last executing test programs: 4m37.784083747s ago: executing program 3 (id=253): sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') exit(0x800) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x4000) close(r6) bind(r1, &(0x7f0000000100)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) sendmsg$nl_generic(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000005200017c00"], 0x18}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x1a0d029, &(0x7f0000000180)=ANY=[@ANYBLOB='t\x00l\x00\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 4m36.505061823s ago: executing program 3 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000094c411c18e1cfbeab31bb1e3b16d08b333ea6032aa8918016de69d861e12a57d3d3d339633b274125111d33019099248324a5c2c97981777e5b2eaf828003e6784d6c64c1d2040ff79d0643fada21c53180529fd64fdd881e2a2e80c1983b16119343a12aa249bb98c0b3cf8b3db636fe764ada7e726c6ae096600a17ddb02c8ba63277efcc0a330f979528fd8ad9906447f1ed22381e46ae0ba63c64401"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x7, "63bf7011a9c9e567329f1ef3a923ac64b7d9788f1ee6ad4c9c453d35fb95bbcc", 0x3719, 0x80000000, 0xfffffffffffffff8, 0x81, 0x3, 0x1, 0x9, 0x0, [0x6, 0xfffffffc, 0x2]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r9, 0x801, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc095}, 0x200100b0) accept4(r2, 0x0, 0x0, 0x0) 4m35.415661034s ago: executing program 3 (id=259): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000100010ef17a3600000000000090902240001000000000904000001030000000921050000012205000905810300"], 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x40b5, 0x8]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000380)={0x40, 0x6, 0xaf, {0xaf, 0x20, "ba00000000000000000000000097000000000000008ba8b84ec851d5c5ba7471412e669322e8c69ccd8d5fa7e8f1cfb6cd1029c27e68d8456f1fd52a51b1ea12ccb8992a004a8ab068dacefb22c63969dade55e8df77ef35e600e79de775ff144f7dea66837ce9bebcde99bbe5d08d83eacc88e4a347528544f24e23431e7f04bcd7543ab84c5d935d356cc573afadd83e9cd9ab1759ae463a63e8ca9da7b5a46c9eb9f89b64f08de6c4ed8993"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4m31.538695284s ago: executing program 3 (id=268): pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x440, 0x925e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r5, 0x0, 0x100000000000000}, 0x38) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x200041, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}]}}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xd, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4d87}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003480)={'ip6tnl0\x00', &(0x7f0000003400)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x1, 0x1, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x7, 0x700, 0x8, 0xffff21c3}}) 4m29.254536036s ago: executing program 3 (id=276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$char_usb(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$media(&(0x7f0000000080), 0x8, 0x88000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4, 0xb696}}, './file0\x00'}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x5}) 4m25.855441135s ago: executing program 3 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd000000001090212"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 4m24.550962743s ago: executing program 32 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd000000001090212"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 3m10.299965739s ago: executing program 1 (id=521): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xffff, @loopback, 0x1}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800ec47ad3708a52cb20000de0f00e99500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) chdir(&(0x7f0000000280)='./bus\x00') times(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x2, 0x0, 0x40, 0x5, 'syz0\x00', 0x10000003}, 0x0, [0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffff52, 0x5, 0x1, 0x8000000000000000, 0x8, 0x0, 0x4000000000000, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7fffffff, 0x85, 0x3, 0x0, 0xb9e4, 0x7, 0x100000000000000, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffb, 0x6, 0x6, 0x0, 0x3, 0x61, 0x9, 0xfffffffffffffc, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x200000000000, 0x1, 0xfffffffffffffff8, 0x0, 0x0, 0x4, 0xc000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xcb, 0xfffffffffffffffc, 0x0, 0x200, 0x9, 0x5, 0xffff, 0xfffffffffffffff8, 0x5, 0x0, 0x0, 0x10001, 0xebc, 0x0, 0x3fffffffffffe, 0x74c, 0x6, 0x6, 0x400000000067, 0x7, 0x10000000, 0x7fffffff, 0x401, 0xfffffffffffffffe, 0x1, 0x76e, 0x0, 0x4, 0x5, 0x4, 0x0, 0x1, 0x1, 0xf32, 0x9, 0x2001, 0x0, 0x0, 0x0, 0xa562, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x6, 0xfffffffffffffffb, 0x0, 0x2, 0x8, 0x0, 0x7, 0x4, 0x1553, 0x40, 0x0, 0x1, 0x0, 0xf65]}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 3m9.17436209s ago: executing program 1 (id=525): socket$packet(0x11, 0x0, 0x300) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x9, 0x8}, {0x9, 0x0, 0xf1, 0x9d4}}}}, 0x15) 3m8.767856876s ago: executing program 1 (id=527): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ptrace$poke(0x1, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x57d0, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 3m7.631671802s ago: executing program 1 (id=531): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0xeeef0000, 0x2}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x1000c880) (async) r6 = socket$inet6(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) (async) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) 3m6.338925876s ago: executing program 1 (id=534): socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x300, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 3m4.225525541s ago: executing program 1 (id=542): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000340)={&(0x7f0000000600)=[{0x8, 0x88f2b4e481a670b8, 0x1, &(0x7f00000001c0)="c5"}, {0x0, 0x4400, 0x0, 0x0}, {0x9, 0x0, 0x0, 0x0}, {0x3, 0x2000, 0x0, 0x0}], 0x4}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000000c0)=0x62e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r10, &(0x7f0000000000)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff038768441a8cb89e14f00800", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m48.429092403s ago: executing program 33 (id=542): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f00000001c0)='./file0\x00', 0x148640, 0x78e22799f4a46f1e) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000340)={&(0x7f0000000600)=[{0x8, 0x88f2b4e481a670b8, 0x1, &(0x7f00000001c0)="c5"}, {0x0, 0x4400, 0x0, 0x0}, {0x9, 0x0, 0x0, 0x0}, {0x3, 0x2000, 0x0, 0x0}], 0x4}) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000000c0)=0x62e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r10, &(0x7f0000000000)="09000000e700140000007ef52f55", 0xe, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff038768441a8cb89e14f00800", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m30.36818654s ago: executing program 2 (id=625): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') read$usbmon(r0, &(0x7f0000000080)=""/4096, 0x1000) 2m30.293247425s ago: executing program 2 (id=626): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) ptrace$poke(0x1, 0x0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) r1 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x57d0, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 2m29.636753709s ago: executing program 2 (id=627): sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3f7, 0x100, 0x70bd29, 0x25dfdbfc, {0x1, 0x7, '.', './file0'}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040004}, 0x4000890) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) userfaultfd(0x80001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x4) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000126000/0x3000)=nil, 0x5, 0x1, 0x11}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x24500, 0x0) 2m27.550133923s ago: executing program 2 (id=628): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2m22.735326474s ago: executing program 2 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e8952e2c7e", 0x5, 0x12000000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x40004) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x4f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000280)='./file2\x00', r7, &(0x7f00000002c0)='./file1\x00', 0x104) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1909841, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 2m22.178729086s ago: executing program 2 (id=644): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0x32ba, &(0x7f0000000180)={0x0, 0xc27c, 0x1000, 0x3, 0x43}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000000c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@deltaction={0x58, 0x31, 0x300, 0x170bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e85bf3b}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}]}, 0x58}}, 0x4081) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fc"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendto(0xffffffffffffffff, &(0x7f0000000140)="4c9e7c7e4eafe783643aea030babd56d90a00d126a73", 0x16, 0x40010, &(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r6, 0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0xfffffffb) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 2m6.996617556s ago: executing program 34 (id=644): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0x32ba, &(0x7f0000000180)={0x0, 0xc27c, 0x1000, 0x3, 0x43}, &(0x7f0000000080), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000000c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@deltaction={0x58, 0x31, 0x300, 0x170bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2e85bf3b}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}]}, 0x58}}, 0x4081) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fc"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendto(0xffffffffffffffff, &(0x7f0000000140)="4c9e7c7e4eafe783643aea030babd56d90a00d126a73", 0x16, 0x40010, &(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) fsopen(&(0x7f0000000000)='cifs\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r6, 0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000080)=0xfffffffb) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 13.5778832s ago: executing program 5 (id=980): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000001000, 0x83}], 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x42, 0x5c}) 12.359558105s ago: executing program 5 (id=983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x7}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x7}}}}}}}, 0x0) 11.874218073s ago: executing program 6 (id=988): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 10.595026289s ago: executing program 7 (id=990): readv(0xffffffffffffffff, &(0x7f0000000600), 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xbd4, 0x8, 0x1ff, 0x640, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x95, 0x1, 0x5, 0x5}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a46100000001090212"], 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 10.51980464s ago: executing program 4 (id=991): preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) (async) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000084c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000008500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000008680)={0x0, 0x0, &(0x7f0000008640)={&(0x7f0000008540)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x19}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) 10.425121199s ago: executing program 5 (id=992): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004880, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010725bd7000fcdbdfb303003f316e527b3320eaafaf14594c5880a94509e5e92a67b19a8d396b5bdfbaa49ba388f4b42f7edd09d51e5fdcde"], 0x14}, 0x1, 0x0, 0x0, 0x20045091}, 0x24048880) write(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) mprotect(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0xb) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="495307000300", @ANYRES32=0x0, @ANYBLOB="0c009900446bebc736df2d00"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 9.640272203s ago: executing program 0 (id=993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0x101000}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$ndb(0x0, 0x0, 0x800) ioctl$BLKFLSBUF(r6, 0x1261, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 9.511704405s ago: executing program 4 (id=994): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x5, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000240)=&(0x7f00000001c0)={&(0x7f0000000040), 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000002c0)=0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x4000) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) 8.301489461s ago: executing program 6 (id=995): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 8.192497961s ago: executing program 4 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r3, &(0x7f0000001340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000003740)={0x10, 0x0, r4}, 0x10) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, 0x0, 0x10048840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18083000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000001b9500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) 7.214213069s ago: executing program 4 (id=997): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900), 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x501502, 0x13a) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x84, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffbc}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 6.96241656s ago: executing program 5 (id=998): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003aa000000aa03"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414"], 0x24}}, 0x0) 6.764555844s ago: executing program 0 (id=999): syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbec9ae5da80c808004500005c00000000000190d661303c00ac1414bb05019078ac1e0101400d0004006500050e32000764010180c0787e521333eb04ac1404bb440c2511ac14142e00000003860d000000030604cad801034f4410d140000000040000ce0000100000000055a32bf83e9a18ca15a775c90197d2504b39aede9554e282a4264e7facdac25550d5a8e950ffffa308f8b164114820d929e513e2f678640ae24d49261c7b938296cbc5c6dbc20f3c4fd60d614bb371e5b38597662ca7c35f3198d1a95961c5"], 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1477, 0x100e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0xc, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x5cae, 0x7, 0x1, {0x22, 0xa9}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf4, 0xfd, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0x83, 0x1}}]}}}]}}]}}, &(0x7f00000000c0)={0x42, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x1, 0x2, 0xb8, 0x8, 0xe3}, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="08000004f6191061cc0000"], 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1a67}}, {0xdf, &(0x7f00000002c0)=@string={0xdf, 0x3, "cfc4d2ba2d73d0bae410925e489fdc19995160dcf1e6b72f357f1d8c75497495e7904502c19def78248c7573da8319ca8adb10dc403b78dd7f25e393bf32b24ba4e8373ada2ecf3a107d7d24c71b6c9bd8dddc5f40e5cce8908462fd4f37cf5f2460b6559ae74234d42b030016dd8fca381a323677a821156c4c6696480d4da9b97ebcd80b884174c8c976291f1e9b18ca05a2c9a170291e3b594c6078be9ad3033ea45c5ff12b00754123d6a8fb99f369f40ede6432874a71365e7bffca4c9368486fa5f05852a8b959ce3970354d3c00"/221}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYRES16], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) fchdir(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x102) lseek(r3, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004000000090000"], 0x48) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x1, 0xfffffffe, 0x2be, 0x6}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) socket(0x10, 0x3, 0x0) 6.460156324s ago: executing program 7 (id=1000): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xf, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES8=r5], 0x60}, 0x1, 0x400000000000000}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) 5.279592355s ago: executing program 7 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$dri(0x0, 0x4, 0x14000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019840)={0x6, 0x4, &(0x7f0000019580)=ANY=[@ANYBLOB="18020000fcffffff001d000000000000850000007b0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019900)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000019540)={&(0x7f0000019400)=ANY=[@ANYBLOB="9f8e7b538ba3267a7300000000000000d1f68fea7000000000000000"], &(0x7f0000019440)=""/213, 0x1c, 0xd5, 0x0, 0x8}, 0x28) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140)=0x10000008, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000197c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a01040000000000001f000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff0e000000000000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000019700)={0x17, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000019300)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x4, 0x9bc6, 0x10000, 0x0, 0x7fffffff], 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}, 0xc8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.584539135s ago: executing program 7 (id=1002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r1, 0x0, 0x4) 4.519005783s ago: executing program 7 (id=1003): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) sendmmsg$inet(r6, &(0x7f0000000900), 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/oops_count', 0x501502, 0x13a) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x84, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffbc}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 4.279464631s ago: executing program 6 (id=1004): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="f68cfb8206ba", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x10, 0x0, 0xfd, @private2, @local, {[@hopopts={0x88, 0x0, '\x00', [@padn]}]}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006380)={0x1c, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}, [@nested={0x5, 0xa9, 0x0, 0x1, [@generic='4']}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd8c00fcffffff08000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) 3.662364039s ago: executing program 5 (id=1005): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 3.620763818s ago: executing program 4 (id=1006): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_SERVICE(r2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000100)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fedbdf250300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="060001004e23000006ba354192"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000180)=@tcp, 0x2}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) socket(0x2, 0x80805, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r1, 0x3b8a, &(0x7f0000000040)={0x28, 0x0, r7, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0001210000"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.57782781s ago: executing program 0 (id=1007): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000002a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0x0, 0x0, 0x6, {0x40, 0x1, 0x7, 0x4000000000006, 0x0, 0x20000000000006, 0x0, 0x0, 0x120, 0x2000, 0xfffffffc, 0x0, 0x0, 0x500000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000005a00)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000005b00)=0xe8) read$FUSE(r5, &(0x7f0000009dc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x2000, &(0x7f0000007cc0)={&(0x7f0000000300)={0x50, 0x0, 0xd80, {0x7, 0x2b, 0x3, 0x10010000, 0x7, 0xffff, 0x385, 0xfd, 0x0, 0x0, 0x1, 0x1}}, &(0x7f0000000380)={0x18, 0xfffffffffffffff5, 0x30d1a8b5, {0x7756}}, &(0x7f00000003c0)={0x18, 0x0, 0xa9, {0x4}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x9, {0xfffffffa}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0xfffffffffffff7b9, {0x4}}, &(0x7f0000000580)={0x28, 0x0, 0x5, {{0x2, 0xfffffffffffffff7, 0x1}}}, &(0x7f00000005c0)={0x60, 0x0, 0xa, {{0x6, 0x7, 0xfffffffffffffdb0, 0x6, 0x6, 0x8, 0x3, 0xfffffffa}}}, &(0x7f0000000640)={0x18, 0xfffffffffffffff5, 0x80000001}, &(0x7f0000002a00)=ANY=[@ANYBLOB="1d000000f5ffffff090000000000000001006b71f0d8443b82f8db10cc737769746368006ee82ff70b97a7f449438ea979781e4c29ac66130e202357b9114cc3dd4dcae9d4b2207e8152262cd209e7083d57c89066af11310b1733c419f16cd073997bee698c28cce49f3591f906110100792ddc19eeb120f11c546a15a58849ce2c97107f02a9a931a34d14e3c30275cb17743e833a7c709a738298c9b8c7af0cf71668b67d735584f731132d2485a458000f"], &(0x7f0000000700)={0x20, 0xb, 0x4, {0x0, 0x12}}, &(0x7f00000007c0)={0x78, 0x0, 0x4b2a, {0xffffffffffffff3e, 0x8, 0x0, {0x3, 0x9017, 0x40, 0x3, 0x44f70c6c, 0x1, 0x8, 0x9, 0x4e8, 0x6000, 0x4, 0x0, 0xee00, 0x5, 0x6}}}, &(0x7f0000000840)={0x90, 0x0, 0x8bd1, {0x0, 0x3, 0x6, 0x7fff, 0x3, 0x6, {0x0, 0x6, 0x2, 0x4, 0x8, 0x6, 0x7, 0x1fc2, 0xd775, 0x8000, 0x2f00000, 0xee00, 0xee00, 0x5, 0x1}}}, &(0x7f0000000900)={0xa0, 0xfffffffffffffff5, 0x3, [{0x5, 0x0, 0x1, 0x1, '\''}, {0x2, 0x8, 0xd, 0x3, 'sched_switch\x00'}, {0x0, 0x9, 0xa, 0x2, 'syzkaller\x00'}, {0x4, 0x4, 0x6, 0x10001, '\\}\'{{^'}]}, &(0x7f0000005280)={0x648, 0xfffffffffffffffe, 0x1, [{{0x2, 0x3, 0x1ff, 0x5, 0x8, 0x1, {0x4, 0x8, 0x80000001, 0x8, 0xc, 0xfff, 0x6, 0x400, 0xfffffff8, 0xa000, 0x9, 0x0, 0x0, 0x6, 0x1}}, {0x5, 0x8000, 0x1, 0xe, '*'}}, {{0x1, 0x0, 0x9, 0x71, 0x0, 0x1, {0x1, 0x5, 0x1ff, 0xffffffff7fffffff, 0x200, 0x5, 0x4a, 0x8, 0x9, 0x6000, 0x4, 0x0, 0x0, 0x4}}, {0x6, 0x80, 0x2, 0x6, '\'('}}, {{0x3, 0x3, 0x1, 0x7f, 0x3, 0x4, {0x4, 0x40, 0x200, 0x7, 0x8, 0x1, 0x100, 0x1000, 0x80000001, 0x0, 0x9, 0x0, 0x0, 0x9, 0x4}}, {0x2, 0xe, 0x1, 0x4, '$'}}, {{0x2, 0x3, 0x401, 0xfffffffffffffffd, 0x2, 0x5, {0x3, 0x2, 0x34000000, 0x0, 0x1, 0xbaa1, 0x0, 0x2, 0x3, 0x1000, 0x2, 0x0, 0x0, 0x6, 0x7}}, {0x0, 0x3, 0x6, 0x7a, '.:[\x9f%-'}}, {{0x3, 0x1, 0x5, 0x21, 0xffff, 0x80000001, {0x2, 0x7ff, 0x8000, 0x9, 0x800, 0x9, 0x0, 0xe, 0x8, 0x6000, 0x3, 0x0, 0x0, 0x3, 0xffffd497}}, {0x6, 0x8000, 0x2, 0x2, '}*'}}, {{0x3, 0x0, 0x8, 0x3, 0x200, 0x5, {0x2, 0x2, 0x6, 0x5, 0x0, 0xf, 0xffff, 0xb2, 0x8, 0x2000, 0x34c38279, 0xee01, 0x0, 0x1, 0x9}}, {0x4, 0x9, 0x2, 0x3, '*,'}}, {{0x5, 0x1, 0x1d6, 0x6, 0x7, 0x5, {0x3, 0xffffffff, 0x2, 0x8, 0x8, 0x5, 0x4, 0x6, 0x1000, 0xa000, 0xfff, 0xee00, 0x0, 0x34f5800, 0x8}}, {0x1, 0x100, 0x0, 0x1}}, {{0x1, 0x1, 0x80, 0x5, 0x8, 0x6, {0x3, 0x2, 0x10000, 0x1, 0x6, 0x6, 0x7, 0x6, 0x9, 0xc000, 0x6, 0x0, 0x0, 0x4, 0xffff}}, {0x2, 0xc, 0x0, 0x1}}, {{0x1, 0x2, 0xffffffff, 0xa4, 0xbea, 0x9, {0x1, 0x401, 0x9, 0x7, 0x0, 0x6, 0x4, 0x0, 0x81, 0xa000, 0x9, 0x0, 0x0, 0x41d1, 0x40}}, {0x3, 0x0, 0x1, 0x2, '\x00'}}, {{0x6, 0x3, 0x5, 0x4, 0xb, 0x62d, {0x0, 0x8, 0xa, 0x8, 0xffffffffffffff81, 0x0, 0x3, 0x7, 0xc, 0xc000, 0xa, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x9, 0xa, 0x1, 'syzkaller\x00'}}]}, &(0x7f0000005900)={0xa0, 0x0, 0x1, {{0x5, 0x0, 0x7, 0xa4d8, 0x1cda, 0x77, {0x4, 0x1, 0x5, 0x5, 0x7fff, 0x81, 0x800, 0x0, 0x9b, 0xa000, 0x101, 0x0, 0x0, 0x8}}}}, &(0x7f00000059c0)={0x20, 0xfffffffffffffff5, 0x3, {0xfffffffe, 0x4, 0xcb4, 0x200}}, &(0x7f0000007b80)={0x130, 0x0, 0x7b, {0x8, 0x4, 0x0, '\x00', {0x8000, 0x80, 0x0, 0x200, r9, r10, 0xa000, '\x00', 0xfffffffffffffffd, 0x0, 0x2, 0x37, {0x1, 0x1}, {0x5, 0x6}, {0x7, 0xf}, {0x6, 0x5}, 0x7f2, 0x39c, 0x1ff, 0xe000000}}}}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) getsockopt$packet_buf(r8, 0x107, 0x6, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) move_mount(0xffffffffffffffff, &(0x7f0000000400)='\x00', 0xffffffffffffff9c, 0x0, 0x54) r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_usb_connect(0x4, 0x52, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 3.358425504s ago: executing program 6 (id=1008): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0xe, 0x52}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="4004940000009407ff0cfa3729e46057a471ef8b3ec97437290f96559b46cafc0977f6b6a745f44d502401f82f337b0c272395ff9fdb31c083c935bd57081378c699b719e81a326de1336b589dc8bfc4a50b4bbceb551061158a4b95f3fb37217af7294583a4e8ef4936071dde5933c6c05b9c2ebb1da9fea9b8418a76c111721f3656ac4e185cd0d6d15b300a8c7625a8c2e4a1df195abdd3ad"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.70758754s ago: executing program 6 (id=1009): openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x484c0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc5"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x80000000, 0x9}, 0x10}, 0x94) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0xfffffffd, 0x0, r1}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000140)=0x4) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0xfc2a5000) fadvise64(0xffffffffffffffff, 0x81, 0x1, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40000, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0705000001000000000000010000040c00050000000000000100060900010073797a31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc801}, 0x40004) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0xd) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000200)=""/255, 0xff}], 0x1) 805.684752ms ago: executing program 6 (id=1010): r0 = socket$inet6_udp(0xa, 0x2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, r1}}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000004880)={0x11}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$uac1(r4, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[]) 600.178061ms ago: executing program 7 (id=1011): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1}, 0x4051) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xcc}}, 0x0) unlink(&(0x7f0000000180)='./cgroup/cgroup.procs\x00') unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000"], 0x0, 0x26}, 0x28) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x800) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)=""/74, 0x4a}], 0x1, 0x4, 0x5) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040)=r5, 0x12) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0xac}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x6f, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipvlan0\x00'}) 483.282962ms ago: executing program 5 (id=1012): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0x86) r5 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x89) r6 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000d40)={0x0, 0x1, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"6d71f879", 0x5, 0x0, 0x0, 0x0, 0x0, "244a18d1c4e6469a005caf0c0ff58a", "ce4250d8", "bf513d1d", "136712b9", ["27e203a56a36ac4f0b8b8c4f", "5e10229555954b0f02cd1469", "cb0e83d3a15978155c384d00", "79f56ca74227234da829edb7"]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000), 0x0) dup(r8) 414.744879ms ago: executing program 0 (id=1013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r1, 0x0, 0x4) 349.454289ms ago: executing program 0 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="e00000001000090500000000fdffffff6fb66a3f96dee84fd66d8864d22a3f2ffaa46c88bc4b0d2cb66b32f16465a4bfccd388955c21ae7df61c129ee6c3b7ec9222de6d459d9996990ac4c2c311185f073678c316167ca2c2f9376a47d420e29c4b395084fadd2cc0ae21f57671ad47c7687bf209c5de1c16c9ab42f3687854913207410219fbc388c4878ef8cd9febec24fe3c0a9ac071e694d7c74a160b0d40cd10d92ce511b6963ac8bf34b6206f83979af29c36ef3c138e930960c9cb28b54c94942f1dfc112a5ddb37e6d7e25c156a1ae9864f0727b3439c8555000000"], 0xe0}], 0x1}, 0x40040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=0x0, @ANYBLOB="000822bd7000fddbdf250c0000000c0001800800080007000000380002"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './bus\x00'}, 0x6e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_mmap}]}}) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/107, 0x6b}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000540)={0xc0, 0x0, 0x2000}) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 47.906823ms ago: executing program 4 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x20880, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x109e96, 0xffffffffffffffff, 0x3ffffc, 0x1, 0x0, 0x2, 0xfffffffffffffffd, 0x2, 0x10000, 0x6, 0x2, 0x1], 0xc000, 0x18743}) ioctl$KVM_RUN(r2, 0xae80, 0x0) io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) fanotify_init(0x8, 0x8000) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)) fcntl$setpipe(r5, 0x407, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffc}) chdir(&(0x7f00000000c0)='./bus\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xe4428, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r7 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) 0s ago: executing program 0 (id=1016): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000006"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socket(0x23, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) pipe2$watch_queue(&(0x7f0000001900), 0x80) syz_open_dev$radio(&(0x7f0000001940), 0x1, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): 98] usb 5-1: Using ep0 maxpacket: 8 [ 261.181239][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.193220][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.202173][ T5898] usb 5-1: Product: syz [ 261.206524][ T5898] usb 5-1: Manufacturer: syz [ 261.211122][ T5898] usb 5-1: SerialNumber: syz [ 261.217710][ T5898] usb 5-1: config 0 descriptor?? [ 261.413939][ T5957] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 261.431401][ T5898] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 261.557374][ T30] audit: type=1400 audit(3913175770.251:1148): avc: denied { accept } for pid=8294 comm="syz.5.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 261.583976][ T5957] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 261.606626][ T5957] usb 3-1: config 0 has no interface number 0 [ 261.665482][ T5957] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 261.666203][ T30] audit: type=1400 audit(3913175770.361:1149): avc: denied { bind } for pid=8291 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 261.679862][ T5957] usb 3-1: New USB device found, idVendor=04da, idProduct=0901, bcdDevice= 1.45 [ 261.738076][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.750893][ T5957] usb 3-1: Product: syz [ 261.756498][ T5957] usb 3-1: Manufacturer: syz [ 261.761509][ T5957] usb 3-1: SerialNumber: syz [ 261.837489][ T5957] usb 3-1: config 0 descriptor?? [ 262.034567][ T5957] usb-storage 3-1:0.32: USB Mass Storage device detected [ 262.220713][ T5957] usb 3-1: USB disconnect, device number 25 [ 262.762984][ T8312] lo speed is unknown, defaulting to 1000 [ 262.998764][ T30] audit: type=1326 audit(3913175771.681:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 263.055902][ T30] audit: type=1326 audit(3913175771.681:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 263.086214][ T30] audit: type=1326 audit(3913175771.681:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 263.110292][ T30] audit: type=1326 audit(3913175771.681:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 263.150523][ T5898] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 263.213703][ T5898] usb 5-1: USB disconnect, device number 24 [ 263.221175][ T30] audit: type=1400 audit(3913175771.681:1154): avc: denied { mount } for pid=8316 comm="syz.2.571" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 263.260343][ T30] audit: type=1326 audit(3913175771.681:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 263.294801][ T30] audit: type=1326 audit(3913175771.681:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.2.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c3798f749 code=0x7ffc0000 [ 264.816025][ T5825] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 265.177807][ T8336] netlink: 132 bytes leftover after parsing attributes in process `syz.5.575'. [ 265.810935][ T8349] netlink: 100 bytes leftover after parsing attributes in process `syz.2.576'. [ 267.116165][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.125136][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 267.125148][ T30] audit: type=1400 audit(3913175775.811:1176): avc: denied { ioctl } for pid=8369 comm="syz-executor" path="socket:[21825]" dev="sockfs" ino=21825 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 267.157610][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.181082][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.199510][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.219642][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.276233][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 267.288269][ T8366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.310574][ T30] audit: type=1400 audit(3913175775.931:1177): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 267.380585][ T8369] lo speed is unknown, defaulting to 1000 [ 267.710205][ T8378] FAULT_INJECTION: forcing a failure. [ 267.710205][ T8378] name failslab, interval 1, probability 0, space 0, times 0 [ 267.710772][ T8375] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 267.724357][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.5.585 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.724387][ T8378] Tainted: [L]=SOFTLOCKUP [ 267.724393][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.724416][ T8378] Call Trace: [ 267.724422][ T8378] [ 267.724430][ T8378] dump_stack_lvl+0x16c/0x1f0 [ 267.724454][ T8378] should_fail_ex+0x512/0x640 [ 267.724480][ T8378] should_failslab+0xc2/0x120 [ 267.724503][ T8378] __kmalloc_cache_noprof+0x80/0x800 [ 267.724529][ T8378] ? __task_pid_nr_ns+0x1f5/0x500 [ 267.724548][ T8378] ? proc_self_get_link+0x1a9/0x230 [ 267.724574][ T8378] ? proc_self_get_link+0x1a9/0x230 [ 267.724592][ T8378] proc_self_get_link+0x1a9/0x230 [ 267.724614][ T8378] pick_link+0xb09/0x13b0 [ 267.724633][ T8378] ? __pfx_proc_self_get_link+0x10/0x10 [ 267.724657][ T8378] step_into_slowpath+0x6c6/0xf50 [ 267.724682][ T8378] ? __pfx_step_into_slowpath+0x10/0x10 [ 267.724708][ T8378] ? lookup_fast+0x156/0x610 [ 267.724724][ T8378] ? inode_permission+0x37b/0x640 [ 267.724745][ T8378] link_path_walk+0xd26/0x1c70 [ 267.724776][ T8378] path_openat+0x1bd/0x3140 [ 267.724797][ T8378] ? do_syscall_64+0xcd/0xf80 [ 267.724814][ T8378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.724840][ T8378] ? __pfx_path_openat+0x10/0x10 [ 267.724873][ T8378] do_filp_open+0x20b/0x470 [ 267.724899][ T8378] ? __pfx_do_filp_open+0x10/0x10 [ 267.724941][ T8378] ? alloc_fd+0x471/0x7d0 [ 267.724973][ T8378] do_sys_openat2+0x121/0x290 [ 267.724989][ T8378] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.725008][ T8378] ? __fget_files+0x20e/0x3c0 [ 267.725036][ T8378] __x64_sys_openat+0x174/0x210 [ 267.725053][ T8378] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.725069][ T8378] ? ksys_write+0x1ac/0x250 [ 267.725099][ T8378] do_syscall_64+0xcd/0xf80 [ 267.725118][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.725136][ T8378] RIP: 0033:0x7f5f6e58df90 [ 267.725157][ T8378] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 267.725173][ T8378] RSP: 002b:00007f5f6f4def10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 267.725190][ T8378] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f5f6e58df90 [ 267.725202][ T8378] RDX: 0000000000000002 RSI: 00007f5f6f4defa0 RDI: 00000000ffffff9c [ 267.725213][ T8378] RBP: 00007f5f6f4defa0 R08: 0000000000000000 R09: 0000000000000000 [ 267.725223][ T8378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 267.725234][ T8378] R13: 00007f5f6e7e6038 R14: 00007f5f6e7e5fa0 R15: 00007ffc814d1f68 [ 267.725260][ T8378] [ 267.816955][ T8375] overlayfs: overlapping lowerdir path [ 268.027876][ T8369] chnl_net:caif_netlink_parms(): no params data found [ 268.054503][ T30] audit: type=1400 audit(3913175776.751:1178): avc: denied { write } for pid=8383 comm="syz.4.587" path="socket:[21899]" dev="sockfs" ino=21899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.380907][ T30] audit: type=1400 audit(3913175776.891:1179): avc: denied { setopt } for pid=8383 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.629190][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.646658][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.657722][ T8369] bridge_slave_0: entered allmulticast mode [ 268.670147][ T8369] bridge_slave_0: entered promiscuous mode [ 268.696355][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.710592][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.721464][ T8369] bridge_slave_1: entered allmulticast mode [ 268.738581][ T8369] bridge_slave_1: entered promiscuous mode [ 268.803274][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.833805][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.912014][ T30] audit: type=1400 audit(3913175777.601:1180): avc: denied { create } for pid=8392 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.954267][ T30] audit: type=1400 audit(3913175777.601:1181): avc: denied { connect } for pid=8392 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 268.982006][ T8369] team0: Port device team_slave_0 added [ 268.993995][ T30] audit: type=1400 audit(3913175777.621:1182): avc: denied { write } for pid=8392 comm="syz.4.