last executing test programs: 6m27.371326766s ago: executing program 1 (id=1915): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00', r1}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x4, 0xc02, 0xff, 0x19, 0x402, 0x5}) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='svc_process\x00', r2}, 0xfffffffffffffce5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgrcv(0x0, &(0x7f00000002c0), 0x8, 0x0, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='cmdline\x00') 6m23.73539065s ago: executing program 1 (id=1927): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x5, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x0, 0x3, 0x1, 0x0, 0x4b}) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000a8a000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x9dfc2000) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f00008ae000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r6, &(0x7f00000003c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x5, 0xfff7, 0x19, 0xc}, @mpls={[{0x5c000, 0x0, 0x1}], @generic="dfa15cf37722a1a2c34b1fecb3cfcad319d9f97ad0a34404ac628671d5e513a76122963cfe8ad66a3913eb3ee81d599a927d9819008068bdc57360a15540efe48778c52d0eed1a6c34a02e52c3c35530c34a9e55ea667c4c39532571d2ec4f9390a5ebdb77b7e343190430f0599362da5684359d0c66c1567f0728e7809988b4bf325db2ced5c8e25779a14cae898f05e7b9a9b7b216f19c9e79ce7b5de0ae"}}, 0xb1) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0xffffffff) 6m22.864341157s ago: executing program 1 (id=1930): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) sendto$inet6(r6, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x2000c7, @local}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f00000004c0)) madvise(&(0x7f0000735000/0x1000)=nil, 0x1000, 0x65) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x10000) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 6m19.042860928s ago: executing program 1 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000002c0)=0x83, 0x4) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) 6m18.01430455s ago: executing program 1 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2c003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff00"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000b46c000000000000000000000000000002000000000000000200"/127], 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200008c0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') getpid() 6m17.492104374s ago: executing program 1 (id=1945): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) pwrite64(r2, &(0x7f00000002c0), 0x0, 0x8) r3 = syz_open_dev$video(&(0x7f0000000180), 0x800000000, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6cb274c83593c23c7865493ea60000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a300000000005000100070000000900020073797a31000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0015f42bd10000000110ccecbf1a0e3d6e22f40000000000000100003a236c0a0232c08100000000e800"], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80000) syz_open_dev$evdev(&(0x7f0000000200), 0x9, 0x403) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f00000002c0)) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x4}}, 0x20) 6m2.228728127s ago: executing program 32 (id=1945): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800000, 0x2) pwrite64(r2, &(0x7f00000002c0), 0x0, 0x8) r3 = syz_open_dev$video(&(0x7f0000000180), 0x800000000, 0x0) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6cb274c83593c23c7865493ea60000000706010100000000000000000a0000090900020073797a3100000000080006400000000608000640800000010900020073797a300000000005000100070000000900020073797a31000000000900020073797a300000000008000640000100000800064000007fff"], 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000004) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x9, r1, &(0x7f0000000100)=0x5, 0x10001, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0015f42bd10000000110ccecbf1a0e3d6e22f40000000000000100003a236c0a0232c08100000000e800"], 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80000) syz_open_dev$evdev(&(0x7f0000000200), 0x9, 0x403) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f00000002c0)) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = dup(r6) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x4}}, 0x20) 2m51.717373675s ago: executing program 4 (id=2546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x9}, 0x18) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x7, 0xc8, 0x8, 0x400}}}, 0x9) 2m51.588333704s ago: executing program 4 (id=2547): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x13) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x89}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x20004080) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b1d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) 2m45.2084431s ago: executing program 4 (id=2561): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 2m45.038462691s ago: executing program 4 (id=2562): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, 0x0}) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 2m44.668411126s ago: executing program 4 (id=2565): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x3) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000001a00010000000000000000000a00fc003a2a5e247b000000ab685405001b8096f985c2b441de3bb8d967c6664c3c7f37d546072262fc48a6dc2413b9d04b5e0a28deb79a8c57403926be77eee5ec333ffead0eeb09cac8b78b358cf435b32a0fcb0a67bcdbcc35197b759af6f37455b2c09b41788744eac523aa288e5824c9506964ead872a5e4e4ab0779d75cf1240db83b9e1b11c67d"], 0x20}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(0x0, r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd70027100c1582100000018"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) 2m44.148440472s ago: executing program 4 (id=2568): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000200)=@secondary) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'aio_aio12_8\x00', [0x2f04, 0x10000005, 0xd09d, 0xfff7ffff, 0x2d6, 0xfffffffe, 0x20000044, 0x6, 0xffd, 0x9, 0xc, 0x1001, 0x100009, 0x3, 0xfffc, 0x5, 0x8, 0x4000000b, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x9, 0x4000d, 0x7, 0x3, 0x4, 0x3, 0x70f]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf, @empty, 0x2}, {0xa, 0x4e23, 0x0, @remote, 0x3}, r7, 0x7}}, 0x48) 2m43.684274193s ago: executing program 33 (id=2568): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000200)=@secondary) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'aio_aio12_8\x00', [0x2f04, 0x10000005, 0xd09d, 0xfff7ffff, 0x2d6, 0xfffffffe, 0x20000044, 0x6, 0xffd, 0x9, 0xc, 0x1001, 0x100009, 0x3, 0xfffc, 0x5, 0x8, 0x4000000b, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x9, 0x4000d, 0x7, 0x3, 0x4, 0x3, 0x70f]}) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000002c0)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xf, @empty, 0x2}, {0xa, 0x4e23, 0x0, @remote, 0x3}, r7, 0x7}}, 0x48) 17.50074392s ago: executing program 3 (id=3014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1c4}], 0x1}}], 0x1, 0x400c0) sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000040)) 15.244051814s ago: executing program 3 (id=3022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0xe4}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r3) sendmsg$NET_DM_CMD_START(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r4, 0x401, 0x70bd22, 0x10400, {0x2}}, 0x14}}, 0x40c0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200900) 14.364328377s ago: executing program 3 (id=3024): r0 = socket$inet(0x2, 0xa, 0x82) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="991a54fc28d627d80740ede1a4724090"]}]}, 0x38}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x5c, r11, 0x1, 0x0, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x5c}}, 0x800) r12 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r12, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x40) 12.36445697s ago: executing program 3 (id=3030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2c003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff00"/55, @ANYRES32=0x0, @ANYRES32=0x0], 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200008c0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') getpid() 8.872480082s ago: executing program 3 (id=3041): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x86, "8040d9670fa0a31bdebee49bbd07884cde89c142df15700bef7b7507948df90cfee4c2a6c6986cf5a82407844ecd413643e330f7540251a2ee9fe96ee4d00f9f0234614cf5c968ba4dd505f4a5ec5e2386c2c7d6b7a5632457072fe177dd4f6ba9dbecdcf7c359659c5c8fc4a6f87d81b8329033098a6f3fdd5046bc6f7e7a585a29b0c2df1e"}, &(0x7f0000000500)=0x8e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x66d, 0x1, 0x9, 0xb, 0xfb, 0xd}, 0x9c) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x50, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000340)=0x9, 0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xac}}, 0x20040004) 7.833489312s ago: executing program 3 (id=3043): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xf03d}, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000f40)="ad5bb6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000005580)="b9c973acad96fc274d605b6ea5083e90f7854520a3d82c106c2af8caf9b5e405cc034349655ac1b02043573da783b7abbfb914c18faaa9f22793be794e48473a883838d23d387aa105d1935058122b84e197b38365433fb37bb8", 0x5a}, {0x0}], 0x2, 0x0, 0x0, 0x8011}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000300)=""/97, 0x61}], 0x2}, 0x160) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 4.727653393s ago: executing program 0 (id=3056): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000480)={0x6, 0x5, {0x0}, {0xffffffffffffffff}, 0x5, 0x10000000000}) fcntl$setown(0xffffffffffffffff, 0x8, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000005c0)={'adl_pci9118\x00', [0x35b7, 0x71af, 0x8001, 0x48, 0x2, 0x6, 0x6, 0x3, 0x14, 0x40, 0x7, 0x7fff, 0x2, 0x9, 0x1ff, 0x4, 0x7ff, 0x5, 0x2, 0x5, 0x7, 0x0, 0xffff7fff, 0x1, 0x9, 0x8, 0x10, 0x9, 0xff, 0x9, 0x8, 0xffffffc0]}) getrlimit(0x3, &(0x7f0000000680)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x34}}, 0x20048010) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x1ff) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 4.68004774s ago: executing program 5 (id=3058): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8408e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$poke(0x4, r1, &(0x7f0000000000), 0xffffffffffffffff) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) syz_io_uring_setup(0xc, &(0x7f0000000240)={0x0, 0x80fd, 0x80, 0x3, 0xab9}, &(0x7f0000000140), &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000099df2500000000faf7ccf7f484ca10ea5d47a8c079adfab595981ec36b9b33209241be13d1057b3012e835a62a53f0fdce0af04ed019b3bd30301df6d48f903b0613e8bd5bd70955b3216d33901df5abc048d94ab1264ad24279e9bf20971b2b1e775d5b7131cdb21c17df1ef1f8c0ef79d6a1eaee4f3dd4fcc511749a2a3b0f66b7a3f8e2f3b0c7e30d9b36abaffcdaf8730be9221fe39bab0e1ac44ec13a47096779121e5dd47b605988355177", @ANYRES32=0x0, @ANYBLOB="2010000000000400100003007866726d3000"/28], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) 3.660065462s ago: executing program 5 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@redirect_dir_on}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000002400)="03", 0x1}], 0x1}}], 0x2, 0x2000c044) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1], 0x0) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x6042, 0x0) r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37ffff3, 0x4000010, r2, 0xf4ab5000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200) 3.419490294s ago: executing program 0 (id=3060): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000010000004200000040"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_page_free_batched\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) 3.116101566s ago: executing program 0 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000340)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500"}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.944041042s ago: executing program 6 (id=3062): syz_open_dev$usbfs(0x0, 0x76, 0x101b01) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000024c0), 0xffffffffffffa19a, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000380)={0x0, 0x211a, 0x20000, 0x2, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0xeeee8000, 0x1000, &(0x7f0000fa2000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 2.877431085s ago: executing program 0 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004"], 0x48) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) r2 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x10, 0xc, 0x7b, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="4022080000000823185d361aef814e4213784d10c8580a0a348cb19cc6a64976ec6b1e5f964084418eb9a080fe234b81515c58c4bb058c548fa8c8d037b797067df211a802e62dda78fbe54035a3843853ca69b61a"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) preadv2(r4, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000440)=""/207, 0xcf}], 0x5, 0x80000001, 0x9, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4004800, &(0x7f0000000140)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$cont(0x19, r8, 0xffffffffffffff7f, 0x6) (async) linkat(r7, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r10, 0x0, 0x0}, 0x10) 2.660507689s ago: executing program 5 (id=3064): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x63, 0x7, 0x9c, @mcast1, @private0, 0x7800, 0x1, 0xfffffff8, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgsnd(r5, &(0x7f0000000900)=ANY=[@ANYBLOB="0100"], 0x8, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8000}, 0x0, 0x0, 0x0, 0x5, 0x5, 0x200000002bde, 0xffffffffffffff27, 0x9, 0x2, 0x9}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x1, 0x2, 0xcc, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0xa5d, 0xff}}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x2, {0x2, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x1]}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x13c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3ba37e74046a7c8b}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r10, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7bf24827ed91"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000880)="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", 0x3ec}], 0x1) r13 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x85722000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x40040) 2.650658376s ago: executing program 6 (id=3065): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x1000000, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.558009821s ago: executing program 6 (id=3066): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000900000008"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fffffff}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) socket$inet(0xa, 0x801, 0x84) (async) socket$inet(0xa, 0x801, 0x84) 1.954701303s ago: executing program 6 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2c003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000000a01010000000000000000000000000000000000000000000000ffff00"/55, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x200008c0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') getpid() 1.449539467s ago: executing program 5 (id=3068): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r1, 0x407, 0x100004) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x7, 0x69]}, 0x8) write$eventfd(r1, &(0x7f0000000240), 0xffffff14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1.407790148s ago: executing program 2 (id=3069): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0xb, 0x5, 0x25dfdbff, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x1b}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/83, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f00000002c0)=0x1) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.407086746s ago: executing program 6 (id=3070): r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) (fail_nth: 7) 1.30479152s ago: executing program 6 (id=3071): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) listen(r2, 0x1000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e20, @private=0xa010101}], 0x10) read(r3, &(0x7f0000000340)=""/65, 0x41) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='projid_map\x00') read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, 0x0) connect$inet(r5, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x810) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) 1.215199121s ago: executing program 0 (id=3072): syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x860, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) 1.130351434s ago: executing program 2 (id=3073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e500120018110000000000000000b3378c2e33004045f3b23a9aa89edbd16e1397fba3d249ca4c832d5063f003def8b433e7bf3faf930fd3deae7e520304800cd920b4ac952d7bcb9d0ec00383acf0392f13e8e0eeeafa811d82308151fd2a493109340ce4397c17e83c22e26a0af370247d5f4ba692fbef8795a8a3dcdf9eed018a99ed7528a936f63642d46af1caaac9a345f82b8879751f92afb3b482305c6ee7c1916f38be2afb58fb874a4dfa7d7e46ede9d408b27de0db7ea1ac261f33dc848969b72201b6eeb300f634be2e33f76a8cc9da483cf1eedc76f18271924601", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000007d000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.008690971s ago: executing program 0 (id=3074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = socket$pppoe(0x18, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000140)={r2, r3/1000+10000}, 0x10) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_usb_connect(0x5, 0x52, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0xe6, 0xae, 0xa7, 0x8, 0x19d2, 0x1012, 0xac2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x8a, 0x0, 0x20, 0x7, [{{0x9, 0x4, 0x1d, 0x0, 0x0, 0x2, 0x2, 0xff, 0xfd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x51}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x4, 0x48, 0x1}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x300}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x5, 0x200}}]}}]}}]}}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfce1) fanotify_init(0xf00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) socket$kcm(0x10, 0x400000002, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x0) 955.811006ms ago: executing program 2 (id=3075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x80083, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0x4, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x0, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) close(0xffffffffffffffff) 687.400627ms ago: executing program 2 (id=3076): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 320.916673ms ago: executing program 2 (id=3077): preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x4, 0x4, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0xfffe0000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 318.154153ms ago: executing program 5 (id=3078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="7610364a6a214bff5eed40bf10709b707dd8c20445d9f0b06b3226a792407dea3d596a5e1f0dfb10293f004d60f79ab1fd0329a11288b5e7bcb22981fa7a8ca9760f285aae967e639509d54bf0e604f93fc5f65772a1cc056c797ce7f91c88a6dc5d4309", 0x64, 0x20000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x4}, 0xfffffffffffffebe) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='nv', 0xffe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x1, 0x1, 0x8, 0x2d, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x6, @loopback, 0x2}, @in6={0xa, 0x4e21, 0x1, @mcast1, 0xe}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d2, 0x4, 0xc5, 0xfb, 0x2}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bbe, 0xa, {0x6, 0x32, 0x0, 0x3e, 0x0, 0x3, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bbd, 0x94a, {0x6, 0xff, 0x8, 0x50, 0x0, 0x4, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, @sadb_x_sec_ctx={0xe, 0x18, 0x5, 0x40, 0x61, "a0da6b6a57ce9287f3694983ebcc3cde6355fca50d2cd6eb2bd307faa979e7c8699186581d51cd19bc510b48c256be57c747c389c6c2adb95cfc23f2215b38ff750f731cf01df94480e743adb1d50bfde8e2ccf4aa936fb9cd09e9dec0e5e16990"}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0xffffffff}]}, 0x168}}, 0x4000004) shutdown(r0, 0x1) 232.411441ms ago: executing program 2 (id=3079): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000300), 0x240200) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0xfffffffffffffe73, r0, {0x7}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18050200000000000000000000000000e81294798946544bfb985500000000000400000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x2, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) sendmmsg$inet(r5, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000180)=0xa7fa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socket(0x2b, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffffff, 0x0, 0x207) mount$overlay(0x0, &(0x7f0000000100)='\x00', &(0x7f00000002c0), 0x820001, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x200000c0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000001240)=0x7, 0x4) 0s ago: executing program 5 (id=3080): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syslog(0x1, &(0x7f0000000380)=""/4096, 0x1000) r1 = dup(0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r1) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x8) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) dup2(r7, r6) r8 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x2, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x9, 0x0, 0x10001}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000140)={0x6d30, 0xfffffffc, 0x100, 0x6, 0xf4, "3a58beca390000012fcf0000000000000200"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x0) kernel console output (not intermixed with test programs): t1: attempt power cycle [ 985.164667][ T198] bond1 (unregistering): Released all slaves [ 985.582418][ T5884] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 985.806779][T15764] loop6: detected capacity change from 0 to 2640 [ 985.817752][ T5884] usb 7-1: device not accepting address 10, error -71 [ 985.825195][T15764] buffer_io_error: 6 callbacks suppressed [ 985.825217][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.839184][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.850149][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.858803][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.866875][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.877110][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.888625][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.897675][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.905837][T15764] ldm_validate_partition_table(): Disk read failed. [ 985.917192][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.925338][T15764] Buffer I/O error on dev loop6, logical block 0, async page read [ 985.984680][ T6260] usb 6-1: USB disconnect, device number 19 [ 986.010729][T15764] Dev loop6: unable to read RDB block 0 [ 986.017725][T15764] loop6: unable to read partition table [ 986.077507][T15764] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 986.521779][T12995] Bluetooth: hci4: command tx timeout [ 986.542998][ T198] bond2 (unregistering): Released all slaves [ 986.684255][ T198] : left promiscuous mode [ 986.801153][T15734] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.831298][T15734] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.849001][T15734] bridge_slave_0: entered allmulticast mode [ 986.867196][T15734] bridge_slave_0: entered promiscuous mode [ 986.913843][ T198] : left promiscuous mode [ 986.939084][T15734] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.956502][T15734] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.972354][T15734] bridge_slave_1: entered allmulticast mode [ 986.983340][T15734] bridge_slave_1: entered promiscuous mode [ 987.594486][T15734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.704410][T15734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.937603][T15734] team0: Port device team_slave_0 added [ 987.963410][T15734] team0: Port device team_slave_1 added [ 988.013971][T15734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.042567][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.094214][T15734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.113577][T15734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.130978][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.227477][T15734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.447726][T15734] hsr_slave_0: entered promiscuous mode [ 988.468349][T15734] hsr_slave_1: entered promiscuous mode [ 988.567142][T15734] debugfs: 'hsr0' already exists in 'hsr' [ 988.583833][T15734] Cannot create hsr debugfs directory [ 988.592231][T12995] Bluetooth: hci4: command tx timeout [ 989.054091][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2753'. [ 990.129867][T15812] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 990.671785][T12995] Bluetooth: hci4: command tx timeout [ 990.909160][ T198] hsr_slave_0: left promiscuous mode [ 990.930157][ T198] hsr_slave_1: left promiscuous mode [ 990.952359][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.979969][ T198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.000682][ T198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.018586][ T198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.078345][T15825] FAULT_INJECTION: forcing a failure. [ 991.078345][T15825] name failslab, interval 1, probability 0, space 0, times 0 [ 991.111642][ T198] veth1_macvtap: left promiscuous mode [ 991.123514][ T198] veth0_macvtap: left promiscuous mode [ 991.131796][T15825] CPU: 1 UID: 0 PID: 15825 Comm: syz.6.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 991.131831][T15825] Tainted: [L]=SOFTLOCKUP [ 991.131838][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 991.131848][T15825] Call Trace: [ 991.131855][T15825] [ 991.131863][T15825] dump_stack_lvl+0x16c/0x1f0 [ 991.131896][T15825] should_fail_ex+0x512/0x640 [ 991.131924][T15825] ? __kmalloc_cache_noprof+0x5f/0x800 [ 991.131955][T15825] should_failslab+0xc2/0x120 [ 991.131986][T15825] __kmalloc_cache_noprof+0x80/0x800 [ 991.132009][T15825] ? ceph_get_tree+0x18a/0x20c0 [ 991.132032][T15825] ? ceph_get_tree+0x18a/0x20c0 [ 991.132043][T15825] ceph_get_tree+0x18a/0x20c0 [ 991.132057][T15825] ? security_capable+0x7e/0x260 [ 991.132071][T15825] vfs_get_tree+0x8e/0x330 [ 991.132085][T15825] vfs_cmd_create+0xd7/0x2a0 [ 991.132101][T15825] __do_sys_fsconfig+0x7b8/0xbe0 [ 991.132114][T15825] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 991.132126][T15825] ? fput+0x70/0xf0 [ 991.132141][T15825] do_syscall_64+0xcd/0xf80 [ 991.132157][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.132169][T15825] RIP: 0033:0x7fbf6c18f749 [ 991.132178][T15825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 991.132189][T15825] RSP: 002b:00007fbf6cfc9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 991.132201][T15825] RAX: ffffffffffffffda RBX: 00007fbf6c3e6090 RCX: 00007fbf6c18f749 [ 991.132208][T15825] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 991.132215][T15825] RBP: 00007fbf6cfc9090 R08: 0000000000000000 R09: 0000000000000000 [ 991.132223][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.132231][T15825] R13: 00007fbf6c3e6128 R14: 00007fbf6c3e6090 R15: 00007ffcfa293928 [ 991.132245][T15825] [ 991.327894][ T198] veth1_vlan: left promiscuous mode [ 991.333361][ T198] veth0_vlan: left promiscuous mode [ 993.275734][ T30] audit: type=1400 audit(1767412299.318:801): avc: denied { ioctl } for pid=15851 comm="syz.2.2765" path="socket:[50803]" dev="sockfs" ino=50803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 993.354539][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2765'. [ 993.773901][ T198] team0 (unregistering): Port device team_slave_1 removed [ 993.828447][ T198] team0 (unregistering): Port device team_slave_0 removed [ 993.918565][T15875] fuse: Bad value for 'rootmode' [ 994.116417][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.123645][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.292006][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 994.421790][ T24] usb 6-1: device descriptor read/64, error -71 [ 994.590113][ T30] audit: type=1400 audit(1767412300.628:802): avc: denied { connect } for pid=15880 comm="syz.6.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 994.658286][T15734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 994.676871][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 994.689473][T15734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 994.720192][T15734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 994.743813][T15734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.822111][ T24] usb 6-1: device descriptor read/64, error -71 [ 994.886645][ T198] IPVS: stop unused estimator thread 0... [ 994.932265][ T24] usb usb6-port1: attempt power cycle [ 995.321983][T15734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.362035][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 995.554123][ T24] usb 6-1: device descriptor read/8, error -71 [ 995.569044][T15734] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.640396][ T198] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.647754][ T198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.744288][ T7920] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.751600][ T7920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.843177][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 995.893077][ T24] usb 6-1: device descriptor read/8, error -71 [ 996.012052][ T24] usb usb6-port1: unable to enumerate USB device [ 996.015441][T15734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 996.029042][T15734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 996.387869][T15734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.394904][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 996.505749][T15734] veth0_vlan: entered promiscuous mode [ 996.536888][T15734] veth1_vlan: entered promiscuous mode [ 996.561854][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 996.587753][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 996.625709][ T24] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 996.654858][T15734] veth0_macvtap: entered promiscuous mode [ 996.661288][ T24] usb 7-1: config 13 has no interface number 0 [ 996.682632][ T24] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 996.693721][ T24] usb 7-1: config 13 interface 50 has no altsetting 0 [ 996.706889][ T24] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 996.707676][T15734] veth1_macvtap: entered promiscuous mode [ 996.788442][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.822443][ T24] usb 7-1: Product: syz [ 996.826718][ T24] usb 7-1: Manufacturer: syz [ 996.847587][ T24] usb 7-1: SerialNumber: syz [ 996.857806][T15734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.896669][T15734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.985121][T15910] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 997.108835][T15918] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2779'. [ 997.118164][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2779'. [ 997.143514][ T198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.153380][ T198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.251222][ T198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.349009][ T198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.649199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.677540][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.726021][ T7920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.745696][ T7920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.043631][T15917] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 998.188618][T15933] fuse: Bad value for 'rootmode' [ 998.671896][ T30] audit: type=1400 audit(1767412304.698:803): avc: denied { setopt } for pid=15935 comm="syz.5.2783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 998.752367][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'. [ 999.058300][T13989] IPVS: starting estimator thread 0... [ 999.164359][ T30] audit: type=1400 audit(1767412305.208:804): avc: denied { unmount } for pid=12990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 999.284571][T15939] IPVS: using max 59 ests per chain, 141600 per kthread [ 999.825467][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.857062][ T24] usb 7-1: MIDIStreaming interface descriptor not found [ 1000.359924][ T24] usb 7-1: USB disconnect, device number 12 [ 1001.483880][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1002.001770][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1002.011633][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1002.021429][ T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1002.053517][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.061872][ T24] usb 7-1: Product: syz [ 1002.066111][ T24] usb 7-1: Manufacturer: syz [ 1002.070764][ T24] usb 7-1: SerialNumber: syz [ 1002.083209][ T30] audit: type=1800 audit(1767412307.688:805): pid=15969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2788" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1002.138562][T15962] Falling back ldisc for ttyS3. [ 1002.164974][ T24] usb 7-1: config 0 descriptor?? [ 1002.270500][T15971] syz.2.2790 (15971): drop_caches: 2 [ 1002.290576][ T24] gs_usb 7-1:0.0: Required endpoints not found [ 1002.846486][ T5884] usb 7-1: USB disconnect, device number 13 [ 1002.919777][T15981] sd 0:0:1:0: device reset [ 1003.362886][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. [ 1003.456963][T15988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1003.569227][T15990] loop6: detected capacity change from 0 to 2640 [ 1003.589745][T15990] buffer_io_error: 6 callbacks suppressed [ 1003.589783][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.604937][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.613230][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.621272][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.629509][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.646673][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.656433][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.669440][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.677522][T15990] ldm_validate_partition_table(): Disk read failed. [ 1003.684863][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.694828][T15990] Buffer I/O error on dev loop6, logical block 0, async page read [ 1003.704624][T15990] Dev loop6: unable to read RDB block 0 [ 1003.717466][T15990] loop6: unable to read partition table [ 1003.727121][T15990] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1003.777393][T15999] random: crng reseeded on system resumption [ 1003.827575][ T30] audit: type=1400 audit(1767412309.868:806): avc: denied { bind } for pid=15994 comm="syz.6.