last executing test programs: 6m51.884113183s ago: executing program 3 (id=2117): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000020000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffd92d58d07f"], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b347"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m51.782097811s ago: executing program 3 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000003c0)={0x3, "3be3e904034bd781a2ac9e8b7884eea001dbcd05bf9a81605de049346835262e60231f4c8ab647f30c258bc08eb11997a29a3bb8b2270bfb5f18dd793915c54b7abfbc50ee62914d5460106e9a7c7ca8d59614b5fc4ae505ae684e3436ecf07269507c99bb292299270dedfa0b4e819e00a6026cc223c4292077e970c02b2ff07c6a90b3a12cd979218bfa8ab7635a20a6430cc56d1806378e49ac940240bf11f4edec259ac181dc951f61ec078178bbaf25e502437c848a2bc441b5c471f795667dc3ea2bed844c072e29ac4c91535143a44a5434cd3ae83967daf0d7d5988be5dd955ae5d02248ad41afa9ddf5c8fc9cc7f4086d3baaa921435fb2efd20b29cfd0937622c9d13cdb89e7f4a6c0fc682b98ed38cc0d2f03c3826db5902064b2b0b467432cb008aa74994dc531c01134de33d90d4cbfa54fc63c40502d41cf46ebe8e00a6bcf3b68406c88c4f6edbb7fb0ecb684a3d5b62f900f306a065c7791d8a821355d93e2b9c37b77d5f465ac86b830ab67062bacecb76e0b8ab96f2b2df351bec9b463e017e30195a5f3429b0153de8ff56172ad59c299de8d0a62320daaf781185a95856f71e247ca63242787db024d0979df6355bc3e74e2a942ad31792d4887ee002a6f08213fbb6eee48447843a2ec4ba7331b784fe2591e9f6bdd7399e68310ac385d65b45bc921b01d25806ae80072fceec5021ef7e1467edc8b"}) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r7 = syz_io_uring_setup(0x911, &(0x7f0000000180)={0x0, 0x6c6b, 0x1, 0x2, 0xf6}, &(0x7f00000000c0), &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x4110810, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r8, &(0x7f0000006100)={0x2020}, 0x2020) 6m50.645869993s ago: executing program 3 (id=2122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x3, 0xffff}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20008850) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100003040000ffffffffffffffa17400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 6m50.619479627s ago: executing program 3 (id=2123): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() tgkill(r0, r0, 0x28) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = dup(r1) write$nbd(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="6744669801000080"], 0x10) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file1\x00', 0x0, 0xbacc81, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002800c00028005000100000000002c000180140003"], 0x58}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4ff000000b87110b7010000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r4) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf2501000000050007000700000006000a0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040890}, 0xc000810) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 6m48.706190134s ago: executing program 3 (id=2132): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ffffffd92d58d07f"], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b347"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6m48.281903973s ago: executing program 3 (id=2134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, &(0x7f0000000140)={0x20, 0x5, 0x4d, {0x4d, 0x4, "3ff0c061f87513edeb58632d5b1d7a92a4c90c299904ddf00f5b32504d47a6594e082880d5aff3a875f460e724950e5e558fb9fa0f479fcd24f9790475d12b1529856d5d9a22838fe2da2b"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x8, "abb54dea"}, @global=@item_4={0x3, 0x1, 0x8, "e896ed57"}, @local=@item_012={0x1, 0x2, 0x9, "88"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xc0, 0x1, {0x22, 0xed7}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x0, 0x12, 0x66, "0f802b1e3eb4594b432e9a36173bf2053e7ecc22aa4c31667ce2e9b3d803a4193c1d97cd3394f9184e89533767f1d080d8efbff2fc81a8886ccd0e821fbc107931ccd1547014dadc1cb6515841573ca51614d5436fb081ec1266aeb7b86b56304c72494736da"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000480)={0x20, 0x1, 0xef, "2ddd7a35b5022ee61161d18ebc6f968493bfe11ea16e56fa8bf018d66f6079fa0ab666d39adda39d7529208a5f44537333f9f0da498faa23751705d572df4afeb8f7c200263b0de3252d2e175c521d53a6545067629f1a05d7af4ff93d0a05eaa96dc293324ff2b24c176f9f274292a631d626f904f7437cb3065ef0bb88abad0e1b9ad8177b61c9ac3f05df882648a9abc3c01e920ad094aff85a50ab0154f8ef9b7d696b24183362b383423e7927198281d4c02c06786ad7aafc7351a52e9e7cd6fa2321b80bc9ab87a18fcd8512a37a0c6fd76296f60c3b06f5a03c088affc4000df9436e69a0b0c9e0658cc4ec"}, &(0x7f0000000340)={0x20, 0x3, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2600c0a8}, 0x0) listen(r2, 0x1) 6m47.82444869s ago: executing program 32 (id=2134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, &(0x7f0000000140)={0x20, 0x5, 0x4d, {0x4d, 0x4, "3ff0c061f87513edeb58632d5b1d7a92a4c90c299904ddf00f5b32504d47a6594e082880d5aff3a875f460e724950e5e558fb9fa0f479fcd24f9790475d12b1529856d5d9a22838fe2da2b"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0xd, {[@main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x8, "abb54dea"}, @global=@item_4={0x3, 0x1, 0x8, "e896ed57"}, @local=@item_012={0x1, 0x2, 0x9, "88"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xc0, 0x1, {0x22, 0xed7}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x0, 0x12, 0x66, "0f802b1e3eb4594b432e9a36173bf2053e7ecc22aa4c31667ce2e9b3d803a4193c1d97cd3394f9184e89533767f1d080d8efbff2fc81a8886ccd0e821fbc107931ccd1547014dadc1cb6515841573ca51614d5436fb081ec1266aeb7b86b56304c72494736da"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x17}, &(0x7f0000000480)={0x20, 0x1, 0xef, "2ddd7a35b5022ee61161d18ebc6f968493bfe11ea16e56fa8bf018d66f6079fa0ab666d39adda39d7529208a5f44537333f9f0da498faa23751705d572df4afeb8f7c200263b0de3252d2e175c521d53a6545067629f1a05d7af4ff93d0a05eaa96dc293324ff2b24c176f9f274292a631d626f904f7437cb3065ef0bb88abad0e1b9ad8177b61c9ac3f05df882648a9abc3c01e920ad094aff85a50ab0154f8ef9b7d696b24183362b383423e7927198281d4c02c06786ad7aafc7351a52e9e7cd6fa2321b80bc9ab87a18fcd8512a37a0c6fd76296f60c3b06f5a03c088affc4000df9436e69a0b0c9e0658cc4ec"}, &(0x7f0000000340)={0x20, 0x3, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff2}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2600c0a8}, 0x0) listen(r2, 0x1) 4m32.783437972s ago: executing program 1 (id=2616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 64) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) (rerun: 64) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x177, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0xe6, 0x9c, 0x4c, 0x0, 0x2dab, 0xaa4e, 0x972f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x165, 0x3, 0x0, 0x81, 0xd0, 0x9, [{{0x9, 0x4, 0xa2, 0x96, 0x8, 0x2, 0xc, 0x7, 0x8, [@generic={0x31, 0x22, "a1e587f90bb22d4fa54a1f6494a2a4423f0eca33a50bf49ed9e8b2837128be2389a276082fd0932c45e8c62f745bc9"}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0x3, 0xc, 0x8, [@generic={0x2, 0x1}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0xbb, 0xb, 0xc3}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x4, 0xc6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xb4, 0x3}, @generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x41, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x12, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x33, 0x32, 0xf4, [@generic={0x23, 0xe3742f93f0f8d949, "c4a570ea9c43819fd68b9367cf25d6a24ca4dc32894ea3351e3771accc88c0752d"}, @generic={0x7d, 0x6, "e3559214670313c0fa176f0b2eb05df9c05d94176251c99c5a7781233594811c7501c338e803092037b7be012d5702d33606fb476f413466421f241004ecfb11fb52f564a01ec340f63aa12be7dcca564b55c39cf75f3bf01ad64252d3c4ed69e329b3b59b034575ab00ba7aa9a601cd1c63dc464eca29b8456e09"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0xa4, 0x1, 0xf7}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x7, 0x5, 0x8}}]}}, {{0x9, 0x4, 0x51, 0x2, 0x0, 0x52, 0x9d, 0xaa, 0xb2}}, {{0x9, 0x4, 0x9b, 0x3, 0x2, 0xef, 0xaa, 0x30, 0x3, [], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0x2, 0x3}}, {{0x9, 0x5, 0x88, 0x1, 0x50, 0x0, 0x7, 0xf8}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="050f0f00010abe380000000501f8"]}) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) (async, rerun: 64) setreuid(0x0, 0xee00) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x8002) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r10) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)) 4m26.271893112s ago: executing program 1 (id=2627): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x60}) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="360f01cb0f01c936260fc71d0f20d86635200000000f22d86666f30f1ef8baf80c66b84d90118e66efbafc0cb000ee66b9800000c00f326635008000000f30ba6100b006ee2e0f01c90f20e06635000200000f22e0", 0x55}], 0x1, 0x4f, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0xb) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1371a787e8dbe53ea6acc96e3a2500600bd3fe39558128bbad0099cebdc25f59060c9e6d68005000000000000000000000000de0eaae3f904ab1f", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000000)={r5, 0x1, r4, 0x0, 0x80000}) fcntl$setflags(r3, 0x2, 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r6, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7}, 0x50) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x14, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) (async, rerun: 64) ioctl$BLKRRPART(r3, 0x125f, 0x0) 4m26.022148136s ago: executing program 1 (id=2630): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x2c8}}, 0x4048010) 4m25.929942691s ago: executing program 1 (id=2632): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 4m24.980694003s ago: executing program 1 (id=2637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x43, 0x8001, 0x0, 0x9, 0x0, 0x1000000000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(0x0, 0x0, 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0xd}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r2, &(0x7f00000000c0)='./bus\x00', 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) inotify_init1(0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) (async, rerun: 32) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) (rerun: 32) 4m24.837743572s ago: executing program 1 (id=2640): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0xa, 0x7, 0x5}, {0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfd, 0x4, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0xfa, 0x5, 0x6, 0xff, 0x9}, 0xf7, &(0x7f0000000340)={0x5, 0xf, 0xf7, 0x4, [@generic={0x5c, 0x10, 0x3, "c0d1eb591478e88b528f63c0059f5893fe9a3de657d3b8fae959f0c4631c89a5366dbc355e983bb506942d465df040e7f9acb9c38c9f2c5c39c0729430023150c6428b14e4346a82760ac85b09befb3d6722137b82e43532c8"}, @generic={0x90, 0x10, 0x2, "34382806238d581c5365869de3daf76caf717cbb16cb2ee578fb611fbe449434e7a9d2707cde649573999c39c3226b1158aa7d7fced9decb0ed8d8456e8ce599f0f4e768071b16792750bfe586c376bfa00fe10e662472bad5490206b6976cbc9710a11ae2754e7f48e8629b81f28876d1804ee51c6b2557a517e9c6d9c729dcdac49aaca463307df88544527c"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "e17942791a099c727b857e19fea00e0ac5baf36220e71428b3dde3444753489cf6fc8bf1282edcc7c61a66d86e45303ff3044987ef7d7b28cdd21d1b06a9c9adcce49362da6d713981153998bb83de4a1d44b4ff6b873a1832e6760763525354b06c9116544962276f583aea925e7aa42715110e0dd27c419f1bcd9288abeab9a29363c0c283477e3559cb6d25ba156a0d5bbef61f43469e83c7a8d184e614644db65a840a49df0fa63bbb4a3e05"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}]}) (async, rerun: 32) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) 4m24.126366267s ago: executing program 33 (id=2640): syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0xa, 0x7, 0x5}, {0x4}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfd, 0x4, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0xfa, 0x5, 0x6, 0xff, 0x9}, 0xf7, &(0x7f0000000340)={0x5, 0xf, 0xf7, 0x4, [@generic={0x5c, 0x10, 0x3, "c0d1eb591478e88b528f63c0059f5893fe9a3de657d3b8fae959f0c4631c89a5366dbc355e983bb506942d465df040e7f9acb9c38c9f2c5c39c0729430023150c6428b14e4346a82760ac85b09befb3d6722137b82e43532c8"}, @generic={0x90, 0x10, 0x2, "34382806238d581c5365869de3daf76caf717cbb16cb2ee578fb611fbe449434e7a9d2707cde649573999c39c3226b1158aa7d7fced9decb0ed8d8456e8ce599f0f4e768071b16792750bfe586c376bfa00fe10e662472bad5490206b6976cbc9710a11ae2754e7f48e8629b81f28876d1804ee51c6b2557a517e9c6d9c729dcdac49aaca463307df88544527c"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "e17942791a099c727b857e19fea00e0ac5baf36220e71428b3dde3444753489cf6fc8bf1282edcc7c61a66d86e45303ff3044987ef7d7b28cdd21d1b06a9c9adcce49362da6d713981153998bb83de4a1d44b4ff6b873a1832e6760763525354b06c9116544962276f583aea925e7aa42715110e0dd27c419f1bcd9288abeab9a29363c0c283477e3559cb6d25ba156a0d5bbef61f43469e83c7a8d184e614644db65a840a49df0fa63bbb4a3e05"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}]}) (async, rerun: 32) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) 8.756759701s ago: executing program 2 (id=3776): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x88000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000032680)=""/4096, 0x41100, 0xbc16a17751e7d86b, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5cc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r6}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="0100000000000000000004000000080002"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.277273669s ago: executing program 2 (id=3779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r0, 0x2a, 0x1, 0x7, &(0x7f00000005c0)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r5}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r3, r0, 0x2a, 0x20, r0, @void, @void, @void, @value=r5, r2}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010002104fcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000adc5ab29271d1c2a1d2002400128009000100626f6e640000", @ANYRES32=0x0, @ANYBLOB="0500010005000000"], 0x44}, 0x1, 0x0, 0x0, 0x80000}, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000001, 0x8010, r0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x3f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x3d, "1a004e0078768000", 0x4, 0x2}) ioctl$KVM_PRE_FAULT_MEMORY(r0, 0xc040aed5, &(0x7f0000000540)={0x58000, 0x10c000}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r6, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0x68) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0xb) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000200)=0x5) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000580)={&(0x7f0000003000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, 0x3000}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x60) 7.540013714s ago: executing program 6 (id=3780): write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000020000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c709"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.294095251s ago: executing program 5 (id=3781): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000fc8f5769d3cb1674550000009500000000000000b8bb727f5ec3ca13c061f8bffe2c05acc4f157f587103264ec24fdc0af2ea66ed9b97a0febd556f23e26b9fc3dbeecd4628b58f0bc2df1e867430e3e61dde77c353f1056a223ecbf1b86602de30d98df5edf68a6ace9f597e66d20f72f9e2f69ce84a30b8f87cf6a99b8287f464fd2d148dbd0139787805787ac80622b2c67e68fb6c72abaf6c91c878d6df843a2ced0b1167798f12483506ef39631c6a256bf6c5bd1fbafa918af80172355c34bb735e3b9507f2f1d"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x6728, 0x4000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[], 0xa8}}, 0x40080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) socket$inet(0x2, 0x2, 0x0) r6 = fanotify_init(0x20, 0x80000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r6, 0x1, 0x4000001a, r7, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000726) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) 6.725915057s ago: executing program 5 (id=3783): mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x103) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x1002000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xc}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x35, 0x66, 0x34, 0x35, 0x5c, 0x30, 0x34], 0x2d, [0x63, 0x62, 0x39, 0x39], 0x2d, [0x62, 0x39, 0x31, 0x36], 0x2d, [0x66, 0x30, 0x34, 0x63], 0x2d, [0x30, 0x32, 0x65, 0x4, 0x38, 0x30, 0x37, 0x39]}}}, {@obj_role={'obj_role', 0x3d, 'rootmode'}}, {@smackfshat={'smackfshat', 0x3d, 'GPL\x00'}}]}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.6214917s ago: executing program 0 (id=3784): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = syz_io_uring_setup(0x6b38, &(0x7f0000000080)={0x0, 0xf57, 0x8, 0x0, 0x202}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4, 0x2010, r0, 0x8000000) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(0xffffffffffffffff, 0x351e, 0x483, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000000)={r6, 0x400}, 