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 269.015761][ T8369] team0: Port device team_slave_1 added [ 269.175343][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.182416][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.222184][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.239368][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.261604][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.287624][ T5138] Bluetooth: hci5: command tx timeout [ 269.345479][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.628785][ T8369] hsr_slave_0: entered promiscuous mode [ 269.655103][ T8369] hsr_slave_1: entered promiscuous mode [ 269.671279][ T8369] debugfs: 'hsr0' already exists in 'hsr' [ 269.683601][ T30] audit: type=1400 audit(3913175778.371:1183): avc: denied { execute } for pid=8410 comm="syz.2.594" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=22770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 269.722918][ T8369] Cannot create hsr debugfs directory [ 270.452319][ T8411] netlink: 'syz.2.594': attribute type 12 has an invalid length. [ 270.488258][ T30] audit: type=1400 audit(3913175779.171:1184): avc: denied { read } for pid=8410 comm="syz.2.594" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 270.555175][ T30] audit: type=1400 audit(3913175779.231:1185): avc: denied { open } for pid=8410 comm="syz.2.594" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 271.342981][ T5138] Bluetooth: hci5: command 0x041b tx timeout [ 271.597688][ T8369] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 271.776641][ T8412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.721806][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 272.721823][ T30] audit: type=1400 audit(3913175780.961:1187): avc: denied { write } for pid=8429 comm="syz.4.599" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 272.725870][ T8412] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.888325][ T30] audit: type=1400 audit(3913175781.461:1188): avc: denied { read } for pid=8424 comm="syz.0.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 272.920158][ T8369] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 272.953875][ T5138] Bluetooth: hci0: command 0x0406 tx timeout [ 272.958858][ T30] audit: type=1400 audit(3913175781.461:1189): avc: denied { append } for pid=8424 comm="syz.0.598" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 273.054424][ T8369] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.065721][ T8369] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.075064][ T8412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.081944][ T8412] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 273.136133][ T8412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 273.142291][ T8412] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 273.256027][ T8412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.261992][ T8412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.275101][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 273.304724][ T8412] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 273.348706][ T8412] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 273.467855][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.483500][ T8412] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 273.630338][ T8412] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 273.979260][ T8369] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.016796][ T6363] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.023905][ T6363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.060967][ T6363] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.068133][ T6363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.098735][ T8369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.110895][ T8369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.440669][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.483333][ T48] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 274.502057][ T30] audit: type=1400 audit(3913175783.191:1190): avc: denied { create } for pid=8456 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 274.580828][ T8460] netlink: 'syz.5.604': attribute type 12 has an invalid length. [ 274.704530][ T30] audit: type=1400 audit(3913175783.401:1191): avc: denied { connect } for pid=8462 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.730045][ T30] audit: type=1400 audit(3913175783.401:1192): avc: denied { write } for pid=8462 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 274.733055][ T48] usb 3-1: device descriptor read/64, error -71 [ 275.092662][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 275.105407][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 275.710869][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 275.717998][ T5138] Bluetooth: hci2: command 0x0405 tx timeout [ 275.724305][ T5138] Bluetooth: hci5: command 0x041b tx timeout [ 276.349301][ T48] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 277.404184][ T48] usb 3-1: device descriptor read/64, error -71 [ 277.404492][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 277.570516][ T48] usb usb3-port1: attempt power cycle [ 277.744090][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 277.750197][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 277.755078][ T8369] veth0_vlan: entered promiscuous mode [ 277.756540][ T5138] Bluetooth: hci2: command 0x0405 tx timeout [ 277.787919][ T8369] veth1_vlan: entered promiscuous mode [ 277.906477][ T8369] veth0_macvtap: entered promiscuous mode [ 278.004564][ T8369] veth1_macvtap: entered promiscuous mode [ 278.056465][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.140574][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.165041][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.184096][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.215631][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.398851][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.252564][ T8498] use of bytesused == 0 is deprecated and will be removed in the future, [ 279.315500][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.333006][ T8498] use the actual size instead. [ 279.351743][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.375584][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.393702][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.448413][ T30] audit: type=1400 audit(3913175788.141:1193): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/root/syzkaller.0HaVXu/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 279.589857][ T30] audit: type=1400 audit(3913175788.201:1194): avc: denied { mount } for pid=8369 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 279.706538][ T30] audit: type=1400 audit(3913175788.211:1195): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/root/syzkaller.0HaVXu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 279.758138][ T30] audit: type=1400 audit(3913175788.211:1196): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/root/syzkaller.0HaVXu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 279.828336][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 279.837275][ T5138] Bluetooth: hci2: command 0x0405 tx timeout [ 279.903128][ T30] audit: type=1400 audit(3913175788.231:1197): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 280.037583][ T30] audit: type=1400 audit(3913175788.241:1198): avc: denied { mount } for pid=8369 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 280.089511][ T30] audit: type=1400 audit(3913175788.241:1199): avc: denied { mounton } for pid=8369 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 280.587274][ T8517] FAULT_INJECTION: forcing a failure. [ 280.587274][ T8517] name failslab, interval 1, probability 0, space 0, times 0 [ 280.637768][ T8517] CPU: 0 UID: 0 PID: 8517 Comm: syz.5.616 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.637798][ T8517] Tainted: [L]=SOFTLOCKUP [ 280.637804][ T8517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.637814][ T8517] Call Trace: [ 280.637820][ T8517] [ 280.637828][ T8517] dump_stack_lvl+0x16c/0x1f0 [ 280.637851][ T8517] should_fail_ex+0x512/0x640 [ 280.637873][ T8517] ? fs_reclaim_acquire+0xae/0x150 [ 280.637896][ T8517] should_failslab+0xc2/0x120 [ 280.637918][ T8517] __kmalloc_noprof+0xeb/0x910 [ 280.637944][ T8517] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 280.637970][ T8517] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 280.637988][ T8517] tomoyo_realpath_from_path+0xc2/0x6e0 [ 280.638011][ T8517] ? tomoyo_profile+0x47/0x60 [ 280.638036][ T8517] tomoyo_path_number_perm+0x245/0x580 [ 280.638062][ T8517] ? tomoyo_path_number_perm+0x237/0x580 [ 280.638093][ T8517] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.638121][ T8517] ? find_held_lock+0x2b/0x80 [ 280.638174][ T8517] ? find_held_lock+0x2b/0x80 [ 280.638198][ T8517] ? hook_file_ioctl_common+0x144/0x410 [ 280.638226][ T8517] ? __fget_files+0x20e/0x3c0 [ 280.638254][ T8517] security_file_ioctl+0x9b/0x240 [ 280.638275][ T8517] __x64_sys_ioctl+0xb7/0x210 [ 280.638297][ T8517] do_syscall_64+0xcd/0xf80 [ 280.638318][ T8517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.638335][ T8517] RIP: 0033:0x7f5f6e58f749 [ 280.638349][ T8517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.638365][ T8517] RSP: 002b:00007f5f6f4be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.638382][ T8517] RAX: ffffffffffffffda RBX: 00007f5f6e7e6090 RCX: 00007f5f6e58f749 [ 280.638394][ T8517] RDX: 0000200000000100 RSI: 00000000c0405668 RDI: 0000000000000003 [ 280.638406][ T8517] RBP: 00007f5f6f4be090 R08: 0000000000000000 R09: 0000000000000000 [ 280.638417][ T8517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.638428][ T8517] R13: 00007f5f6e7e6128 R14: 00007f5f6e7e6090 R15: 00007ffc814d1f68 [ 280.638457][ T8517] [ 280.638518][ T8517] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.113200][ T8526] netlink: 'syz.0.618': attribute type 4 has an invalid length. [ 281.120899][ T8526] netlink: 17 bytes leftover after parsing attributes in process `syz.0.618'. [ 281.902943][ T5138] Bluetooth: hci5: command 0x041b tx timeout [ 283.605508][ T30] audit: type=1400 audit(3913175792.301:1200): avc: denied { getopt } for pid=8535 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.870216][ T8540] random: crng reseeded on system resumption [ 283.930650][ T30] audit: type=1400 audit(3913175792.561:1201): avc: denied { write } for pid=8531 comm="syz.6.621" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 284.003430][ T5825] Bluetooth: hci5: command 0x041b tx timeout [ 284.235334][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 284.626644][ T36] Bluetooth: hci6: Frame reassembly failed (-84) [ 284.652839][ T8542] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 284.666505][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 284.677240][ T9] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 284.678533][ T4247] Bluetooth: hci6: Frame reassembly failed (-84) [ 284.690875][ T9] usb 6-1: config 1 interface 0 has no altsetting 0 [ 284.705597][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 284.717891][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.727505][ T9] usb 6-1: Product: syz [ 284.731688][ T9] usb 6-1: Manufacturer: syz [ 284.737652][ T9] usb 6-1: SerialNumber: syz [ 284.746786][ T8536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 284.755725][ T8536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 285.145944][ T1281] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 285.307134][ T1281] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 285.354097][ T1281] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 285.379268][ T1281] usb 5-1: config 1 interface 0 has no altsetting 0 [ 285.577111][ T1281] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 286.075316][ T5138] Bluetooth: hci5: command 0x041b tx timeout [ 286.369154][ T1281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.369203][ T1281] usb 5-1: Product: syz [ 286.369220][ T1281] usb 5-1: Manufacturer: syz [ 286.369261][ T1281] usb 5-1: SerialNumber: syz [ 286.445291][ T8544] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 286.455916][ T30] audit: type=1400 audit(3913175794.821:1202): avc: denied { connect } for pid=8553 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 286.606140][ T8544] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 286.622944][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 287.522317][ T9] rtl8150 6-1:1.0: couldn't reset the device [ 287.529975][ T9] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 287.773339][ T8569] FAULT_INJECTION: forcing a failure. [ 287.773339][ T8569] name failslab, interval 1, probability 0, space 0, times 0 [ 287.786309][ T8569] CPU: 1 UID: 0 PID: 8569 Comm: syz.0.630 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.786338][ T8569] Tainted: [L]=SOFTLOCKUP [ 287.786345][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.786355][ T8569] Call Trace: [ 287.786361][ T8569] [ 287.786369][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 287.786386][ T8569] should_fail_ex+0x512/0x640 [ 287.786406][ T8569] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 287.786430][ T8569] should_failslab+0xc2/0x120 [ 287.786453][ T8569] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 287.786473][ T8569] ? __d_alloc+0x35/0xa80 [ 287.786494][ T8569] ? __d_alloc+0x35/0xa80 [ 287.786508][ T8569] __d_alloc+0x35/0xa80 [ 287.786522][ T8569] ? __pfx_from_vfsgid+0x10/0x10 [ 287.786537][ T8569] d_alloc_pseudo+0x1c/0xc0 [ 287.786556][ T8569] alloc_file_pseudo+0xcf/0x230 [ 287.786577][ T8569] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 287.786603][ T8569] ? hugetlbfs_get_inode+0x31f/0x700 [ 287.786624][ T8569] hugetlb_file_setup+0x4ce/0x620 [ 287.786637][ T8569] ksys_mmap_pgoff+0x189/0x5c0 [ 287.786653][ T8569] __x64_sys_mmap+0x125/0x190 [ 287.786668][ T8569] do_syscall_64+0xcd/0xf80 [ 287.786680][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.786697][ T8569] RIP: 0033:0x7fa786f8f749 [ 287.786713][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.786731][ T8569] RSP: 002b:00007fa787e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 287.786749][ T8569] RAX: ffffffffffffffda RBX: 00007fa7871e6180 RCX: 00007fa786f8f749 [ 287.786761][ T8569] RDX: 0000000003000005 RSI: 0000000000011000 RDI: 0000200000fed000 [ 287.786769][ T8569] RBP: 00007fa787e03090 R08: ffffffffffffffff R09: 0000000000000000 [ 287.786776][ T8569] R10: 000200000006c832 R11: 0000000000000246 R12: 0000000000000001 [ 287.786782][ T8569] R13: 00007fa7871e6218 R14: 00007fa7871e6180 R15: 00007ffc0e33d638 [ 287.786797][ T8569] [ 288.786415][ T5876] usb 6-1: USB disconnect, device number 8 [ 288.799595][ T1281] rtl8150 5-1:1.0: couldn't reset the device [ 288.829753][ T1281] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 288.858061][ T1281] usb 5-1: USB disconnect, device number 25 [ 288.962076][ T30] audit: type=1400 audit(3913175797.641:1203): avc: denied { create } for pid=8578 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.024337][ T8582] Mount JFS Failure: -22 [ 289.030101][ T8582] jfs_mount failed w/return code = -22 [ 290.485218][ T30] audit: type=1400 audit(3913175799.181:1204): avc: denied { wake_alarm } for pid=8587 comm="syz.6.634" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.508755][ T1281] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 290.530026][ T30] audit: type=1400 audit(3913175799.221:1205): avc: denied { write } for pid=8587 comm="syz.6.634" name="vlan1" dev="proc" ino=4026534145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 290.663536][ T1281] usb 5-1: Using ep0 maxpacket: 8 [ 290.672651][ T1281] usb 5-1: unable to get BOS descriptor or descriptor too short [ 290.684655][ T1281] usb 5-1: config 2 has an invalid interface number: 33 but max is 0 [ 290.700851][ T1281] usb 5-1: config 2 has no interface number 0 [ 290.723910][ T1281] usb 5-1: config 2 interface 33 altsetting 9 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 290.743790][ T1281] usb 5-1: config 2 interface 33 has no altsetting 0 [ 290.758345][ T1281] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=83.d4 [ 290.768080][ T5876] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.780043][ T1281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.791016][ T1281] usb 5-1: Product: syz [ 290.797628][ T1281] usb 5-1: SerialNumber: syz [ 290.932299][ T5876] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.953873][ T5876] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 290.971479][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 290.986874][ T5876] usb 7-1: Product: syz [ 290.991288][ T5876] usb 7-1: Manufacturer: syz [ 290.999376][ T5876] usb 7-1: SerialNumber: syz [ 291.044841][ T1281] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 291.057336][ T1281] dvb-usb: bulk message failed: -22 (2/0) [ 291.067545][ T1281] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 291.078595][ T1281] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 291.091522][ T1281] usb 5-1: media controller created [ 291.105925][ T1281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.140112][ T1281] usb 5-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 291.150316][ T5957] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 291.168685][ T1281] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 291.280225][ T5876] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 291.315400][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 291.326908][ T1281] rc_core: IR keymap rc-dtt200u not found [ 291.332618][ T1281] Registered IR keymap rc-empty [ 291.355094][ T5957] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 291.367937][ T1281] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 291.383734][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.401401][ T1281] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input19 [ 291.416121][ T5957] usb 6-1: config 0 descriptor?? [ 291.424890][ T8593] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 291.453833][ T1281] dvb-usb: schedule remote query interval to 300 msecs. [ 291.473629][ T1281] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 291.505486][ T30] audit: type=1400 audit(3913175800.191:1206): avc: denied { read write } for pid=8587 comm="syz.6.634" name="lp0" dev="devtmpfs" ino=3275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 291.531630][ T1281] usb 5-1: USB disconnect, device number 26 [ 291.642135][ T30] audit: type=1400 audit(3913175800.201:1207): avc: denied { open } for pid=8587 comm="syz.6.634" path="/dev/usb/lp0" dev="devtmpfs" ino=3275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 291.718216][ T30] audit: type=1400 audit(3913175800.401:1208): avc: denied { mount } for pid=8592 comm="syz.5.637" name="/" dev="ramfs" ino=23584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 291.762115][ T1281] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 291.803709][ T30] audit: type=1400 audit(3913175800.471:1209): avc: denied { execute } for pid=8592 comm="syz.5.637" path="/file1" dev="ramfs" ino=23422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 292.386304][ T8609] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 292.466364][ T5957] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 292.499820][ T8614] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 292.566300][ T8609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.602065][ T8619] fuse: Bad value for 'fd' [ 292.627501][ T8611] bond2: (slave ip6erspan0): making interface the new active one [ 292.656790][ T30] audit: type=1400 audit(3913175801.351:1210): avc: denied { mounton } for pid=8608 comm="syz.2.640" path="/137/bus/file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 292.698467][ T8611] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 292.763943][ T5957] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 292.839811][ T30] audit: type=1400 audit(3913175801.521:1211): avc: denied { create } for pid=5814 comm="syz-executor" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.931891][ T8621] usb 6-1: USB disconnect, device number 9 [ 293.211525][ C1] usblp0: nonzero write bulk status received: -71 [ 293.386545][ T8625] netlink: 'syz.5.637': attribute type 10 has an invalid length. [ 293.395426][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.5.637'. [ 293.405717][ T8625] dummy0: entered promiscuous mode [ 293.414289][ T8625] bridge0: port 3(dummy0) entered blocking state [ 293.420880][ T8625] bridge0: port 3(dummy0) entered disabled state [ 293.428509][ T8625] dummy0: entered allmulticast mode [ 293.446387][ T8625] bridge0: port 3(dummy0) entered blocking state [ 293.453206][ T8625] bridge0: port 3(dummy0) entered forwarding state [ 293.479443][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.489290][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.814092][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 293.821329][ T5876] usb 7-1: USB disconnect, device number 2 [ 293.855156][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.870918][ T5876] usblp0: removed [ 293.897634][ T30] audit: type=1400 audit(3913175801.531:1212): avc: denied { link } for pid=5814 comm="syz-executor" name="#13" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.934111][ T30] audit: type=1400 audit(3913175801.531:1213): avc: denied { rename } for pid=5814 comm="syz-executor" name="#14" dev="tmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 293.974397][ T5957] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 294.001210][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.013456][ T5957] usb 5-1: Product: syz [ 294.017644][ T5957] usb 5-1: Manufacturer: syz [ 294.033768][ T5957] usb 5-1: SerialNumber: syz [ 294.096097][ T30] audit: type=1400 audit(3913175802.081:1214): avc: denied { getopt } for pid=8592 comm="syz.5.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 294.098422][ T5957] usb 5-1: config 0 descriptor?? [ 294.692690][ T5957] gs_usb 5-1:0.0: Configuring for 106 interfaces [ 295.038702][ T30] audit: type=1400 audit(3913175803.731:1215): avc: denied { read } for pid=8616 comm="syz.4.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 295.745138][ T5957] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 295.777068][ T5957] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 297.214615][ T5931] usb 5-1: USB disconnect, device number 27 [ 297.322964][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 297.322981][ T30] audit: type=1400 audit(3913175805.991:1217): avc: denied { ioctl } for pid=8647 comm="syz.4.651" path="socket:[23491]" dev="sockfs" ino=23491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 297.604059][ T30] audit: type=1400 audit(3913175805.991:1218): avc: denied { read } for pid=8647 comm="syz.4.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 297.764233][ T5931] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 298.255491][ T5931] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 298.269966][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 298.288855][ T5931] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.302829][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 298.324901][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 298.344190][ T5931] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 298.354723][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 298.408690][ T5931] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.427886][ T8652] could not allocate digest TFM handle cryptd(blake2b-160) [ 298.436731][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 298.449497][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 298.489893][ T5931] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 298.518560][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 298.561555][ T5931] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.599956][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 298.629932][ T5931] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 298.656290][ T5931] usb 7-1: string descriptor 0 read error: -22 [ 298.669994][ T5931] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 298.691107][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.760004][ T5931] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 298.960642][ T8652] Device name cannot be null; rc = [-22] [ 298.976011][ T48] usb 7-1: USB disconnect, device number 3 [ 299.044924][ T5931] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 299.203609][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 299.215955][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 299.237533][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 299.268817][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 299.299911][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 299.329923][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.398588][ T5931] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 299.423685][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.438953][ T5931] usb 5-1: Product: syz [ 299.450808][ T5931] usb 5-1: Manufacturer: syz [ 299.467004][ T5931] usb 5-1: SerialNumber: syz [ 299.478109][ T5931] usb 5-1: config 0 descriptor?? [ 299.815509][ T5931] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 299.846419][ T5931] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 300.692829][ T8681] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 300.706357][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 300.712764][ T6363] Bluetooth: hci6: Frame reassembly failed (-84) [ 300.719557][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.764639][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.031644][ T48] usb 5-1: USB disconnect, device number 28 [ 302.702958][ T5825] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 302.808597][ T8691] trusted_key: encrypted_key: insufficient parameters specified [ 302.915550][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.662'. [ 302.937724][ T30] audit: type=1400 audit(3913175811.631:1219): avc: denied { shutdown } for pid=8692 comm="syz.6.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 304.268949][ T30] audit: type=1400 audit(3913175812.961:1220): avc: denied { write } for pid=8703 comm="syz.4.665" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 305.452997][ T6194] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 305.658108][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'. [ 305.727065][ T6194] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 306.057154][ T6194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.111941][ T6194] usb 5-1: config 0 descriptor?? [ 306.130174][ T6194] cp210x 5-1:0.0: cp210x converter detected [ 306.412810][ T30] audit: type=1400 audit(3913175815.101:1221): avc: denied { getopt } for pid=8726 comm="syz.6.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 306.477365][ T30] audit: type=1400 audit(3913175815.141:1222): avc: denied { read } for pid=8726 comm="syz.6.671" path="socket:[24639]" dev="sockfs" ino=24639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 307.224253][ T6194] usb 5-1: cp210x converter now attached to ttyUSB0 [ 307.315506][ T30] audit: type=1400 audit(3913175816.011:1223): avc: denied { write } for pid=8726 comm="syz.6.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.352934][ T5883] usb 5-1: USB disconnect, device number 29 [ 307.399786][ T30] audit: type=1400 audit(3913175816.041:1224): avc: denied { ioctl } for pid=8726 comm="syz.6.671" path="socket:[23942]" dev="sockfs" ino=23942 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 307.431144][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.468317][ T5883] cp210x 5-1:0.0: device disconnected [ 307.730668][ T8701] IPVS: starting estimator thread 0... [ 308.004863][ T8742] IPVS: using max 45 ests per chain, 108000 per kthread [ 308.442297][ T30] audit: type=1400 audit(3913175817.121:1225): avc: denied { write } for pid=8751 comm="syz.4.679" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 308.528432][ T5138] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 308.703375][ T5138] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 308.712149][ T5138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 308.725636][ T5138] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 308.734787][ T5138] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 308.859657][ T8754] lo speed is unknown, defaulting to 1000 [ 309.417007][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'. [ 309.431973][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 309.526863][ T8763] lo speed is unknown, defaulting to 1000 [ 309.694028][ T30] audit: type=1400 audit(3913175818.381:1226): avc: denied { ioctl } for pid=8751 comm="syz.4.679" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.214867][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 310.776430][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.784532][ T5138] Bluetooth: hci6: command tx timeout [ 310.792305][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.800870][ T8754] bridge_slave_0: entered allmulticast mode [ 310.809536][ T8754] bridge_slave_0: entered promiscuous mode [ 310.835119][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.884456][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.941002][ T8754] bridge_slave_1: entered allmulticast mode [ 311.278142][ T8754] bridge_slave_1: entered promiscuous mode [ 311.329264][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.350150][ T5927] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 311.382384][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.488932][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.542547][ T8754] team0: Port device team_slave_0 added [ 311.552693][ T8754] team0: Port device team_slave_1 added [ 311.565584][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 311.582910][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 311.624384][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 311.645811][ T5927] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 311.650197][ T8792] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 311.665411][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.672732][ T8792] overlayfs: overlapping lowerdir path [ 311.680125][ T8793] syz.0.687: attempt to access beyond end of device [ 311.680125][ T8793] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 311.708508][ T5927] usb 5-1: Product: syz [ 311.732714][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.759400][ T5927] usb 5-1: Manufacturer: syz [ 311.765719][ T5927] usb 5-1: SerialNumber: syz [ 311.781031][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 311.790448][ T8787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 311.967491][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.000755][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.009131][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.039679][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.056353][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.084943][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.304940][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.339139][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.866166][ T5138] Bluetooth: hci6: command tx timeout [ 313.419680][ T8754] hsr_slave_0: entered promiscuous mode [ 313.431514][ T8754] hsr_slave_1: entered promiscuous mode [ 313.440056][ T8754] debugfs: 'hsr0' already exists in 'hsr' [ 313.447384][ T8754] Cannot create hsr debugfs directory [ 313.653135][ T8734] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 313.691593][ T3534] bridge_slave_1: left allmulticast mode [ 313.706890][ T3534] bridge_slave_1: left promiscuous mode [ 313.725667][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.756519][ T3534] bridge_slave_0: left allmulticast mode [ 313.774941][ T3534] bridge_slave_0: left promiscuous mode [ 313.787391][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.844411][ T8734] usb 7-1: Using ep0 maxpacket: 16 [ 313.861209][ T8734] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 313.889748][ T8734] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 313.910567][ T8734] usb 7-1: Product: syz [ 313.916187][ T8734] usb 7-1: Manufacturer: syz [ 313.921636][ T8734] usb 7-1: SerialNumber: syz [ 313.966086][ T8734] usb 7-1: config 0 descriptor?? [ 314.035325][ T3534] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 314.659830][ T5927] rtl8150 5-1:1.0: couldn't reset the device [ 314.676063][ T5927] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 314.715375][ T5927] usb 5-1: USB disconnect, device number 30 [ 314.948564][ T5138] Bluetooth: hci6: command tx timeout [ 315.738238][ T8834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 315.957235][ T8832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 316.177897][ T3534] bond0 (unregistering): (slave 70): Releasing backup interface [ 316.187765][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.199927][ T3534] bond0 (unregistering): Released all slaves [ 316.212185][ T3534] bond1 (unregistering): Released all slaves [ 316.342726][ T3534] bond2 (unregistering): Released all slaves [ 316.383986][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.694'. [ 316.407720][ T8832] lo speed is unknown, defaulting to 1000 [ 316.616289][ T30] audit: type=1400 audit(3913175825.311:1227): avc: denied { bind } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.657167][ T30] audit: type=1400 audit(3913175825.351:1228): avc: denied { listen } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.680921][ T30] audit: type=1400 audit(3913175825.351:1229): avc: denied { read } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 316.827363][ T8754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.861804][ T8754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.962826][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.970230][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.023650][ T5138] Bluetooth: hci6: command tx timeout [ 317.255885][ T8734] usb 7-1: USB disconnect, device number 4 [ 317.391032][ T3534] hsr_slave_0: left promiscuous mode [ 317.591344][ T30] audit: type=1400 audit(3913175826.191:1230): avc: denied { ioctl } for pid=8854 comm="syz.5.699" path="socket:[25285]" dev="sockfs" ino=25285 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.591406][ T3534] hsr_slave_1: left promiscuous mode [ 317.776565][ T30] audit: type=1400 audit(3913175826.401:1231): avc: denied { name_connect } for pid=8854 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 317.847292][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.892621][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.901093][ T8858] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 317.928818][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.931805][ T8858] overlayfs: overlapping lowerdir path [ 317.987107][ T8858] syz.6.698: attempt to access beyond end of device [ 317.987107][ T8858] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 318.036023][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.131520][ T8871] No source specified [ 318.613017][ T3534] veth1_macvtap: left promiscuous mode [ 318.626414][ T3534] veth0_macvtap: left promiscuous mode [ 318.656651][ T3534] veth1_vlan: left promiscuous mode [ 318.707229][ T3534] veth0_vlan: left promiscuous mode [ 320.063398][ T8891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.367020][ T30] audit: type=1400 audit(3913175829.061:1232): avc: denied { getopt } for pid=8898 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 320.530222][ T30] audit: type=1400 audit(3913175829.221:1233): avc: denied { map } for pid=8902 comm="syz.0.708" path="socket:[25390]" dev="sockfs" ino=25390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 320.811361][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 320.885058][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 321.635707][ T5957] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 321.658141][ T8754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.668179][ T8754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 321.803497][ T5957] usb 7-1: Using ep0 maxpacket: 32 [ 321.845442][ T5957] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 321.871443][ T5957] usb 7-1: config 0 has no interface number 0 [ 321.884432][ T5957] usb 7-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 321.921337][ T5957] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 321.941321][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.949115][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.959040][ T5957] usb 7-1: Product: syz [ 321.968159][ T5957] usb 7-1: Manufacturer: syz [ 321.990867][ T5957] usb 7-1: SerialNumber: syz [ 322.001419][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.006144][ T3534] IPVS: stop unused estimator thread 0... [ 322.017517][ T5957] usb 7-1: config 0 