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1004.074705][ T90] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1004.884349][ T90] usb 3-1: Using ep0 maxpacket: 16 [ 1005.092779][ T90] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1005.117128][ T90] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1005.137799][ T90] usb 3-1: config 13 has no interface number 0 [ 1005.227752][T16014] FAULT_INJECTION: forcing a failure. [ 1005.227752][T16014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.241020][T16014] CPU: 0 UID: 0 PID: 16014 Comm: syz.6.2801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.241053][T16014] Tainted: [L]=SOFTLOCKUP [ 1005.241059][T16014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1005.241068][T16014] Call Trace: [ 1005.241074][T16014] [ 1005.241079][T16014] dump_stack_lvl+0x16c/0x1f0 [ 1005.241120][T16014] should_fail_ex+0x512/0x640 [ 1005.241148][T16014] _copy_from_user+0x2e/0xd0 [ 1005.241175][T16014] vt_ioctl+0x10ab/0x30a0 [ 1005.241207][T16014] ? __pfx_vt_ioctl+0x10/0x10 [ 1005.241230][T16014] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1005.241259][T16014] ? rcu_is_watching+0x12/0xc0 [ 1005.241277][T16014] ? irqentry_exit+0x1dd/0x8c0 [ 1005.241302][T16014] ? irqentry_exit+0x1dd/0x8c0 [ 1005.241333][T16014] ? tty_ioctl+0x1288/0x1650 [ 1005.241353][T16014] ? tty_ioctl+0x601/0x1650 [ 1005.241373][T16014] ? __pfx_vt_ioctl+0x10/0x10 [ 1005.241395][T16014] tty_ioctl+0x661/0x1650 [ 1005.241413][T16014] ? __pfx___schedule+0x10/0x10 [ 1005.241433][T16014] ? __pfx_tty_ioctl+0x10/0x10 [ 1005.241452][T16014] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 1005.241474][T16014] ? rcu_is_watching+0x12/0xc0 [ 1005.241489][T16014] ? irqentry_exit+0x1dd/0x8c0 [ 1005.241510][T16014] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.241530][T16014] ? irqentry_exit+0x1dd/0x8c0 [ 1005.241558][T16014] ? __pfx_tty_ioctl+0x10/0x10 [ 1005.241578][T16014] ? __x64_sys_ioctl+0x123/0x210 [ 1005.241602][T16014] ? __pfx_tty_ioctl+0x10/0x10 [ 1005.241622][T16014] __x64_sys_ioctl+0x18e/0x210 [ 1005.241646][T16014] do_syscall_64+0xcd/0xf80 [ 1005.241665][T16014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.241684][T16014] RIP: 0033:0x7fbf6c18f749 [ 1005.241698][T16014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.241712][T16014] RSP: 002b:00007fbf6cfc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.241729][T16014] RAX: ffffffffffffffda RBX: 00007fbf6c3e6090 RCX: 00007fbf6c18f749 [ 1005.241738][T16014] RDX: 0000200000000040 RSI: 0000000000004b67 RDI: 0000000000000007 [ 1005.241747][T16014] RBP: 00007fbf6cfc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.241755][T16014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.241764][T16014] R13: 00007fbf6c3e6128 R14: 00007fbf6c3e6090 R15: 00007ffcfa293928 [ 1005.241785][T16014] [ 1005.644084][T13989] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1005.717669][ T90] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1005.728241][ T90] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1005.738441][ T90] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1005.747974][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.756155][ T90] usb 3-1: Product: syz [ 1005.760308][ T90] usb 3-1: Manufacturer: syz [ 1005.765071][ T90] usb 3-1: SerialNumber: syz [ 1005.797583][T15995] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1005.817335][T13989] usb 4-1: Using ep0 maxpacket: 16 [ 1005.828879][T13989] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1005.845557][T13989] usb 4-1: config 0 has no interface number 0 [ 1005.982503][T13989] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.994369][T13989] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.004603][T13989] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1006.015374][T13989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.026379][T13989] usb 4-1: config 0 descriptor?? [ 1007.109872][T16023] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1007.285024][T16009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.322768][T16009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.379264][ T90] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1008.398130][ T90] usb 3-1: MIDIStreaming interface descriptor not found [ 1008.475185][ T90] usb 3-1: USB disconnect, device number 84 [ 1008.481835][T13989] usbhid 4-1:0.1: can't add hid device: -71 [ 1008.502139][T13989] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1008.528671][T13989] usb 4-1: USB disconnect, device number 86 [ 1008.555747][ T30] audit: type=1400 audit(1767412314.598:807): avc: denied { bind } for pid=16036 comm="syz.0.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1008.583263][T16035] fuse: Bad value for 'rootmode' [ 1008.937291][T16039] sd 0:0:1:0: device reset [ 1008.957797][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2808'. [ 1009.859697][ T30] audit: type=1400 audit(1767412315.898:808): avc: denied { write } for pid=16058 comm="syz.0.2814" path="socket:[52372]" dev="sockfs" ino=52372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1010.233850][T16047] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1010.346928][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2814'. [ 1010.424002][T16073] netlink: 'syz.2.2816': attribute type 1 has an invalid length. [ 1010.500511][T16073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1010.638210][T16073] bond2: (slave bond3): making interface the new active one [ 1011.453084][T16073] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1011.509819][T16086] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 1011.512132][ T30] audit: type=1400 audit(1767412317.558:809): avc: denied { ioctl } for pid=16045 comm="syz.5.2811" path="socket:[52021]" dev="sockfs" ino=52021 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1011.571773][T16015] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1011.779280][T16015] usb 3-1: Using ep0 maxpacket: 16 [ 1011.794104][T16015] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.821913][T16015] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1011.860203][T16015] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1011.879663][T16015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.904671][T16015] usb 3-1: config 0 descriptor?? [ 1012.871920][ T90] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1013.486492][ T30] audit: type=1400 audit(1767412319.528:810): avc: denied { create } for pid=16107 comm="syz.5.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1013.532420][T16108] overlayfs: failed to clone upperpath [ 1013.570848][ T30] audit: type=1400 audit(1767412319.568:811): avc: denied { map } for pid=16107 comm="syz.5.2822" path="socket:[52415]" dev="sockfs" ino=52415 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1013.622003][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 1013.631189][ T90] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1013.643928][ T90] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 1013.653540][ T90] usb 1-1: config 13 has no interface number 0 [ 1013.660172][ T90] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1013.778391][ T90] usb 1-1: config 13 interface 50 has no altsetting 0 [ 1013.799767][ T90] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1013.810430][ T90] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.818731][ T90] usb 1-1: Product: syz [ 1013.829161][ T90] usb 1-1: Manufacturer: syz [ 1013.861806][ T90] usb 1-1: SerialNumber: syz [ 1014.214937][T16116] FAULT_INJECTION: forcing a failure. [ 1014.214937][T16116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.228267][T16116] CPU: 0 UID: 0 PID: 16116 Comm: syz.6.2824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1014.228298][T16116] Tainted: [L]=SOFTLOCKUP [ 1014.228305][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1014.228316][T16116] Call Trace: [ 1014.228323][T16116] [ 1014.228331][T16116] dump_stack_lvl+0x16c/0x1f0 [ 1014.228367][T16116] should_fail_ex+0x512/0x640 [ 1014.228399][T16116] _copy_from_user+0x2e/0xd0 [ 1014.228427][T16116] __sys_bpf+0x248/0x4980 [ 1014.228453][T16116] ? find_lock_lowest_rq+0x4d/0x760 [ 1014.228482][T16116] ? lock_acquire+0x179/0x330 [ 1014.228505][T16116] ? __pfx___sys_bpf+0x10/0x10 [ 1014.228526][T16116] ? finish_task_switch.isra.0+0x202/0xbd0 [ 1014.228555][T16116] ? rcu_is_watching+0x12/0xc0 [ 1014.228572][T16116] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1014.228597][T16116] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.228620][T16116] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1014.228648][T16116] ? rcu_is_watching+0x12/0xc0 [ 1014.228664][T16116] ? __schedule+0x10b9/0x6150 [ 1014.228689][T16116] ? __schedule+0x114c/0x6150 [ 1014.228725][T16116] ? fput+0x70/0xf0 [ 1014.228746][T16116] ? rcu_is_watching+0x12/0xc0 [ 1014.228766][T16116] __x64_sys_bpf+0x78/0xc0 [ 1014.228790][T16116] ? lockdep_hardirqs_on+0x7c/0x110 [ 1014.228810][T16116] do_syscall_64+0xcd/0xf80 [ 1014.228834][T16116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.228852][T16116] RIP: 0033:0x7fbf6c18f749 [ 1014.228868][T16116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.228885][T16116] RSP: 002b:00007fbf6cfa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1014.228903][T16116] RAX: ffffffffffffffda RBX: 00007fbf6c3e6180 RCX: 00007fbf6c18f749 [ 1014.228914][T16116] RDX: 0000000000000090 RSI: 0000200000000880 RDI: 0000000000000005 [ 1014.228924][T16116] RBP: 00007fbf6cfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.228934][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.228944][T16116] R13: 00007fbf6c3e6218 R14: 00007fbf6c3e6180 R15: 00007ffcfa293928 [ 1014.228968][T16116] [ 1014.507322][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1014.520272][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1014.531980][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1014.541604][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1014.552007][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1014.561639][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1014.571802][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 1014.581422][T16115] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 1014.591007][T16115] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 1014.689654][T16100] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1014.700404][T16015] usbhid 3-1:0.0: can't add hid device: -71 [ 1014.706653][T16015] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1014.807645][T16015] usb 3-1: USB disconnect, device number 85 [ 1018.922171][ T30] audit: type=1400 audit(1767412324.928:812): avc: denied { map_create } for pid=16135 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.021319][ T30] audit: type=1400 audit(1767412324.928:813): avc: denied { perfmon } for pid=16135 comm="syz.3.2829" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1019.042485][T13989] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1019.068044][ T90] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1019.118608][ T90] usb 1-1: MIDIStreaming interface descriptor not found [ 1019.124223][ T30] audit: type=1400 audit(1767412324.928:814): avc: denied { map_read map_write } for pid=16135 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.721545][ T30] audit: type=1400 audit(1767412324.928:815): avc: denied { prog_load } for pid=16135 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1019.745960][T13989] usb 7-1: Using ep0 maxpacket: 32 [ 1019.752133][ T30] audit: type=1400 audit(1767412324.928:816): avc: denied { bpf } for pid=16135 comm="syz.3.2829" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1019.834973][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.878780][ T30] audit: type=1400 audit(1767412324.938:817): avc: denied { write } for pid=16135 comm="syz.3.2829" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1019.982135][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.205321][T13989] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1020.251972][ T30] audit: type=1400 audit(1767412324.938:818): avc: denied { open } for pid=16135 comm="syz.3.2829" path="/dev/dma_heap/system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1020.301799][T13989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.335734][ T90] usb 1-1: USB disconnect, device number 34 [ 1020.345758][T13989] usb 7-1: config 0 descriptor?? [ 1020.383630][ T30] audit: type=1400 audit(1767412324.938:819): avc: denied { name_bind } for pid=16135 comm="syz.3.2829" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1020.465478][ T30] audit: type=1400 audit(1767412324.938:820): avc: denied { node_bind } for pid=16135 comm="syz.3.2829" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1020.522676][ T30] audit: type=1400 audit(1767412324.948:821): avc: denied { ioctl } for pid=16138 comm="syz.6.2830" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1020.857963][T13989] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1020.901884][T16163] loop6: detected capacity change from 0 to 2640 [ 1020.940712][T16163] buffer_io_error: 6 callbacks suppressed [ 1020.940779][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.957693][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.967954][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.977073][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1020.985396][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.002574][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.012061][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.023167][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.065351][T16163] ldm_validate_partition_table(): Disk read failed. [ 1021.074650][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.084886][T16163] Buffer I/O error on dev loop6, logical block 0, async page read [ 1021.094821][T16163] Dev loop6: unable to read RDB block 0 [ 1021.109848][T16140] bond0: (slave caif0): Error: Device type is different from other slaves [ 1021.130882][T16163] loop6: unable to read partition table [ 1021.142334][T16163] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1022.722315][T15264] usb 7-1: reset high-speed USB device number 14 using dummy_hcd [ 1024.502005][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1024.689861][T13989] usb 7-1: USB disconnect, device number 14 [ 1024.690796][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1024.710141][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1024.710160][ T30] audit: type=1400 audit(1767412330.748:873): avc: denied { map } for pid=16193 comm="syz.5.2846" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1024.730509][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.741409][ T30] audit: type=1400 audit(1767412330.748:874): avc: denied { read write } for pid=16193 comm="syz.5.2846" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1024.780297][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1024.789467][ T24] usb 4-1: config 1 has no interface number 1 [ 1024.795739][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1024.810421][ T24] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1024.825535][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1024.861886][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.869945][ T24] usb 4-1: Product: syz [ 1024.881936][ T24] usb 4-1: Manufacturer: syz [ 1024.886607][ T24] usb 4-1: SerialNumber: syz [ 1024.943939][ T30] audit: type=1400 audit(1767412330.878:875): avc: denied { egress } for pid=12990 comm="syz-executor" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1024.982082][ T30] audit: type=1400 audit(1767412330.878:876): avc: denied { sendto } for pid=12990 comm="syz-executor" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1025.152486][T13102] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1025.347255][T13102] usb 1-1: Using ep0 maxpacket: 16 [ 1025.465623][ T30] audit: type=1400 audit(1767412331.508:877): avc: denied { ioctl } for pid=16205 comm="syz.2.2848" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=52523 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1025.534744][T13102] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1025.549784][T13102] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 1025.576775][T13102] usb 1-1: config 13 has no interface number 0 [ 1025.596397][T13102] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1025.624498][T13102] usb 1-1: config 13 interface 50 has no altsetting 0 [ 1025.644193][T13102] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1025.656895][T13102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.676255][T13102] usb 1-1: Product: syz [ 1025.688282][T13102] usb 1-1: Manufacturer: syz [ 1025.698522][T13102] usb 1-1: SerialNumber: syz [ 1025.717842][T16200] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1025.867024][ T30] audit: type=1400 audit(1767412331.908:878): avc: denied { create } for pid=16209 comm="syz.6.