0x8) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0xfffffffffffffffe, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797aff0700000000000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.162574664s ago: executing program 0 (id=3785): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000020000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYBLOB="ffffffd92d58d07f"], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b347"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.048105256s ago: executing program 4 (id=3786): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000020000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYBLOB="ffffffd92d58d07f"], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b347"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.989920742s ago: executing program 4 (id=3787): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r2}, {}, 0xfffffffc, 0x80000001}) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r7, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0xe23c, 0x3, 0x3, 0x1f580dc9, 0x42, 0x66da, 0xdd3, 0xc86d, 0x200]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1dea}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xec6}]}, 0x58}, 0x1, 0x0, 0x0, 0x91ffddaf2387c68c}, 0x20000080) mprotect(&(0x7f0000a52000/0x3000)=nil, 0x3000, 0x1) 5.654460265s ago: executing program 6 (id=3788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) keyctl$dh_compute(0x17, &(0x7f00000002c0), &(0x7f0000000300)=""/66, 0x42, &(0x7f00000004c0)={&(0x7f0000000380)={'michael_mic\x00'}, &(0x7f00000003c0)="bf7bad03e4811d011fbc9c37acf1f0d7b4f72480e30cbb1df2e7a45fe902fdeae05134e2f13408e2306664120f7dce7c281455696f7f7e79ac236096bb0ac548afc8f1ade96cbfd243c799d54a050d473412af62bbf1405306c37649a1f07eb4bde9e514ac55e20dc58a2b856d8b77a0af238617b0a1fca6725b899187e0125755de0259fe6775bb8f2e1b6150024b89d4fe2ac5f79f1d70eda09d0c1f509aa9ddfa6d662191bffc39d8ac3dcd2e4b53c093d9c141bd12dc49667835af295b41c1b12f959bd079ccd017a0574290531eaa", 0xd1}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x915}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe98a}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x45) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@gettaction={0x70, 0x32, 0x709, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) 5.180873654s ago: executing program 2 (id=3789): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4000004) 5.147408598s ago: executing program 0 (id=3790): socket(0x10, 0x3, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsmount(r1, 0x0, 0x20) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x18000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.008595077s ago: executing program 2 (id=3791): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 4.918980689s ago: executing program 4 (id=3792): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000000)="800000800000decd7a00000086ddffff88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x30, 0x6, @broadcast}, 0x14) 3.80975431s ago: executing program 6 (id=3793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000180)={0x29, 0xffffff7f, 0xf67}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x84, 0x0, 0x0) 3.437532809s ago: executing program 0 (id=3794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x8dd3, 0x800, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2002042, &(0x7f0000000400)={'trans=virtio,', {[{@cache_readahead}, {@uname={'uname', 0x3d, 'syz2\x00'}}, {@cache_readahead}, {@loose}, {@mmap}, {@access_any}, {@cachetag={'cachetag', 0x3d, 'sched_switch\x00'}}], [{@appraise_type}, {@obj_type={'obj_type', 0x3d, '(\'){'}}, {@obj_user={'obj_user', 0x3d, ',&\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x39, 0x35, 0x31, 0x33, 0x64, 0x65, 0x39], 0x2d, [0x62, 0x64, 0x54, 0x33], 0x2d, [0x32, 0x39, 0x39, 0x66], 0x2d, [0x38, 0x66, 0x38, 0x66], 0x2d, [0x37, 0x65, 0x37, 0x33, 0x31, 0x62, 0x65, 0x30]}}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x6, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000e0f4ffffffff0000ffff0900030073797a84000000001400048008000240000000000800014000000005090c010073797a310000000048000000050a4f010000000000000010e9ff20000c00024000000000000000010900010073797a3100670026047d87ff0000001c0008800c0002c000000000000000040c000140000000000000000914000000110001000000000000"], 0xd0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x24, 0x29, 0xb, {0x0, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x0, 0xdfda}}]}}}], 0x24}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff8001}]}, 0x3c}}, 0x10) 3.248198442s ago: executing program 4 (id=3795): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) keyctl$dh_compute(0x17, &(0x7f00000002c0), &(0x7f0000000300)=""/66, 0x42, &(0x7f00000004c0)={&(0x7f0000000380)={'michael_mic\x00'}, &(0x7f00000003c0)="bf7bad03e4811d011fbc9c37acf1f0d7b4f72480e30cbb1df2e7a45fe902fdeae05134e2f13408e2306664120f7dce7c281455696f7f7e79ac236096bb0ac548afc8f1ade96cbfd243c799d54a050d473412af62bbf1405306c37649a1f07eb4bde9e514ac55e20dc58a2b856d8b77a0af238617b0a1fca6725b899187e0125755de0259fe6775bb8f2e1b6150024b89d4fe2ac5f79f1d70eda09d0c1f509aa9ddfa6d662191bffc39d8ac3dcd2e4b53c093d9c141bd12dc49667835af295b41c1b12f959bd079ccd017a0574290531eaa", 0xd1}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x915}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe98a}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x45) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@gettaction={0x70, 0x32, 0x709, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) 2.058346149s ago: executing program 4 (id=3796): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.950283695s ago: executing program 0 (id=3797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, 0x0, 0x0) 1.890121038s ago: executing program 5 (id=3798): write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000000000020000004500002800000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x36) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000300)={0x1, 0x0, [0x0, 0x7, 0x0, 0x3b], 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800450000b0000000000011907800000000000000004e214e20009c907801000000030000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a06883ad5c8c82b8af584cbf2600fcffffbc43efa8698d26881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd0000000000bcfd56f1375461caaa2f19935e6996c709"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.871048772s ago: executing program 0 (id=3799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x8000000, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.703556553s ago: executing program 5 (id=3800): syz_open_dev$video(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000020c0)='smaps\x00') mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10001, 0x1, 0x28}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.700923001s ago: executing program 2 (id=3801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00'}) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x80, 0xd}) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0x6, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x14c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r4, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0) write$binfmt_elf64(r4, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0xfffffffffffffe2f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 1.513922219s ago: executing program 6 (id=3802): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x4000004) 797.294418ms ago: executing program 6 (id=3803): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001e80)="e111ba37c6b5d23310df9b2bff68adc442522f48f374775e697ff0ddceb9ddefeb2ab2962dab233912657af079fc08a94c3baf1106e9959d854d7ab1ea89036b19d9976ab22b18b7c92fc8980a4b14e6ff99e0c86d28721a8e6cc65093c1e28486cbe518055a63bbd41a64c5987a755205773f76080e3f048f75917818dab2f6f4dc575218a5c42ccad931276dc198d22774e27302a75568766f3a3bfec1e3c2292b6179ae39f27a7f2cb714ec3a715389153d7a53139de1e85d6a8a6ac04d6840ea9f85ffc2ed66a6662178d1a66f0ff3d0583846ae4042548994040761e2992711562847b87f0ddb60bb4828d1bd110589745b", 0xf4}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="de7761a8f810ddbf1066fa37f6dc8d438316fd64e3ffd9e464776539d0a0da52fca771b0c6bfbb1714aecbb3ed44385eb988df2f2e020cedfc1b39a9fccf4c2533aae1c53c7d3a1f78faa5db45ea7ce6fecd3dfbcd90d3a88ea5f2c6b7182533c250d54cb1ef9bb530359338b086234f715b0c3d7271f085dd5c903156b757b60f29366f1cc464be5a164f269da5", 0x8e}, {&(0x7f0000001480)="b980eeaec557f9d6863a023768c5172fc821e9e9237322f5285b887381dcda08ab22ac8661adc1cdc0eab40d73ebfffd376c558e1e7b5371114444b828383925f0048fe9b159444ce2a29508ff9497683f6f0d79ccb59f71be245bbe8ab5e959ff111bedbdbaf06b90e1e999245cd6a5be719be2c32b96b6d88083240c", 0x7d}, {&(0x7f0000001500)="ff3d8e6e12901bbe18533c5126e9f0feca670e64f4711e2074656c9b0baff8d8a66874875b03b134d0dc6efe064417a9143267b4b841c6327c1e0c5e1df3e202451216837695", 0x46}, {&(0x7f0000001580)="2ee2ac4ba2514392ff688312e35f3270a790a9e80c9577829a7c39f12cf70cb1ebdc65", 0x23}], 0x6, 0x0, 0x0, 0x40805}}, {{&(0x7f0000001640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x2c, 0x1, 0x1, [r2, r3, r3, r3, r3, r3, r2]}}], 0x30, 0x4044000}}, {{&(0x7f0000001c00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c80)="cad49d6b797f58c0913ad6568d1244282427eb709092023c351e029f02b8c975209d6c49622ba01a309a87e15827b59f7b863d7ed56305c90c0362fae560e738d4db0082b66f75633727fbe51be6909fb24bf33e4d8ec66cb5892c760806fe84c351ea04b26a0840deeb8ad009dfc6ba03453e3b59c748bc8324db3bb0fd45e2326767fe67f8f3a9f3a66495b9146a050d124fbc82d62feb7711aa8e5eb7457dcd77853e47af32164c0e3ab492cbd814a389d765ca2f50da8d7293d7544e497bab5943b57da6e4bde9c3e28b68ba", 0xce}], 0x1, 0x0, 0x0, 0x4}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0xfc80}}, 0x0) r7 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 696.652799ms ago: executing program 6 (id=3804): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x0, 0x989680}, 0x0, 0x0) epoll_create(0x101) (async) open(&(0x7f00009e1000)='./file0\x00', 0x4c802, 0xad) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200fffe3800048034000180090001007866726d000000002400028008000440000000150800024000000004080001400000000c05000300010000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 603.401217ms ago: executing program 2 (id=3805): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001e00050429bd7000fddbdf25fe8000000000000000000000000000330001010000fa3c00ff010000000000000000000000000001001000000635000010000a002cbd70002cbd7000010100009cce99319b19cd64040d397253b57663497d90ab1676ee5a1b224a38c0c125962a4da7f4f406d8d773506abc2dbb2ebb6dba33bfc221d5acb01889b8b2118ba0a605fee948ff452e03b8f8e9401a4ff58b6680e5af2e906b2a08d4d8c7feda8992ec9e1ba30bfaf9f0dc492a67c20e92a8b23e800153f82bb8ffd4b78554647cdcf517d6485fee560c2ca3ca02e9b43fb77593aa3425e780882144d2042f19"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40000080) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x5, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x9, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x4, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x3da3affe, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 214.01898ms ago: executing program 5 (id=3806): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x9000000) 60.50138ms ago: executing program 4 (id=3807): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) keyctl$dh_compute(0x17, &(0x7f00000002c0), &(0x7f0000000300)=""/66, 0x42, &(0x7f00000004c0)={&(0x7f0000000380)={'michael_mic\x00'}, &(0x7f00000003c0)="bf7bad03e4811d011fbc9c37acf1f0d7b4f72480e30cbb1df2e7a45fe902fdeae05134e2f13408e2306664120f7dce7c281455696f7f7e79ac236096bb0ac548afc8f1ade96cbfd243c799d54a050d473412af62bbf1405306c37649a1f07eb4bde9e514ac55e20dc58a2b856d8b77a0af238617b0a1fca6725b899187e0125755de0259fe6775bb8f2e1b6150024b89d4fe2ac5f79f1d70eda09d0c1f509aa9ddfa6d662191bffc39d8ac3dcd2e4b53c093d9c141bd12dc49667835af295b41c1b12f959bd079ccd017a0574290531eaa", 0xd1}) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x915}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe98a}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x45) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@gettaction={0x70, 0x32, 0x709, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) futex_waitv(&(0x7f0000001b00)=[{0xffb, 0x0, 0xa}], 0x1, 0x0, 0x0, 0x1) 0s ago: executing program 5 (id=3808): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c822a06900000000", @ANYRES32, @ANYBLOB="75d400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = fcntl$dupfd(r1, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, r3}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x91) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000200)='./file1\x00', r2, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10000000}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = fanotify_init(0x200, 0x80000) fanotify_mark(r7, 0x1, 0x4800100b, r6, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r8, 0x0, 0x4) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) io_uring_enter(r3, 0x583d, 0x9b37, 0x8, &(0x7f0000000240)={[0x1]}, 0x8) kernel console output (not intermixed with test programs): nce. Setting the MTU to 1532 would solve the problem. [ 816.743533][T17130] batman_adv: batadv0: Interface activated: wlan0 [ 816.832222][ T24] usb 7-1: config 1 interface 0 altsetting 10 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 816.857164][T16960] veth1_macvtap: entered promiscuous mode [ 816.905077][ T24] usb 7-1: config 1 interface 0 altsetting 10 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 816.959687][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 817.002915][ T24] usb 7-1: string descriptor 0 read error: -22 [ 817.005340][T16960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.018289][T17143] Mount JFS Failure: -5 [ 817.022518][T17143] jfs_mount failed w/return code = -5 [ 817.022716][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.033945][T16960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.106183][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.278265][ T4759] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.315187][ T24] usb 7-1: can't set config #1, error -71 [ 817.351931][ T24] usb 7-1: USB disconnect, device number 12 [ 817.375595][ T4759] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.645739][ T4759] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.695130][ T6161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.695235][ T4759] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.702951][ T6161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.824571][ T4759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.833671][ T4759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.026520][ T30] audit: type=1400 audit(2000000296.619:1356): avc: denied { write } for pid=17150 comm="syz.6.3123" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 818.303074][ T30] audit: type=1400 audit(2000000296.679:1357): avc: denied { bind } for pid=17150 comm="syz.6.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 818.362353][ T30] audit: type=1400 audit(2000000296.679:1358): avc: denied { name_bind } for pid=17150 comm="syz.6.3123" src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 818.470206][ T30] audit: type=1400 audit(2000000296.679:1359): avc: denied { node_bind } for pid=17150 comm="syz.6.3123" saddr=fc02::1 src=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 818.897127][T17169] netlink: zone id is out of range [ 818.916516][T17169] netlink: zone id is out of range [ 818.931612][T17169] netlink: zone id is out of range [ 818.952040][T17169] netlink: zone id is out of range [ 818.980808][T17169] netlink: zone id is out of range [ 818.994913][T17169] netlink: zone id is out of range [ 819.000044][T17169] netlink: zone id is out of range [ 819.030096][T17169] netlink: zone id is out of range [ 819.076913][T17169] netlink: zone id is out of range [ 820.224724][T13699] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 820.386143][T17193] Mount JFS Failure: -5 [ 820.390406][T17193] jfs_mount failed w/return code = -5 [ 820.645027][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.728310][T17199] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 820.752806][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.802736][T13699] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 820.812913][T13699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.831386][T13699] usb 5-1: config 0 descriptor?? [ 821.164775][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 821.297127][T13699] razer 0003:1532:010E.0043: unknown main item tag 0x2 [ 821.307954][T13699] razer 0003:1532:010E.0043: item fetching failed at offset 4/5 [ 821.336360][T13699] razer 0003:1532:010E.0043: probe with driver razer failed with error -22 [ 821.365077][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 821.371621][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.392682][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.411648][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 821.453686][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.641257][ T5966] usb 5-1: USB disconnect, device number 27 [ 821.651575][ T24] usb 6-1: config 0 descriptor?? [ 822.071334][ T30] audit: type=1400 audit(2000000300.299:1360): avc: denied { write } for pid=17215 comm="syz.0.3139" path="socket:[58887]" dev="sockfs" ino=58887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 822.382846][ T24] koneplus 0003:1E7D:2D51.0044: unknown main item tag 0x0 [ 822.390645][ T24] koneplus 0003:1E7D:2D51.0044: unknown main item tag 0x0 [ 822.409238][ T24] koneplus 0003:1E7D:2D51.0044: unknown main item tag 0x0 [ 822.422248][ T24] koneplus 0003:1E7D:2D51.0044: unknown main item tag 0x0 [ 822.468831][ T24] koneplus 0003:1E7D:2D51.0044: unknown main item tag 0x0 [ 822.493642][ T24] koneplus 0003:1E7D:2D51.0044: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 822.845208][ T30] audit: type=1400 audit(2000000301.269:1361): avc: denied { bind } for pid=17231 comm="syz.4.