441171][ T6855] ? __pfx___icmp_send+0x10/0x10 [ 137.446170][ T6855] ? fib_multipath_hash+0x16d1/0x1700 [ 137.451568][ T6855] ? __ip_options_compile+0x873/0x1670 [ 137.457155][ T6855] ? ip_route_input_noref+0x15d/0x2e0 [ 137.462674][ T6855] ip_options_compile+0xb6/0x100 [ 137.467731][ T6855] ? __pfx_ip_options_compile+0x10/0x10 [ 137.473302][ T6855] ? tcp_v4_early_demux+0xca/0xbf0 [ 137.478536][ T6855] ip_rcv_finish_core+0x6de/0x2290 [ 137.483701][ T6855] ip_rcv+0x1c0/0x600 [ 137.487764][ T6855] ? __pfx_ip_rcv+0x10/0x10 [ 137.492304][ T6855] __netif_receive_skb_one_core+0x197/0x1e0 [ 137.498310][ T6855] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 137.504784][ T6855] ? lock_acquire+0x179/0x350 [ 137.509525][ T6855] ? __phys_addr+0xe8/0x180 [ 137.514055][ T6855] __netif_receive_skb+0x1d/0x160 [ 137.519186][ T6855] netif_receive_skb+0x137/0x7b0 [ 137.524145][ T6855] ? __pfx_netif_receive_skb+0x10/0x10 [ 137.529664][ T6855] tun_rx_batched.isra.0+0x3ee/0x740 [ 137.534970][ T6855] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 137.540918][ T6855] ? tun_get_user+0x1ded/0x3cc0 [ 137.545816][ T6855] ? rcu_is_watching+0x12/0xc0 [ 137.550596][ T6855] tun_get_user+0x28b2/0x3cc0 [ 137.555297][ T6855] ? __pfx_tun_get_user+0x10/0x10 [ 137.560364][ T6855] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 137.565830][ T6855] ? find_held_lock+0x2b/0x80 [ 137.570557][ T6855] ? tun_get+0x191/0x370 [ 137.574796][ T6855] tun_chr_write_iter+0xdc/0x210 [ 137.579734][ T6855] vfs_write+0x7d3/0x11d0 [ 137.584038][ T6855] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.589578][ T6855] ? __pfx_vfs_write+0x10/0x10 [ 137.594338][ T6855] ? find_held_lock+0x2b/0x80 [ 137.599316][ T6855] ksys_write+0x12a/0x250 [ 137.603813][ T6855] ? __pfx_ksys_write+0x10/0x10 [ 137.608669][ T6855] do_syscall_64+0xcd/0xfa0 [ 137.613177][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.619063][ T6855] RIP: 0033:0x7f8c3b58da7f [ 137.623476][ T6855] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 137.643296][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.649552][ T6855] RSP: 002b:00007f8c397d5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 137.657969][ T6855] RAX: ffffffffffffffda RBX: 00007f8c3b7e6090 RCX: 00007f8c3b58da7f [ 137.666031][ T6855] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 137.673977][ T6855] RBP: 00007f8c3b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 137.681939][ T6855] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 137.689899][ T6855] R13: 00007f8c3b7e6128 R14: 00007f8c3b7e6090 R15: 00007ffd2028e868 [ 137.697874][ T6855] [ 137.700877][ T6855] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.708138][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) [ 137.717312][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.727353][ T6855] Call Trace: [ 137.730618][ T6855] [ 137.733538][ T6855] dump_stack_lvl+0x3d/0x1f0 [ 137.738141][ T6855] vpanic+0x640/0x6f0 [ 137.742128][ T6855] ? ip_rt_bug+0x2b/0x120 [ 137.746463][ T6855] panic+0xca/0xd0 [ 137.750176][ T6855] ? __pfx_panic+0x10/0x10 [ 137.754576][ T6855] check_panic_on_warn+0xab/0xb0 [ 137.759505][ T6855] __warn+0xf6/0x3c0 [ 137.763391][ T6855] ? ip_rt_bug+0x2b/0x120 [ 137.767715][ T6855] report_bug+0x3c3/0x580 [ 137.772051][ T6855] ? ip_rt_bug+0x2b/0x120 [ 137.776408][ T6855] handle_bug+0x184/0x210 [ 137.780725][ T6855] exc_invalid_op+0x17/0x50 [ 137.786345][ T6855] asm_exc_invalid_op+0x1a/0x20 [ 137.791190][ T6855] RIP: 0010:ip_rt_bug+0x2b/0x120 [ 137.796122][ T6855] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 3c 34 ff f7 66 90 