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.111563][ T30] audit: type=1400 audit(1767412331.908:879): avc: denied { read } for pid=16209 comm="syz.6.2845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1026.131698][ T30] audit: type=1400 audit(1767412331.998:880): avc: denied { read write } for pid=16192 comm="syz.0.2843" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1026.169718][ T30] audit: type=1400 audit(1767412332.008:881): avc: denied { open } for pid=16192 comm="syz.0.2843" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1026.272155][ T30] audit: type=1800 audit(1767412332.088:882): pid=16214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2849" name="nullb0" dev="tmpfs" ino=808 res=0 errno=0 [ 1026.368032][T16218] loop6: detected capacity change from 0 to 2640 [ 1026.375221][T16218] buffer_io_error: 6 callbacks suppressed [ 1026.375239][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.454714][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.560922][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.570133][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.580409][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.589937][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.599507][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.681294][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.701492][T16218] ldm_validate_partition_table(): Disk read failed. [ 1026.709007][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.720155][T16218] Buffer I/O error on dev loop6, logical block 0, async page read [ 1026.729945][T16218] Dev loop6: unable to read RDB block 0 [ 1026.754727][T16218] loop6: unable to read partition table [ 1026.904358][T16218] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1027.193533][ T24] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1027.274785][ T24] usb 4-1: MIDIStreaming interface descriptor not found [ 1027.429089][ T24] usb 4-1: USB disconnect, device number 87 [ 1028.610235][T13102] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1029.009711][T13102] usb 1-1: MIDIStreaming interface descriptor not found [ 1029.072017][T13102] usb 1-1: USB disconnect, device number 35 [ 1029.091254][T16247] syzkaller0: entered promiscuous mode [ 1029.113711][T16247] syzkaller0: entered allmulticast mode [ 1029.189525][T16247] tipc: Enabled bearer , priority 0 [ 1029.362675][T16245] tipc: Resetting bearer [ 1029.799577][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1029.799639][ T30] audit: type=1400 audit(1767412335.838:893): avc: denied { connect } for pid=16254 comm="syz.5.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1029.840416][ T30] audit: type=1400 audit(1767412335.878:894): avc: denied { name_connect } for pid=16254 comm="syz.5.2860" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1029.888312][T16245] tipc: Disabling bearer [ 1030.240355][ T30] audit: type=1400 audit(1767412335.878:895): avc: denied { accept } for pid=16254 comm="syz.5.2860" lport=53649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1030.262103][ T30] audit: type=1400 audit(1767412335.878:896): avc: denied { setopt } for pid=16251 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1030.292703][ T30] audit: type=1400 audit(1767412335.878:897): avc: denied { bind } for pid=16251 comm="syz.0.2859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1030.313079][ T30] audit: type=1400 audit(1767412335.878:898): avc: denied { name_bind } for pid=16251 comm="syz.0.2859" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1030.335148][ T30] audit: type=1400 audit(1767412335.878:899): avc: denied { node_bind } for pid=16251 comm="syz.0.2859" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1030.358013][ T30] audit: type=1400 audit(1767412335.878:900): avc: denied { read write } for pid=16251 comm="syz.0.2859" name="vbi0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1030.359354][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1030.503977][T16263] syz.3.2861 (16263): drop_caches: 2 [ 1030.594483][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1030.771964][T16229] syzkaller0: entered promiscuous mode [ 1030.884454][T16248] 0: reclassify loop, rule prio 0, protocol 800 [ 1030.970460][T16229] syzkaller0: entered allmulticast mode [ 1031.120896][ T30] audit: type=1400 audit(1767412335.878:901): avc: denied { open } for pid=16251 comm="syz.0.2859" path="/dev/vbi0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1031.151923][ T30] audit: type=1400 audit(1767412335.878:902): avc: denied { ioctl } for pid=16251 comm="syz.0.2859" path="/dev/vbi0" dev="devtmpfs" ino=954 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1031.796549][T16279] fuse: Unknown parameter '0xffffffffffffffff' [ 1031.931966][T16286] overlayfs: missing 'lowerdir' [ 1032.561909][ T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1032.695648][T16304] comedi: valid board names for 8255 driver are: [ 1032.703416][T16304] 8255 [ 1032.706293][T16304] comedi: valid board names for vmk80xx driver are: [ 1032.727851][T16304] vmk80xx [ 1032.731015][T16304] comedi: valid board names for usbduxsigma driver are: [ 1033.110368][T16306] hub 1-0:1.0: USB hub found [ 1033.120647][T16304] usbduxsigma [ 1033.125047][T16306] hub 1-0:1.0: 1 port detected [ 1033.146613][T16304] comedi: valid board names for usbduxfast driver are: [ 1033.162971][T16304] usbduxfast [ 1033.167021][T16304] comedi: valid board names for usbdux driver are: [ 1033.174486][T16304] usbdux [ 1033.177937][T16304] comedi: valid board names for ni6501 driver are: [ 1033.184853][T16304] ni6501 [ 1033.188234][T16304] comedi: valid board names for dt9812 driver are: [ 1033.198661][T16304] dt9812 [ 1033.212726][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1033.226380][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.235358][T16304] comedi: valid board names for ni_labpc_cs driver are: [ 1033.244677][ T24] usb 7-1: config 0 descriptor?? [ 1033.249884][T16304] ni_labpc_cs [ 1033.256483][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1033.262726][T16304] comedi: valid board names for ni_daq_700 driver are: [ 1033.285196][T16304] ni_daq_700 [ 1033.288646][T16304] comedi: valid board names for labpc_pci driver are: [ 1033.379162][T16313] syz.0.2874 (16313): drop_caches: 2 [ 1033.650824][T16304] labpc_pci [ 1034.117842][T16304] comedi: valid board names for adl_pci9118 driver are: [ 1034.171078][ T24] cp210x 7-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1034.217247][T16304] pci9118dg [ 1034.224016][T16304] pci9118hg [ 1034.235800][T16304] pci9118hr [ 1034.239403][T16304] comedi: valid board names for 8255_pci driver are: [ 1034.241612][ T24] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1034.253301][T16304] 8255_pci [ 1034.257423][T16304] comedi: valid board names for s526 driver are: [ 1034.264197][T16304] s526 [ 1034.267477][T16304] comedi: valid board names for multiq3 driver are: [ 1034.277111][T16304] multiq3 [ 1034.280404][T16304] comedi: valid board names for pcmuio driver are: [ 1034.289155][T16304] pcmuio48 [ 1034.293826][T16304] pcmuio96 [ 1034.297080][T16304] comedi: valid board names for pcmmio driver are: [ 1034.300268][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1034.304872][T16304] pcmmio [ 1034.304928][T16304] comedi: valid board names for pcmda12 driver are: [ 1034.304938][T16304] pcmda12 [ 1034.304945][T16304] comedi: valid board names for pcmad driver are: [ 1034.304954][T16304] pcmad12 [ 1034.304960][T16304] pcmad16 [ 1034.304967][T16304] comedi: valid board names for ni_labpc driver are: [ 1034.304977][T16304] lab-pc-1200 [ 1034.304985][T16304] lab-pc-1200ai [ 1034.304993][T16304] lab-pc+ [ 1034.305003][T16304] comedi: valid board names for atmio16 driver are: [ 1034.305010][T16304] atmio16 [ 1034.305017][T16304] atmio16d [ 1034.305024][T16304] comedi: valid board names for ni_at_ao driver are: [ 1034.305032][T16304] at-ao-6 [ 1034.305039][T16304] at-ao-10 [ 1034.305046][T16304] comedi: valid board names for ni_at_a2150 driver are: [ 1034.305054][T16304] ni_at_a2150 [ 1034.305061][T16304] comedi: valid board names for adq12b driver are: [ 1034.305069][T16304] adq12b [ 1034.305076][T16304] comedi: valid board names for mpc624 driver are: [ 1034.305085][T16304] mpc624 [ 1034.305092][T16304] comedi: valid board names for c6xdigio driver are: [ 1034.305101][T16304] c6xdigio [ 1034.305108][T16304] comedi: valid board names for aio_iiro_16 driver are: [ 1034.305117][T16304] aio_iiro_16 [ 1034.305124][T16304] comedi: valid board names for aio_aio12_8 driver are: [ 1034.305133][T16304] aio_aio12_8 [ 1034.305139][T16304] aio_ai12_8 [ 1034.305146][T16304] aio_ao12_4 [ 1034.305152][T16304] comedi: valid board names for fl512 driver are: [ 1034.305161][T16304] fl512 [ 1034.305167][T16304] comedi: valid board names for dmm32at driver are: [ 1034.305175][T16304] dmm32at [ 1034.305182][T16304] comedi: valid board names for dt282x driver are: [ 1034.305191][T16304] dt2821 [ 1034.305198][T16304] dt2821-f [ 1034.305205][T16304] dt2821-g [ 1034.305211][T16304] dt2823 [ 1034.305218][T16304] dt2824-pgh [ 1034.305225][T16304] dt2824-pgl [ 1034.305232][T16304] dt2825 [ 1034.305239][T16304] dt2827 [ 1034.305246][T16304] dt2828 [ 1034.305252][T16304] dt2829 [ 1034.305259][T16304] dt21-ez [ 1034.305265][T16304] dt23-ez [ 1034.305272][T16304] dt24-ez [ 1034.305279][T16304] dt24-ez-pgl [ 1034.305286][T16304] comedi: valid board names for dt2817 driver are: [ 1034.305295][T16304] dt2817 [ 1034.305301][T16304] comedi: valid board names for dt2815 driver are: [ 1034.305311][T16304] dt2815 [ 1034.305317][T16304] comedi: valid board names for dt2814 driver are: [ 1034.305325][T16304] dt2814 [ 1034.305332][T16304] comedi: valid board names for dt2811 driver are: [ 1034.305340][T16304] dt2811-pgh [ 1034.305347][T16304] dt2811-pgl [ 1034.305354][T16304] comedi: valid board names for dt2801 driver are: [ 1034.305362][T16304] dt2801 [ 1034.305369][T16304] comedi: valid board names for das6402 driver are: [ 1034.305378][T16304] das6402-12 [ 1034.305384][T16304] das6402-16 [ 1034.305392][T16304] comedi: valid board names for das1800 driver are: [ 1034.305400][T16304] das-1701st [ 1034.305407][T16304] das-1701st-da [ 1034.305414][T16304] das-1702st [ 1034.305421][T16304] das-1702st-da [ 1034.305427][T16304] das-1702hr [ 1034.305434][T16304] das-1702hr-da [ 1034.305441][T16304] das-1701ao [ 1034.305447][T16304] das-1702ao [ 1034.305453][T16304] das-1801st [ 1034.305460][T16304] das-1801st-da [ 1034.305467][T16304] das-1802st [ 1034.305474][T16304] das-1802st-da [ 1034.305481][T16304] das-1802hr [ 1034.305486][T16304] das-1802hr-da [ 1034.305493][T16304] das-1801hc [ 1034.305499][T16304] das-1802hc [ 1034.305505][T16304] das-1801ao [ 1034.305512][T16304] das-1802ao [ 1034.305519][T16304] comedi: valid board names for das800 driver are: [ 1034.305527][T16304] das-800 [ 1034.305534][T16304] cio-das800 [ 1034.305541][T16304] das-801 [ 1034.305548][T16304] cio-das801 [ 1034.305555][T16304] das-802 [ 1034.305561][T16304] cio-das802 [ 1034.305568][T16304] cio-das802/16 [ 1034.305575][T16304] comedi: valid board names for isa-das08 driver are: [ 1034.305584][T16304] isa-das08 [ 1034.305591][T16304] das08-pgm [ 1034.305598][T16304] das08-pgh [ 1034.305604][T16304] das08-pgl [ 1034.305611][T16304] das08-aoh [ 1034.305618][T16304] das08-aol [ 1034.305625][T16304] das08-aom [ 1034.305632][T16304] das08/jr-ao [ 1034.305640][T16304] das08jr-16-ao [ 1034.305646][T16304] pc104-das08 [ 1034.305653][T16304] das08jr/16 [ 1034.305660][T16304] comedi: valid board names for das16m1 driver are: [ 1034.305669][T16304] das16m1 [ 1034.305676][T16304] comedi: valid board names for dac02 driver are: [ 1034.305684][T16304] dac02 [ 1034.305691][T16304] comedi: valid board names for rti802 driver are: [ 1034.305700][T16304] rti802 [ 1034.305707][T16304] comedi: valid board names for rti800 driver are: [ 1034.305716][T16304] rti800 [ 1034.305722][T16304] rti815 [ 1034.305729][T16304] comedi: valid board names for pcm3724 driver are: [ 1034.305756][T16304] pcm3724 [ 1034.305764][T16304] comedi: valid board names for pcl818 driver are: [ 1034.305773][T16304] pcl818l [ 1034.305780][T16304] pcl818h [ 1034.305788][T16304] pcl818hd [ 1034.305796][T16304] pcl818hg [ 1034.305805][T16304] pcl818 [ 1034.305812][T16304] pcl718 [ 1034.305819][T16304] pcm3718 [ 1034.305827][T16304] comedi: valid board names for pcl816 driver are: [ 1034.305838][T16304] pcl816 [ 1034.305846][T16304] pcl814b [ 1034.305853][T16304] comedi: valid board names for pcl812 driver are: [ 1034.305864][T16304] pcl812 [ 1034.305872][T16304] pcl812pg [ 1034.305878][T16304] acl8112pg [ 1034.305886][T16304] acl8112dg [ 1034.305894][T16304] acl8112hg [ 1034.305902][T16304] a821pgl [ 1034.305909][T16304] a821pglnda [ 1034.305916][T16304] a821pgh [ 1034.305923][T16304] a822pgl [ 1034.305930][T16304] a822pgh [ 1034.305937][T16304] a823pgl [ 1034.305943][T16304] a823pgh [ 1034.305950][T16304] pcl813 [ 1034.305957][T16304] pcl813b [ 1034.305964][T16304] acl8113 [ 1034.305970][T16304] iso813 [ 1034.305976][T16304] acl8216 [ 1034.305983][T16304] a826pg [ 1034.305990][T16304] comedi: valid board names for pcl730 driver are: [ 1034.305999][T16304] pcl730 [ 1034.306006][T16304] iso730 [ 1034.306013][T16304] acl7130 [ 1034.306020][T16304] pcm3730 [ 1034.306026][T16304] pcl725 [ 1034.306033][T16304] p8r8dio [ 1034.306040][T16304] acl7225b [ 1034.306046][T16304] p16r16dio [ 1034.306053][T16304] pcl733 [ 1034.306059][T16304] pcl734 [ 1034.306066][T16304] opmm-1616-xt [ 1034.306073][T16304] pearl-mm-p [ 1034.306080][T16304] ir104-pbf [ 1034.306087][T16304] comedi: valid board names for pcl726 driver are: [ 1034.306095][T16304] pcl726 [ 1034.306102][T16304] pcl727 [ 1034.306108][T16304] pcl728 [ 1034.306115][T16304] acl6126 [ 1034.306121][T16304] acl6128 [ 1034.306128][T16304] comedi: valid board names for pcl724 driver are: [ 1034.306137][T16304] pcl724 [ 1034.306144][T16304] pcl722 [ 1034.306150][T16304] pcl731 [ 1034.306156][T16304] acl7122 [ 1034.306163][T16304] acl7124 [ 1034.306169][T16304] pet48dio [ 1034.306174][T16304] pcmio48 [ 1034.306179][T16304] onyx-mm-dio [ 1034.306185][T16304] comedi: valid board names for pcl711 driver are: [ 1034.306192][T16304] pcl711 [ 1034.306197][T16304] pcl711b [ 1034.306202][T16304] acl8112hg [ 1035.002427][T16304] acl8112dg [ 1035.021267][T16304] comedi: valid board names for amplc_pc263 driver are: [ 1035.032277][T16318] netlink: 'syz.5.2875': attribute type 21 has an invalid length. [ 1035.062004][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1035.062028][ T30] audit: type=1400 audit(1767412341.068:916): avc: denied { create } for pid=16317 comm="syz.5.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1035.065866][ T24] usb 7-1: USB disconnect, device number 15 [ 1035.094420][T16304] pc263 [ 1035.100475][T16304] comedi: valid board names for amplc_pc236 driver are: [ 1035.122642][T16304] pc36at [ 1035.125626][T16304] comedi: valid board names for amplc_dio200 driver are: [ 1035.135612][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1035.143724][T16304] pc212e [ 1035.147156][ T24] cp210x 7-1:0.0: device disconnected [ 1035.275204][T16304] pc214e [ 1035.278177][T16304] pc215e [ 1035.281089][T16304] pc218e [ 1035.293620][T16304] pc272e [ 1035.297643][T16304] comedi: valid board names for comedi_parport driver are: [ 1035.305799][T16304] comedi_parport [ 1035.310059][T16304] comedi: valid board names for comedi_test driver are: [ 1035.317285][T16304] comedi_test [ 1035.321116][T16304] comedi: valid board names for comedi_bond driver are: [ 1035.453472][ T30] audit: type=1400 audit(1767412341.448:917): avc: denied { create } for pid=16321 comm="syz.0.