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 823.033694][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 823.086595][ T5953] usb 6-1: USB disconnect, device number 13 [ 823.254602][ T30] audit: type=1400 audit(2000000301.839:1362): avc: denied { associate } for pid=17246 comm="syz.6.3147" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 823.844820][ T30] audit: type=1400 audit(2000000302.349:1363): avc: denied { read } for pid=17246 comm="syz.6.3147" lport=52781 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 824.785505][T17265] hugetlbfs: syz.6.3152 (17265): Using mlock ulimits for SHM_HUGETLB is obsolete [ 825.351727][T17268] wireguard0: entered promiscuous mode [ 825.357370][T17268] wireguard0: entered allmulticast mode [ 825.704873][T17062] Bluetooth: hci2: command 0x0405 tx timeout [ 825.760923][T17274] overlayfs: failed to verify upper (8/file1, ino=67, err=-116) [ 825.775055][T17274] overlayfs: failed to verify index dir 'upper' xattr [ 825.799469][T17274] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 827.181552][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3160'. [ 827.199208][T17300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3160'. [ 827.615757][T17300] netlink: 'syz.6.3160': attribute type 11 has an invalid length. [ 827.623614][T17300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3160'. [ 827.636535][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.644049][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.652108][T17300] bridge0: entered allmulticast mode [ 828.451459][T17309] trusted_key: encrypted_key: insufficient parameters specified [ 828.471911][T17309] team_slave_0: entered promiscuous mode [ 828.496951][T17309] team_slave_0: entered allmulticast mode [ 828.601840][T17318] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3165'. [ 830.094934][T17353] ubi: mtd0 is already attached to ubi31 [ 830.721981][T17366] FAULT_INJECTION: forcing a failure. [ 830.721981][T17366] name failslab, interval 1, probability 0, space 0, times 0 [ 830.734881][T17366] CPU: 0 UID: 0 PID: 17366 Comm: syz.6.3179 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.734909][T17366] Tainted: [L]=SOFTLOCKUP [ 830.734915][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.734924][T17366] Call Trace: [ 830.734931][T17366] [ 830.734938][T17366] dump_stack_lvl+0x16c/0x1f0 [ 830.734965][T17366] should_fail_ex+0x512/0x640 [ 830.734986][T17366] ? fs_reclaim_acquire+0xae/0x150 [ 830.735007][T17366] should_failslab+0xc2/0x120 [ 830.735027][T17366] __kmalloc_noprof+0xeb/0x910 [ 830.735049][T17366] ? tomoyo_encode2+0x100/0x3e0 [ 830.735073][T17366] ? tomoyo_encode2+0x100/0x3e0 [ 830.735091][T17366] tomoyo_encode2+0x100/0x3e0 [ 830.735112][T17366] tomoyo_encode+0x29/0x50 [ 830.735131][T17366] tomoyo_realpath_from_path+0x18f/0x6e0 [ 830.735160][T17366] tomoyo_path_number_perm+0x245/0x580 [ 830.735186][T17366] ? tomoyo_path_number_perm+0x237/0x580 [ 830.735207][T17366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 830.735244][T17366] ? lockdep_hardirqs_on+0x7c/0x110 [ 830.735263][T17366] ? irqentry_exit+0x1dd/0x8c0 [ 830.735283][T17366] ? hook_file_ioctl_common+0x144/0x410 [ 830.735319][T17366] security_file_ioctl+0x9b/0x240 [ 830.735341][T17366] __x64_sys_ioctl+0xb7/0x210 [ 830.735361][T17366] do_syscall_64+0xcd/0xf80 [ 830.735383][T17366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.735400][T17366] RIP: 0033:0x7fb341b8f749 [ 830.735415][T17366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.735430][T17366] RSP: 002b:00007fb342a49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.735448][T17366] RAX: ffffffffffffffda RBX: 00007fb341de6090 RCX: 00007fb341b8f749 [ 830.735460][T17366] RDX: 0000000000000000 RSI: 0000000000009201 RDI: 0000000000000004 [ 830.735470][T17366] RBP: 00007fb342a49090 R08: 0000000000000000 R09: 0000000000000000 [ 830.735480][T17366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.735490][T17366] R13: 00007fb341de6128 R14: 00007fb341de6090 R15: 00007fffe4a14c68 [ 830.735514][T17366] [ 830.735748][T17366] ERROR: Out of memory at tomoyo_realpath_from_path. [ 830.829125][T17062] Bluetooth: hci3: command 0x0406 tx timeout [ 831.553717][ T30] audit: type=1400 audit(2000000310.039:1364): avc: denied { execmem } for pid=17379 comm="syz.4.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 832.346979][ T30] audit: type=1400 audit(2000000310.049:1365): avc: denied { create } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 832.409733][ T30] audit: type=1400 audit(2000000310.049:1366): avc: denied { bind } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 832.547812][T17393] @: renamed from vlan0 (while UP) [ 832.554958][ T30] audit: type=1400 audit(2000000310.049:1367): avc: denied { setopt } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 832.584197][ T30] audit: type=1400 audit(2000000310.049:1368): avc: denied { accept } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 832.740131][ T30] audit: type=1400 audit(2000000310.049:1369): avc: denied { write } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 833.015369][ T30] audit: type=1400 audit(2000000310.049:1370): avc: denied { read } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 833.035480][ T30] audit: type=1400 audit(2000000310.079:1371): avc: denied { create } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.504342][ T30] audit: type=1400 audit(2000000310.079:1372): avc: denied { write } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.534978][ T30] audit: type=1400 audit(2000000310.079:1373): avc: denied { read } for pid=17380 comm="syz.5.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 835.489769][T17431] netlink: 'syz.2.3199': attribute type 1 has an invalid length. [ 835.568868][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 835.850511][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'. [ 835.860376][T17452] FAULT_INJECTION: forcing a failure. [ 835.860376][T17452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.860441][T17450] ip6_vti0: Master is either lo or non-ether device [ 835.896328][T17452] CPU: 0 UID: 0 PID: 17452 Comm: syz.5.3204 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.896357][T17452] Tainted: [L]=SOFTLOCKUP [ 835.896363][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.896373][T17452] Call Trace: [ 835.896379][T17452] [ 835.896386][T17452] dump_stack_lvl+0x16c/0x1f0 [ 835.896411][T17452] should_fail_ex+0x512/0x640 [ 835.896436][T17452] _copy_to_user+0x32/0xd0 [ 835.896462][T17452] simple_read_from_buffer+0xcb/0x170 [ 835.896487][T17452] proc_fail_nth_read+0x197/0x240 [ 835.896507][T17452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.896526][T17452] ? rw_verify_area+0xcf/0x6c0 [ 835.896544][T17452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.896561][T17452] vfs_read+0x1e4/0xcf0 [ 835.896582][T17452] ? __pfx___mutex_lock+0x10/0x10 [ 835.896606][T17452] ? __pfx_vfs_read+0x10/0x10 [ 835.896633][T17452] ? __fget_files+0x20e/0x3c0 [ 835.896664][T17452] ksys_read+0x12a/0x250 [ 835.896683][T17452] ? __pfx_ksys_read+0x10/0x10 [ 835.896705][T17452] ? fput+0x70/0xf0 [ 835.896724][T17452] do_syscall_64+0xcd/0xf80 [ 835.896749][T17452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.896767][T17452] RIP: 0033:0x7f9dde38e15c [ 835.896783][T17452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 835.896798][T17452] RSP: 002b:00007f9ddf310030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.896815][T17452] RAX: ffffffffffffffda RBX: 00007f9dde5e5fa0 RCX: 00007f9dde38e15c [ 835.896826][T17452] RDX: 000000000000000f RSI: 00007f9ddf3100a0 RDI: 0000000000000004 [ 835.896837][T17452] RBP: 00007f9ddf310090 R08: 0000000000000000 R09: 0000000000000000 [ 835.896847][T17452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.896857][T17452] R13: 00007f9dde5e6038 R14: 00007f9dde5e5fa0 R15: 00007ffda824a628 [ 835.896882][T17452] [ 836.924735][T16664] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 837.057958][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 837.057975][ T30] audit: type=1400 audit(2000000315.649:1440): avc: denied { read write } for pid=17473 comm="syz.0.3214" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 837.094919][ T30] audit: type=1400 audit(2000000315.679:1441): avc: denied { open } for pid=17473 comm="syz.0.3214" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 837.119337][T16664] usb 7-1: Using ep0 maxpacket: 32 [ 837.132578][T16664] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.149072][T16664] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.161079][T16664] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 837.170310][ T30] audit: type=1400 audit(2000000315.679:1442): avc: denied { ioctl } for pid=17473 comm="syz.0.3214" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 837.306682][T16664] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.571206][T16664] usb 7-1: config 0 descriptor?? [ 837.588239][ T30] audit: type=1400 audit(2000000315.679:1443): avc: denied { ioctl } for pid=17473 comm="syz.0.3214" path="socket:[59256]" dev="sockfs" ino=59256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 837.619889][ T30] audit: type=1400 audit(2000000315.679:1444): avc: denied { setopt } for pid=17473 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 837.640353][ T30] audit: type=1400 audit(2000000315.679:1445): avc: denied { write } for pid=17473 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 837.884942][T14510] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 837.908842][ T30] audit: type=1400 audit(2000000316.499:1446): avc: denied { mount } for pid=17481 comm="syz.5.3217" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 838.855388][T16664] koneplus 0003:1E7D:2D51.0045: unknown main item tag 0x0 [ 838.875605][T16664] koneplus 0003:1E7D:2D51.0045: unknown main item tag 0x0 [ 838.887341][T16664] koneplus 0003:1E7D:2D51.0045: unknown main item tag 0x0 [ 838.894750][T16664] koneplus 0003:1E7D:2D51.0045: unknown main item tag 0x0 [ 839.056421][T14510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.073070][T14510] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.089550][T14510] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 839.109600][T14510] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 839.123532][T14510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.136814][ T30] audit: type=1400 audit(2000000317.729:1447): avc: denied { unmount } for pid=13511 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 839.162933][T14510] usb 1-1: config 0 descriptor?? [ 839.194099][T16664] koneplus 0003:1E7D:2D51.0045: unknown main item tag 0x0 [ 839.204197][T16664] koneplus 0003:1E7D:2D51.0045: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 839.279151][ T30] audit: type=1400 audit(2000000317.869:1448): avc: denied { mount } for pid=17493 comm="syz.4.3219" name="/" dev="ramfs" ino=60059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 839.433587][ T5953] usb 7-1: USB disconnect, device number 13 [ 839.703269][ T30] audit: type=1400 audit(2000000318.289:1449): avc: denied { create } for pid=17476 comm="syz.0.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 839.786816][T17517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.805090][T17517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.825964][T14510] plantronics 0003:047F:FFFF.0046: reserved main item tag 0xd [ 839.849003][T14510] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 840.280459][T17523] fuse: Bad value for 'fd' [ 840.376386][T16664] usb 1-1: USB disconnect, device number 104 [ 840.577580][T17528] nbd: socks must be embedded in a SOCK_ITEM attr [ 840.586476][T17528] block nbd0: shutting down sockets [ 841.851538][ T5953] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 842.073611][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.088743][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.100162][ T5953] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 842.110777][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.121607][ T5953] usb 7-1: config 0 descriptor?? [ 842.557636][ T5953] hid-steam 0003:28DE:1142.0047: unknown main item tag 0x0 [ 842.566784][T17556] FAULT_INJECTION: forcing a failure. [ 842.566784][T17556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.592213][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.0.3236 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.592244][T17556] Tainted: [L]=SOFTLOCKUP [ 842.592251][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.592257][T17556] Call Trace: [ 842.592261][T17556] [ 842.592266][T17556] dump_stack_lvl+0x16c/0x1f0 [ 842.592285][T17556] should_fail_ex+0x512/0x640 [ 842.592303][T17556] _copy_from_user+0x2e/0xd0 [ 842.592320][T17556] copy_msghdr_from_user+0x98/0x160 [ 842.592332][T17556] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 842.592345][T17556] ? __pfx__kstrtoull+0x10/0x10 [ 842.592359][T17556] ___sys_sendmsg+0xfe/0x1d0 [ 842.592370][T17556] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.592393][T17556] ? __pfx___might_resched+0x10/0x10 [ 842.592407][T17556] __sys_sendmmsg+0x200/0x420 [ 842.592419][T17556] ? __pfx___sys_sendmmsg+0x10/0x10 [ 842.592434][T17556] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 842.592454][T17556] ? fput+0x70/0xf0 [ 842.592464][T17556] ? ksys_write+0x1ac/0x250 [ 842.592477][T17556] ? __pfx_ksys_write+0x10/0x10 [ 842.592492][T17556] __x64_sys_sendmmsg+0x9c/0x100 [ 842.592503][T17556] ? lockdep_hardirqs_on+0x7c/0x110 [ 842.592516][T17556] do_syscall_64+0xcd/0xf80 [ 842.592530][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.592541][T17556] RIP: 0033:0x7f22faf8f749 [ 842.592551][T17556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.592562][T17556] RSP: 002b:00007f22fbe58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 842.592574][T17556] RAX: ffffffffffffffda RBX: 00007f22fb1e6090 RCX: 00007f22faf8f749 [ 842.592581][T17556] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 842.592587][T17556] RBP: 00007f22fbe58090 R08: 0000000000000000 R09: 0000000000000000 [ 842.592593][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.592599][T17556] R13: 00007f22fb1e6128 R14: 00007f22fb1e6090 R15: 00007ffca6ee77c8 [ 842.592613][T17556] [ 842.800041][ T5953] hid-steam 0003:28DE:1142.0047: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 842.864878][ T5953] hid-steam 0003:28DE:1142.0047: Steam wireless receiver connected [ 842.874517][ T5953] hid-steam 0003:28DE:1142.0047: No HID_FEATURE_REPORT submitted - nothing to read [ 842.887373][ T5953] hid-steam 0003:28DE:1142.0048: unknown main item tag 0x0 [ 842.899731][ T5953] hid-steam 0003:28DE:1142.0048: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 842.973521][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 842.973536][ T30] audit: type=1400 audit(2000000320.561:1457): avc: denied { read write } for pid=17564 comm="syz.4.3239" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 843.050642][ T30] audit: type=1400 audit(2000000320.561:1458): avc: denied { open } for pid=17564 comm="syz.4.3239" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 843.332485][T13699] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 843.335868][ T30] audit: type=1400 audit(2000000320.571:1459): avc: denied { map } for pid=17564 comm="syz.4.3239" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 843.515053][T13699] usb 6-1: Using ep0 maxpacket: 32 [ 843.525077][T13699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.542872][T13699] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.553366][ T30] audit: type=1400 audit(2000000320.571:1460): avc: denied { read write } for pid=17564 comm="syz.4.3239" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=60169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 843.584860][T13699] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 843.594450][T13699] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.607915][T13699] usb 6-1: config 0 descriptor?? [ 844.352066][T13699] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 844.359685][T13699] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 844.366954][T13699] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 844.388727][T13699] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 844.399091][T13699] koneplus 0003:1E7D:2D51.0049: unknown main item tag 0x0 [ 844.420730][T13699] koneplus 0003:1E7D:2D51.0049: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 844.761766][ T30] audit: type=1400 audit(2000000322.351:1461): avc: denied { read } for pid=17580 comm="syz.4.3242" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 845.036656][T17142] usb 6-1: USB disconnect, device number 14 [ 845.089719][ T30] audit: type=1400 audit(2000000322.351:1462): avc: denied { open } for pid=17580 comm="syz.4.3242" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 845.132259][ T30] audit: type=1400 audit(2000000322.351:1463): avc: denied { ioctl } for pid=17580 comm="syz.4.3242" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 845.171270][ T30] audit: type=1400 audit(2000000322.351:1464): avc: denied { create } for pid=17580 comm="syz.4.