descriptor?? [ 322.035283][ T5957] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 322.059136][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.066383][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.086276][ T5957] em28xx 7-1:0.89: Video interface 89 found: bulk [ 322.096038][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.103228][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.275525][ T6194] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 322.444735][ T6194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.472932][ T6194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.492902][ T6194] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.525233][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.532630][ T6194] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.545009][ T6194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.561377][ T6194] usb 5-1: config 0 descriptor?? [ 322.639251][ T5957] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 322.896643][ T8754] veth0_vlan: entered promiscuous mode [ 322.909439][ T8754] veth1_vlan: entered promiscuous mode [ 322.975546][ T8754] veth0_macvtap: entered promiscuous mode [ 323.003253][ T8754] veth1_macvtap: entered promiscuous mode [ 323.010556][ T6194] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 323.037572][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.076244][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.118363][ T6363] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.141213][ T6363] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.306607][ T5957] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 323.324009][ T5957] em28xx 7-1:0.89: board has no eeprom [ 323.339109][ T6363] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.375647][ T6363] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.558378][ T5957] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 323.574099][ T5957] em28xx 7-1:0.89: analog set to bulk mode. [ 323.580081][ T5876] em28xx 7-1:0.89: Registering V4L2 extension [ 323.594177][ T5957] usb 7-1: USB disconnect, device number 5 [ 323.606490][ T5957] em28xx 7-1:0.89: Disconnecting em28xx [ 323.701146][ T5876] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 323.716008][ T5876] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 323.744766][ T5876] em28xx 7-1:0.89: No AC97 audio processor [ 323.766855][ T5876] usb 7-1: Decoder not found [ 323.779208][ T5876] em28xx 7-1:0.89: failed to create media graph [ 323.787787][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.796056][ T5876] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 323.816075][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.827496][ T5876] em28xx 7-1:0.89: Registering snapshot button... [ 323.855150][ T5876] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input21 [ 323.871675][ T5883] usb 5-1: USB disconnect, device number 31 [ 323.922200][ T5876] em28xx 7-1:0.89: Remote control support is not available for this card. [ 324.038461][ T5957] em28xx 7-1:0.89: Closing input extension [ 324.046780][ T5957] em28xx 7-1:0.89: Deregistering snapshot button [ 324.088540][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.098466][ T5957] em28xx 7-1:0.89: Freeing device [ 324.114012][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.005675][ T5957] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 326.651854][ T5957] usb 7-1: Using ep0 maxpacket: 8 [ 326.669109][ T5957] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 327.730551][ T8997] Process accounting resumed [ 327.736798][ T30] audit: type=1400 audit(3913175836.031:1234): avc: denied { ioctl } for pid=8985 comm="syz.7.718" path="socket:[25741]" dev="sockfs" ino=25741 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 327.742821][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.770775][ T5957] usb 7-1: Product: syz [ 327.776108][ T5957] usb 7-1: Manufacturer: syz [ 327.780717][ T5957] usb 7-1: SerialNumber: syz [ 327.821639][ T5957] usb 7-1: config 0 descriptor?? [ 327.925177][ T5957] usb 7-1: can't set config #0, error -71 [ 327.957810][ T5957] usb 7-1: USB disconnect, device number 6 [ 328.044562][ T8999] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 328.184320][ T8999] usb 8-1: device descriptor read/64, error -71 [ 328.722569][ T8999] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 329.450884][ T9011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9011 comm=syz.4.721 [ 329.506789][ T30] audit: type=1400 audit(3913175838.201:1235): avc: denied { accept } for pid=9010 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.907932][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.6.724'. [ 331.061239][ T30] audit: type=1400 audit(3913175839.741:1236): avc: denied { read write } for pid=9012 comm="syz.6.724" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 331.513467][ T8999] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 331.559655][ T30] audit: type=1400 audit(3913175839.751:1237): avc: denied { open } for pid=9012 comm="syz.6.724" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 331.623701][ T9044] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 331.744014][ T8999] usb 7-1: device descriptor read/64, error -71 [ 331.862238][ T9046] netlink: 'syz.4.726': attribute type 12 has an invalid length. [ 332.056435][ T9041] syz.5.728: attempt to access beyond end of device [ 332.056435][ T9041] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 332.092394][ T9044] overlayfs: overlapping lowerdir path [ 332.103992][ T8999] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 332.413028][ T8999] usb 7-1: device descriptor read/64, error -71 [ 332.524205][ T8999] usb usb7-port1: attempt power cycle [ 332.894626][ T8999] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 333.246305][ T9046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.726'. [ 333.424039][ T8999] usb 7-1: device descriptor read/8, error -71 [ 335.696351][ T30] audit: type=1400 audit(3913175844.391:1238): avc: denied { setopt } for pid=9071 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 335.729881][ T9072] overlayfs: missing 'workdir' [ 342.722556][ T9157] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 342.772513][ T9161] syz.4.752: attempt to access beyond end of device [ 342.772513][ T9161] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 342.773078][ T9157] overlayfs: overlapping lowerdir path [ 343.733965][ T8999] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 343.818536][ T9179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.508670][ T8999] usb 7-1: config 64 has an invalid interface number: 39 but max is 0 [ 344.518019][ T8999] usb 7-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 344.529759][ T8999] usb 7-1: config 64 has no interface number 0 [ 344.537196][ T8999] usb 7-1: config 64 interface 39 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.557080][ T8999] usb 7-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=71.df [ 344.567320][ T8999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.576584][ T8999] usb 7-1: Product: syz [ 344.581147][ T8999] usb 7-1: Manufacturer: syz [ 344.625776][ T8999] usb 7-1: SerialNumber: syz [ 344.659433][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.749'. [ 344.677328][ T8999] usbtest 7-1:64.39: couldn't get endpoints, -22 [ 344.714843][ T8999] usbtest 7-1:64.39: probe with driver usbtest failed with error -22 [ 344.723733][ T9192] trusted_key: encrypted_key: insufficient parameters specified [ 344.802714][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 344.852018][ T9193] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 344.901915][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 344.921070][ T30] audit: type=1400 audit(3913175853.611:1239): avc: denied { getopt } for pid=9190 comm="syz.5.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 345.507538][ T48] usb 7-1: USB disconnect, device number 11 [ 346.240109][ T9223] vlan2: entered promiscuous mode [ 346.246537][ T9223] bond0: entered promiscuous mode [ 346.251769][ T9223] bond_slave_0: entered promiscuous mode [ 346.259473][ T9223] bond_slave_1: entered promiscuous mode [ 346.465580][ T30] audit: type=1400 audit(3913175855.161:1240): avc: denied { nlmsg_write } for pid=9195 comm="syz.4.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 346.487094][ T9231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.757'. [ 346.633927][ T5876] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 346.785565][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 346.795066][ T5876] usb 7-1: not running at top speed; connect to a high speed hub [ 346.811504][ T5876] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.826059][ T5876] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.848232][ T5876] usb 7-1: string descriptor 0 read error: -22 [ 346.855056][ T5876] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.864229][ T5825] Bluetooth: hci4: command 0x1003 tx timeout [ 346.866268][ T5138] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 346.881079][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.952406][ T9239] loop6: detected capacity change from 0 to 2640 [ 346.960663][ T9239] buffer_io_error: 7 callbacks suppressed [ 346.960673][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.974534][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.982348][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.990343][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 346.998768][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.007626][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.016507][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.025336][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.034022][ T9239] ldm_validate_partition_table(): Disk read failed. [ 347.040648][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.049044][ T9239] Buffer I/O error on dev loop6, logical block 0, async page read [ 347.057473][ T9239] Dev loop6: unable to read RDB block 0 [ 347.063688][ T9239] loop6: unable to read partition table [ 347.069418][ T9239] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 347.127009][ T5876] usb 7-1: 0:2 : does not exist [ 347.973647][ T9252] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 348.069038][ T5876] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5) [ 348.098894][ T5876] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 348.188508][ T5876] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 348.505644][ T5876] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 348.579937][ T9265] team_slave_0: entered promiscuous mode [ 348.691684][ T5876] usb 7-1: USB disconnect, device number 12 [ 348.700966][ T9265] team_slave_0: entered allmulticast mode [ 348.707724][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 348.834067][ T30] audit: type=1400 audit(3913175857.531:1241): avc: denied { write } for pid=9264 comm="syz.7.771" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 349.993963][ T5876] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 350.162948][ T5876] usb 8-1: Using ep0 maxpacket: 32 [ 350.196173][ T5876] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 350.204967][ T5876] usb 8-1: config 0 has no interface number 0 [ 350.211102][ T5876] usb 8-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 350.227050][ T5876] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 350.238746][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.247719][ T5876] usb 8-1: Product: syz [ 350.252060][ T5876] usb 8-1: Manufacturer: syz [ 350.257918][ T5876] usb 8-1: SerialNumber: syz [ 350.756186][ T9305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 351.256112][ T5876] usb 8-1: config 0 descriptor?? [ 351.302769][ T5876] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 351.506204][ T30] audit: type=1400 audit(3913175860.181:1242): avc: denied { read } for pid=9306 comm="syz.6.782" dev="sockfs" ino=26404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.703516][ T9309] lo speed is unknown, defaulting to 1000 [ 351.828995][ T5825] Bluetooth: hci4: command 0x1003 tx timeout [ 351.837225][ T5138] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 351.895487][ T5876] em28xx 8-1:0.89: Video interface 89 found: bulk [ 353.138108][ T5876] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 353.373937][ T5876] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 353.386640][ T5876] em28xx 8-1:0.89: board has no eeprom [ 353.497680][ T9330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42516 sclass=netlink_tcpdiag_socket pid=9330 comm=syz.6.785 [ 353.939216][ T5876] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 353.988252][ T9331] Mount JFS Failure: -22 [ 354.000674][ T9331] jfs_mount failed w/return code = -22 [ 354.011787][ T5876] em28xx 8-1:0.89: analog set to bulk mode. [ 354.199193][ T8999] em28xx 8-1:0.89: Registering V4L2 extension [ 354.554621][ T5876] usb 8-1: USB disconnect, device number 4 [ 354.576135][ T8999] em28xx 8-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 354.592370][ T5876] em28xx 8-1:0.89: Disconnecting em28xx [ 354.635461][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 354.669109][ T8999] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 354.683796][ T8999] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 354.701110][ T8999] em28xx 8-1:0.89: No AC97 audio processor [ 354.727068][ T8999] usb 8-1: Decoder not found [ 354.733837][ T8999] em28xx 8-1:0.89: failed to create media graph [ 354.740124][ T8999] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 354.780848][ T8999] em28xx 8-1:0.89: Registering snapshot button... [ 354.803979][ T8999] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input24 [ 354.824273][ T8999] em28xx 8-1:0.89: Remote control support is not available for this card. [ 354.854088][ T5876] em28xx 8-1:0.89: Closing input extension [ 354.860101][ T5876] em28xx 8-1:0.89: Deregistering snapshot button [ 355.038894][ T5876] em28xx 8-1:0.89: Freeing device [ 355.526777][ T5927] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 356.375348][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 356.387048][ T5927] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 356.395554][ T5927] usb 7-1: config 0 has no interface number 0 [ 356.401651][ T5927] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 356.436168][ T5927] usb 7-1: config 0 interface 196 has no altsetting 0 [ 356.446207][ T9357] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 356.454957][ T5927] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 356.484013][ T9357] overlayfs: overlapping lowerdir path [ 356.494606][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=31 [ 356.514715][ T9358] syz.4.796: attempt to access beyond end of device [ 356.514715][ T9358] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 356.532059][ T5927] usb 7-1: Product: syz [ 356.553139][ T5927] usb 7-1: Manufacturer: syz [ 356.565655][ T5927] usb 7-1: SerialNumber: syz [ 356.589899][ T5927] usb 7-1: config 0 descriptor?? [ 356.740078][ T9365] Mount JFS Failure: -22 [ 356.745423][ T9365] jfs_mount failed w/return code = -22 [ 356.799615][ T30] audit: type=1400 audit(3913175865.411:1243): avc: denied { block_suspend } for pid=9360 comm="syz.5.797" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.042583][ T5927] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 357.509213][ T5927] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 357.522136][ T5927] usb 7-1: USB disconnect, device number 13 [ 357.589306][ T9369] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 357.694306][ T9374] syz.7.799: attempt to access beyond end of device [ 357.694306][ T9374] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 357.718343][ T9369] overlayfs: overlapping lowerdir path [ 357.987763][ T9387] kAFS: unable to lookup cell 'Þ({^ú@' [ 357.997886][ T30] audit: type=1400 audit(3913175866.671:1244): avc: denied { create } for pid=9380 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 358.026934][ T30] audit: type=1400 audit(3913175866.721:1245): avc: denied { create } for pid=9382 comm="syz.6.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 358.483181][ T9397] Mount JFS Failure: -22 [ 358.487526][ T9397] jfs_mount failed w/return code = -22 [ 360.133959][ T30] audit: type=1400 audit(3913175868.831:1246): avc: denied { setopt } for pid=9402 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.191299][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.810'. [ 360.219786][ T30] audit: type=1400 audit(3913175868.881:1247): avc: denied { bind } for pid=9402 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 361.484818][ T1281] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 361.553595][ T6194] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 361.647426][ T9429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.816'. [ 361.717200][ T9424] cgroup: fork rejected by pids controller in /syz4 [ 361.733766][ T6194] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 361.819193][ T6194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.110510][ T1281] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 362.127564][ T6194] usb 7-1: config 0 descriptor?? [ 362.138492][ T6194] cp210x 7-1:0.0: cp210x converter detected [ 362.172449][ T1281] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 362.206343][ T1281] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.249099][ T1281] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.276129][ T1281] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.302078][ T1281] usb 8-1: Product: syz [ 362.315526][ T1281] usb 8-1: Manufacturer: syz [ 362.326458][ T1281] usb 8-1: SerialNumber: syz [ 362.379679][ T1281] hub 8-1:1.0: bad descriptor, ignoring hub [ 362.393836][ T1281] hub 8-1:1.0: probe with driver hub failed with error -5 [ 363.159928][ T1281] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 363.165507][ T6194] usb 7-1: cp210x converter now attached to ttyUSB0 [ 363.323798][ T1281] usb 8-1: USB disconnect, device number 5 [ 363.333749][ T30] audit: type=1400 audit(3913175872.031:1248): avc: denied { map } for pid=10230 comm="syz.4.818" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 363.447544][ T1281] usblp0: removed [ 363.479455][ T30] audit: type=1400 audit(3913175872.061:1249): avc: denied { getopt } for pid=10230 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.569274][ T5876] usb 7-1: USB disconnect, device number 14 [ 363.582392][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.766819][ T5876] cp210x 7-1:0.0: device disconnected [ 364.313192][ T30] audit: type=1400 audit(3913175872.821:1250): avc: denied { mount } for pid=10238 comm="syz.5.820" name="/" dev="autofs" ino=27466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 364.354325][ T30] audit: type=1400 audit(3913175872.981:1251): avc: denied { getopt } for pid=10238 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 364.476971][ T30] audit: type=1400 audit(3913175873.171:1252): avc: denied { mount } for pid=10245 comm="syz.4.821" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 364.829767][ T30] audit: type=1400 audit(3913175873.521:1253): avc: denied { unmount } for pid=7047 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 365.186127][ T30] audit: type=1400 audit(3913175873.861:1254): avc: denied { accept } for pid=10251 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.393861][ T30] audit: type=1400 audit(3913175873.871:1255): avc: denied { bind } for pid=10251 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 368.124687][ T30] audit: type=1400 audit(3913175876.811:1256): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 368.259594][ T30] audit: type=1400 audit(3913175876.951:1257): avc: denied { connect } for pid=10280 comm="syz.4.