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1035.744299][T16304] comedi_bond [ 1035.931930][ T30] audit: type=1400 audit(1767412341.478:918): avc: denied { read } for pid=16321 comm="syz.0.2876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1036.125280][ T30] audit: type=1400 audit(1767412341.478:919): avc: denied { ioctl } for pid=16321 comm="syz.0.2876" path="socket:[52731]" dev="sockfs" ino=52731 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1036.313642][ T30] audit: type=1400 audit(1767412342.348:920): avc: denied { mounton } for pid=16344 comm="syz.5.2882" path="/162/file1" dev="tmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1036.314952][T16346] fuse: Bad value for 'fd' [ 1036.441064][ T30] audit: type=1400 audit(1767412342.408:921): avc: denied { create } for pid=16344 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.447502][T16350] fuse: Bad value for 'rootmode' [ 1036.461119][ T30] audit: type=1400 audit(1767412342.408:922): avc: denied { setopt } for pid=16344 comm="syz.5.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.486661][ T30] audit: type=1400 audit(1767412342.478:923): avc: denied { read write } for pid=16349 comm="syz.2.2884" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1036.517122][T16353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1036.538508][T16352] fuse: Unknown parameter '0xffffffffffffffff' [ 1036.581723][ T30] audit: type=1400 audit(1767412342.478:924): avc: denied { open } for pid=16349 comm="syz.2.2884" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1036.608474][T16354] overlayfs: missing 'lowerdir' [ 1036.923940][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 1037.193422][T16353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=16353 comm=syz.0.2881 [ 1037.210829][ T30] audit: type=1400 audit(1767412343.248:925): avc: denied { name_bind } for pid=16342 comm="syz.0.2881" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1037.969666][T16369] macsec0: entered allmulticast mode [ 1037.992029][T16369] veth1_macvtap: entered allmulticast mode [ 1038.001905][T16369] macsec0: left allmulticast mode [ 1038.010164][T16369] veth1_macvtap: left allmulticast mode [ 1038.630029][T15262] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1038.691841][T13989] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1038.784783][T15262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.795328][T15262] usb 4-1: config 0 has no interfaces? [ 1038.800886][T15262] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1038.810560][T15262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.025381][T16396] FAULT_INJECTION: forcing a failure. [ 1039.025381][T16396] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.038776][T16396] CPU: 1 UID: 0 PID: 16396 Comm: syz.6.2896 Tainted: G L syzkaller #0 PREEMPT(full) [ 1039.038813][T16396] Tainted: [L]=SOFTLOCKUP [ 1039.038820][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1039.038832][T16396] Call Trace: [ 1039.038845][T16396] [ 1039.038856][T16396] dump_stack_lvl+0x16c/0x1f0 [ 1039.038894][T16396] should_fail_ex+0x512/0x640 [ 1039.038926][T16396] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1039.038951][T16396] should_failslab+0xc2/0x120 [ 1039.038977][T16396] kmem_cache_alloc_noprof+0x83/0x770 [ 1039.038996][T16396] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1039.039023][T16396] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1039.039041][T16396] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1039.039064][T16396] idr_get_free+0x528/0xa30 [ 1039.039094][T16396] idr_alloc_u32+0x1ac/0x320 [ 1039.039119][T16396] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1039.039148][T16396] tcf_idr_check_alloc+0x136/0x770 [ 1039.039179][T16396] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 1039.039209][T16396] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 1039.039234][T16396] ? __nla_parse+0x40/0x60 [ 1039.039257][T16396] tcf_vlan_init+0x2af/0x1160 [ 1039.039286][T16396] ? __pfx_tcf_vlan_init+0x10/0x10 [ 1039.039322][T16396] ? __asan_memcpy+0x3c/0x60 [ 1039.039343][T16396] tcf_action_init_1+0x460/0x6c0 [ 1039.039371][T16396] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1039.039410][T16396] ? __nla_parse+0x40/0x60 [ 1039.039431][T16396] tcf_action_init+0x432/0xa50 [ 1039.039464][T16396] ? __pfx_tcf_action_init+0x10/0x10 [ 1039.039533][T16396] ? mark_held_locks+0x49/0x80 [ 1039.039554][T16396] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1039.039582][T16396] ? lockdep_hardirqs_on+0x7c/0x110 [ 1039.039605][T16396] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1039.039634][T16396] tcf_action_add+0xee/0x5c0 [ 1039.039663][T16396] ? __pfx_tcf_action_add+0x10/0x10 [ 1039.039722][T16396] ? tc_ctl_action+0x1f8/0x470 [ 1039.039755][T16396] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 1039.039782][T16396] tc_ctl_action+0x35b/0x470 [ 1039.039807][T16396] ? __pfx_tc_ctl_action+0x10/0x10 [ 1039.039830][T16396] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1039.039861][T16396] ? __pfx_tc_ctl_action+0x10/0x10 [ 1039.039887][T16396] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1039.039913][T16396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1039.039931][T16396] ? __lock_acquire+0x436/0x2890 [ 1039.039957][T16396] ? ref_tracker_free+0x37c/0x830 [ 1039.039977][T16396] netlink_rcv_skb+0x158/0x420 [ 1039.040000][T16396] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1039.040021][T16396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.040059][T16396] netlink_unicast+0x5aa/0x870 [ 1039.040083][T16396] ? __pfx_netlink_unicast+0x10/0x10 [ 1039.040114][T16396] netlink_sendmsg+0x8c8/0xdd0 [ 1039.040139][T16396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.040170][T16396] ____sys_sendmsg+0xa5d/0xc30 [ 1039.040197][T16396] ? copy_msghdr_from_user+0x10a/0x160 [ 1039.040216][T16396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.040245][T16396] ? __lock_acquire+0x436/0x2890 [ 1039.040267][T16396] ___sys_sendmsg+0x134/0x1d0 [ 1039.040287][T16396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.040305][T16396] ? lock_acquire+0x179/0x330 [ 1039.040354][T16396] __sys_sendmsg+0x16d/0x220 [ 1039.040373][T16396] ? __pfx___sys_sendmsg+0x10/0x10 [ 1039.040389][T16396] ? __pfx___schedule+0x10/0x10 [ 1039.040417][T16396] ? rcu_is_watching+0x12/0xc0 [ 1039.040441][T16396] do_syscall_64+0xcd/0xf80 [ 1039.040466][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.040487][T16396] RIP: 0033:0x7fbf6c18f749 [ 1039.040503][T16396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1039.040520][T16396] RSP: 002b:00007fbf6cfa8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.040539][T16396] RAX: ffffffffffffffda RBX: 00007fbf6c3e6180 RCX: 00007fbf6c18f749 [ 1039.040551][T16396] RDX: 0000000000000000 RSI: 00002000000096c0 RDI: 0000000000000009 [ 1039.040562][T16396] RBP: 00007fbf6cfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.040572][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.040582][T16396] R13: 00007fbf6c3e6218 R14: 00007fbf6c3e6180 R15: 00007ffcfa293928 [ 1039.040607][T16396] [ 1039.478922][T13989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.826814][T13989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1039.837629][T15262] usb 4-1: config 0 descriptor?? [ 1039.842945][T13989] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1039.863133][T16400] fuse: Unknown parameter '0xffffffffffffffff' [ 1039.880276][T13989] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1039.904117][T13989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.929485][T16402] overlayfs: missing 'lowerdir' [ 1039.953248][T13989] usb 1-1: config 0 descriptor?? [ 1040.092365][T16380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.101619][T16380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.127389][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1040.127410][ T30] audit: type=1400 audit(1767412346.168:938): avc: denied { create } for pid=16379 comm="syz.3.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1041.122365][T13989] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1041.221790][T13102] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1041.461550][T13102] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1041.500667][ T30] audit: type=1400 audit(1767412347.438:939): avc: denied { execute_no_trans } for pid=16410 comm="syz.5.2901" path="/167/file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1041.542705][T13102] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.564246][T13102] usb 7-1: Product: syz [ 1041.569036][T13102] usb 7-1: Manufacturer: syz [ 1041.577216][T15263] usb 1-1: USB disconnect, device number 36 [ 1041.612953][T13102] usb 7-1: SerialNumber: syz [ 1041.621811][ T30] audit: type=1400 audit(1767412347.488:940): avc: denied { ioctl } for pid=16384 comm="syz.0.2893" path="socket:[53709]" dev="sockfs" ino=53709 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1041.632881][T13102] usb 7-1: config 0 descriptor?? [ 1041.845672][ T30] audit: type=1400 audit(1767412347.888:941): avc: denied { map } for pid=16414 comm="syz.2.2902" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1041.931119][T15263] usb 4-1: USB disconnect, device number 88 [ 1041.937853][T12995] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 1041.950014][ T30] audit: type=1400 audit(1767412347.988:942): avc: denied { connect } for pid=16408 comm="syz.6.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1042.012455][ T30] audit: type=1400 audit(1767412348.038:943): avc: denied { create } for pid=16408 comm="syz.6.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1042.319754][ T30] audit: type=1400 audit(1767412348.048:944): avc: denied { ioctl } for pid=16408 comm="syz.6.2900" path="socket:[53715]" dev="sockfs" ino=53715 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1042.360868][T13102] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1042.471488][T13102] usb 7-1: USB disconnect, device number 16 [ 1042.792154][T15263] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1042.941734][T15263] usb 4-1: Using ep0 maxpacket: 16 [ 1042.969035][T15263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1043.009757][T15263] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1043.039935][T15263] usb 4-1: config 13 has no interface number 0 [ 1043.041560][T16437] loop6: detected capacity change from 0 to 2640 [ 1043.054901][ T90] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1043.098747][T15263] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1043.130111][T15263] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1043.131023][T16437] buffer_io_error: 6 callbacks suppressed [ 1043.151606][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.189616][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.211799][ T90] usb 1-1: Using ep0 maxpacket: 16 [ 1043.240918][ T90] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1043.260994][ T90] usb 1-1: config 13 has an invalid interface number: 50 but max is 0 [ 1043.282777][ T90] usb 1-1: config 13 has no interface number 0 [ 1043.298034][ T90] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1043.320779][ T90] usb 1-1: config 13 interface 50 has no altsetting 0 [ 1043.340095][ T90] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1043.350450][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.356186][T15263] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1043.366164][ T90] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.389562][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.406178][ T90] usb 1-1: Product: syz [ 1043.420305][ T90] usb 1-1: Manufacturer: syz [ 1043.430717][ T90] usb 1-1: SerialNumber: syz [ 1043.446425][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.451690][T15263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.468097][T16434] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1043.522098][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.529894][T15263] usb 4-1: Product: syz [ 1043.575611][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.577395][T15263] usb 4-1: Manufacturer: syz [ 1043.650729][T15263] usb 4-1: SerialNumber: syz [ 1043.676120][T16425] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1043.799548][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.821978][T16437] ldm_validate_partition_table(): Disk read failed. [ 1043.849787][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.882515][T16437] Buffer I/O error on dev loop6, logical block 0, async page read [ 1043.901441][T16437] Dev loop6: unable to read RDB block 0 [ 1043.965547][T16437] loop6: unable to read partition table [ 1044.002076][T16437] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1044.190787][ T30] audit: type=1400 audit(1767412350.228:945): avc: denied { create } for pid=16438 comm="syz.6.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1044.455631][ T30] audit: type=1400 audit(1767412350.498:946): avc: denied { read } for pid=16442 comm="syz.5.2908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1044.565960][ T30] audit: type=1400 audit(1767412350.508:947): avc: denied { write } for pid=16442 comm="syz.5.2908" path="socket:[53793]" dev="sockfs" ino=53793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1045.285961][ T30] audit: type=1400 audit(1767412351.328:948): avc: denied { connect } for pid=16445 comm="syz.5.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1045.487715][T15263] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.519734][T15263] usb 4-1: MIDIStreaming interface descriptor not found [ 1045.677133][T15263] usb 4-1: USB disconnect, device number 89 [ 1045.765363][ T90] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1045.858659][ T90] usb 1-1: MIDIStreaming interface descriptor not found [ 1046.095984][T16460] FAULT_INJECTION: forcing a failure. [ 1046.095984][T16460] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.108915][T16460] CPU: 1 UID: 0 PID: 16460 Comm: syz.2.2911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.108938][T16460] Tainted: [L]=SOFTLOCKUP [ 1046.108942][T16460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1046.108949][T16460] Call Trace: [ 1046.108957][T16460] [ 1046.108962][T16460] dump_stack_lvl+0x16c/0x1f0 [ 1046.108986][T16460] should_fail_ex+0x512/0x640 [ 1046.109005][T16460] ? __kmalloc_node_track_caller_noprof+0xcb/0x930 [ 1046.109024][T16460] should_failslab+0xc2/0x120 [ 1046.109041][T16460] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 1046.109055][T16460] ? simple_xattr_set+0x5b/0x3e0 [ 1046.109069][T16460] ? simple_xattr_alloc+0x46/0xa0 [ 1046.109082][T16460] ? kstrdup+0x53/0x100 [ 1046.109093][T16460] kstrdup+0x53/0x100 [ 1046.109104][T16460] simple_xattr_set+0x5b/0x3e0 [ 1046.109118][T16460] shmem_xattr_handler_set+0x31b/0x3b0 [ 1046.109133][T16460] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1046.109145][T16460] __vfs_setxattr+0x175/0x1e0 [ 1046.109162][T16460] ? __pfx___vfs_setxattr+0x10/0x10 [ 1046.109176][T16460] ? rcu_is_watching+0x12/0xc0 [ 1046.109193][T16460] __vfs_setxattr_noperm+0x127/0x660 [ 1046.109211][T16460] __vfs_setxattr_locked+0x17d/0x250 [ 1046.109226][T16460] ? lockdep_unlock+0x64/0xd0 [ 1046.109251][T16460] vfs_setxattr+0x145/0x350 [ 1046.109275][T16460] ? __pfx_vfs_setxattr+0x10/0x10 [ 1046.109295][T16460] ? lock_acquire+0x179/0x330 [ 1046.109309][T16460] ? find_held_lock+0x2b/0x80 [ 1046.109327][T16460] ovl_check_setxattr+0x181/0x340 [ 1046.109345][T16460] ovl_set_origin_fh+0x70/0xa0 [ 1046.109357][T16460] ovl_lookup_layers+0x2241/0x2920 [ 1046.109378][T16460] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 1046.109393][T16460] ? check_path.constprop.0+0x24/0x50 [ 1046.109412][T16460] ovl_lookup+0x459/0x610 [ 1046.109425][T16460] ? __pfx_ovl_lookup+0x10/0x10 [ 1046.109440][T16460] ? do_raw_spin_lock+0x12c/0x2b0 [ 1046.109458][T16460] ? do_raw_spin_unlock+0x172/0x230 [ 1046.109472][T16460] ? _raw_spin_unlock+0x28/0x50 [ 1046.109488][T16460] lookup_one_qstr_excl+0x1d1/0x250 [ 1046.109500][T16460] ? mnt_want_write+0x161/0x450 [ 1046.109516][T16460] do_rmdir+0x31c/0x560 [ 1046.109532][T16460] ? __pfx_do_rmdir+0x10/0x10 [ 1046.109548][T16460] ? strncpy_from_user+0x203/0x2e0 [ 1046.109566][T16460] ? getname_flags.part.0+0x1c5/0x550 [ 1046.109577][T16460] ? __pfx_ksys_write+0x10/0x10 [ 1046.109594][T16460] __x64_sys_unlinkat+0xef/0x130 [ 1046.109611][T16460] do_syscall_64+0xcd/0xf80 [ 1046.109626][T16460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.109643][T16460] RIP: 0033:0x7fdc1fd8f749 [ 1046.109656][T16460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.109667][T16460] RSP: 002b:00007fdc20cce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1046.109680][T16460] RAX: ffffffffffffffda RBX: 00007fdc1ffe6180 RCX: 00007fdc1fd8f749 [ 1046.109686][T16460] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1046.109693][T16460] RBP: 00007fdc20cce090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.109700][T16460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.109706][T16460] R13: 00007fdc1ffe6218 R14: 00007fdc1ffe6180 R15: 00007ffd8ba88a58 [ 1046.109720][T16460] [ 1047.086288][ T30] audit: type=1400 audit(1767412353.128:949): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1047.158927][ T90] usb 1-1: USB disconnect, device number 37 [ 1048.242074][ T30] audit: type=1400 audit(1767412354.168:950): avc: denied { append } for pid=16466 comm="syz.3.2915" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1048.539815][ T30] audit: type=1400 audit(1767412354.568:951): avc: denied { write } for pid=16471 comm="syz.6.2917" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1048.723539][ T30] audit: type=1400 audit(1767412354.768:952): avc: denied { write } for pid=16478 comm="syz.6.2919" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1048.748878][ T30] audit: type=1400 audit(1767412354.768:953): avc: denied { read append } for pid=16481 comm="syz.3.2918" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1048.781884][ T30] audit: type=1400 audit(1767412354.768:954): avc: denied { open } for pid=16481 comm="syz.3.2918" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1049.232090][T16489] netlink: 'syz.6.2920': attribute type 13 has an invalid length. [ 1049.338355][ T30] audit: type=1400 audit(1767412355.378:955): avc: denied { sqpoll } for pid=16488 comm="syz.6.