e8 35 34 ff f7 ba 02 00 00 00 48 89 de 31 ff e8 66 a5 6e ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c c3 cc cc cc cc e8 0e 34 ff [ 137.816673][ T6855] RSP: 0018:ffffc90003e7f3b8 EFLAGS: 00010287 [ 137.824608][ T6855] RAX: 0000000000000f11 RBX: ffff888059a69000 RCX: ffffc9000d57b000 [ 137.836563][ T6855] RDX: 0000000000080000 RSI: ffffffff89bdd62a RDI: ffffffff8bf06cc0 [ 137.844694][ T6855] RBP: ffff888059a69000 R08: 0000000000000001 R09: 0000000000000001 [ 137.853329][ T6855] R10: ffffc90003e7f368 R11: ffffffff81000130 R12: ffff88807ac38000 [ 137.861550][ T6855] R13: ffff888145aaa580 R14: ffff888054772f00 R15: ffff888059a69058 [ 137.870393][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.876753][ T6855] ? ip_rt_bug+0x2a/0x120 [ 137.881349][ T6855] ? ip_rt_bug+0x2a/0x120 [ 137.885752][ T6855] ip_push_pending_frames+0x419/0x5d0 [ 137.891116][ T6855] icmp_push_reply+0x308/0x440 [ 137.895873][ T6855] __icmp_send+0xce3/0x19c0 [ 137.900544][ T6855] ? __pfx___icmp_send+0x10/0x10 [ 137.905486][ T6855] ? fib_multipath_hash+0x16d1/0x1700 [ 137.911124][ T6855] ? __ip_options_compile+0x873/0x1670 [ 137.916837][ T6855] ? ip_route_input_noref+0x15d/0x2e0 [ 137.922208][ T6855] ip_options_compile+0xb6/0x100 [ 137.927158][ T6855] ? __pfx_ip_options_compile+0x10/0x10 [ 137.932710][ T6855] ? tcp_v4_early_demux+0xca/0xbf0 [ 137.937903][ T6855] ip_rcv_finish_core+0x6de/0x2290 [ 137.943007][ T6855] ip_rcv+0x1c0/0x600 [ 137.946969][ T6855] ? __pfx_ip_rcv+0x10/0x10 [ 137.951443][ T6855] __netif_receive_skb_one_core+0x197/0x1e0 [ 137.957443][ T6855] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 137.963851][ T6855] ? lock_acquire+0x179/0x350 [ 137.968550][ T6855] ? __phys_addr+0xe8/0x180 [ 137.973050][ T6855] __netif_receive_skb+0x1d/0x160 [ 137.978076][ T6855] netif_receive_skb+0x137/0x7b0 [ 137.982995][ T6855] ? __pfx_netif_receive_skb+0x10/0x10 [ 137.988435][ T6855] tun_rx_batched.isra.0+0x3ee/0x740 [ 137.993698][ T6855] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 137.999506][ T6855] ? tun_get_user+0x1ded/0x3cc0 [ 138.004343][ T6855] ? rcu_is_watching+0x12/0xc0 [ 138.009118][ T6855] tun_get_user+0x28b2/0x3cc0 [ 138.014301][ T6855] ? __pfx_tun_get_user+0x10/0x10 [ 138.019762][ T6855] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.026021][ T6855] ? find_held_lock+0x2b/0x80 [ 138.030882][ T6855] ? tun_get+0x191/0x370 [ 138.035132][ T6855] tun_chr_write_iter+0xdc/0x210 [ 138.040052][ T6855] vfs_write+0x7d3/0x11d0 [ 138.044368][ T6855] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 138.049901][ T6855] ? __pfx_vfs_write+0x10/0x10 [ 138.054817][ T6855] ? find_held_lock+0x2b/0x80 [ 138.059495][ T6855] ksys_write+0x12a/0x250 [ 138.063809][ T6855] ? __pfx_ksys_write+0x10/0x10 [ 138.068636][ T6855] do_syscall_64+0xcd/0xfa0 [ 138.073132][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.079097][ T6855] RIP: 0033:0x7f8c3b58da7f [ 138.083499][ T6855] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 138.103092][ T6855] RSP: 002b:00007f8c397d5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 138.111587][ T6855] RAX: ffffffffffffffda RBX: 00007f8c3b7e6090 RCX: 00007f8c3b58da7f [ 138.119724][ T6855] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 138.127891][ T6855] RBP: 00007f8c3b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 138.136418][ T6855] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 138.146773][ T6855] R13: 00007f8c3b7e6128 R14: 00007f8c3b7e6090 R15: 00007ffd2028e868 [ 138.155038][ T6855] [ 138.158375][ T6855] Kernel Offset: disabled [ 138.163377][ T6855] Rebooting in 86400 seconds..