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 845.211171][ T30] audit: type=1400 audit(2000000322.801:1465): avc: denied { create } for pid=17585 comm="syz.2.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 845.239292][ T5966] usb 7-1: USB disconnect, device number 14 [ 845.250235][ T30] audit: type=1400 audit(2000000322.841:1466): avc: denied { create } for pid=17585 comm="syz.2.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 845.324811][ T5966] hid-steam 0003:28DE:1142.0047: Steam wireless receiver disconnected [ 845.325470][T17589] Mount JFS Failure: -5 [ 845.337320][T17589] jfs_mount failed w/return code = -5 [ 846.825823][ T5966] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 846.953522][T17617] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3251'. [ 847.547263][ T5966] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 847.555550][ T5966] usb 5-1: config 0 has no interface number 0 [ 847.561651][ T5966] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 847.577262][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.607642][ T5966] usb 5-1: config 0 descriptor?? [ 847.620431][ T5966] port100 5-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 848.380446][T17628] netlink: zone id is out of range [ 848.385690][T17628] netlink: zone id is out of range [ 848.390809][T17628] netlink: zone id is out of range [ 848.395987][T17628] netlink: zone id is out of range [ 848.401074][T17628] netlink: zone id is out of range [ 848.406182][T17628] netlink: zone id is out of range [ 848.411265][T17628] netlink: zone id is out of range [ 848.416368][T17628] netlink: zone id is out of range [ 848.421456][T17628] netlink: zone id is out of range [ 848.469441][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 848.469453][ T30] audit: type=1400 audit(2000000326.021:1471): avc: denied { setopt } for pid=17626 comm="syz.6.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 849.227518][ T30] audit: type=1400 audit(2000000326.021:1472): avc: denied { write } for pid=17626 comm="syz.6.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 849.359981][ T30] audit: type=1400 audit(2000000326.951:1473): avc: denied { getopt } for pid=17633 comm="syz.5.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 849.463410][ T30] audit: type=1400 audit(2000000327.051:1474): avc: denied { sqpoll } for pid=17600 comm="syz.4.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 849.491484][T17142] usb 5-1: USB disconnect, device number 28 [ 849.754848][ T5966] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 849.914854][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 849.923613][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.953255][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.995724][ T5966] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 850.005308][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.044590][ T5966] usb 6-1: config 0 descriptor?? [ 850.453378][T17142] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 850.536463][ T30] audit: type=1400 audit(2000000328.021:1475): avc: denied { create } for pid=17650 comm="syz.6.3263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 850.768626][ T5966] koneplus 0003:1E7D:2D51.004A: unknown main item tag 0x0 [ 850.811964][ T5966] koneplus 0003:1E7D:2D51.004A: unknown main item tag 0x0 [ 850.905582][T17667] netlink: 'syz.2.3265': attribute type 4 has an invalid length. [ 850.929817][ T5966] koneplus 0003:1E7D:2D51.004A: unknown main item tag 0x0 [ 850.945395][ T5966] koneplus 0003:1E7D:2D51.004A: unknown main item tag 0x0 [ 851.414781][T17142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.428769][T17667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.445056][T17142] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 851.456724][T17142] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 851.470368][ T5966] koneplus 0003:1E7D:2D51.004A: unknown main item tag 0x0 [ 851.478015][T17142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.520549][T17667] lo speed is unknown, defaulting to 1000 [ 852.158564][ T5966] koneplus 0003:1E7D:2D51.004A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 852.171429][T17142] usb 5-1: config 0 descriptor?? [ 852.233423][ T30] audit: type=1400 audit(2000000329.821:1476): avc: denied { write } for pid=17673 comm="syz.6.3267" path="socket:[60666]" dev="sockfs" ino=60666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 852.284780][ T790] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 852.419838][ T5966] usb 6-1: USB disconnect, device number 15 [ 852.434859][ T790] usb 3-1: Using ep0 maxpacket: 16 [ 852.443114][ T790] usb 3-1: config 0 has no interfaces? [ 852.454777][ T790] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 852.515760][ T790] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 852.533082][ T790] usb 3-1: Manufacturer: syz [ 852.556944][ T790] usb 3-1: config 0 descriptor?? [ 852.584610][T17649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.595477][T17649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.812142][T17142] Bluetooth: Can't get version to change to load ram patch err [ 852.821772][T17142] Bluetooth: Loading sysconfig file failed [ 852.833500][T17142] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 852.870696][T17142] usb 5-1: USB disconnect, device number 29 [ 853.704187][ T30] audit: type=1400 audit(2000000330.941:1477): avc: denied { read write } for pid=17683 comm="syz.6.3270" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 854.386845][ T5966] usb 3-1: USB disconnect, device number 72 [ 854.467746][ T30] audit: type=1400 audit(2000000330.941:1478): avc: denied { open } for pid=17683 comm="syz.6.3270" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 854.522321][T17702] Mount JFS Failure: -5 [ 854.526709][T17702] jfs_mount failed w/return code = -5 [ 854.538023][ T30] audit: type=1400 audit(2000000330.941:1479): avc: denied { getopt } for pid=17683 comm="syz.6.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 854.567819][ T30] audit: type=1400 audit(2000000332.061:1480): avc: denied { create } for pid=17703 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 854.595194][ T30] audit: type=1400 audit(2000000332.131:1481): avc: denied { write } for pid=17703 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 854.618424][ T30] audit: type=1400 audit(2000000332.131:1482): avc: denied { nlmsg_write } for pid=17703 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 854.672185][ T30] audit: type=1400 audit(2000000332.261:1483): avc: denied { unlink } for pid=17704 comm="syz.2.3275" name="#58" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 854.756560][ T30] audit: type=1400 audit(2000000332.311:1484): avc: denied { mount } for pid=17704 comm="syz.2.3275" name="/" dev="overlay" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 854.785081][ T790] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 855.040800][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.120843][ T790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.153954][ T790] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.191208][ T790] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 855.195702][ T30] audit: type=1400 audit(2000000332.791:1485): avc: denied { write } for pid=17725 comm="syz.4.3278" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 855.200427][ T790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.458257][ T30] audit: type=1400 audit(2000000333.051:1486): avc: denied { unmount } for pid=16960 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 855.496568][ T790] usb 7-1: config 0 descriptor?? [ 855.951535][ T790] hid-udraw 0003:20D6:CB17.004B: unknown main item tag 0x0 [ 855.969042][ T790] hid-udraw 0003:20D6:CB17.004B: unbalanced collection at end of report description [ 856.005593][ T790] hid-udraw 0003:20D6:CB17.004B: parse failed [ 856.021912][ T790] hid-udraw 0003:20D6:CB17.004B: probe with driver hid-udraw failed with error -22 [ 856.150456][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.223217][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.380783][ T790] usb 7-1: USB disconnect, device number 15 [ 856.704513][T17745] lo speed is unknown, defaulting to 1000 [ 859.181153][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 859.229152][ T30] audit: type=1400 audit(2000000336.771:1494): avc: denied { read write } for pid=17752 comm="syz.4.3286" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 859.335919][ T30] audit: type=1400 audit(2000000336.771:1495): avc: denied { open } for pid=17752 comm="syz.4.3286" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 859.618144][ T30] audit: type=1400 audit(2000000337.211:1496): avc: denied { getopt } for pid=17761 comm="syz.5.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 860.163587][T17773] Mount JFS Failure: -5 [ 860.167948][T17773] jfs_mount failed w/return code = -5 [ 861.008974][T17785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3297'. [ 861.029406][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3297'. [ 861.124793][ T30] audit: type=1400 audit(2000000338.711:1497): avc: denied { mount } for pid=17786 comm="syz.0.3296" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 861.175486][T17792] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3296'. [ 861.396766][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3300'. [ 862.102719][ T30] audit: type=1400 audit(2000000339.261:1498): avc: denied { mount } for pid=17796 comm="syz.5.3299" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 862.635103][ T30] audit: type=1400 audit(2000000340.171:1499): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 862.854598][T17817] Mount JFS Failure: -5 [ 862.858963][T17817] jfs_mount failed w/return code = -5 [ 863.563939][ T30] audit: type=1400 audit(2000000340.971:1500): avc: denied { append } for pid=17824 comm="syz.4.3306" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 863.605251][T17826] ubi: mtd0 is already attached to ubi31 [ 863.718719][ T30] audit: type=1400 audit(2000000341.251:1501): avc: denied { create } for pid=17824 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 863.987649][ T30] audit: type=1400 audit(2000000341.581:1502): avc: denied { open } for pid=17836 comm="syz.4.3310" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 864.136897][ T30] audit: type=1400 audit(2000000341.631:1503): avc: denied { ioctl } for pid=17836 comm="syz.4.3310" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 864.211530][ T30] audit: type=1400 audit(2000000341.671:1504): avc: denied { bind } for pid=17836 comm="syz.4.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 864.385596][ T5937] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 864.624795][ T5937] usb 7-1: Using ep0 maxpacket: 8 [ 864.746186][ T5937] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 864.822415][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 864.840429][ T5937] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 864.850084][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.862537][ T5937] usb 7-1: Product: syz [ 864.866802][ T5937] usb 7-1: Manufacturer: syz [ 864.871453][ T5937] usb 7-1: SerialNumber: syz [ 864.878833][ T5937] usb 7-1: config 0 descriptor?? [ 864.887237][ T5937] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 865.008229][ T30] audit: type=1400 audit(2000000342.601:1505): avc: denied { create } for pid=17847 comm="syz.0.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 865.103480][T17857] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 865.535216][T17868] Mount JFS Failure: -5 [ 865.539411][T17868] jfs_mount failed w/return code = -5 [ 866.027636][ T6674] usb 7-1: USB disconnect, device number 16 [ 866.694303][ T30] audit: type=1400 audit(2000000344.281:1506): avc: denied { append } for pid=17880 comm="syz.5.3322" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 866.934829][T13699] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 867.006725][ T5937] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 867.165145][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 867.178083][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 867.196009][T13699] usb 6-1: Using ep0 maxpacket: 8 [ 867.197160][ T5937] usb 5-1: config 8 has an invalid interface number: 163 but max is 0 [ 867.211371][ T5937] usb 5-1: config 8 has no interface number 0 [ 867.274211][ T5937] usb 5-1: config 8 interface 163 has no altsetting 0 [ 867.280755][T13699] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 867.288818][ T5937] usb 5-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=72.33 [ 867.305167][T13699] usb 6-1: config 2 has no interface number 0 [ 867.310071][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.321523][ T5937] usb 5-1: Product: syz [ 867.331478][ T5937] usb 5-1: Manufacturer: syz [ 867.337284][T13699] usb 6-1: config 2 interface 31 has no altsetting 0 [ 867.616757][ T30] audit: type=1400 audit(2000000345.011:1507): avc: denied { firmware_load } for pid=17889 comm="syz.2.3325" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 867.872738][ T5937] usb 5-1: SerialNumber: syz [ 867.887386][T13699] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 867.896654][T13699] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.921757][T13699] usb 6-1: Product: syz [ 867.924525][ T30] audit: type=1400 audit(2000000345.141:1508): avc: denied { write } for pid=17889 comm="syz.2.3325" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 867.973249][T13699] usb 6-1: Manufacturer: syz [ 867.993420][T13699] usb 6-1: SerialNumber: syz [ 868.019835][T13699] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 868.101525][T17894] vlan2: entered promiscuous mode [ 868.114842][T17894] vlan2: entered allmulticast mode [ 868.169029][ T30] audit: type=1400 audit(2000000345.761:1509): avc: denied { name_bind } for pid=17882 comm="syz.4.3320" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 868.178605][T17883] overlayfs: workdir and upperdir must reside under the same mount [ 868.212834][ T30] audit: type=1400 audit(2000000345.771:1510): avc: denied { mount } for pid=17882 comm="syz.4.3320" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 868.276437][ T30] audit: type=1400 audit(2000000345.771:1511): avc: denied { mounton } for pid=17882 comm="syz.4.3320" path="/236/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 868.419195][ T5937] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 868.433970][ T5937] dvb-usb: bulk message failed: -22 (4/0) [ 868.439877][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 868.464701][T13699] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 868.516647][ T5937] dvb-usb: bulk message failed: -22 (5/0) [ 868.531912][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 868.576673][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.606806][ T5937] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 868.625499][T13699] usb 1-1: Using ep0 maxpacket: 32 [ 868.632278][ T5937] usb 5-1: media controller created [ 868.632352][T13699] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.654255][T13699] usb 1-1: config 0 interface 0 has no altsetting 0 [ 868.674436][T13699] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 