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1049.485209][T16497] xt_SECMARK: invalid security context 'system_u:object_r:agp_device_t:s0' [ 1049.502902][T16496] loop6: detected capacity change from 0 to 2640 [ 1049.521536][T16496] buffer_io_error: 6 callbacks suppressed [ 1049.521568][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.570045][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.587095][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.638478][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.709530][T16489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.717093][T16489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.724865][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.729271][ T30] audit: type=1400 audit(1767412355.768:956): avc: denied { append } for pid=16501 comm="syz.3.2924" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1049.759401][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.768724][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.777744][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.785915][T16496] ldm_validate_partition_table(): Disk read failed. [ 1049.810961][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1049.943802][T16496] Buffer I/O error on dev loop6, logical block 0, async page read [ 1050.679821][ T30] audit: type=1400 audit(1767412356.168:957): avc: denied { map } for pid=16501 comm="syz.3.2924" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1051.102070][T16496] Dev loop6: unable to read RDB block 0 [ 1051.481900][T16496] loop6: unable to read partition table [ 1051.505984][T16496] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1051.539663][ T30] audit: type=1400 audit(1767412357.587:958): avc: denied { create } for pid=16511 comm="syz.5.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1051.564271][ T30] audit: type=1400 audit(1767412357.587:959): avc: denied { mount } for pid=16511 comm="syz.5.2926" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1051.820449][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.853852][T16489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.324431][T16507] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-óæ/": -EINTR [ 1052.385152][ T60] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.487883][ T60] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.542468][ T60] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.572253][ T60] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.713957][ T30] audit: type=1400 audit(1767412358.757:960): avc: denied { connect } for pid=16527 comm="syz.6.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1052.734510][ T30] audit: type=1400 audit(1767412358.757:961): avc: denied { create } for pid=16527 comm="syz.6.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1052.755723][ T30] audit: type=1400 audit(1767412358.777:962): avc: denied { bind } for pid=16527 comm="syz.6.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1052.816412][T13989] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1053.011873][T13989] usb 1-1: Using ep0 maxpacket: 8 [ 1053.070784][T13989] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 1053.085571][T13989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.093955][T13989] usb 1-1: Product: syz [ 1053.098228][T13989] usb 1-1: Manufacturer: syz [ 1053.103076][T13989] usb 1-1: SerialNumber: syz [ 1053.119081][T13989] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1053.470817][T13989] gspca_m5602: Failed to find a sensor [ 1053.483907][T13989] ALi m5602 1-1:8.0: ALi m5602 webcam failed [ 1053.500954][T13989] usb 1-1: USB disconnect, device number 38 [ 1053.513692][ T30] audit: type=1400 audit(1767412359.557:963): avc: denied { mount } for pid=16538 comm="syz.5.2933" name="/" dev="autofs" ino=54032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1053.630972][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.641297][ T30] audit: type=1400 audit(1767412359.677:964): avc: denied { read } for pid=16541 comm="syz.6.2936" path="socket:[53216]" dev="sockfs" ino=53216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1053.933643][T16548] can0: slcan on ttyS3. [ 1054.712091][ T30] audit: type=1400 audit(1767412360.757:965): avc: denied { create } for pid=16552 comm="syz.0.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1054.734403][T16548] can0 (unregistered): slcan off ttyS3. [ 1055.312053][ T792] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1055.482157][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 1055.490009][ T792] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1055.500477][ T792] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1055.510191][ T792] usb 3-1: config 0 has no interface number 0 [ 1055.661597][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.668933][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.682169][ T792] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1055.700896][ T792] usb 3-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1055.789221][ T792] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 1055.828515][ T792] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1055.855478][ T792] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1055.878805][ T792] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 1055.901530][ T792] usb 3-1: config 0 interface 122 has no altsetting 0 [ 1055.924541][ T792] usb 3-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 1055.953650][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.964781][ T792] usb 3-1: Product: syz [ 1055.969008][ T792] usb 3-1: Manufacturer: syz [ 1055.992575][ T792] usb 3-1: SerialNumber: syz [ 1056.004901][T16572] binder: 16567:16572 ioctl 4018620d 0 returned -22 [ 1056.035843][ T792] usb 3-1: config 0 descriptor?? [ 1056.041748][T16565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1056.049449][T16565] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1056.176049][T16575] loop6: detected capacity change from 0 to 2640 [ 1056.184017][T16575] buffer_io_error: 6 callbacks suppressed [ 1056.184044][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.203452][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.223149][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.248819][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.269848][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.290040][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.320746][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.353828][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.363963][T16575] ldm_validate_partition_table(): Disk read failed. [ 1056.373673][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.385104][T16575] Buffer I/O error on dev loop6, logical block 0, async page read [ 1056.395696][T16575] Dev loop6: unable to read RDB block 0 [ 1056.527197][T16575] loop6: unable to read partition table [ 1056.534050][T16575] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1057.707799][ T30] audit: type=1400 audit(1767412363.677:966): avc: denied { shutdown } for pid=16583 comm="syz.6.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1057.902107][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.928963][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1057.938330][ T30] audit: type=1400 audit(1767412363.677:967): avc: denied { connect } for pid=16583 comm="syz.6.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1057.970005][T16587] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1058.156631][ T792] pl2303 3-1:0.122: pl2303 converter detected [ 1058.199461][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1058.376901][ T792] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1058.545373][T16596] sd 0:0:1:0: device reset [ 1058.561178][ T30] audit: type=1400 audit(1767412364.567:968): avc: denied { create } for pid=16594 comm="syz.6.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1058.581702][ T30] audit: type=1400 audit(1767412364.567:969): avc: denied { ioctl } for pid=16594 comm="syz.6.2948" path="socket:[54338]" dev="sockfs" ino=54338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1058.661131][ T30] audit: type=1400 audit(1767412364.567:970): avc: denied { read } for pid=16594 comm="syz.6.2948" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1058.685103][ T30] audit: type=1400 audit(1767412364.567:971): avc: denied { open } for pid=16594 comm="syz.6.2948" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1058.707587][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1058.821211][ T30] audit: type=1400 audit(1767412364.577:972): avc: denied { ioctl } for pid=16594 comm="syz.6.2948" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1058.868430][ T30] audit: type=1400 audit(1767412364.577:973): avc: denied { write } for pid=16594 comm="syz.6.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1058.872397][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1058.918215][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1058.936154][ T792] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1058.951923][ T30] audit: type=1400 audit(1767412364.577:974): avc: denied { setopt } for pid=16594 comm="syz.6.2948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1059.024176][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1059.036908][ T30] audit: type=1400 audit(1767412364.577:975): avc: denied { setopt } for pid=16591 comm="syz.0.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1059.086551][ T792] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1059.109213][ T792] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 1059.109540][ T792] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 1059.109888][ T792] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 1059.112531][ T792] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 1059.127629][ T792] usb 3-1: USB disconnect, device number 86 [ 1059.140923][ T792] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1059.158602][ T792] pl2303 3-1:0.122: device disconnected [ 1061.772078][ T90] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1061.942574][ T90] usb 4-1: Using ep0 maxpacket: 8 [ 1061.951211][ T90] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1062.051912][ T90] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.088710][ T90] usb 4-1: Product: syz [ 1062.490480][ T90] usb 4-1: Manufacturer: syz [ 1062.506800][ T90] usb 4-1: SerialNumber: syz [ 1062.528764][ T90] usb 4-1: config 0 descriptor?? [ 1062.559902][ T90] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1062.813963][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2964'. [ 1062.830967][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1062.837907][ T30] audit: type=1400 audit(1767412368.767:981): avc: denied { kexec_image_load } for pid=16643 comm="syz.6.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1064.420132][ T792] usb 4-1: USB disconnect, device number 90 [ 1064.590928][T16669] comedi: valid board names for 8255 driver are: [ 1064.597685][T16669] 8255 [ 1064.600481][T16669] comedi: valid board names for vmk80xx driver are: [ 1064.607291][T16669] vmk80xx [ 1064.610389][T16669] comedi: valid board names for usbduxsigma driver are: [ 1064.617416][T16669] usbduxsigma [ 1064.620824][T16669] comedi: valid board names for usbduxfast driver are: [ 1064.628047][T16669] usbduxfast [ 1064.714327][T16669] comedi: valid board names for usbdux driver are: [ 1064.821999][T16669] usbdux [ 1064.825123][T16669] comedi: valid board names for ni6501 driver are: [ 1064.831935][T16669] ni6501 [ 1064.835009][T16669] comedi: valid board names for dt9812 driver are: [ 1064.841842][T16669] dt9812 [ 1064.844888][T16669] comedi: valid board names for ni_labpc_cs driver are: [ 1064.852421][T16669] ni_labpc_cs [ 1064.855893][T16669] comedi: valid board names for ni_daq_700 driver are: [ 1064.862961][T16669] ni_daq_700 [ 1064.866370][T16669] comedi: valid board names for labpc_pci driver are: [ 1064.873470][T16669] labpc_pci [ 1064.873487][ T30] audit: type=1400 audit(1767412370.767:982): avc: denied { mount } for pid=16665 comm="syz.2.2970" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1064.899965][T16669] comedi: valid board names for adl_pci9118 driver are: [ 1064.907275][T16669] pci9118dg [ 1064.910578][T16669] pci9118hg [ 1064.913884][T16669] pci9118hr [ 1064.917121][T16669] comedi: valid board names for 8255_pci driver are: [ 1064.925181][T16669] 8255_pci [ 1064.928394][T16669] comedi: valid board names for s526 driver are: [ 1064.936965][T16669] s526 [ 1064.939810][T16669] comedi: valid board names for multiq3 driver are: [ 1064.946493][T16669] multiq3 [ 1064.949548][T16669] comedi: valid board names for pcmuio driver are: [ 1064.956246][T16669] pcmuio48 [ 1064.959458][T16669] pcmuio96 [ 1064.962757][T16669] comedi: valid board names for pcmmio driver are: [ 1064.969285][T16669] pcmmio [ 1064.972328][T16669] comedi: valid board names for pcmda12 driver are: [ 1064.979011][T16669] pcmda12 [ 1064.982119][T16669] comedi: valid board names for pcmad driver are: [ 1064.988527][T16669] pcmad12 [ 1064.991589][T16669] pcmad16 [ 1064.994786][T16669] comedi: valid board names for ni_labpc driver are: [ 1065.001832][T16669] lab-pc-1200 [ 1065.005247][T16669] lab-pc-1200ai [ 1065.008837][T16669] lab-pc+ [ 1065.011998][T16669] comedi: valid board names for atmio16 driver are: [ 1065.018623][T16669] atmio16 [ 1065.021704][T16669] atmio16d [ 1065.024854][T16669] comedi: valid board names for ni_at_ao driver are: [ 1065.031558][T16669] at-ao-6 [ 1065.034628][T16669] at-ao-10 [ 1065.037802][T16669] comedi: valid board names for ni_at_a2150 driver are: [ 1065.044941][T16669] ni_at_a2150 [ 1065.048341][T16669] comedi: valid board names for adq12b driver are: [ 1065.054970][T16669] adq12b [ 1065.057953][T16669] comedi: valid board names for mpc624 driver are: [ 1065.064522][T16669] mpc624 [ 1065.067486][T16669] comedi: valid board names for c6xdigio driver are: [ 1065.074309][T16669] c6xdigio [ 1065.077531][T16669] comedi: valid board names for aio_iiro_16 driver are: [ 1065.084615][T16669] aio_iiro_16 [ 1065.088026][T16669] comedi: valid board names for aio_aio12_8 driver are: [ 1065.095115][T16669] aio_aio12_8 [ 1065.098853][T16669] aio_ai12_8 [ 1065.102317][T16669] aio_ao12_4 [ 1065.105709][T16669] comedi: valid board names for fl512 driver are: [ 1065.112368][T16669] fl512 [ 1065.115315][T16669] comedi: valid board names for dmm32at driver are: [ 1065.122066][T16669] dmm32at [ 1065.125153][T16669] comedi: valid board names for dt282x driver are: [ 1065.131928][T16669] dt2821 [ 1065.134908][T16669] dt2821-f [ 1065.138049][T16669] dt2821-g [ 1065.141148][T16669] dt2823 [ 1065.144306][T16669] dt2824-pgh [ 1065.147633][T16669] dt2824-pgl [ 1065.150928][T16669] dt2825 [ 1065.154106][T16669] dt2827 [ 1065.157089][T16669] dt2828 [ 1065.160076][T16669] dt2829 [ 1065.163203][T16669] dt21-ez [ 1065.166364][T16669] dt23-ez [ 1065.169435][T16669] dt24-ez [ 1065.172653][T16669] dt24-ez-pgl [ 1065.176108][T16669] comedi: valid board names for dt2817 driver are: [ 1065.182686][T16669] dt2817 [ 1065.185651][T16669] comedi: valid board names for dt2815 driver are: [ 1065.192330][T16669] dt2815 [ 1065.195311][T16669] comedi: valid board names for dt2814 driver are: [ 1065.202205][T16669] dt2814 [ 1065.205367][T16669] comedi: valid board names for dt2811 driver are: [ 1065.212092][T16669] dt2811-pgh [ 1065.215516][T16669] dt2811-pgl [ 1065.218906][T16669] comedi: valid board names for dt2801 driver are: [ 1065.225616][T16669] dt2801 [ 1065.228591][T16669] comedi: valid board names for das6402 driver are: [ 1065.235372][T16669] das6402-12 [ 1065.238700][T16669] das6402-16 [ 1065.242058][T16669] comedi: valid board names for das1800 driver are: [ 1065.248688][T16669] das-1701st [ 1065.252078][T16669] das-1701st-da [ 1065.255650][T16669] das-1702st [ 1065.258983][T16669] das-1702st-da [ 1065.262727][T16669] das-1702hr [ 1065.266054][T16669] das-1702hr-da [ 1065.269620][T16669] das-1701ao [ 1065.272963][T16669] das-1702ao [ 1065.276313][T16669] das-1801st [ 1065.279625][T16669] das-1801st-da [ 1065.283292][T16669] das-1802st [ 1065.286605][T16669] das-1802st-da [ 1065.290161][T16669] das-1802hr [ 