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.024993][ T30] audit: type=1400 audit(3913175877.721:1258): avc: denied { mount } for pid=10297 comm="syz.4.836" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 369.059471][ T30] audit: type=1400 audit(3913175877.721:1259): avc: denied { remount } for pid=10297 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 369.074732][T10298] syzkaller0: entered promiscuous mode [ 369.114124][T10298] syzkaller0: entered allmulticast mode [ 369.613075][ T5931] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 369.774200][ T5931] usb 8-1: Using ep0 maxpacket: 8 [ 369.780887][ T5931] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 369.791039][ T5931] usb 8-1: config 179 has no interface number 0 [ 369.798802][ T5931] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 369.811291][ T5931] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 369.824548][ T5931] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 369.837369][ T5931] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 369.864753][ T5931] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 369.886715][ T5931] usb 8-1: config 179 interface 65 has no altsetting 0 [ 369.923286][T10311] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 369.948361][ T5931] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 369.959753][ T5931] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.985238][ T5931] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input25 [ 370.033777][ T5172] input input25: unable to receive magic message: -110 [ 370.061632][ T5172] input input25: unable to receive magic message: -32 [ 370.082006][ T5172] input input25: unable to receive magic message: -32 [ 370.094960][ T5172] input input25: unable to receive magic message: -32 [ 370.163817][ T5172] input input25: unable to receive magic message: -32 [ 370.220428][ T5172] input input25: unable to receive magic message: -32 [ 370.462292][ T6194] usb 8-1: USB disconnect, device number 6 [ 370.462367][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 371.983418][ T5138] Bluetooth: hci4: command 0x1003 tx timeout [ 372.001031][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 373.806076][ T30] audit: type=1400 audit(3913175882.451:1260): avc: denied { write } for pid=10333 comm="syz.0.844" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 375.219341][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.846'. [ 375.636400][ T30] audit: type=1400 audit(3913175884.271:1261): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 375.921836][T10359] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 375.955071][ T4247] Bluetooth: hci4: Frame reassembly failed (-84) [ 375.964197][ T4247] Bluetooth: hci4: Frame reassembly failed (-84) [ 376.143632][ T5931] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 376.429473][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 376.449456][ T5931] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 376.464327][ T5931] usb 5-1: config 0 has no interface number 0 [ 376.480622][ T5931] usb 5-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 376.551883][ T5931] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 376.574265][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.584068][ T5931] usb 5-1: Product: syz [ 376.588250][ T5931] usb 5-1: Manufacturer: syz [ 376.603807][ T5931] usb 5-1: SerialNumber: syz [ 376.609505][ T5928] kernel write not supported for file /sequencer (pid: 5928 comm: kworker/1:8) [ 376.624029][ T5931] usb 5-1: config 0 descriptor?? [ 376.645670][T10365] openvswitch: netlink: Flow key attr not present in new flow. [ 376.654920][ T5931] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 376.683848][ T5931] em28xx 5-1:0.89: Video interface 89 found: bulk [ 376.703894][ T977] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 376.972922][ T977] usb 8-1: Using ep0 maxpacket: 32 [ 376.980906][ T977] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 376.989162][ T977] usb 8-1: config 0 has no interface number 0 [ 376.998372][ T977] usb 8-1: New USB device found, idVendor=0424, idProduct=9981, bcdDevice=c2.57 [ 377.007527][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.017125][ T977] usb 8-1: Product: syz [ 377.021541][ T977] usb 8-1: Manufacturer: syz [ 377.030412][ T977] usb 8-1: SerialNumber: syz [ 377.040215][ T977] usb 8-1: config 0 descriptor?? [ 377.929411][ T5931] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 377.940193][ T977] usb 8-1: USB disconnect, device number 7 [ 377.985344][ T5138] Bluetooth: hci4: command 0x1003 tx timeout [ 377.992029][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 378.364421][ T5931] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 378.386942][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.393831][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.409246][ T5931] em28xx 5-1:0.89: board has no eeprom [ 379.153867][ T5931] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 379.161116][ T5931] em28xx 5-1:0.89: analog set to bulk mode. [ 379.169384][ T5957] em28xx 5-1:0.89: Registering V4L2 extension [ 379.189083][ T5931] usb 5-1: USB disconnect, device number 32 [ 379.202603][ T5931] em28xx 5-1:0.89: Disconnecting em28xx [ 379.270314][ T5957] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 379.297809][ T5957] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 379.327991][ T5957] em28xx 5-1:0.89: No AC97 audio processor [ 379.345861][ T5957] usb 5-1: Decoder not found [ 379.350490][ T5957] em28xx 5-1:0.89: failed to create media graph [ 379.378355][ T5957] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 379.433766][ T5957] em28xx 5-1:0.89: Registering snapshot button... [ 379.444491][ T5957] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input27 [ 379.505800][ T5957] em28xx 5-1:0.89: Remote control support is not available for this card. [ 379.523362][ T5931] em28xx 5-1:0.89: Closing input extension [ 379.530076][ T5931] em28xx 5-1:0.89: Deregistering snapshot button [ 379.635936][T10395] netlink: 16 bytes leftover after parsing attributes in process `syz.7.863'. [ 380.031722][ T5931] em28xx 5-1:0.89: Freeing device [ 380.050919][T10401] loop5: detected capacity change from 0 to 7 [ 380.133906][T10401] Dev loop5: unable to read RDB block 7 [ 380.187358][T10403] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'. [ 380.210533][T10401] loop5: AHDI p1 [ 380.215848][T10401] loop5: partition table partially beyond EOD, truncated [ 380.374651][T10408] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 380.433566][ T1327] Bluetooth: hci4: Frame reassembly failed (-84) [ 380.513133][T10412] fuse: Unknown parameter 'fsname' [ 380.706813][ T30] audit: type=1400 audit(3913175889.401:1262): avc: denied { ioctl } for pid=10413 comm="syz.7.870" path="socket:[28013]" dev="sockfs" ino=28013 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.791767][T10414] @: renamed from vlan0 (while UP) [ 380.813387][ T977] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 380.858209][T10415] netlink: 32 bytes leftover after parsing attributes in process `syz.7.870'. [ 381.153297][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 381.434394][ T30] audit: type=1400 audit(3913175890.131:1263): avc: denied { lock } for pid=10417 comm="syz.6.862" path="socket:[28888]" dev="sockfs" ino=28888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.770954][ T5138] Bluetooth: hci4: command 0x1003 tx timeout [ 382.778892][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 382.786686][T10430] FAULT_INJECTION: forcing a failure. [ 382.786686][T10430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.859939][T10430] CPU: 1 UID: 0 PID: 10430 Comm: syz.5.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.859961][T10430] Tainted: [L]=SOFTLOCKUP [ 382.859965][T10430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.859972][T10430] Call Trace: [ 382.859976][T10430] [ 382.859981][T10430] dump_stack_lvl+0x16c/0x1f0 [ 382.859997][T10430] should_fail_ex+0x512/0x640 [ 382.860016][T10430] _copy_to_user+0x32/0xd0 [ 382.860031][T10430] simple_read_from_buffer+0xcb/0x170 [ 382.860048][T10430] proc_fail_nth_read+0x197/0x240 [ 382.860060][T10430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.860072][T10430] ? rw_verify_area+0xcf/0x6c0 [ 382.860083][T10430] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.860094][T10430] vfs_read+0x1e4/0xcf0 [ 382.860107][T10430] ? __pfx___mutex_lock+0x10/0x10 [ 382.860121][T10430] ? __pfx_vfs_read+0x10/0x10 [ 382.860137][T10430] ? __fget_files+0x20e/0x3c0 [ 382.860156][T10430] ksys_read+0x12a/0x250 [ 382.860169][T10430] ? __pfx_ksys_read+0x10/0x10 [ 382.860182][T10430] ? fput+0x70/0xf0 [ 382.860200][T10430] do_syscall_64+0xcd/0xf80 [ 382.860212][T10430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.860224][T10430] RIP: 0033:0x7f5f6e58e15c [ 382.860233][T10430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.860243][T10430] RSP: 002b:00007f5f6f4be030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.860253][T10430] RAX: ffffffffffffffda RBX: 00007f5f6e7e6090 RCX: 00007f5f6e58e15c [ 382.860260][T10430] RDX: 000000000000000f RSI: 00007f5f6f4be0a0 RDI: 0000000000000004 [ 382.860266][T10430] RBP: 00007f5f6f4be090 R08: 0000000000000000 R09: 0000000000000000 [ 382.860272][T10430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.860278][T10430] R13: 00007f5f6e7e6128 R14: 00007f5f6e7e6090 R15: 00007ffc814d1f68 [ 382.860293][T10430] [ 383.764746][T10439] FAULT_INJECTION: forcing a failure. [ 383.764746][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 383.853895][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.5.877 Tainted: G L syzkaller #0 PREEMPT(full) [ 383.853926][T10439] Tainted: [L]=SOFTLOCKUP [ 383.853933][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.853944][T10439] Call Trace: [ 383.853951][T10439] [ 383.853958][T10439] dump_stack_lvl+0x16c/0x1f0 [ 383.853981][T10439] should_fail_ex+0x512/0x640 [ 383.853996][T10439] ? fs_reclaim_acquire+0xae/0x150 [ 383.854012][T10439] should_failslab+0xc2/0x120 [ 383.854027][T10439] kmem_cache_alloc_noprof+0x83/0x770 [ 383.854038][T10439] ? __pfx_map_id_range_down+0x10/0x10 [ 383.854056][T10439] ? security_inode_alloc+0x3b/0x2b0 [ 383.854080][T10439] ? security_inode_alloc+0x3b/0x2b0 [ 383.854095][T10439] security_inode_alloc+0x3b/0x2b0 [ 383.854114][T10439] inode_init_always_gfp+0xced/0x1040 [ 383.854138][T10439] alloc_inode+0x86/0x240 [ 383.854150][T10439] new_inode+0x22/0x1c0 [ 383.854162][T10439] shmem_get_inode+0x19a/0xfb0 [ 383.854177][T10439] ? __vm_enough_memory+0x184/0x3f0 [ 383.854194][T10439] __shmem_file_setup+0x290/0x350 [ 383.854221][T10439] shmem_zero_setup+0x93/0x1b0 [ 383.854240][T10439] __mmap_region+0x2271/0x2a00 [ 383.854260][T10439] ? __lock_acquire+0x436/0x2890 [ 383.854281][T10439] ? __pfx___mmap_region+0x10/0x10 [ 383.854321][T10439] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.854345][T10439] ? is_bpf_text_address+0x94/0x1a0 [ 383.854423][T10439] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 383.854444][T10439] mmap_region+0x1ab/0x3f0 [ 383.854455][T10439] ? __get_unmapped_area+0x267/0x3f0 [ 383.854469][T10439] do_mmap+0xa3e/0x1210 [ 383.854485][T10439] ? __pfx_do_mmap+0x10/0x10 [ 383.854506][T10439] ? __pfx_down_write_killable+0x10/0x10 [ 383.854538][T10439] vm_mmap_pgoff+0x29e/0x470 [ 383.854565][T10439] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 383.854581][T10439] ? __fget_files+0x20e/0x3c0 [ 383.854602][T10439] ksys_mmap_pgoff+0x7d/0x5c0 [ 383.854619][T10439] ? __pfx_ksys_write+0x10/0x10 [ 383.854635][T10439] __x64_sys_mmap+0x125/0x190 [ 383.854658][T10439] do_syscall_64+0xcd/0xf80 [ 383.854679][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.854697][T10439] RIP: 0033:0x7f5f6e58f749 [ 383.854712][T10439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.854725][T10439] RSP: 002b:00007f5f6f4df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 383.854736][T10439] RAX: ffffffffffffffda RBX: 00007f5f6e7e5fa0 RCX: 00007f5f6e58f749 [ 383.854743][T10439] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 383.854750][T10439] RBP: 00007f5f6f4df090 R08: ffffffffffffffff R09: 0000000000003000 [ 383.854756][T10439] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 383.854762][T10439] R13: 00007f5f6e7e6038 R14: 00007f5f6e7e5fa0 R15: 00007ffc814d1f68 [ 383.854777][T10439] [ 384.438526][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 384.459535][ T977] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 384.487979][ T977] usb 5-1: can't read configurations, error -71 [ 384.497965][T10449] fuse: Bad value for 'fd' [ 386.151134][T10469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12304 sclass=netlink_route_socket pid=10469 comm=syz.6.887 [ 386.599555][T10474] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 386.612958][ T977] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 386.656305][T10474] bond1: entered promiscuous mode [ 386.661360][T10474] bond1: entered allmulticast mode [ 386.704711][T10474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.780682][T10476] erspan1: entered allmulticast mode [ 386.823817][ T8701] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 386.824189][T10476] bond1: (slave erspan1): making interface the new active one [ 386.869389][ T977] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 386.893908][T10476] erspan1: entered promiscuous mode [ 386.899843][ T977] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 386.902084][T10476] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 386.919678][ T977] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.929978][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.976773][T10467] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 386.995746][ T8701] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 387.020677][ T977] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.027197][ T8701] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 387.042913][ T5927] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 387.047413][ T8701] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 387.069246][ T8701] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 387.081487][ T8701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.138620][ T8701] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.151266][ T8701] usb 7-1: invalid MIDI out EP 0 [ 387.212962][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 387.220025][ T5927] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 387.243949][ T5927] usb 5-1: config 16 has an invalid descriptor of length 254, skipping remainder of the config [ 387.273015][ T5927] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 387.290716][ T8701] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 387.298217][ T5927] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 387.342885][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.513878][ T5927] usb 8-1: USB disconnect, device number 8 [ 387.554995][ T4247] Bluetooth: hci4: Frame reassembly failed (-84) [ 387.579150][ T4247] Bluetooth: hci4: Frame reassembly failed (-84) [ 387.598742][ T8701] usb 7-1: USB disconnect, device number 15 [ 388.808343][T10489] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 388.816926][T10489] overlayfs: overlapping lowerdir path [ 389.584056][ T5138] Bluetooth: hci4: command 0x1003 tx timeout [ 389.591579][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 389.770551][ T5957] usb 5-1: USB disconnect, device number 35 [ 389.855546][T10495] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 389.980341][T10495] overlayfs: overlapping lowerdir path [ 390.010285][T10498] syz.7.892: attempt to access beyond end of device [ 390.010285][T10498] ram201: rw=2048, sector=521328, nr_sectors = 8 limit=8192 [ 391.065050][T10512] trusted_key: encrypted_key: insufficient parameters specified [ 391.081531][T10512] trusted_key: encrypted_key: insufficient parameters specified [ 391.118976][T10512] fuse: Bad value for 'fd' [ 392.152965][ T6194] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 392.229276][T10520] Mount JFS Failure: -22 [ 392.234199][T10520] jfs_mount failed w/return code = -22 [ 392.367165][ T6194] usb 5-1: Using ep0 maxpacket: 32 [ 393.131437][ T6194] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 393.139597][ T6194] usb 5-1: config 0 has no interface number 0 [ 393.145824][ T6194] usb 5-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 393.167624][ T6194] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 393.176917][ T6194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.184991][ T6194] usb 5-1: Product: syz [ 393.189220][ T6194] usb 5-1: Manufacturer: syz [ 393.195338][ T6194] usb 5-1: SerialNumber: syz [ 393.214000][ T6194] usb 5-1: config 0 descriptor?? [ 393.226796][ T6194] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 393.240029][ T6194] em28xx 5-1:0.89: Video interface 89 found: bulk [ 393.838399][ T6194] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 394.118176][T10522] orangefs_mount: mount request failed with -4 [ 394.243008][ T5929] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 394.483324][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 394.536098][ T6194] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 