868.694729][T13699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.723862][T13699] usb 1-1: config 0 descriptor?? [ 868.778876][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.858418][ T5937] ttusb2: set interface to alts=3 failed [ 868.915966][ T30] audit: type=1400 audit(2000000346.501:1512): avc: denied { unmount } for pid=13480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 868.966747][ T5937] DVB: Unable to find symbol tda10086_attach() [ 869.007559][ T5937] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 869.037926][ T30] audit: type=1400 audit(2000000346.621:1513): avc: denied { write } for pid=17905 comm="syz.4.3328" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 869.093790][ T5937] dvb-usb: bulk message failed: -22 (4/0) [ 869.126997][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 869.147750][T17907] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 869.175495][ T5937] dvb-usb: bulk message failed: -22 (5/0) [ 869.211103][T13699] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 869.220396][ T30] audit: type=1400 audit(2000000346.621:1514): avc: denied { open } for pid=17905 comm="syz.4.3328" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 869.245245][T13699] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 869.271292][T13699] magicmouse 0003:05AC:0324.004C: hidraw0: USB HID v0.0a Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 869.291644][T13699] magicmouse 0003:05AC:0324.004C: magicmouse input not registered [ 869.300043][ T5937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 869.318175][ T30] audit: type=1400 audit(2000000346.621:1515): avc: denied { ioctl } for pid=17905 comm="syz.4.3328" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 869.349086][T13699] magicmouse 0003:05AC:0324.004C: probe with driver magicmouse failed with error -12 [ 869.409091][ T5937] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 869.558228][ T5937] usb 5-1: USB disconnect, device number 30 [ 869.618584][ T30] audit: type=1400 audit(2000000347.211:1516): avc: denied { read } for pid=17903 comm="syz.6.3327" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.696157][ T5929] usb 1-1: USB disconnect, device number 105 [ 869.764238][ T5937] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 869.792270][ T30] audit: type=1400 audit(2000000347.211:1517): avc: denied { open } for pid=17903 comm="syz.6.3327" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.829997][T17913] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 869.840416][T12629] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 869.943704][ T30] audit: type=1400 audit(2000000347.241:1518): avc: denied { map } for pid=17903 comm="syz.6.3327" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 870.077688][ T5937] usb 6-1: USB disconnect, device number 16 [ 870.199748][T17921] serio: Serial port ptm0 [ 870.296948][T17904] syz.6.3327 (17904): drop_caches: 2 [ 870.343763][T17921] serio: Serial port ptm0 [ 870.399115][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 870.434874][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3337'. [ 870.453997][T17928] netlink: 'syz.4.3337': attribute type 6 has an invalid length. [ 870.510154][T17928] netlink: 'syz.4.3337': attribute type 13 has an invalid length. [ 870.695046][T17928] bridge0: port 3(gretap0) entered disabled state [ 870.702394][T17928] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.711118][T17928] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.724872][T17928] bridge0: entered allmulticast mode [ 871.276547][T17938] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3339'. [ 871.399495][ T30] audit: type=1400 audit(2000000348.991:1519): avc: denied { ioctl } for pid=17939 comm="syz-executor" path="socket:[62007]" dev="sockfs" ino=62007 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 871.470225][T17062] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 871.500745][T17062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 871.509204][T17062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 871.517720][T17062] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 871.535043][T17062] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 871.546094][ T30] audit: type=1400 audit(2000000349.141:1520): avc: denied { mounton } for pid=17939 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 871.621599][T17939] lo speed is unknown, defaulting to 1000 [ 872.223063][T17956] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3343'. [ 872.939112][T17939] chnl_net:caif_netlink_parms(): no params data found [ 872.960469][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 873.287966][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.308049][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.354723][T17142] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 873.362582][T17939] bridge_slave_0: entered allmulticast mode [ 873.373879][T17939] bridge_slave_0: entered promiscuous mode [ 873.505671][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.512951][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.520248][T17939] bridge_slave_1: entered allmulticast mode [ 873.529460][T17939] bridge_slave_1: entered promiscuous mode [ 873.547352][T17142] usb 5-1: Using ep0 maxpacket: 16 [ 873.636345][T17062] Bluetooth: hci1: command tx timeout [ 873.839480][T17991] ceph: No mds server is up or the cluster is laggy [ 873.867889][T17062] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 873.878104][T17062] Bluetooth: hci5: Injecting HCI hardware error event [ 873.903863][T17142] usb 5-1: config 4 has an invalid interface number: 118 but max is 0 [ 873.915784][T12629] Bluetooth: hci5: hardware error 0x00 [ 873.934979][ T30] audit: type=1400 audit(2000000351.451:1521): avc: denied { wake_alarm } for pid=17986 comm="syz.5.3354" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 873.941138][T17142] usb 5-1: config 4 has no interface number 0 [ 873.965719][T13860] libceph: connect (1)[c::]:6789 error -101 [ 873.976063][T13860] libceph: mon0 (1)[c::]:6789 connect error [ 873.982739][T17142] usb 5-1: config 4 interface 118 has no altsetting 0 [ 873.990149][T17142] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.71 [ 873.999712][T17142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.163080][T14470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.237332][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.259123][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.352027][ T5929] usb 5-1: USB disconnect, device number 31 [ 874.424019][T14470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.447688][T17939] team0: Port device team_slave_0 added [ 874.450466][T17939] team0: Port device team_slave_1 added [ 874.892968][T14470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.981104][T18007] ubi: mtd0 is already attached to ubi31 [ 874.988419][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.988431][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.988446][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.989372][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.989384][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.989403][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.350608][T14470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.592834][T17939] hsr_slave_0: entered promiscuous mode [ 875.607550][T17939] hsr_slave_1: entered promiscuous mode [ 875.616209][T17939] debugfs: 'hsr0' already exists in 'hsr' [ 875.621946][T17939] Cannot create hsr debugfs directory [ 875.705120][T17062] Bluetooth: hci1: command tx timeout [ 875.945443][T12629] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 875.968331][ T30] audit: type=1400 audit(2000000353.551:1522): avc: denied { map } for pid=18032 comm="syz.5.3365" path="socket:[61382]" dev="sockfs" ino=61382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 876.121231][ T30] audit: type=1400 audit(2000000353.651:1523): avc: denied { create } for pid=18032 comm="syz.5.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 876.519920][ T30] audit: type=1400 audit(2000000353.651:1524): avc: denied { getopt } for pid=18032 comm="syz.5.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 876.641764][T18038] serio: Serial port ptm0 [ 876.878781][T18038] serio: Serial port ptm0 [ 876.905494][T14470] bridge_slave_1: left allmulticast mode [ 876.914481][T14470] bridge_slave_1: left promiscuous mode [ 876.922779][T14470] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.942632][T14470] bridge_slave_0: left allmulticast mode [ 876.949206][T14470] bridge_slave_0: left promiscuous mode [ 876.965196][T14470] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.247189][T18053] ubi: mtd0 is already attached to ubi31 [ 877.785093][T12629] Bluetooth: hci1: command tx timeout [ 879.166908][T14470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.177247][T14470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.187890][T14470] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 879.203219][T14470] bond0 (unregistering): Released all slaves [ 879.423016][T14470] !9: left promiscuous mode [ 879.441790][T18066] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3376'. [ 879.580201][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 879.689023][T14470] tipc: Left network mode [ 879.876720][T12629] Bluetooth: hci1: command tx timeout [ 880.811297][T13699] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 881.025276][T13699] usb 5-1: Using ep0 maxpacket: 32 [ 881.032605][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.043555][T13699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.103195][T13699] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 881.144666][T13699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.195721][T13699] usb 5-1: config 0 descriptor?? [ 881.225963][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 881.558713][T14470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.575537][T14470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.586243][T14470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.594364][T14470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.648519][T14470] hsr0: left allmulticast mode [ 881.654988][T14470] veth1_macvtap: left promiscuous mode [ 881.660758][T14470] veth0_macvtap: left promiscuous mode [ 881.666781][T14470] veth1_vlan: left promiscuous mode [ 881.672153][T14470] veth0_vlan: left promiscuous mode [ 881.747430][T13699] koneplus 0003:1E7D:2D51.004D: unknown main item tag 0x0 [ 881.769112][T13699] koneplus 0003:1E7D:2D51.004D: unknown main item tag 0x0 [ 881.793130][T13699] koneplus 0003:1E7D:2D51.004D: unknown main item tag 0x0 [ 881.835673][T13699] koneplus 0003:1E7D:2D51.004D: unknown main item tag 0x0 [ 881.856060][T13699] koneplus 0003:1E7D:2D51.004D: unknown main item tag 0x0 [ 881.954993][T13699] koneplus 0003:1E7D:2D51.004D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 882.039387][T18116] Mount JFS Failure: -5 [ 882.044006][T18116] jfs_mount failed w/return code = -5 [ 882.354101][ T5929] usb 5-1: USB disconnect, device number 32 [ 882.614116][T14470] team0 (unregistering): Port device team_slave_1 removed [ 882.647273][T14470] team0 (unregistering): Port device team_slave_0 removed [ 882.981236][ T1164] smc: removing ib device syz0 [ 882.998625][ T5938] lo speed is unknown, defaulting to 1000 [ 883.007310][ T5938] syz0: Port: 1 Link DOWN [ 883.065678][T17939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 883.117556][T17939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 883.157963][T17939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.216834][T17939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 883.839841][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.874317][T17939] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.888406][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.888454][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.907098][T18150] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3395'. [ 883.910070][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.910153][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.294670][T18157] Mount JFS Failure: -5 [ 884.294689][T18157] jfs_mount failed w/return code = -5 [ 884.759132][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.892358][T17939] veth0_vlan: entered promiscuous mode [ 884.959181][T17939] veth1_vlan: entered promiscuous mode [ 885.044302][T17939] veth0_macvtap: entered promiscuous mode [ 885.081255][T17939] veth1_macvtap: entered promiscuous mode [ 885.138152][T17939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.147075][T17939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.223948][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.223988][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.224017][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.224044][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.459628][ T6360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.459644][ T6360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.461484][ T6360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.461496][ T6360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.472838][ T30] audit: type=1400 audit(2000000363.061:1525): avc: denied { mounton } for pid=17939 comm="syz-executor" path="/root/syzkaller.6MiejY/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 885.473799][ T30] audit: type=1400 audit(2000000363.061:1526): avc: denied { mount } for pid=17939 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 885.476945][ T30] audit: type=1400 audit(2000000363.071:1527): avc: denied { mounton } for pid=17939 comm="syz-executor" path="/root/syzkaller.6MiejY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 885.503195][ T30] audit: type=1400 audit(2000000363.091:1528): avc: denied { mounton } for pid=17939 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 885.503425][ T30] audit: type=1400 audit(2000000363.091:1529): avc: denied { mount } for pid=17939 comm="syz-executor" name="/" dev="gadgetfs" ino=7163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 885.526487][ T30] audit: type=1400 audit(2000000363.111:1530): avc: denied { mount } for pid=17939 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 885.526570][ T30] audit: type=1400 audit(2000000363.111:1531): avc: denied { mounton } for pid=17939 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 886.185076][ T5929] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 886.334979][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 886.335935][ T5929] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 886.337077][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 886.337101][ T5929] usb 5-1: can't read configurations, error -61 [ 886.464701][ T5929] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 886.614835][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 886.622251][ T5929] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 886.649686][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 886.649709][ T5929] usb 5-1: can't read configurations, error -61 [ 886.649883][ T5929] usb usb5-port1: attempt power cycle [ 887.004856][ T5929] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 887.025365][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 887.025903][ T5929] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 887.027973][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 887.028006][ T5929] usb 5-1: can't read configurations, error -61 [ 887.089868][T18209] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3408'. [ 887.164768][ T5929] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 887.185647][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 887.186120][ T5929] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 887.187303][ T5929] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 887.187333][ T5929] usb 5-1: can't read configurations, error -61 [ 887.187545][ T5929] usb usb5-port1: unable to enumerate USB device [ 887.635706][ T30] audit: type=1400 audit(2000000365.231:1532): avc: denied { bind } for pid=18218 comm="syz.5.3414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 887.686715][T18219] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3414'. [ 887.705296][ T30] audit: type=1400 audit(2000000365.231:1533): avc: denied { name_bind } for pid=18218 comm="syz.5.3414" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 887.811919][ T30] audit: type=1400 audit(2000000365.231:1534): avc: denied { node_bind } for pid=18218 comm="syz.5.3414" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 890.028052][T13699] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 890.231645][T13699] usb 7-1: Using ep0 maxpacket: 32 [ 890.243014][T13699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.288650][T13699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.743607][T13699] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 890.765865][T13699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.785829][T13699] usb 7-1: config 0 descriptor?? [ 890.945599][T18265] ubi: mtd0 is already attached to ubi31 [ 891.038532][ T6848] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 891.216459][ T6848] usb 3-1: Using ep0 maxpacket: 32 [ 891.244985][ T6848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.262735][ T6848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.278786][T13699] koneplus 0003:1E7D:2D51.004E: unknown main item tag 0x0 [ 891.281022][ T6848] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 891.295970][T13699] koneplus 0003:1E7D:2D51.004E: unknown main item tag 0x0 [ 891.298030][ T6848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.305181][T13699] koneplus 0003:1E7D:2D51.004E: unknown main item tag 0x0 [ 891.314913][ T6848] usb 3-1: config 0 descriptor?? [ 891.323966][T13699] koneplus 0003:1E7D:2D51.004E: unknown main item tag 0x0 [ 891.333169][T13699] koneplus 0003:1E7D:2D51.004E: unknown main item tag 0x0 [ 891.347890][T13699] koneplus 0003:1E7D:2D51.