1065.293761][T16669] das-1802hr-da [ 1065.297411][T16669] das-1801hc [ 1065.300720][T16669] das-1802hc [ 1065.304552][T16669] das-1801ao [ 1065.307931][T16669] das-1802ao [ 1065.311302][T16669] comedi: valid board names for das800 driver are: [ 1065.318050][T16669] das-800 [ 1065.321131][T16669] cio-das800 [ 1065.324595][T16669] das-801 [ 1065.327702][T16669] cio-das801 [ 1065.331025][T16669] das-802 [ 1065.334207][T16669] cio-das802 [ 1065.337533][T16669] cio-das802/16 [ 1065.341114][T16669] comedi: valid board names for isa-das08 driver are: [ 1065.348616][T16669] isa-das08 [ 1065.351913][T16669] das08-pgm [ 1065.355138][T16669] das08-pgh [ 1065.358394][T16669] das08-pgl [ 1065.361600][T16669] das08-aoh [ 1065.364832][T16669] das08-aol [ 1065.368129][T16669] das08-aom [ 1065.371444][T16669] das08/jr-ao [ 1065.375088][T16669] das08jr-16-ao [ 1065.378703][T16669] pc104-das08 [ 1065.382257][T16669] das08jr/16 [ 1065.385571][T16669] comedi: valid board names for das16m1 driver are: [ 1065.392386][T16669] das16m1 [ 1065.395443][T16669] comedi: valid board names for dac02 driver are: [ 1065.402092][T16669] dac02 [ 1065.404980][T16669] comedi: valid board names for rti802 driver are: [ 1065.411999][T16669] rti802 [ 1065.414986][T16669] comedi: valid board names for rti800 driver are: [ 1065.421508][T16669] rti800 [ 1065.424501][T16669] rti815 [ 1065.427520][T16669] comedi: valid board names for pcm3724 driver are: [ 1065.434427][T16669] pcm3724 [ 1065.437487][T16669] comedi: valid board names for pcl818 driver are: [ 1065.444177][T16669] pcl818l [ 1065.447234][T16669] pcl818h [ 1065.450268][T16669] pcl818hd [ 1065.453483][T16669] pcl818hg [ 1065.456618][T16669] pcl818 [ 1065.459584][T16669] pcl718 [ 1065.462661][T16669] pcm3718 [ 1065.465719][T16669] comedi: valid board names for pcl816 driver are: [ 1065.472396][T16669] pcl816 [ 1065.475404][T16669] pcl814b [ 1065.478428][T16669] comedi: valid board names for pcl812 driver are: [ 1065.485061][T16669] pcl812 [ 1065.488026][T16669] pcl812pg [ 1065.491149][T16669] acl8112pg [ 1065.494452][T16669] acl8112dg [ 1065.497690][T16669] acl8112hg [ 1065.500911][T16669] a821pgl [ 1065.504064][T16669] a821pglnda [ 1065.507376][T16669] a821pgh [ 1065.511038][T16669] a822pgl [ 1065.514283][T16669] a822pgh [ 1065.517371][T16669] a823pgl [ 1065.520412][T16669] a823pgh [ 1065.523529][T16669] pcl813 [ 1065.526545][T16669] pcl813b [ 1065.529603][T16669] acl8113 [ 1065.532730][T16669] iso813 [ 1065.535704][T16669] acl8216 [ 1065.538741][T16669] a826pg [ 1065.541768][T16669] comedi: valid board names for pcl730 driver are: [ 1065.548308][T16669] pcl730 [ 1065.551254][T16669] iso730 [ 1065.554539][T16669] acl7130 [ 1065.557625][T16669] pcm3730 [ 1065.560716][T16669] pcl725 [ 1065.563787][T16669] p8r8dio [ 1065.566848][T16669] acl7225b [ 1065.569983][T16669] p16r16dio [ 1065.573292][T16669] pcl733 [ 1065.576312][T16669] pcl734 [ 1065.579270][T16669] opmm-1616-xt [ 1065.582879][T16669] pearl-mm-p [ 1065.586229][T16669] ir104-pbf [ 1065.589420][T16669] comedi: valid board names for pcl726 driver are: [ 1065.596074][T16669] pcl726 [ 1065.599068][T16669] pcl727 [ 1065.602118][T16669] pcl728 [ 1065.605271][T16669] acl6126 [ 1065.608351][T16669] acl6128 [ 1065.611682][T16669] comedi: valid board names for pcl724 driver are: [ 1065.618331][T16669] pcl724 [ 1065.621314][T16669] pcl722 [ 1065.624386][T16669] pcl731 [ 1065.627406][T16669] acl7122 [ 1065.630445][T16669] acl7124 [ 1065.633604][T16669] pet48dio [ 1065.636753][T16669] pcmio48 [ 1065.639776][T16669] onyx-mm-dio [ 1065.643256][T16669] comedi: valid board names for pcl711 driver are: [ 1065.649785][T16669] pcl711 [ 1065.652846][T16669] pcl711b [ 1065.655884][T16669] acl8112hg [ 1065.659131][T16669] acl8112dg [ 1065.662398][T16669] comedi: valid board names for amplc_pc263 driver are: [ 1065.669374][T16669] pc263 [ 1065.672431][T16669] comedi: valid board names for amplc_pc236 driver are: [ 1065.679616][T16669] pc36at [ 1065.682774][T16669] comedi: valid board names for amplc_dio200 driver are: [ 1065.689858][T16669] pc212e [ 1065.692964][T16669] pc214e [ 1065.695938][T16669] pc215e [ 1065.698902][T16669] pc218e [ 1065.702008][T16669] pc272e [ 1065.704981][T16669] comedi: valid board names for comedi_parport driver are: [ 1065.712344][T16669] comedi_parport [ 1065.716436][T16669] comedi: valid board names for comedi_test driver are: [ 1065.723522][T16669] comedi_test [ 1065.727175][T16669] comedi: valid board names for comedi_bond driver are: [ 1065.734395][T16669] comedi_bond [ 1065.961813][ T792] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1065.989674][T16675] loop6: detected capacity change from 0 to 2640 [ 1065.999108][T16675] buffer_io_error: 6 callbacks suppressed [ 1065.999142][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.082127][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.091698][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.185199][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.209238][ T792] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1066.250048][ T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.265276][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.281745][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.297394][ T30] audit: type=1400 audit(1767412372.337:983): avc: denied { create } for pid=16685 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1066.351144][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.356400][ T792] usb 7-1: Product: syz [ 1066.381758][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.397770][T16675] ldm_validate_partition_table(): Disk read failed. [ 1066.404180][ T792] usb 7-1: Manufacturer: syz [ 1066.415499][ T792] usb 7-1: SerialNumber: syz [ 1066.423281][ T30] audit: type=1400 audit(1767412372.337:984): avc: denied { setopt } for pid=16685 comm="syz.2.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1066.468371][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.484109][T16675] Buffer I/O error on dev loop6, logical block 0, async page read [ 1066.486238][ T792] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1066.504957][T16675] Dev loop6: unable to read RDB block 0 [ 1066.528023][ T30] audit: type=1400 audit(1767412372.547:985): avc: denied { firmware_load } for pid=24 comm="kworker/1:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1066.561330][T16675] loop6: unable to read partition table [ 1066.572586][T16675] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 1066.674415][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1067.299725][T16695] syz.0.2976 (16695): drop_caches: 2 [ 1067.955383][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1068.033080][ T24] ath9k_htc: Failed to initialize the device [ 1068.077144][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 1068.275305][T16704] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.294815][T16704] binder: 16702:16704 ioctl 4018620d 200000000100 returned -16 [ 1068.375941][T16704] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.424643][T16704] binder: 16702:16704 ioctl 4018620d 200000000100 returned -16 [ 1068.453820][T16704] binder: BINDER_SET_CONTEXT_MGR already set [ 1068.459855][T16704] binder: 16702:16704 ioctl 4018620d 200000000100 returned -16 [ 1068.984663][T16704] binder: BINDER_SET_CONTEXT_MGR already set [ 1069.011375][T16704] binder: 16702:16704 ioctl 4018620d 200000000100 returned -16 [ 1069.208557][T15264] usb 7-1: USB disconnect, device number 17 [ 1069.560162][ T30] audit: type=1400 audit(1767412375.597:986): avc: denied { ioctl } for pid=16712 comm="syz.0.2980" path="socket:[55410]" dev="sockfs" ino=55410 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1069.866146][ T30] audit: type=1400 audit(1767412375.907:987): avc: denied { write } for pid=16725 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1069.866391][T16730] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2985'. [ 1069.886649][ T30] audit: type=1400 audit(1767412375.907:988): avc: denied { nlmsg_write } for pid=16725 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1069.931999][ T30] audit: type=1400 audit(1767412375.977:989): avc: denied { create } for pid=16725 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1070.075718][ T30] audit: type=1400 audit(1767412375.997:990): avc: denied { write } for pid=16725 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1070.122480][ T30] audit: type=1400 audit(1767412375.997:991): avc: denied { name_connect } for pid=16725 comm="syz.3.2985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1070.207179][ T30] audit: type=1400 audit(1767412376.047:992): avc: denied { listen } for pid=16718 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1070.752298][T16743] syz.2.2986 (16743): drop_caches: 2 [ 1070.764394][ T30] audit: type=1400 audit(1767412376.747:993): avc: denied { bind } for pid=16737 comm="syz.5.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1070.928597][ T30] audit: type=1400 audit(1767412376.747:994): avc: denied { name_bind } for pid=16737 comm="syz.5.2987" src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1071.115391][ T30] audit: type=1400 audit(1767412376.747:995): avc: denied { node_bind } for pid=16737 comm="syz.5.2987" saddr=fe80::aa src=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1073.281838][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1073.422203][T15264] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1073.583359][T15264] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 1073.592930][T15264] usb 7-1: config 0 has no interface number 0 [ 1073.602252][T15264] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01c1, bcdDevice= 2.f5 [ 1074.045127][T15264] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.056587][T15264] usb 7-1: Product: syz [ 1074.060846][T15264] usb 7-1: Manufacturer: syz [ 1074.112186][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1074.118944][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1074.129192][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1074.144181][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1074.156065][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1074.246519][ T24] usb 4-1: Product: syz [ 1074.250771][ T24] usb 4-1: Manufacturer: syz [ 1074.255604][T15264] usb 7-1: SerialNumber: syz [ 1074.266837][T15264] usb 7-1: config 0 descriptor?? [ 1074.271751][ T24] usb 4-1: SerialNumber: syz [ 1074.284119][T15264] ftdi_sio 7-1:0.70: FTDI USB Serial Device converter detected [ 1074.294747][T15264] ftdi_sio ttyUSB0: unknown device type: 0x2f5 [ 1074.307188][ T24] usb 4-1: config 0 descriptor?? [ 1074.322734][T16799] FAULT_INJECTION: forcing a failure. [ 1074.322734][T16799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.362524][T16799] CPU: 0 UID: 0 PID: 16799 Comm: syz.0.3004 Tainted: G L syzkaller #0 PREEMPT(full) [ 1074.362558][T16799] Tainted: [L]=SOFTLOCKUP [ 1074.362564][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.362575][T16799] Call Trace: [ 1074.362582][T16799] [ 1074.362589][T16799] dump_stack_lvl+0x16c/0x1f0 [ 1074.362622][T16799] should_fail_ex+0x512/0x640 [ 1074.362654][T16799] _copy_from_user+0x2e/0xd0 [ 1074.362683][T16799] __sys_bpf+0x248/0x4980 [ 1074.362715][T16799] ? __pfx___sys_bpf+0x10/0x10 [ 1074.362737][T16799] ? find_held_lock+0x2b/0x80 [ 1074.362770][T16799] ? find_held_lock+0x2b/0x80 [ 1074.362804][T16799] ? __mutex_unlock_slowpath+0x161/0x790 [ 1074.362843][T16799] ? fput+0x70/0xf0 [ 1074.362860][T16799] ? ksys_write+0x1ac/0x250 [ 1074.362881][T16799] ? __pfx_ksys_write+0x10/0x10 [ 1074.362901][T16799] __x64_sys_bpf+0x78/0xc0 [ 1074.362925][T16799] ? lockdep_hardirqs_on+0x7c/0x110 [ 1074.362945][T16799] do_syscall_64+0xcd/0xf80 [ 1074.362968][T16799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.362986][T16799] RIP: 0033:0x7f77f9f8f749 [ 1074.363002][T16799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.363016][T16799] RSP: 002b:00007f77fad95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1074.363034][T16799] RAX: ffffffffffffffda RBX: 00007f77fa1e5fa0 RCX: 00007f77f9f8f749 [ 1074.363046][T16799] RDX: 0000000000000010 RSI: 00002000000013c0 RDI: 0000000000000009 [ 1074.363055][T16799] RBP: 00007f77fad95090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.363065][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.363075][T16799] R13: 00007f77fa1e6038 R14: 00007f77fa1e5fa0 R15: 00007ffd84cd5e18 [ 1074.363101][T16799] [ 1074.622394][T16783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.631269][T16783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.637204][ T30] audit: type=1400 audit(1767412380.667:996): avc: denied { read } for pid=16747 comm="syz.3.2989" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1074.640730][T15262] usb 7-1: USB disconnect, device number 18 [ 1074.669382][T15262] ftdi_sio 7-1:0.70: device disconnected [ 1074.725506][T15264] usb 4-1: USB disconnect, device number 91 [ 1074.740697][ T30] audit: type=1400 audit(1767412380.707:997): avc: denied { open } for pid=16747 comm="syz.3.2989" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1074.811938][ T30] audit: type=1400 audit(1767412380.817:998): avc: denied { create } for pid=16800 comm="syz.2.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1076.323620][T16801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1076.363955][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3005'. [ 1076.392809][T16811] 9p: Bad value for 'rfdno' [ 1076.417580][ T30] audit: type=1400 audit(1767412382.427:999): avc: denied { connect } for pid=16810 comm="syz.0.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1076.480913][ T30] audit: type=1400 audit(1767412382.427:1000): avc: denied { ioctl } for pid=16810 comm="syz.0.3007" path="socket:[54817]" dev="sockfs" ino=54817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1076.528635][ T30] audit: type=1400 audit(1767412382.427:1001): avc: denied { write } for pid=16810 comm="syz.0.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1076.727180][ T30] audit: type=1400 audit(1767412382.447:1002): avc: denied { mounton } for pid=16810 comm="syz.0.3007" path="/proc/157/task" dev="proc" ino=54823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1076.751603][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3010'. [ 1076.790071][T16823] overlayfs: failed to resolve './file1/file0': -2 [ 1076.829506][ T30] audit: type=1400 audit(1767412382.447:1003): avc: denied { mount } for pid=16810 comm="syz.0.3007" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1076.870739][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 1076.910156][ T30] audit: type=1800 audit(1767412382.907:1004): pid=16827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.3011" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1076.939121][T16829] fuse: Unknown parameter 'f' [ 1076.946377][T16831] fuse: Unknown parameter 'f' [ 1076.999327][ T30] audit: type=1400 audit(1767412383.037:1005): avc: denied { ioctl } for pid=16834 comm="syz.5.3015" path="socket:[55551]" dev="sockfs" ino=55551 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1077.315564][T15264] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 1078.243575][T15264] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1078.280326][T15264] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.314234][T16849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3018'. [ 1078.336153][T15264] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1078.354373][T15264] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1078.383903][T15264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.422217][T15264] usb 1-1: config 0 descriptor?? [ 1079.030154][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'. [ 1079.287926][T15264] holtek_mouse 0003:04D9:A067.0020: nested delimiters [ 1079.327736][T15264] holtek_mouse 0003:04D9:A067.0020: item 0 4 2 10 parsing failed [ 1079.367009][T15264] holtek_mouse 0003:04D9:A067.0020: hid parse failed: -22 [ 1079.453395][T15264] holtek_mouse 0003:04D9:A067.0020: probe with driver holtek_mouse failed with error -22 [ 1079.595475][T15264] usb 1-1: USB disconnect, device number 39 [ 1081.106816][T16871] Process accounting resumed [ 1081.281974][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1081.282020][ T30] audit: type=1400 audit(1767412387.307:1011): avc: denied { bind } for pid=16869 comm="syz.3.