394.635963][ T5929] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 394.662285][ T6194] em28xx 5-1:0.89: board has no eeprom [ 394.677416][ T5929] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 394.692796][ T5929] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 394.705384][ T5929] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 394.752725][ T6194] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 394.788965][ T5929] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 394.809931][ T6194] em28xx 5-1:0.89: analog set to bulk mode. [ 394.819248][ T5929] usb 8-1: config 1 interface 0 has no altsetting 0 [ 394.829402][ T5869] em28xx 5-1:0.89: Registering V4L2 extension [ 394.851483][ T5929] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 394.893102][ T6194] usb 5-1: USB disconnect, device number 36 [ 394.934195][ T6194] em28xx 5-1:0.89: Disconnecting em28xx [ 394.952903][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.102936][ T5929] ums-sddr09 8-1:1.0: USB Mass Storage device detected [ 395.129090][ T5869] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 395.610823][ T5869] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 396.116566][T10531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.129647][T10531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.154833][ T5869] em28xx 5-1:0.89: No AC97 audio processor [ 396.167979][ T5869] usb 5-1: Decoder not found [ 396.172613][ T5869] em28xx 5-1:0.89: failed to create media graph [ 396.186255][ T5929] scsi host1: usb-storage 8-1:1.0 [ 396.218178][ T5869] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 396.249324][ T5869] em28xx 5-1:0.89: Registering snapshot button... [ 396.285414][ T5869] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input31 [ 396.401203][ T8701] usb 8-1: USB disconnect, device number 9 [ 396.754871][ T5869] em28xx 5-1:0.89: Remote control support is not available for this card. [ 396.772940][ T6194] em28xx 5-1:0.89: Closing input extension [ 396.780352][ T6194] em28xx 5-1:0.89: Deregistering snapshot button [ 396.870112][ T30] audit: type=1400 audit(3913175905.561:1264): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 396.909936][ T6194] em28xx 5-1:0.89: Freeing device [ 396.961245][ T30] audit: type=1400 audit(3913175905.651:1265): avc: denied { setopt } for pid=10560 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 397.120798][ T30] audit: type=1400 audit(3913175905.811:1266): avc: denied { read write } for pid=10564 comm="syz.0.916" name="sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 397.178502][ T30] audit: type=1400 audit(3913175905.811:1267): avc: denied { open } for pid=10564 comm="syz.0.916" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 397.206199][T10569] loop7: detected capacity change from 0 to 7 [ 397.222625][ T30] audit: type=1400 audit(3913175905.811:1268): avc: denied { ioctl } for pid=10564 comm="syz.0.916" path="/dev/sg0" dev="devtmpfs" ino=791 ioctlcmd=0x227a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 397.248125][ T6194] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 397.262320][ T8754] Dev loop7: unable to read RDB block 7 [ 397.270668][ T8754] loop7: unable to read partition table [ 397.277197][ T8754] loop7: partition table beyond EOD, truncated [ 397.287242][T10569] Dev loop7: unable to read RDB block 7 [ 397.294868][T10569] loop7: unable to read partition table [ 397.300613][T10569] loop7: partition table beyond EOD, truncated [ 397.307356][T10569] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 397.319403][ T5187] Dev loop7: unable to read RDB block 7 [ 397.328114][ T5187] loop7: unable to read partition table [ 397.335603][ T5187] loop7: partition table beyond EOD, truncated [ 397.537967][ T6194] usb 5-1: config index 0 descriptor too short (expected 14540, got 56) [ 397.546455][ T5869] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 397.556660][ T6194] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 397.732914][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 398.044535][ T5869] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 398.059045][ T6194] usb 5-1: config 3 has no interfaces? [ 398.063540][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.7.918'. [ 398.065470][ T5869] usb 7-1: config 0 has no interface number 0 [ 398.093751][ T6194] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 398.114740][ T5869] usb 7-1: config 0 interface 89 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 398.129673][ T6194] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.203221][ T6194] usb 5-1: Product: syz [ 399.155981][ T6194] usb 5-1: Manufacturer: syz [ 399.160699][ T6194] usb 5-1: SerialNumber: syz [ 399.184126][ T5869] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 399.194910][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.203217][ T5869] usb 7-1: Product: syz [ 399.207391][ T5869] usb 7-1: Manufacturer: syz [ 399.211961][ T5869] usb 7-1: SerialNumber: syz [ 399.225631][ T5869] usb 7-1: config 0 descriptor?? [ 399.261198][ T5869] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 399.281625][ T5869] em28xx 7-1:0.89: Video interface 89 found: bulk [ 399.323983][ T6194] usb 5-1: USB disconnect, device number 37 [ 400.310033][ T5869] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 400.385193][T10590] wireguard0: entered promiscuous mode [ 400.413990][T10590] wireguard0: entered allmulticast mode [ 400.632948][ T5869] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 400.641069][ T5869] em28xx 7-1:0.89: board has no eeprom [ 400.813301][ T5869] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 400.830925][ T5869] em28xx 7-1:0.89: analog set to bulk mode. [ 400.872950][ T6194] em28xx 7-1:0.89: Registering V4L2 extension [ 400.950111][ T5869] usb 7-1: USB disconnect, device number 16 [ 401.091208][ T5869] em28xx 7-1:0.89: Disconnecting em28xx [ 401.689442][ T6194] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 401.764673][ T6194] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 401.878238][ T6194] em28xx 7-1:0.89: No AC97 audio processor [ 401.945509][T10624] Mount JFS Failure: -22 [ 401.949800][T10624] jfs_mount failed w/return code = -22 [ 402.959571][ T6194] usb 7-1: Decoder not found [ 402.965128][ T6194] em28xx 7-1:0.89: failed to create media graph [ 402.971388][ T6194] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 402.978839][ T6194] em28xx 7-1:0.89: Registering snapshot button... [ 402.994632][ T6194] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input32 [ 403.013681][ T6194] em28xx 7-1:0.89: Remote control support is not available for this card. [ 403.025668][ T5869] em28xx 7-1:0.89: Closing input extension [ 403.033488][ T5869] em28xx 7-1:0.89: Deregistering snapshot button [ 403.240207][T10638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.267828][ T5869] em28xx 7-1:0.89: Freeing device [ 403.459851][T10645] netlink: 64 bytes leftover after parsing attributes in process `syz.5.936'. [ 403.493725][ T5957] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 403.644299][ T5957] usb 8-1: device descriptor read/64, error -71 [ 404.044500][ T5957] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 404.346041][ T5957] usb 8-1: device descriptor read/64, error -71 [ 404.511201][T10657] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 404.522596][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 404.532289][T10659] overlayfs: failed to resolve './file0': -2 [ 404.541238][ T5957] usb usb8-port1: attempt power cycle [ 405.918140][ T5957] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 405.964527][ T5957] usb 8-1: device descriptor read/8, error -71 [ 405.969701][ T6194] kernel write not supported for file /dsp (pid: 6194 comm: kworker/1:10) [ 406.063117][ T5869] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 406.275581][ T5869] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 406.302489][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.561995][ T5138] Bluetooth: hci4: command 0x1003 tx timeout [ 406.569475][ T5823] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 406.621618][ T5869] usb 5-1: config 0 descriptor?? [ 406.635020][ T5869] cp210x 5-1:0.0: cp210x converter detected [ 408.065812][ T5869] usb 5-1: cp210x converter now attached to ttyUSB0 [ 409.064663][ T6194] usb 5-1: USB disconnect, device number 38 [ 409.078689][ T6194] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 409.190582][ T6194] cp210x 5-1:0.0: device disconnected [ 410.421062][T10701] netlink: 60 bytes leftover after parsing attributes in process `syz.6.954'. [ 411.132429][T10711] FAULT_INJECTION: forcing a failure. [ 411.132429][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 411.165123][ T30] audit: type=1400 audit(3913175919.861:1269): avc: denied { read write } for pid=10705 comm="syz.5.956" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 411.228363][T10711] CPU: 1 UID: 0 PID: 10711 Comm: syz.6.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.228395][T10711] Tainted: [L]=SOFTLOCKUP [ 411.228402][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.228412][T10711] Call Trace: [ 411.228418][T10711] [ 411.228426][T10711] dump_stack_lvl+0x16c/0x1f0 [ 411.228456][T10711] should_fail_ex+0x512/0x640 [ 411.228482][T10711] should_failslab+0xc2/0x120 [ 411.228507][T10711] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 411.228530][T10711] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 411.228557][T10711] ? kstrdup+0x53/0x100 [ 411.228572][T10711] kstrdup+0x53/0x100 [ 411.228589][T10711] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 411.228616][T10711] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 411.228638][T10711] selinux_netlbl_socket_post_create+0xb0/0x1b0 [ 411.228661][T10711] selinux_socket_post_create+0x2f7/0x7d0 [ 411.228690][T10711] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 411.228719][T10711] ? tcp_v6_init_sock+0x15/0xb0 [ 411.228737][T10711] ? __pfx_tcp_v6_init_sock+0x10/0x10 [ 411.228754][T10711] ? inet6_create+0xb4a/0x12b0 [ 411.228774][T10711] security_socket_post_create+0x247/0x260 [ 411.228802][T10711] __sock_create+0x70b/0x8a0 [ 411.228825][T10711] mptcp_subflow_create_socket+0xec/0xa50 [ 411.228845][T10711] ? find_held_lock+0x2b/0x80 [ 411.228872][T10711] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 411.228901][T10711] __mptcp_nmpc_sk+0x182/0x880 [ 411.228923][T10711] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 411.228948][T10711] ? __local_bh_enable_ip+0xa4/0x120 [ 411.228981][T10711] mptcp_sendmsg+0x1716/0x1ee0 [ 411.229009][T10711] ? sock_has_perm+0x258/0x2f0 [ 411.229033][T10711] ? __pfx_sock_has_perm+0x10/0x10 [ 411.229059][T10711] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 411.229080][T10711] ? __might_fault+0xe3/0x190 [ 411.229098][T10711] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 411.229125][T10711] ? __import_iovec+0x1dd/0x650 [ 411.229150][T10711] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 411.229175][T10711] inet6_sendmsg+0x11c/0x140 [ 411.229193][T10711] ____sys_sendmsg+0x705/0xc30 [ 411.229214][T10711] ? copy_msghdr_from_user+0x10a/0x160 [ 411.229238][T10711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.229269][T10711] ___sys_sendmsg+0x134/0x1d0 [ 411.229293][T10711] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.229349][T10711] __sys_sendmsg+0x16d/0x220 [ 411.229373][T10711] ? __pfx___sys_sendmsg+0x10/0x10 [ 411.229417][T10711] do_syscall_64+0xcd/0xf80 [ 411.229445][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.229463][T10711] RIP: 0033:0x7f23d1b8f749 [ 411.229479][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.229495][T10711] RSP: 002b:00007f23d2aec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.229513][T10711] RAX: ffffffffffffffda RBX: 00007f23d1de5fa0 RCX: 00007f23d1b8f749 [ 411.229524][T10711] RDX: 0000000020000081 RSI: 0000200000000780 RDI: 0000000000000005 [ 411.229535][T10711] RBP: 00007f23d2aec090 R08: 0000000000000000 R09: 0000000000000000 [ 411.229545][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.229556][T10711] R13: 00007f23d1de6038 R14: 00007f23d1de5fa0 R15: 00007ffe32aaf9f8 [ 411.229585][T10711] [ 411.393910][ T30] audit: type=1400 audit(3913175919.881:1270): avc: denied { open } for pid=10705 comm="syz.5.956" path="/123/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 412.223147][ T30] audit: type=1400 audit(3913175920.461:1271): avc: denied { getopt } for pid=10712 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 412.352926][ T5869] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 412.573602][ T5869] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 412.645249][ T5869] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 412.689492][ T5869] usb 7-1: config 1 interface 0 has no altsetting 0 [ 412.713293][ T5869] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 412.726618][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.759534][ T5869] usb 7-1: Product: syz [ 412.772915][ T5869] usb 7-1: Manufacturer: syz [ 412.788585][ T5869] usb 7-1: SerialNumber: syz [ 412.864337][T10724] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 412.871599][T10724] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 415.754437][ T30] audit: type=1400 audit(3913175924.451:1272): avc: denied { map } for pid=10739 comm="syz.6.965" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 415.817074][ T5869] rtl8150 7-1:1.0: couldn't reset the device [ 415.881386][ T5869] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 415.987951][ T5869] usb 7-1: USB disconnect, device number 17 [ 415.991369][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.5.967'. [ 416.423151][ T6194] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 416.664181][ T6194] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.861756][ T6194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.958050][ T6194] usb 5-1: config 0 descriptor?? [ 417.008968][ T6194] cp210x 5-1:0.0: cp210x converter detected [ 417.853044][ T6194] usb 5-1: cp210x converter now attached to ttyUSB0 [ 417.953937][ T6194] usb 5-1: USB disconnect, device number 39 [ 417.997516][ T6194] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 418.311345][ T6194] cp210x 5-1:0.0: device disconnected [ 420.377839][ T30] audit: type=1400 audit(3913175929.071:1273): avc: denied { connect } for pid=10782 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 420.398529][ T30] audit: type=1400 audit(3913175929.091:1274): avc: denied { read } for pid=10782 comm="syz.4.976" path="socket:[28663]" dev="sockfs" ino=28663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 420.940120][ T30] audit: type=1400 audit(3913175929.631:1275): avc: denied { setopt } for pid=10782 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 421.035930][T10792] Device name cannot be null; rc = [-22] [ 421.081146][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.976'. [ 421.245711][T10792] netlink: 'syz.4.976': attribute type 2 has an invalid length. [ 421.489611][T10797] FAULT_INJECTION: forcing a failure. [ 421.489611][T10797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.503942][T10797] CPU: 0 UID: 0 PID: 10797 Comm: syz.7.979 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.503972][T10797] Tainted: [L]=SOFTLOCKUP [ 421.503978][T10797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.503989][T10797] Call Trace: [ 421.503996][T10797] [ 421.504003][T10797] dump_stack_lvl+0x16c/0x1f0 [ 421.504027][T10797] should_fail_ex+0x512/0x640 [ 421.504055][T10797] _copy_to_user+0x32/0xd0 [ 421.504080][T10797] environ_read+0x287/0x450 [ 421.504111][T10797] ? __pfx_environ_read+0x10/0x10 [ 421.504135][T10797] vfs_readv+0x5c1/0x8b0 [ 421.504162][T10797] ? __pfx_vfs_readv+0x10/0x10 [ 421.504182][T10797] ? finish_task_switch.isra.0+0x207/0xbd0 [ 421.504230][T10797] ? __fget_files+0x20e/0x3c0 [ 421.504261][T10797] ? do_preadv+0x1a6/0x270 [ 421.504280][T10797] do_preadv+0x1a6/0x270 [ 421.504300][T10797] ? __pfx_do_preadv+0x10/0x10 [ 421.504319][T10797] ? rcu_is_watching+0x12/0xc0 [ 421.504344][T10797] do_syscall_64+0xcd/0xf80 [ 421.504365][T10797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.504385][T10797] RIP: 0033:0x7febda18f749 [ 421.504400][T10797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.504417][T10797] RSP: 002b:00007febdb0b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 421.504435][T10797] RAX: ffffffffffffffda RBX: 00007febda3e6180 RCX: 00007febda18f749 [ 421.504448][T10797] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 421.504459][T10797] RBP: 00007febdb0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 421.504471][T10797] R10: 0000000000c002a0 R11: 0000000000000246 R12: 0000000000000001 [ 421.504481][T10797] R13: 00007febda3e6218 R14: 00007febda3e6180 R15: 00007ffca62b0808 [ 421.504510][T10797] [ 424.328148][ T30] audit: type=1400 audit(3913175932.501:1276): avc: denied { map } for pid=10822 comm="syz.0.987" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 424.468047][ T30] audit: type=1400 audit(3913175932.501:1277): avc: denied { execute } for pid=10822 comm="syz.0.987" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 424.643044][ T30] audit: type=1400 audit(3913175933.331:1278): avc: denied { create } for pid=10834 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 425.140809][ T30] audit: type=1400 audit(3913175933.361:1279): avc: denied { ioctl } for pid=10834 comm="syz.4.991" path="socket:[29568]" dev="sockfs" ino=29568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 425.173469][ T8701] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 425.583982][ T8701] usb 8-1: Using ep0 maxpacket: 16 [ 426.050117][ T8701] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.068961][ T8701] usb 8-1: config 0 has no interfaces? [ 426.558056][ T8701] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 426.604883][ T8701] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.637233][ T8701] usb 8-1: config 0 descriptor?? [ 427.991397][ T6194] usb 8-1: USB disconnect, device number 14 [ 428.172968][ T5927] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 428.213313][ T48] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 428.334403][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 428.344684][ T5927] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 428.354842][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 428.363216][ T5927] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 428.372366][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.380544][ T5927] usb 5-1: Product: syz [ 428.384964][ T5927] usb 5-1: Manufacturer: syz [ 428.389537][ T5927] usb 5-1: SerialNumber: syz [ 428.396960][T10868] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 428.406638][T10868] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 428.415264][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.428610][ T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.438585][ T48] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 428.447834][ T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.457744][ T48] usb 7-1: config 0 descriptor?? [ 429.621206][ T48] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 429.630171][ T48] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 429.703469][ T48] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 429.825444][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1001'. [ 429.906399][ T48] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 429.966261][ T48] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71 [ 429.991239][ T48] usb 7-1: USB disconnect, device number 18 [ 430.841219][ T5927] rtl8150 5-1:1.0: couldn't reset the device [ 430.847643][ T5927] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 431.298484][ T48] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 431.376159][ T5927] usb 5-1: USB disconnect, device number 40 [ 431.644852][ T48] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 431.666459][ T5823] Bluetooth: hci6: command 0x0406 tx timeout [ 431.673362][ T48] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 431.683784][ T48] usb 8-1: config 1 interface 0 has no altsetting 0 [ 432.024937][ T8701] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 432.046100][ T48] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 432.055328][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.063812][ T48] usb 8-1: Product: syz [ 432.068364][ T48] usb 8-1: Manufacturer: syz [ 432.073930][ T48] usb 8-1: SerialNumber: syz [ 432.082159][T10892] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 432.089771][T10892] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 432.215151][ T8701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.226792][ T8701] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 432.239411][ T8701] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 432.242962][ T5927] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 432.253416][ T8701] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 432.271581][ T8701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.290674][ T8701] usb 7-1: config 0 descriptor?? [ 432.320772][ T8701] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input34 [ 432.569841][ T5172] bcm5974 7-1:0.0: could not read from device [ 432.579037][ T8701] usb 7-1: USB disconnect, device number 19 [ 432.603649][ T5927] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.609172][ T5816] bcm5974 7-1:0.0: could not read from device [ 432.690941][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.863470][ T5927] usb 5-1: config 0 descriptor?? [ 432.922992][ T5172] bcm5974 7-1:0.0: could not read from device [ 433.101260][ T5927] cp210x 5-1:0.0: cp210x converter detected [ 433.129180][ T5816] udevd[5816]: Error opening device "/dev/input/event4": No such file or directory [ 433.151048][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 433.173847][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 433.181636][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 433.189514][ T5816] udevd[5816]: Unable to EVIOCGABS device "/dev/input/event4" [ 433.384376][T10914] Device name cannot be null; rc = [-22] [ 433.410920][T10914] netlink: 'syz.6.1009': attribute type 2 has an invalid length. [ 433.940026][ T5927] usb 5-1: cp210x converter now attached to ttyUSB0 [ 434.238282][ T48] rtl8150 8-1:1.0: couldn't reset the device [ 434.270015][ T48] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 434.282363][ T5927] usb 5-1: USB disconnect, device number 41 [ 434.304627][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.335062][ T48] usb 8-1: USB disconnect, device number 15 [ 434.405791][ T5927] cp210x 5-1:0.0: device disconnected [ 434.497540][ T5959] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 434.722933][ T30] audit: type=1400 audit(3913175943.411:1280): avc: denied { write } for pid=10927 comm="syz.0.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 434.726747][ T5959] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.807645][ T5959] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.846824][ T5959] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 434.857311][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.876918][ T5959] usb 7-1: SerialNumber: syz [ 434.897679][ T5959] usb 7-1: 0:2 : does not exist [ 435.092311][T10931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 435.207412][T10931] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 435.570749][ T31] INFO: task kworker/1:5:5891 blocked for more than 143 seconds. [ 435.720709][ T31] Tainted: G L syzkaller #0 [ 435.746603][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 435.764716][ T31] task:kworker/1:5 state:D stack:22344 pid:5891 tgid:5891 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 435.778873][ T31] Workqueue: usb_hub_wq hub_event [ 435.784601][ T31] Call Trace: [ 435.788203][ T31] [ 435.791764][ T31] ? __schedule+0x10b9/0x6150 [ 435.798786][ T31] __schedule+0x1139/0x6150 [ 435.804731][ T31] ? __pfx___schedule+0x10/0x10 [ 435.810267][ T31] ? find_held_lock+0x2b/0x80 [ 435.815082][ T31] ? schedule+0x2d7/0x3a0 [ 435.820270][ T31] schedule+0xe7/0x3a0 [ 435.825009][ T31] schedule_timeout+0x257/0x290 [ 435.827374][T10921] program syz.6.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.830186][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 435.845859][ T31] ? mark_held_locks+0x49/0x80 [ 435.850649][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 435.857787][ T31] __wait_for_common+0x2fc/0x4e0 [ 435.863021][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 435.869841][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 435.875406][ T31] ? __pfx_device_del+0x10/0x10 [ 435.880276][ T31] ? kobject_put+0xaf/0x6f0 [ 435.884976][ T31] i2c_del_adapter+0x640/0x850 [ 435.889778][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 435.903309][ T31] ? dvb_usbv2_exit.isra.0+0x3c2/0xb70 [ 435.908840][ T31] dvb_usbv2_exit.isra.0+0x457/0xb70 [ 435.917587][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1011'. [ 435.934053][ T48] usb 7-1: USB disconnect, device number 20 [ 435.934269][ T5959] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 435.943334][ T31] dvb_usbv2_probe+0x1fef/0x4150 [ 435.984014][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 435.992857][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.004038][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.012868][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 436.018543][ T31] usb_probe_interface+0x303/0xa80 [ 436.033050][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 436.038732][ T31] really_probe+0x241/0xb20 [ 436.052844][ T31] __driver_probe_device+0x1de/0x470 [ 436.058188][ T31] driver_probe_device+0x4c/0x1b0 [ 436.063308][ T31] __device_attach_driver+0x1df/0x350 [ 436.069593][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 436.079910][ T31] bus_for_each_drv+0x159/0x1e0 [ 436.083973][ T5959] usb 5-1: device descriptor read/64, error -71 [ 436.085750][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 436.096404][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.102619][T10923] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 436.109691][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.116096][ T31] __device_attach+0x1e4/0x4e0 [ 436.120867][ T31] ? __pfx___device_attach+0x10/0x10 [ 436.126189][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 436.131398][ T31] device_initial_probe+0xaa/0xc0 [ 436.136509][ T31] bus_probe_device+0x64/0x150 [ 436.141280][ T31] device_add+0x116e/0x1980 [ 436.145830][ T31] ? __pfx_device_add+0x10/0x10 [ 436.150685][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 436.157376][ T31] usb_set_configuration+0x1187/0x1e50 [ 436.162907][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 436.168980][ T31] usb_generic_driver_probe+0xb1/0x110 [ 436.175094][ T31] usb_probe_device+0xef/0x400 [ 436.179863][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 436.187585][ T31] really_probe+0x241/0xb20 [ 436.192112][ T31] __driver_probe_device+0x1de/0x470 [ 436.198045][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 436.205325][ T31] driver_probe_device+0x4c/0x1b0 [ 436.210377][ T31] __device_attach_driver+0x1df/0x350 [ 436.215790][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 436.221686][ T31] bus_for_each_drv+0x159/0x1e0 [ 436.226684][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 436.232059][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.237334][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 436.243186][ T31] __device_attach+0x1e4/0x4e0 [ 436.247950][ T31] ? __pfx___device_attach+0x10/0x10 [ 436.253302][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 436.258515][ T31] device_initial_probe+0xaa/0xc0 [ 436.263662][ T31] bus_probe_device+0x64/0x150 [ 436.268435][ T31] device_add+0x116e/0x1980 [ 436.273024][ T31] ? __pfx_device_add+0x10/0x10 [ 436.277882][ T31] ? add_device_randomness+0xb7/0xf0 [ 436.283259][ T31] usb_new_device+0xd07/0x1a90 [ 436.288035][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 436.293196][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 436.298423][ T31] ? mark_held_locks+0x49/0x80 [ 436.303274][ T31] hub_event+0x313a/0x52f0 [ 436.308971][ T31] ? __pfx_hub_event+0x10/0x10 [ 436.313875][ T31] ? assoc_array_subtree_iterate+0x210/0x380 [ 436.319862][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 436.325725][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.330498][ T31] process_one_work+0x9ba/0x1b20 [ 436.333904][ T5959] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 436.335630][ T31] ? __pfx_process_one_work+0x10/0x10 [ 436.348352][ T31] ? assign_work+0x1a0/0x250 [ 436.353096][ T31] worker_thread+0x6c8/0xf10 [ 436.357704][ T31] ? __pfx_worker_thread+0x10/0x10 [ 436.362843][ T31] kthread+0x3c5/0x780 [ 436.366916][ T31] ? __pfx_kthread+0x10/0x10 [ 436.371492][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.376350][ T31] ? __pfx_kthread+0x10/0x10 [ 436.380942][ T31] ret_from_fork+0x983/0xb10 [ 436.386234][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.391403][ T31] ? __switch_to+0x7af/0x10d0 [ 436.396784][ T31] ? __pfx_kthread+0x10/0x10 [ 436.401374][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.409923][ T31] [ 436.413173][ T31] [ 436.413173][ T31] Showing all locks held in the system: [ 436.440188][ T31] 1 lock held by khungtaskd/31: [ 436.445391][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 436.490309][ T5959] usb 5-1: device descriptor read/64, error -71 [ 436.543012][ T31] 2 locks held by getty/5573: [ 436.547729][ T31] #0: ffff88814ce5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 436.557648][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 436.567833][ T31] 5 locks held by kworker/1:5/5891: [ 436.573083][ T31] #0: ffff888141aa6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 436.583948][ T31] #1: ffffc90003397c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 436.595274][ T31] #2: ffff888029f70198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 436.604204][ T31] #3: ffff888079564198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 436.615471][ T31] #4: ffff8880314f1160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 436.626359][ T31] 5 locks held by kworker/0:8/5959: [ 436.631584][ T31] #0: ffff888141aa6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 436.643737][ T5959] usb usb5-port1: attempt power cycle [ 436.649661][ T31] #1: ffffc900032b7c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 436.661683][ T31] #2: ffff888143370198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 436.671263][ T31] #3: ffff888143373518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b87/0x52f0 [ 436.681918][ T31] #4: ffff888142bc9868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2bb0/0x52f0 [ 436.692306][ T31] 1 lock held by syz.7.1011/10929: [ 436.698094][ T31] #0: ffffffff8e3d4d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 436.711110][ T31] [ 436.716008][ T31] ============================================= [ 436.716008][ T31] [ 436.725213][ T31] NMI backtrace for cpu 0 [ 436.725230][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 436.725254][ T31] Tainted: [L]=SOFTLOCKUP [ 436.725260][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.725270][ T31] Call Trace: [ 436.725275][ T31] [ 436.725283][ T31] dump_stack_lvl+0x116/0x1f0 [ 436.725314][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 436.725339][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 436.725358][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 436.725382][ T31] sys_info+0x133/0x180 [ 436.725400][ T31] watchdog+0xe66/0x1180 [ 436.725426][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.725444][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.725461][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.725481][ T31] ? __kthread_parkme+0x19e/0x250 [ 436.725501][ T31] ? __pfx_watchdog+0x10/0x10 [ 436.725519][ T31] kthread+0x3c5/0x780 [ 436.725539][ T31] ? __pfx_kthread+0x10/0x10 [ 436.725561][ T31] ? rcu_is_watching+0x12/0xc0 [ 436.725577][ T31] ? __pfx_kthread+0x10/0x10 [ 436.725599][ T31] ret_from_fork+0x983/0xb10 [ 436.725619][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 436.725641][ T31] ? __switch_to+0x7af/0x10d0 [ 436.725663][ T31] ? __pfx_kthread+0x10/0x10 [ 436.725685][ T31] ret_from_fork_asm+0x1a/0x30 [ 436.725721][ T31] [ 436.725728][ T31] Sending NMI from CPU 0 to CPUs 1: [ 436.880257][ C1] NMI backtrace for cpu 1 [ 436.880274][ C1] CPU: 1 UID: 0 PID: 5800 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 436.880301][ C1] Tainted: [L]=SOFTLOCKUP [ 436.880306][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.880316][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 436.880341][ C1] Code: e6 63 58 00 48 89 df 5b e9 cd 16 5e 00 be 03 00 00 00 5b e9 42 79 ed 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 08 7c f3 11 65 8b 05 19 7c f3 [ 436.880359][ C1] RSP: 0018:ffffc900044cfa28 EFLAGS: 00000246 [ 436.880373][ C1] RAX: 0000000000000000 RBX: ffff888079451980 RCX: ffffffff89dc16fd [ 436.880385][ C1] RDX: ffff88807e54a4c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 436.880395][ C1] RBP: ffffc900044cfc30 R08: 0000000000000001 R09: 0000000000000000 [ 436.880406][ C1] R10: 0000000000000000 R11: ffff88807e54aff0 R12: 1ffff92000899f49 [ 436.880417][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 436.880428][ C1] FS: 0000555559b23500(0000) GS:ffff8881249fa000(0000) knlGS:0000000000000000 [ 436.880444][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.880456][ C1] CR2: 00007febdb0f7990 CR3: 00000000755b6000 CR4: 00000000003526f0 [ 436.880467][ C1] Call Trace: [ 436.880473][ C1] [ 436.880478][ C1] tcp_recvmsg+0x1f9/0x680 [ 436.880505][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 436.880528][ C1] ? sock_has_perm+0x258/0x2f0 [ 436.880557][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 436.880582][ C1] ? __pfx_tcp_recvmsg+0x10/0x10 [ 436.880604][ C1] inet_recvmsg+0x129/0x6a0 [ 436.880629][ C1] ? __pfx_inet_recvmsg+0x10/0x10 [ 436.880657][ C1] sock_recvmsg+0x1b2/0x250 [ 436.880676][ C1] sock_read_iter+0x2b9/0x3b0 [ 436.880693][ C1] ? __pfx_sock_read_iter+0x10/0x10 [ 436.880715][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 436.880733][ C1] ? security_file_permission+0x71/0x210 [ 436.880754][ C1] ? rw_verify_area+0xcf/0x6c0 [ 436.880774][ C1] vfs_read+0xa98/0xcf0 [ 436.880797][ C1] ? __pfx_vfs_read+0x10/0x10 [ 436.880819][ C1] ? get_timespec64+0x147/0x240 [ 436.880843][ C1] ? common_nsleep+0xa1/0xd0 [ 436.880867][ C1] ksys_read+0x1f8/0x250 [ 436.880887][ C1] ? __pfx_ksys_read+0x10/0x10 [ 436.880911][ C1] do_syscall_64+0xcd/0xf80 [ 436.880931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.880949][ C1] RIP: 0033:0x7f7a3ad8e11d [ 436.880962][ C1] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb bd e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 d4 22 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 436.880979][ C1] RSP: 002b:00007fffaab46c38 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.881011][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a3ad8e11d [ 436.881022][ C1] RDX: 0000000000000004 RSI: 00007fffaab46c4c RDI: 0000000000000003 [ 436.881037][ C1] RBP: 0000000000000000 R08: 00007fffaab46c40 R09: 00007f7a3bb40000 [ 436.881048][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaab47060 [ 436.881059][ C1] R13: 0000000000000004 R14: 00007fffaab46c4c R15: 00007fffaab46ce0 [ 436.881078][ C1] [ 437.215188][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 437.222069][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 437.232728][ T31] Tainted: [L]=SOFTLOCKUP [ 437.237042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.247078][ T31] Call Trace: [ 437.250344][ T31] [ 437.253257][ T31] dump_stack_lvl+0x3d/0x1f0 [ 437.257835][ T31] vpanic+0x640/0x6f0 [ 437.261794][ T31] panic+0xca/0xd0 [ 437.265500][ T31] ? __pfx_panic+0x10/0x10 [ 437.269891][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.275852][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 437.281991][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 437.288136][ T31] ? watchdog+0xe83/0x1180 [ 437.292533][ T31] ? watchdog+0xe76/0x1180 [ 437.296927][ T31] watchdog+0xe94/0x1180 [ 437.301159][ T31] ? rcu_is_watching+0x12/0xc0 [ 437.305912][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.310568][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.315754][ T31] ? __kthread_parkme+0x19e/0x250 [ 437.320761][ T31] ? __pfx_watchdog+0x10/0x10 [ 437.325429][ T31] kthread+0x3c5/0x780 [ 437.329506][ T31] ? __pfx_kthread+0x10/0x10 [ 437.334106][ T31] ? rcu_is_watching+0x12/0xc0 [ 437.338856][ T31] ? __pfx_kthread+0x10/0x10 [ 437.343524][ T31] ret_from_fork+0x983/0xb10 [ 437.348099][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 437.353193][ T31] ? __switch_to+0x7af/0x10d0 [ 437.357851][ T31] ? __pfx_kthread+0x10/0x10 [ 437.362423][ T31] ret_from_fork_asm+0x1a/0x30 [ 437.367186][ T31] [ 437.370503][ T31] Kernel Offset: disabled [ 437.374808][ T31] Rebooting in 86400 seconds..