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 891.968027][ T6848] koneplus 0003:1E7D:2D51.004F: unknown main item tag 0x0 [ 892.017767][ T6848] koneplus 0003:1E7D:2D51.004F: unknown main item tag 0x0 [ 892.058157][ T6848] koneplus 0003:1E7D:2D51.004F: unknown main item tag 0x0 [ 892.079235][T13699] usb 7-1: USB disconnect, device number 17 [ 892.107411][ T6848] koneplus 0003:1E7D:2D51.004F: unknown main item tag 0x0 [ 892.107439][ T6848] koneplus 0003:1E7D:2D51.004F: unknown main item tag 0x0 [ 892.112572][ T6848] koneplus 0003:1E7D:2D51.004F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 892.325317][T18310] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3444'. [ 892.384736][ T6848] usb 3-1: USB disconnect, device number 73 [ 892.723452][ T30] audit: type=1400 audit(2000000370.311:1535): avc: denied { create } for pid=18316 comm="syz.0.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 893.075429][T18330] FAULT_INJECTION: forcing a failure. [ 893.075429][T18330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.090040][T18330] CPU: 0 UID: 0 PID: 18330 Comm: syz.0.3450 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.090066][T18330] Tainted: [L]=SOFTLOCKUP [ 893.090071][T18330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 893.090080][T18330] Call Trace: [ 893.090086][T18330] [ 893.090092][T18330] dump_stack_lvl+0x16c/0x1f0 [ 893.090116][T18330] should_fail_ex+0x512/0x640 [ 893.090143][T18330] _copy_from_user+0x2e/0xd0 [ 893.090167][T18330] snd_seq_oss_write+0x397/0x7d0 [ 893.090193][T18330] ? irqentry_exit+0x1dd/0x8c0 [ 893.090216][T18330] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 893.090249][T18330] ? __pfx_odev_write+0x10/0x10 [ 893.090267][T18330] odev_write+0x51/0xa0 [ 893.090287][T18330] vfs_writev+0x5df/0xde0 [ 893.090313][T18330] ? __pfx_vfs_writev+0x10/0x10 [ 893.090331][T18330] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 893.090359][T18330] ? irqentry_exit+0x1dd/0x8c0 [ 893.090396][T18330] ? do_writev+0x132/0x340 [ 893.090413][T18330] do_writev+0x132/0x340 [ 893.090432][T18330] ? __pfx_do_writev+0x10/0x10 [ 893.090459][T18330] do_syscall_64+0xcd/0xf80 [ 893.090481][T18330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.090498][T18330] RIP: 0033:0x7fac5678f749 [ 893.090511][T18330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.090527][T18330] RSP: 002b:00007fac5769d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 893.090544][T18330] RAX: ffffffffffffffda RBX: 00007fac569e6090 RCX: 00007fac5678f749 [ 893.090556][T18330] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000004 [ 893.090566][T18330] RBP: 00007fac5769d090 R08: 0000000000000000 R09: 0000000000000000 [ 893.090576][T18330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.090586][T18330] R13: 00007fac569e6128 R14: 00007fac569e6090 R15: 00007ffe82ddf398 [ 893.090609][T18330] [ 893.722550][T18341] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3457'. [ 893.814874][ T5938] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 893.998974][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 894.019535][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.019567][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.019616][ T5938] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 894.019636][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.105405][ T5938] usb 3-1: config 0 descriptor?? [ 894.294695][ T6848] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 894.365303][ T30] audit: type=1400 audit(2000000371.961:1536): avc: denied { map } for pid=18360 comm="syz.4.3464" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 894.477783][ T6848] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.488497][ T6848] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 894.504401][T18364] dummy0: entered promiscuous mode [ 894.510199][ T6848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.520548][T18364] dummy0: left promiscuous mode [ 894.527944][ T6848] usb 6-1: config 0 descriptor?? [ 894.551029][ T6848] pwc: Askey VC010 type 2 USB webcam detected. [ 894.583556][ T5938] koneplus 0003:1E7D:2D51.0050: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 894.664779][T13699] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 894.775743][T18353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.799978][ T30] audit: type=1400 audit(2000000372.351:1537): avc: denied { create } for pid=18351 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 894.838875][ T30] audit: type=1400 audit(2000000372.351:1538): avc: denied { write } for pid=18351 comm="syz.5.3458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 894.877169][T18353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.894663][T13699] usb 1-1: Using ep0 maxpacket: 32 [ 895.005337][T13699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.025021][ T5953] usb 3-1: USB disconnect, device number 74 [ 895.048926][T13699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.049841][ T6848] pwc: send_video_command error -71 [ 895.060781][T13699] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 895.075407][T13699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.092747][T13699] usb 1-1: config 0 descriptor?? [ 895.104969][ T6848] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 895.112769][ T6848] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 895.133891][ T6848] usb 6-1: USB disconnect, device number 17 [ 895.176387][T18376] serio: Serial port ptm0 [ 895.230501][ T30] audit: type=1400 audit(2000000372.821:1539): avc: denied { bind } for pid=18384 comm="syz.4.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 895.265447][ T30] audit: type=1400 audit(2000000372.821:1540): avc: denied { name_bind } for pid=18384 comm="syz.4.3470" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 895.288667][ T30] audit: type=1400 audit(2000000372.821:1541): avc: denied { node_bind } for pid=18384 comm="syz.4.3470" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 895.333299][T18376] serio: Serial port ptm0 [ 895.700606][T13699] koneplus 0003:1E7D:2D51.0051: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 895.835496][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3477'. [ 895.961448][T13699] usb 1-1: USB disconnect, device number 106 [ 896.546732][ T5953] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 896.570179][ T30] audit: type=1400 audit(2000000374.161:1542): avc: denied { read } for pid=18415 comm="syz.6.3482" path="socket:[64382]" dev="sockfs" ino=64382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 896.865552][ T30] audit: type=1400 audit(2000000374.211:1543): avc: denied { write } for pid=18415 comm="syz.6.3482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 896.950768][ T5953] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.971316][ T5953] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.990655][ T30] audit: type=1400 audit(2000000374.581:1544): avc: denied { create } for pid=18422 comm="syz.0.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 897.014024][ T5953] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 897.023240][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.038404][T18405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 897.077884][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.101632][T18426] netlink: zone id is out of range [ 897.107718][T18426] netlink: zone id is out of range [ 897.112869][T18426] netlink: zone id is out of range [ 897.137919][T18426] netlink: zone id is out of range [ 897.155168][T18426] netlink: zone id is out of range [ 897.160338][T18426] netlink: zone id is out of range [ 897.293273][T18426] netlink: zone id is out of range [ 897.450765][T18426] netlink: zone id is out of range [ 897.464362][T18426] netlink: zone id is out of range [ 897.975069][ T6848] usb 3-1: USB disconnect, device number 75 [ 900.474936][T14510] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 900.631107][T14510] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 900.648050][T14510] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 900.661667][ T5953] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 901.559639][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 901.559653][ T30] audit: type=1400 audit(2000000378.701:1547): avc: denied { connect } for pid=18500 comm="syz.0.3513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 901.563317][T14510] usb 7-1: config 220 has no interface number 2 [ 901.596613][ T30] audit: type=1400 audit(2000000378.701:1548): avc: denied { name_connect } for pid=18500 comm="syz.0.3513" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 901.602866][T14510] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 901.805752][T14510] usb 7-1: config 220 interface 0 has no altsetting 0 [ 901.812628][T14510] usb 7-1: config 220 interface 76 has no altsetting 0 [ 901.820404][T14510] usb 7-1: config 220 interface 1 has no altsetting 0 [ 901.830785][T14510] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 901.840336][T14510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.848388][T14510] usb 7-1: Product: syz [ 901.852544][T14510] usb 7-1: Manufacturer: syz [ 901.857351][T14510] usb 7-1: SerialNumber: syz [ 901.864962][T13699] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 901.886250][ T5953] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 901.896202][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.907595][ T5953] usb 3-1: config 0 descriptor?? [ 901.949845][T14510] usb 7-1: selecting invalid altsetting 0 [ 901.968466][T14510] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 901.978291][T14510] uvcvideo 7-1:220.0: No valid video chain found. [ 902.005638][T13699] usb 5-1: device descriptor read/64, error -71 [ 902.047596][T14510] usb 7-1: selecting invalid altsetting 0 [ 902.053507][T14510] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 902.268542][T14510] usb 7-1: USB disconnect, device number 18 [ 902.318603][ T30] audit: type=1400 audit(2000000379.911:1549): avc: denied { bind } for pid=18489 comm="syz.2.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 902.344793][T13699] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 902.356044][ T30] audit: type=1400 audit(2000000379.951:1550): avc: denied { write } for pid=18489 comm="syz.2.3509" name="ptype" dev="proc" ino=4026533377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 902.389917][ T5953] usb 3-1: Cannot read MAC address [ 902.395955][ T5953] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 902.486540][T13699] usb 5-1: device descriptor read/64, error -71 [ 902.677407][T13699] usb usb5-port1: attempt power cycle [ 902.696801][T18519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.704322][T18519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.725892][T18519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.733312][T18519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.024834][T13699] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 903.044549][ T30] audit: type=1400 audit(2000000380.631:1551): avc: denied { ioctl } for pid=18489 comm="syz.2.3509" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 903.074397][T13699] usb 5-1: device descriptor read/8, error -71 [ 903.408558][T13699] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 903.521206][T13699] usb 5-1: device descriptor read/8, error -71 [ 903.636786][T13699] usb usb5-port1: unable to enumerate USB device [ 903.857860][ T30] audit: type=1400 audit(2000000381.451:1552): avc: denied { create } for pid=18535 comm="syz.4.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 903.950676][T18542] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 903.983626][T18544] input: syz0 as /devices/virtual/input/input94 [ 903.990748][ T30] audit: type=1400 audit(2000000381.591:1553): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=4483 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.029862][ T30] audit: type=1400 audit(2000000381.591:1554): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4483 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.082738][ T30] audit: type=1400 audit(2000000381.591:1555): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4483 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 904.189761][ T5929] usb 3-1: USB disconnect, device number 76 [ 904.235878][T13860] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 904.584973][T13860] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 904.599800][T13860] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 904.610000][T13860] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 904.622229][T13860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.647611][T18542] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 904.989522][T13860] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 905.592996][T18567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3539'. [ 905.609600][T18567] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3539'. [ 907.094486][T18576] ubi: mtd0 is already attached to ubi31 [ 907.134843][ T790] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 907.454741][ T790] usb 3-1: Using ep0 maxpacket: 32 [ 907.461279][ T790] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 907.480041][ T790] usb 3-1: config 0 has no interface number 0 [ 907.504841][ T790] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 907.529230][ T790] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 907.555764][ T790] usb 3-1: Product: syz [ 907.559952][ T790] usb 3-1: Manufacturer: syz [ 907.572303][T18586] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 907.584250][ T790] usb 3-1: config 0 descriptor?? [ 907.645040][T18586] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 907.685962][T18586] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 907.716548][T18593] syzkaller0: entered promiscuous mode [ 907.722012][T18593] syzkaller0: entered allmulticast mode [ 907.784850][T18586] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 907.798392][ T790] usb 3-1: USB disconnect, device number 77 [ 907.814654][T13860] usb 5-1: USB disconnect, device number 41 [ 907.822395][T18539] delete_channel: no stack [ 908.296102][T14510] libceph: connect (1)[c::]:6789 error -101 [ 908.314873][T14510] libceph: mon0 (1)[c::]:6789 connect error [ 908.412953][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3553'. [ 908.577528][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 908.601191][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 908.634987][T14510] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 909.073752][T14510] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.084025][T14510] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 909.094894][T14510] usb 6-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 909.103967][T14510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.112879][T18613] ceph: No mds server is up or the cluster is laggy [ 909.128206][T18578] libceph: connect (1)[c::]:6789 error -101 [ 909.145279][T18578] libceph: mon0 (1)[c::]:6789 connect error [ 909.173600][T18622] ubi: mtd0 is already attached to ubi31 [ 909.181147][T14510] usb 6-1: config 0 descriptor?? [ 910.819072][T18598] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 910.856511][T18598] SELinux: Context ) is not valid (left unmapped). [ 911.109189][ T30] audit: type=1400 audit(2000000388.701:1556): avc: denied { read } for pid=18658 comm="syz.6.3568" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 911.269042][T18667] serio: Serial port ptm0 [ 912.000977][ T30] audit: type=1400 audit(2000000388.731:1557): avc: denied { open } for pid=18658 comm="syz.6.3568" path="/dev/sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 912.027995][ T30] audit: type=1400 audit(2000000388.741:1558): avc: denied { ioctl } for pid=18658 comm="syz.6.3568" path="/dev/sg0" dev="devtmpfs" ino=788 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 912.326057][ T30] audit: type=1400 audit(2000000389.921:1559): avc: denied { unmount } for pid=15482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 913.237156][T18679] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3572'. [ 913.342487][ T6848] usb 6-1: USB disconnect, device number 18 [ 914.902635][T18701] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.911700][T18701] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.484705][ T6848] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 915.714769][ T6848] usb 1-1: Using ep0 maxpacket: 32 [ 915.728271][ T6848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.744048][ T6848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.998661][ T6848] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 916.048084][ T6848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.083133][ T6848] usb 1-1: config 0 descriptor?? [ 916.485041][T17142] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 916.624776][T17142] usb 3-1: device descriptor read/64, error -71 [ 916.625452][T18722] serio: Serial port ptm0 [ 916.672734][ T30] audit: type=1400 audit(2000000394.261:1560): avc: denied { ioctl } for pid=18704 comm="syz.0.3580" path="socket:[64887]" dev="sockfs" ino=64887 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 916.884935][T17142] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 917.034800][T17142] usb 3-1: device descriptor read/64, error -71 [ 917.157390][T17142] usb usb3-port1: attempt power cycle [ 917.283207][ T6848] usbhid 1-1:0.0: can't add hid device: -71 [ 917.297276][ T6848] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 917.326073][ T6848] usb 1-1: USB disconnect, device number 107 [ 917.472972][T18737] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 917.495867][T18737] vivid-001: ================= START STATUS ================= [ 917.503598][T18737] vivid-001: Radio HW Seek Mode: Bounded [ 917.524163][T18737] vivid-001: Radio Programmable HW Seek: false [ 917.569729][T17142] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 917.603613][T18737] vivid-001: RDS Rx I/O Mode: Block I/O [ 917.617117][T18737] vivid-001: Generate RBDS Instead of RDS: false [ 917.632587][T18737] vivid-001: RDS Reception: true [ 917.646331][T17142] usb 3-1: device descriptor read/8, error -71 [ 917.646934][T18737] vivid-001: RDS Program Type: 0 inactive [ 917.733081][T18737] vivid-001: RDS PS Name: inactive [ 917.766947][T18745] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 917.822686][ T30] audit: type=1400 audit(2000000395.411:1561): avc: denied { write } for pid=18742 comm="syz.4.3593" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 917.831588][T18737] vivid-001: RDS Radio Text: [ 917.847826][T18744] random: crng reseeded on system resumption [ 917.974122][T17142] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 918.053687][T18737] inactive [ 918.079180][T17142] usb 3-1: device descriptor read/8, error -71 [ 918.111568][T18737] vivid-001: RDS Traffic Announcement: false inactive [ 918.246154][T17142] usb usb3-port1: unable to enumerate USB device [ 918.262362][T18737] vivid-001: RDS Traffic Program: false inactive [ 918.374317][T18737] vivid-001: RDS Music: false inactive [ 918.452618][T18737] vivid-001: ================== END STATUS ================== [ 919.833348][ T30] audit: type=1400 audit(2000000395.441:1562): avc: denied { open } for pid=18742 comm="syz.4.3593" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 919.858052][ T30] audit: type=1400 audit(2000000395.501:1563): avc: denied { setopt } for pid=18742 comm="syz.4.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 919.878454][ T30] audit: type=1400 audit(2000000396.631:1564): avc: denied { read write } for pid=18750 comm="syz.6.3594" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 919.903078][ T30] audit: type=1400 audit(2000000396.631:1565): avc: denied { open } for pid=18750 comm="syz.6.3594" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 919.931807][ T30] audit: type=1400 audit(2000000396.641:1566): avc: denied { ioctl } for pid=18750 comm="syz.6.3594" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 922.529877][ T30] audit: type=1400 audit(2000000400.121:1567): avc: denied { bind } for pid=18785 comm="syz.2.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 922.824390][T18796] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3608'. [ 923.389500][T18799] FAULT_INJECTION: forcing a failure. [ 923.389500][T18799] name failslab, interval 1, probability 0, space 0, times 0 [ 923.403491][T18799] CPU: 0 UID: 0 PID: 18799 Comm: syz.5.3607 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.403518][T18799] Tainted: [L]=SOFTLOCKUP [ 923.403522][T18799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 923.403528][T18799] Call Trace: [ 923.403533][T18799] [ 923.403537][T18799] dump_stack_lvl+0x16c/0x1f0 [ 923.403555][T18799] should_fail_ex+0x512/0x640 [ 923.403576][T18799] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 923.403589][T18799] should_failslab+0xc2/0x120 [ 923.403604][T18799] kmem_cache_alloc_node_noprof+0x86/0x800 [ 923.403614][T18799] ? __alloc_skb+0x156/0x410 [ 923.403633][T18799] ? __alloc_skb+0x156/0x410 [ 923.403647][T18799] __alloc_skb+0x156/0x410 [ 923.403661][T18799] ? __alloc_skb+0x35d/0x410 [ 923.403676][T18799] ? __pfx___alloc_skb+0x10/0x10 [ 923.403696][T18799] netlink_alloc_large_skb+0x69/0x140 [ 923.403711][T18799] netlink_sendmsg+0x698/0xdd0 [ 923.403725][T18799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.403743][T18799] ____sys_sendmsg+0xa5d/0xc30 [ 923.403757][T18799] ? copy_msghdr_from_user+0x10a/0x160 [ 923.403768][T18799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.403783][T18799] ? sched_clock_cpu+0x6c/0x530 [ 923.403798][T18799] ___sys_sendmsg+0x134/0x1d0 [ 923.403810][T18799] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.403833][T18799] ? io_schedule_timeout+0xf0/0x150 [ 923.403849][T18799] __sys_sendmsg+0x16d/0x220 [ 923.403860][T18799] ? __pfx___sys_sendmsg+0x10/0x10 [ 923.403875][T18799] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 923.403891][T18799] do_syscall_64+0xcd/0xf80 [ 923.403906][T18799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.403917][T18799] RIP: 0033:0x7f9dde38f749 [ 923.403927][T18799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.403937][T18799] RSP: 002b:00007f9ddf2ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.403948][T18799] RAX: ffffffffffffffda RBX: 00007f9dde5e6090 RCX: 00007f9dde38f749 [ 923.403954][T18799] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 923.403961][T18799] RBP: 00007f9ddf2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 923.403967][T18799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.403973][T18799] R13: 00007f9dde5e6128 R14: 00007f9dde5e6090 R15: 00007ffda824a628 [ 923.403986][T18799] [ 923.644462][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3607'. [ 924.074517][ T30] audit: type=1400 audit(2000000401.661:1568): avc: denied { setattr } for pid=18801 comm="syz.0.3609" name="[io_uring]" dev="anon_inodefs" ino=65071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 924.955100][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3612'. [ 926.248230][ T30] audit: type=1400 audit(2000000403.831:1569): avc: denied { remount } for pid=18830 comm="syz.5.3618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 926.838254][ T5937] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 926.916775][T18842] ubi: mtd0 is already attached to ubi31 [ 927.018831][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 927.019366][ T5937] usb 1-1: too many configurations: 158, using maximum allowed: 8 [ 927.052519][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 927.052549][ T5937] usb 1-1: can't read configurations, error -61 [ 927.191633][ T5937] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 927.304458][T18849] ubi: mtd0 is already attached to ubi31 [ 927.415098][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 927.447619][ T5937] usb 1-1: too many configurations: 158, using maximum allowed: 8 [ 927.504116][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 927.520589][ T5937] usb 1-1: can't read configurations, error -61 [ 927.533707][ T5937] usb usb1-port1: attempt power cycle [ 928.024771][ T5937] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 928.036445][ T30] audit: type=1400 audit(2000000405.251:1570): avc: denied { accept } for pid=18850 comm="syz.5.3622" laddr=::1 lport=58537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 928.095850][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 928.108985][T12629] Bluetooth: hci4: command 0x0405 tx timeout [ 928.121331][ T5937] usb 1-1: too many configurations: 158, using maximum allowed: 8 [ 928.137918][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 928.161309][ T5937] usb 1-1: can't read configurations, error -61 [ 928.346374][ T5937] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 929.286682][ T5937] usb 1-1: device not accepting address 111, error -71 [ 929.332647][ T5937] usb usb1-port1: unable to enumerate USB device [ 929.438755][ T30] audit: type=1400 audit(2000000407.011:1571): avc: denied { read } for pid=18865 comm="syz.4.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 929.844655][T18578] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 930.456376][T18578] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 930.467437][T18578] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 930.589295][T18578] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 930.598607][T18578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.610834][T18578] usb 1-1: config 0 descriptor?? [ 930.935404][T18890] serio: Serial port ptm1 [ 931.101424][T18578] Bluetooth: Can't get state to change to load configuration err [ 931.111344][T18578] Bluetooth: Loading sysconfig file failed [ 931.119757][T18578] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 931.125270][T18890] serio: Serial port ptm1 [ 931.141522][T18578] usb 1-1: USB disconnect, device number 112 [ 931.466049][T18899] serio: Serial port ptm0 [ 931.551582][T18899] serio: Serial port ptm0 [ 931.837026][T18907] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 931.948301][ T30] audit: type=1400 audit(2000000409.491:1572): avc: denied { write } for pid=18905 comm="syz.0.3639" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 932.056876][ T30] audit: type=1400 audit(2000000409.541:1573): avc: denied { bind } for pid=18905 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 932.118442][T18911] binder: 18910:18911 ioctl c0306201 2000000003c0 returned -14 [ 932.136692][T18911] binder: 18910:18911 ioctl c0306201 200000000180 returned -14 [ 932.148829][ T30] audit: type=1400 audit(2000000409.701:1574): avc: denied { ioctl } for pid=18910 comm="syz.5.3640" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 932.184206][ T30] audit: type=1400 audit(2000000409.701:1575): avc: denied { set_context_mgr } for pid=18910 comm="syz.5.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 932.216042][ T30] audit: type=1400 audit(2000000409.701:1576): avc: denied { write } for pid=18910 comm="syz.5.3640" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 932.245722][ T30] audit: type=1400 audit(2000000409.731:1577): avc: denied { call } for pid=18910 comm="syz.5.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 932.595408][T18578] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 932.956424][ T30] audit: type=1400 audit(2000000410.511:1578): avc: denied { accept } for pid=18916 comm="syz.5.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 933.108595][ T5953] IPVS: starting estimator thread 0... [ 933.204707][T18578] usb 5-1: Using ep0 maxpacket: 32 [ 933.205115][T18930] IPVS: using max 47 ests per chain, 112800 per kthread [ 933.224052][T18578] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 933.225263][T18928] serio: Serial port ptm1 [ 933.236599][ T30] audit: type=1400 audit(2000000410.781:1579): avc: denied { write } for pid=18925 comm="syz.0.3645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 933.320666][T18578] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 933.330208][T18578] usb 5-1: can't read configurations, error -61 [ 933.371252][T18928] serio: Serial port ptm1 [ 933.467055][T18578] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 933.632532][T18578] usb 5-1: Using ep0 maxpacket: 32 [ 933.639059][T18578] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 933.648813][T18578] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 933.657518][T18578] usb 5-1: can't read configurations, error -61 [ 933.699260][T18578] usb usb5-port1: attempt power cycle [ 937.683269][T19004] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3662'. [ 938.106998][T19021] overlayfs: failed to resolve './file0': -2 [ 938.814467][T19031] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3667'. [ 939.100107][ T30] audit: type=1400 audit(2000000416.421:1580): avc: denied { connect } for pid=19024 comm="syz.5.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 939.121200][ T30] audit: type=1400 audit(2000000416.431:1581): avc: denied { write } for pid=19024 comm="syz.5.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 940.667114][T19059] futex_wake_op: syz.4.3680 tries to shift op by -1; fix this program [ 941.332650][T19063] serio: Serial port ptm0 [ 941.527920][T19063] serio: Serial port ptm0 [ 941.619106][T19070] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 941.658458][T19070] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 941.668537][T19070] overlayfs: failed to look up (tracing) for ino (-66) [ 942.061631][T19077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 942.148232][T19077] geneve2: entered promiscuous mode [ 942.153613][T19077] geneve2: entered allmulticast mode [ 942.367036][T19079] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 942.871228][T18578] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 943.117188][T18578] usb 1-1: unable to get BOS descriptor or descriptor too short [ 943.127024][T18578] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 943.154100][T18578] usb 1-1: can't read configurations, error -71 [ 943.185670][T19095] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3692'. [ 943.479000][T19103] serio: Serial port ptm0 [ 943.629202][T19103] serio: Serial port ptm0 [ 945.031566][ T30] audit: type=1400 audit(2000000422.621:1582): avc: denied { ioctl } for pid=19118 comm="syz.6.3698" path="socket:[66657]" dev="sockfs" ino=66657 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 945.775839][T19127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19127 comm=syz.5.3701 [ 946.076871][ T30] audit: type=1400 audit(2000000422.661:1583): avc: denied { append } for pid=19118 comm="syz.6.3698" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 947.726552][T19151] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3709'. [ 948.368046][ T30] audit: type=1400 audit(2000000425.851:1584): avc: denied { connect } for pid=19156 comm="syz.4.