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1081.472645][T16878] FAULT_INJECTION: forcing a failure. [ 1081.472645][T16878] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.485791][T16878] CPU: 0 UID: 0 PID: 16878 Comm: syz.2.3025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.485817][T16878] Tainted: [L]=SOFTLOCKUP [ 1081.485821][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1081.485828][T16878] Call Trace: [ 1081.485832][T16878] [ 1081.485837][T16878] dump_stack_lvl+0x16c/0x1f0 [ 1081.485861][T16878] should_fail_ex+0x512/0x640 [ 1081.485880][T16878] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1081.485902][T16878] should_failslab+0xc2/0x120 [ 1081.485919][T16878] __kmalloc_cache_noprof+0x80/0x800 [ 1081.485936][T16878] ? tcx_entry_fetch_or_create+0x208/0x430 [ 1081.485957][T16878] ? tcx_entry_fetch_or_create+0x208/0x430 [ 1081.485971][T16878] tcx_entry_fetch_or_create+0x208/0x430 [ 1081.485987][T16878] clsact_init+0x118/0x6a0 [ 1081.486001][T16878] ? __pfx_clsact_init+0x10/0x10 [ 1081.486015][T16878] ? qdisc_create+0x215/0xfa0 [ 1081.486036][T16878] ? __pfx_clsact_init+0x10/0x10 [ 1081.486050][T16878] ? __pfx_clsact_egress_block_set+0x10/0x10 [ 1081.486064][T16878] qdisc_create+0x457/0xfa0 [ 1081.486080][T16878] tc_modify_qdisc+0x13de/0x2230 [ 1081.486097][T16878] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1081.486117][T16878] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1081.486137][T16878] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 1081.486152][T16878] rtnetlink_rcv_msg+0x3c9/0xe90 [ 1081.486167][T16878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1081.486179][T16878] ? __lock_acquire+0x436/0x2890 [ 1081.486196][T16878] ? irqentry_exit+0x1dd/0x8c0 [ 1081.486212][T16878] ? ref_tracker_free+0x37c/0x830 [ 1081.486224][T16878] netlink_rcv_skb+0x158/0x420 [ 1081.486238][T16878] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1081.486250][T16878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1081.486272][T16878] netlink_unicast+0x5aa/0x870 [ 1081.486287][T16878] ? __pfx_netlink_unicast+0x10/0x10 [ 1081.486305][T16878] netlink_sendmsg+0x8c8/0xdd0 [ 1081.486320][T16878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.486335][T16878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.486349][T16878] ____sys_sendmsg+0xa5d/0xc30 [ 1081.486365][T16878] ? copy_msghdr_from_user+0x10a/0x160 [ 1081.486377][T16878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.486392][T16878] ? __lock_acquire+0x436/0x2890 [ 1081.486407][T16878] ___sys_sendmsg+0x134/0x1d0 [ 1081.486418][T16878] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.486429][T16878] ? find_held_lock+0x2b/0x80 [ 1081.486461][T16878] __sys_sendmsg+0x16d/0x220 [ 1081.486471][T16878] ? __pfx___sys_sendmsg+0x10/0x10 [ 1081.486491][T16878] do_syscall_64+0xcd/0xf80 [ 1081.486505][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.486517][T16878] RIP: 0033:0x7fdc1fd8f749 [ 1081.486528][T16878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.486539][T16878] RSP: 002b:00007fdc20cef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.486551][T16878] RAX: ffffffffffffffda RBX: 00007fdc1ffe6090 RCX: 00007fdc1fd8f749 [ 1081.486558][T16878] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006 [ 1081.486564][T16878] RBP: 00007fdc20cef090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.486570][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.486576][T16878] R13: 00007fdc1ffe6128 R14: 00007fdc1ffe6090 R15: 00007ffd8ba88a58 [ 1081.486590][T16878] [ 1082.079657][ T30] audit: type=1400 audit(1767412388.117:1012): avc: denied { bind } for pid=16880 comm="syz.0.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1082.225637][T16890] --map-set only usable from mangle table [ 1082.253545][ T30] audit: type=1400 audit(1767412388.137:1013): avc: denied { listen } for pid=16880 comm="syz.0.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1082.694714][T16890] --map-set only usable from mangle table [ 1082.707862][ T30] audit: type=1400 audit(1767412388.387:1014): avc: denied { shutdown } for pid=16880 comm="syz.0.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1083.773028][T16905] fuse: Bad value for 'fd' [ 1084.522548][T16910] xt_CT: No such helper "snmp_trap" [ 1084.885870][ T30] audit: type=1326 audit(1767412390.917:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f9f8f749 code=0x7ffc0000 [ 1085.085088][ T30] audit: type=1326 audit(1767412390.927:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f9f8f749 code=0x7ffc0000 [ 1085.162236][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 1085.174554][ T30] audit: type=1400 audit(1767412390.947:1017): avc: denied { write } for pid=16924 comm="syz.3.3030" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1085.446596][ T30] audit: type=1326 audit(1767412390.947:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77f9f8f749 code=0x7ffc0000 [ 1085.510693][ T30] audit: type=1326 audit(1767412390.957:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f9f8f749 code=0x7ffc0000 [ 1085.583372][ T30] audit: type=1326 audit(1767412390.957:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16922 comm="syz.0.3039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f9f8f749 code=0x7ffc0000 [ 1085.595979][T16927] mmap: syz.6.3040 (16927): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1086.822564][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1086.822607][ T30] audit: type=1400 audit(1767412392.847:1059): avc: denied { read } for pid=16943 comm="syz.0.3044" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1087.244387][ T30] audit: type=1400 audit(1767412392.857:1060): avc: denied { open } for pid=16943 comm="syz.0.3044" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1087.271796][ T30] audit: type=1400 audit(1767412392.857:1061): avc: denied { ioctl } for pid=16943 comm="syz.0.3044" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1087.321837][ T30] audit: type=1400 audit(1767412393.347:1062): avc: denied { rename } for pid=16949 comm="syz.5.3046" name="file0" dev="tmpfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1088.304874][T16967] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1088.314066][T16967] @0Ù: renamed from bond_slave_1 [ 1088.818459][T16296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.040666][T15264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.090296][T16974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 1089.629211][ T30] audit: type=1400 audit(1767412395.457:1063): avc: denied { ioctl } for pid=16975 comm="syz.0.3053" path="socket:[55141]" dev="sockfs" ino=55141 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1089.785333][T16983] openvswitch: netlink: Invalid VLAN frame [ 1089.852421][T15264] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1089.999562][ T30] audit: type=1400 audit(1767412396.027:1064): avc: denied { mount } for pid=16982 comm="syz.2.3057" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1090.537196][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1090.550287][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1090.559740][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1090.567555][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1090.575449][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1090.583200][ T30] audit: type=1400 audit(1767412396.627:1065): avc: denied { ioctl } for pid=16996 comm="syz-executor" path="socket:[55881]" dev="sockfs" ino=55881 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1090.637302][ T30] audit: type=1400 audit(1767412396.667:1066): avc: denied { mounton } for pid=16996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1090.996552][T17001] overlayfs: failed to resolve './file1': -2 [ 1091.010364][ T30] audit: type=1400 audit(1767412397.047:1067): avc: denied { watch } for pid=16999 comm="syz.5.3059" path="/209/bus/file1" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1091.060316][ T30] audit: type=1400 audit(1767412397.047:1068): avc: denied { watch_sb watch_reads } for pid=16999 comm="syz.5.3059" path="/209/bus/file1" dev="tmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1091.202247][ T5815] syz_tun (unregistering): left allmulticast mode [ 1091.210312][ T5815] bond0: (slave syz_tun): Releasing backup interface [ 1091.330800][ T5985] smc: removing ib device syz1 [ 1091.492652][T17005] netlink: 'syz.0.3061': attribute type 4 has an invalid length. [ 1091.901919][T16296] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1092.317308][T16296] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1092.341783][T16296] usb 1-1: config 1 has no interface number 0 [ 1092.356122][T16296] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1092.412609][T16296] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1092.473961][T16296] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 1092.483994][T16296] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.507078][T16296] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1092.524883][T16296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.536427][T16296] usb 1-1: Product: syz [ 1092.548958][T16296] usb 1-1: Manufacturer: syz [ 1092.557951][T16996] chnl_net:caif_netlink_parms(): no params data found [ 1092.558761][T16296] usb 1-1: SerialNumber: syz [ 1092.613539][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1092.704078][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1092.744026][ T5830] Bluetooth: hci0: command tx timeout [ 1092.755197][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1093.026882][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1093.043721][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1093.043742][ T30] audit: type=1400 audit(1767412399.087:1070): avc: denied { write } for pid=17032 comm="syz.6.3070" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1093.165373][T16296] usb 1-1: Error in usbnet_get_endpoints (-71) [ 1093.260884][T16296] usb 1-1: USB disconnect, device number 40 [ 1093.789540][T16996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.806368][T16996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.858547][T16996] bridge_slave_0: entered allmulticast mode [ 1093.908382][T16996] bridge_slave_0: entered promiscuous mode [ 1093.938630][T16996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.977991][T17064] Mount JFS Failure: -5 [ 1094.029690][ T30] audit: type=1400 audit(1767412400.007:1071): avc: denied { mounton } for pid=17039 comm="syz.6.3071" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1094.062073][T16996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.080740][T16996] bridge_slave_1: entered allmulticast mode [ 1094.111259][T16996] bridge_slave_1: entered promiscuous mode [ 1094.141782][ T30] audit: type=1400 audit(1767412400.047:1072): avc: denied { setopt } for pid=17052 comm="syz.0.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1094.397375][ T30] audit: type=1400 audit(1767412400.227:1073): avc: denied { name_bind } for pid=17067 comm="syz.5.3078" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1094.451745][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1094.509033][ T30] audit: type=1400 audit(1767412400.547:1074): avc: denied { bind } for pid=17070 comm="syz.5.3080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1094.603315][ T5985] ------------[ cut here ]------------ [ 1094.609147][ T5985] GID entry ref leak for dev syz1 index 2 ref=1 [ 1094.615589][ T5985] WARNING: drivers/infiniband/core/cache.c:806 at gid_table_release_one+0x1ad/0x450, CPU#0: kworker/u8:18/5985 [ 1094.621992][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1094.627588][ T5985] Modules linked in: [ 1094.637073][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.648531][ T5985] Tainted: [L]=SOFTLOCKUP [ 1094.652979][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.663551][ T5985] Workqueue: ib-unreg-wq ib_unregister_work [ 1094.669457][ T5985] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1094.675647][ T5985] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 8a 77 4d f9 48 8d 3d 33 c1 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 70 77 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1094.695474][ T5985] RSP: 0018:ffffc9000475fac8 EFLAGS: 00010293 [ 1094.701534][ T5985] RAX: 0000000000000000 RBX: ffff8880795ca400 RCX: 0000000000000001 [ 1094.709656][ T5985] RDX: 0000000000000002 RSI: ffff8881422c5b00 RDI: ffffffff90953270 [ 1094.719855][ T5985] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1006a5d080 [ 1094.727900][ T5985] R10: ffff8880352e8403 R11: ffffffff812ba1ca R12: ffffed100f2b949b [ 1094.735891][ T5985] R13: ffff8880368a0000 R14: 0000000000000002 R15: dffffc0000000000 [ 1094.743917][ T5985] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 1094.752991][ T5985] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.759585][ T5985] CR2: 000020000000c2c0 CR3: 0000000060f51000 CR4: 00000000003526f0 [ 1094.767639][ T5985] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1094.775703][ T5985] DR3: 0000000000008000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1094.783737][ T5985] Call Trace: [ 1094.787006][ T5985] [ 1094.789935][ T5985] ib_device_release+0xef/0x1e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1094.791716][ T30] audit: type=1400 audit(1767412400.747:1075): avc: denied { write } for pid=5802 comm="syz-executor" path="pipe:[3869]" dev="pipefs" ino=3869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1094.794935][ T5985] ? __pfx_ib_device_release+0x10/0x10 [ 1094.794965][ T5985] device_release+0xa4/0x240 [ 1094.794993][ T5985] kobject_put+0x1ef/0x6f0 [ 1094.795024][ T5985] put_device+0x1f/0x30 [ 1094.795045][ T5985] process_one_work+0x9ba/0x1b20 [ 1094.795079][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 1094.795104][ T5985] ? assign_work+0x1a0/0x250 [ 1094.795126][ T5985] worker_thread+0x6c8/0xf10 [ 1094.795153][ T5985] ? __kthread_parkme+0x19e/0x250 [ 1094.795173][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1094.795191][ T5985] kthread+0x3c5/0x780 [ 1094.795209][ T5985] ? __pfx_kthread+0x10/0x10 [ 1094.795228][ T5985] ? rcu_is_watching+0x12/0xc0 [ 1094.795248][ T5985] ? __pfx_kthread+0x10/0x10 [ 1094.795270][ T5985] ret_from_fork+0x983/0xb10 [ 1094.795294][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.795314][ T5985] ? __switch_to+0x7af/0x10d0 [ 1094.899773][ T5985] ? __pfx_kthread+0x10/0x10 [ 1094.904415][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1094.909177][ T5985] [ 1094.912521][ T5985] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1094.919785][ T5985] CPU: 0 UID: 0 PID: 5985 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 1094.930865][ T5985] Tainted: [L]=SOFTLOCKUP [ 1094.935168][ T5985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.945198][ T5985] Workqueue: ib-unreg-wq ib_unregister_work [ 1094.951080][ T5985] Call Trace: [ 1094.954335][ T5985] [ 1094.957258][ T5985] dump_stack_lvl+0x3d/0x1f0 [ 1094.961842][ T5985] vpanic+0x640/0x6f0 [ 1094.965809][ T5985] ? gid_table_release_one+0x1ad/0x450 [ 1094.971247][ T5985] panic+0xca/0xd0 [ 1094.975066][ T5985] ? __pfx_panic+0x10/0x10 [ 1094.979503][ T5985] ? check_panic_on_warn+0x1f/0xb0 [ 1094.984602][ T5985] check_panic_on_warn+0xab/0xb0 [ 1094.989520][ T5985] __warn+0x108/0x3c0 [ 1094.993476][ T5985] __report_bug+0x2a0/0x520 [ 1094.997957][ T5985] ? gid_table_release_one+0x1ad/0x450 [ 1095.003402][ T5985] ? __pfx___report_bug+0x10/0x10 [ 1095.008406][ T5985] report_bug_entry+0xe1/0x290 [ 1095.013142][ T5985] ? gid_table_release_one+0x1b6/0x450 [ 1095.018571][ T5985] handle_bug+0x18a/0x260 [ 1095.022894][ T5985] exc_invalid_op+0x17/0x50 [ 1095.027376][ T5985] asm_exc_invalid_op+0x1a/0x20 [ 1095.032203][ T5985] RIP: 0010:gid_table_release_one+0x1b6/0x450 [ 1095.038264][ T5985] Code: 4c 24 38 48 c1 e8 03 4d 01 fc 48 89 44 24 08 eb 54 48 89 34 24 e8 8a 77 4d f9 48 8d 3d 33 c1 23 08 48 8b 34 24 89 e9 44 89 f2 <67> 48 0f b9 3a e8 70 77 4d f9 48 89 d8 41 83 c6 01 48 c1 e8 03 42 [ 1095.057876][ T5985] RSP: 0018:ffffc9000475fac8 EFLAGS: 00010293 [ 1095.063934][ T5985] RAX: 0000000000000000 RBX: ffff8880795ca400 RCX: 0000000000000001 [ 1095.071878][ T5985] RDX: 0000000000000002 RSI: ffff8881422c5b00 RDI: ffffffff90953270 [ 1095.079822][ T5985] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed1006a5d080 [ 1095.087773][ T5985] R10: ffff8880352e8403 R11: ffffffff812ba1ca R12: ffffed100f2b949b [ 1095.095717][ T5985] R13: ffff8880368a0000 R14: 0000000000000002 R15: dffffc0000000000 [ 1095.103670][ T5985] ? ret_from_fork_asm+0x1a/0x30 [ 1095.108604][ T5985] ? gid_table_release_one+0x1a6/0x450 [ 1095.114042][ T5985] ib_device_release+0xef/0x1e0 [ 1095.118988][ T5985] ? __pfx_ib_device_release+0x10/0x10 [ 1095.124454][ T5985] device_release+0xa4/0x240 [ 1095.129033][ T5985] kobject_put+0x1ef/0x6f0 [ 1095.133437][ T5985] put_device+0x1f/0x30 [ 1095.137567][ T5985] process_one_work+0x9ba/0x1b20 [ 1095.142486][ T5985] ? __pfx_process_one_work+0x10/0x10 [ 1095.147836][ T5985] ? assign_work+0x1a0/0x250 [ 1095.152417][ T5985] worker_thread+0x6c8/0xf10 [ 1095.157043][ T5985] ? __kthread_parkme+0x19e/0x250 [ 1095.162074][ T5985] ? __pfx_worker_thread+0x10/0x10 [ 1095.167170][ T5985] kthread+0x3c5/0x780 [ 1095.171219][ T5985] ? __pfx_kthread+0x10/0x10 [ 1095.175782][ T5985] ? rcu_is_watching+0x12/0xc0 [ 1095.180590][ T5985] ? __pfx_kthread+0x10/0x10 [ 1095.185156][ T5985] ret_from_fork+0x983/0xb10 [ 1095.189734][ T5985] ? __pfx_ret_from_fork+0x10/0x10 [ 1095.194827][ T5985] ? __switch_to+0x7af/0x10d0 [ 1095.199478][ T5985] ? __pfx_kthread+0x10/0x10 [ 1095.204150][ T5985] ret_from_fork_asm+0x1a/0x30 [ 1095.208943][ T5985] [ 1095.212319][ T5985] Kernel Offset: disabled [ 1095.216635][ T5985] Rebooting in 86400 seconds..