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 948.637139][T19163] serio: Serial port ptm0 [ 948.790961][T19163] serio: Serial port ptm0 [ 948.811320][ T30] audit: type=1400 audit(2000000426.401:1585): avc: denied { mount } for pid=19171 comm="syz.5.3714" name="/" dev="hugetlbfs" ino=66847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 949.019202][T18578] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 949.716663][T18578] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 949.724898][T18578] usb 1-1: config 0 has no interface number 0 [ 949.731171][T18578] usb 1-1: New USB device found, idVendor=0421, idProduct=0178, bcdDevice=a8.c0 [ 949.753138][T19188] ubi: mtd0 is already attached to ubi31 [ 949.825224][T18578] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.842619][T18578] usb 1-1: config 0 descriptor?? [ 950.072198][T18578] usb 1-1: string descriptor 0 read error: -71 [ 950.079318][T18578] rndis_host 1-1:0.89: More than one union descriptor, skipping ... [ 950.100620][T18578] usb 1-1: bad CDC descriptors [ 950.112985][T18578] cdc_acm 1-1:0.89: More than one union descriptor, skipping ... [ 950.135189][T18578] usb 1-1: USB disconnect, device number 115 [ 950.175977][ T30] audit: type=1400 audit(2000000427.771:1586): avc: denied { name_bind } for pid=19190 comm="syz.5.3719" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 950.426441][T17062] Bluetooth: hci1: command tx timeout [ 950.442761][T19194] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 950.514865][T13860] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 950.617447][T19197] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 950.678146][T13860] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 950.704836][T13860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.719215][T13860] usb 6-1: Product: syz [ 950.723379][T13860] usb 6-1: Manufacturer: syz [ 950.729067][T13860] usb 6-1: SerialNumber: syz [ 950.739322][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 950.763163][T13860] usb 6-1: config 0 descriptor?? [ 951.006603][T13860] usb 6-1: Firmware version (0.0) predates our first public release. [ 951.029919][T13860] usb 6-1: Please update to version 0.2 or newer [ 951.054698][T14510] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 951.109255][T19218] serio: Serial port ptm0 [ 951.122035][T13860] usb 6-1: USB disconnect, device number 19 [ 951.219967][T14510] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 951.267764][T14510] usb 7-1: config 0 has no interface number 0 [ 951.275234][T14510] usb 7-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 951.287248][T14510] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 951.316781][T14510] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 951.382325][T14510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.390543][T14510] usb 7-1: Product: syz [ 951.394990][T14510] usb 7-1: Manufacturer: syz [ 951.443791][T14510] usb 7-1: SerialNumber: syz [ 951.450924][T14510] usb 7-1: config 0 descriptor?? [ 951.678646][T14510] qcserial 7-1:0.49: Qualcomm USB modem converter detected [ 952.015592][T14510] usb 7-1: USB disconnect, device number 19 [ 952.022638][T14510] qcserial 7-1:0.49: device disconnected [ 952.039724][T19237] ubi: mtd0 is already attached to ubi31 [ 952.328986][T19249] overlayfs: overlapping lowerdir path [ 952.466847][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'. [ 952.477242][T19259] overlayfs: failed to resolve './file1': -2 [ 952.487648][T19262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.666568][ T30] audit: type=1400 audit(2000000430.261:1587): avc: denied { setopt } for pid=19251 comm="syz.4.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 952.666800][T19252] netlink: 'syz.4.3737': attribute type 25 has an invalid length. [ 952.737676][ T30] audit: type=1400 audit(2000000430.291:1588): avc: denied { write } for pid=19255 comm="syz.0.3740" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 953.252066][T19283] FAULT_INJECTION: forcing a failure. [ 953.252066][T19283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.265608][T19283] CPU: 1 UID: 0 PID: 19283 Comm: syz.4.3745 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.265636][T19283] Tainted: [L]=SOFTLOCKUP [ 953.265643][T19283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.265653][T19283] Call Trace: [ 953.265659][T19283] [ 953.265666][T19283] dump_stack_lvl+0x16c/0x1f0 [ 953.265693][T19283] should_fail_ex+0x512/0x640 [ 953.265722][T19283] _copy_from_user+0x2e/0xd0 [ 953.265747][T19283] copy_msghdr_from_user+0x98/0x160 [ 953.265766][T19283] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 953.265795][T19283] ___sys_sendmsg+0xfe/0x1d0 [ 953.265813][T19283] ? __pfx____sys_sendmsg+0x10/0x10 [ 953.265852][T19283] ? __pfx___might_resched+0x10/0x10 [ 953.265874][T19283] __sys_sendmmsg+0x200/0x420 [ 953.265894][T19283] ? __pfx___sys_sendmmsg+0x10/0x10 [ 953.265909][T19283] ? __schedule+0x10b9/0x6150 [ 953.265934][T19283] ? rcu_is_watching+0x12/0xc0 [ 953.265965][T19283] ? rcu_is_watching+0x12/0xc0 [ 953.265984][T19283] __x64_sys_sendmmsg+0x9c/0x100 [ 953.266001][T19283] ? lockdep_hardirqs_on+0x7c/0x110 [ 953.266022][T19283] do_syscall_64+0xcd/0xf80 [ 953.266045][T19283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.266063][T19283] RIP: 0033:0x7f555f78f749 [ 953.266076][T19283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.266092][T19283] RSP: 002b:00007f556055c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 953.266108][T19283] RAX: ffffffffffffffda RBX: 00007f555f9e6180 RCX: 00007f555f78f749 [ 953.266119][T19283] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000006 [ 953.266130][T19283] RBP: 00007f556055c090 R08: 0000000000000000 R09: 0000000000000000 [ 953.266140][T19283] R10: 000000000000ff14 R11: 0000000000000246 R12: 0000000000000001 [ 953.266150][T19283] R13: 00007f555f9e6218 R14: 00007f555f9e6180 R15: 00007ffebbd9e498 [ 953.266173][T19283] [ 953.686710][T19292] input: syz1 as /devices/virtual/input/input101 [ 953.693151][ T30] audit: type=1400 audit(2000000431.281:1589): avc: denied { read } for pid=19291 comm="syz.2.3749" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 953.767125][ T30] audit: type=1400 audit(2000000431.281:1590): avc: denied { open } for pid=19291 comm="syz.2.3749" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 953.972399][T19297] overlayfs: failed to resolve './file1': -2 [ 954.016322][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.033215][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 954.071949][T19299] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 954.096682][ T30] audit: type=1400 audit(2000000431.691:1591): avc: denied { write } for pid=19298 comm="syz.4.3752" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 954.162283][ T30] audit: type=1400 audit(2000000431.711:1592): avc: denied { open } for pid=19298 comm="syz.4.3752" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 954.223170][ T30] audit: type=1400 audit(2000000431.781:1593): avc: denied { getopt } for pid=19298 comm="syz.4.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 954.646773][ T30] audit: type=1400 audit(2000000432.241:1594): avc: denied { map } for pid=19305 comm="syz.0.3755" path="socket:[67129]" dev="sockfs" ino=67129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 954.677202][ T30] audit: type=1400 audit(2000000432.241:1595): avc: denied { accept } for pid=19305 comm="syz.0.3755" path="socket:[67129]" dev="sockfs" ino=67129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 957.593452][ T30] audit: type=1400 audit(2000000435.181:1596): avc: denied { create } for pid=19339 comm="syz.0.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.629662][T14510] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 957.670809][ T30] audit: type=1400 audit(2000000435.261:1597): avc: denied { write } for pid=19339 comm="syz.0.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 957.717537][ T30] audit: type=1400 audit(2000000435.311:1598): avc: denied { block_suspend } for pid=19339 comm="syz.0.3767" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 957.840482][T14510] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.853860][T14510] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 957.866652][T14510] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 957.882604][T14510] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 957.892796][T14510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.901166][T14510] usb 7-1: Product: syz [ 957.905845][T14510] usb 7-1: Manufacturer: syz [ 957.911166][T14510] usb 7-1: SerialNumber: syz [ 957.920125][T14510] hub 7-1:1.0: bad descriptor, ignoring hub [ 957.927055][T14510] hub 7-1:1.0: probe with driver hub failed with error -5 [ 957.968760][T19355] FAULT_INJECTION: forcing a failure. [ 957.968760][T19355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.004702][T19355] CPU: 1 UID: 0 PID: 19355 Comm: syz.5.3769 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.004733][T19355] Tainted: [L]=SOFTLOCKUP [ 958.004739][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.004747][T19355] Call Trace: [ 958.004751][T19355] [ 958.004756][T19355] dump_stack_lvl+0x16c/0x1f0 [ 958.004775][T19355] should_fail_ex+0x512/0x640 [ 958.004794][T19355] _copy_from_user+0x2e/0xd0 [ 958.004815][T19355] copy_msghdr_from_user+0x98/0x160 [ 958.004833][T19355] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 958.004853][T19355] ? __pfx__kstrtoull+0x10/0x10 [ 958.004874][T19355] ___sys_sendmsg+0xfe/0x1d0 [ 958.004890][T19355] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.004912][T19355] ? __pfx___might_resched+0x10/0x10 [ 958.004925][T19355] __sys_sendmmsg+0x200/0x420 [ 958.004938][T19355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 958.004976][T19355] ? __pfx___schedule+0x10/0x10 [ 958.005002][T19355] __x64_sys_sendmmsg+0x9c/0x100 [ 958.005017][T19355] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.005036][T19355] do_syscall_64+0xcd/0xf80 [ 958.005050][T19355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.005062][T19355] RIP: 0033:0x7f9dde38f749 [ 958.005072][T19355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.005082][T19355] RSP: 002b:00007f9ddf2ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.005093][T19355] RAX: ffffffffffffffda RBX: 00007f9dde5e6090 RCX: 00007f9dde38f749 [ 958.005102][T19355] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000006 [ 958.005112][T19355] RBP: 00007f9ddf2ef090 R08: 0000000000000000 R09: 0000000000000000 [ 958.005122][T19355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.005131][T19355] R13: 00007f9dde5e6128 R14: 00007f9dde5e6090 R15: 00007ffda824a628 [ 958.005153][T19355] [ 958.248057][T14510] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 958.287553][T19359] VFS: Mount too revealing [ 958.478583][T19336] FAULT_INJECTION: forcing a failure. [ 958.478583][T19336] name failslab, interval 1, probability 0, space 0, times 0 [ 958.519786][T19363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3772'. [ 958.720445][T19336] CPU: 0 UID: 0 PID: 19336 Comm: syz.6.3765 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.720467][T19336] Tainted: [L]=SOFTLOCKUP [ 958.720471][T19336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 958.720478][T19336] Call Trace: [ 958.720481][T19336] [ 958.720486][T19336] dump_stack_lvl+0x16c/0x1f0 [ 958.720503][T19336] should_fail_ex+0x512/0x640 [ 958.720519][T19336] ? kmem_cache_alloc_noprof+0x62/0x770 [ 958.720532][T19336] should_failslab+0xc2/0x120 [ 958.720546][T19336] kmem_cache_alloc_noprof+0x83/0x770 [ 958.720557][T19336] ? security_file_alloc+0x34/0x2b0 [ 958.720574][T19336] ? security_file_alloc+0x34/0x2b0 [ 958.720588][T19336] security_file_alloc+0x34/0x2b0 [ 958.720602][T19336] init_file+0x93/0x4c0 [ 958.720619][T19336] alloc_empty_file+0x73/0x1e0 [ 958.720629][T19336] path_openat+0xde/0x3140 [ 958.720643][T19336] ? do_syscall_64+0xcd/0xf80 [ 958.720656][T19336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.720671][T19336] ? __pfx_path_openat+0x10/0x10 [ 958.720690][T19336] do_filp_open+0x20b/0x470 [ 958.720706][T19336] ? __pfx_do_filp_open+0x10/0x10 [ 958.720732][T19336] ? alloc_fd+0x471/0x7d0 [ 958.720751][T19336] do_sys_openat2+0x121/0x290 [ 958.720761][T19336] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.720772][T19336] ? __fget_files+0x20e/0x3c0 [ 958.720789][T19336] __x64_sys_openat+0x174/0x210 [ 958.720800][T19336] ? __pfx___x64_sys_openat+0x10/0x10 [ 958.720810][T19336] ? ksys_write+0x1ac/0x250 [ 958.720827][T19336] do_syscall_64+0xcd/0xf80 [ 958.720841][T19336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.720851][T19336] RIP: 0033:0x7fb341b8df90 [ 958.720860][T19336] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 958.720871][T19336] RSP: 002b:00007fb342a69b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 958.720882][T19336] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb341b8df90 [ 958.720889][T19336] RDX: 0000000000000002 RSI: 00007fb342a69c10 RDI: 00000000ffffff9c [ 958.720896][T19336] RBP: 00007fb342a69c10 R08: 0000000000000000 R09: 00007fb342a69987 [ 958.720902][T19336] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 958.720909][T19336] R13: 00007fb341de6038 R14: 00007fb341de5fa0 R15: 00007fffe4a14c68 [ 958.720922][T19336] [ 958.791603][ T30] audit: type=1326 audit(2000000436.381:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19344 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75fd8f749 code=0x7fc00000 [ 958.912457][T14510] usb 7-1: USB disconnect, device number 20 [ 959.137993][T19368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28491 sclass=netlink_route_socket pid=19368 comm=syz.2.3775 [ 959.145603][T14510] usblp0: removed [ 959.225016][ T5953] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 959.381509][T19373] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 959.546675][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 959.554173][ T5953] usb 1-1: too many configurations: 158, using maximum allowed: 8 [ 959.588802][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 959.597223][ T5953] usb 1-1: can't read configurations, error -61 [ 959.707137][T19377] netlink: zone id is out of range [ 959.712290][T19377] netlink: zone id is out of range [ 959.717426][T19377] netlink: zone id is out of range [ 959.722504][T19377] netlink: zone id is out of range [ 959.727713][T19377] netlink: zone id is out of range [ 959.732801][T19377] netlink: zone id is out of range [ 959.737905][T19377] netlink: zone id is out of range [ 959.743009][T19377] netlink: zone id is out of range [ 959.748198][T19377] netlink: del zone limit has 4 unknown bytes [ 959.754488][ T5953] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 960.349084][T19379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3779'. [ 960.454694][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 960.465258][ T5953] usb 1-1: too many configurations: 158, using maximum allowed: 8 [ 960.495204][ T5953] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 960.502784][ T5953] usb 1-1: can't read configurations, error -61 [ 960.522304][ T5953] usb usb1-port1: attempt power cycle [ 960.561424][T19381] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 960.644956][T19381] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 960.674708][T14510] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 960.693469][ T30] audit: type=1400 audit(2000000438.231:1600): avc: denied { firmware_load } for pid=19374 comm="syz.4.3777" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 960.923068][ T5953] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 960.956201][T14510] usb 3-1: Using ep0 maxpacket: 8 [ 961.056674][T14510] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 961.074722][T14510] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.095039][T14510] usb 3-1: Product: syz [ 961.099767][T14510] usb 3-1: Manufacturer: syz [ 961.114715][T14510] usb 3-1: SerialNumber: syz [ 961.125746][ T5953] usb 1-1: device descriptor read/8, error -71 [ 961.133416][T14510] usb 3-1: config 0 descriptor?? [ 961.147447][T14510] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 961.171351][T14510] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input102 [ 961.660660][T14510] usb 3-1: USB disconnect, device number 82 [ 961.669032][ T30] audit: type=1400 audit(2000000439.181:1601): avc: denied { setopt } for pid=19394 comm="syz.0.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 962.560155][T19411] ceph: No mds server is up or the cluster is laggy [ 962.570835][ T5937] libceph: connect (1)[c::]:6789 error -101 [ 962.754926][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 966.423570][ T30] audit: type=1400 audit(2000000444.011:1602): avc: denied { create } for pid=19457 comm="syz.2.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 967.219584][T19454] netlink: 'syz.5.3800': attribute type 1 has an invalid length. [ 967.584784][ T5937] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 967.612000][T19456] kvm: kvm [19455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 967.675004][T19456] kvm: kvm [19455]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 967.785439][ T5937] usb 7-1: Using ep0 maxpacket: 16 [ 967.805862][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 967.826665][ T5937] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 967.840213][ T5937] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 967.928387][ T5937] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 967.969780][T19479] input: syz0 as /devices/virtual/input/input103 [ 968.064382][ T5937] usb 7-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 968.174446][ T30] audit: type=1400 audit(2000000445.761:1603): avc: denied { write } for pid=19480 comm="syz.5.3808" name="sg0" dev="devtmpfs" ino=788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 968.204307][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.218159][ T5937] usb 7-1: Product: syz [ 968.223436][ T5937] usb 7-1: Manufacturer: syz [ 968.229125][ T5937] usb 7-1: SerialNumber: syz [ 968.252020][ T5937] usb 7-1: config 0 descriptor?? [ 968.427763][T19482] [ 968.430108][T19482] ====================================================== [ 968.437107][T19482] WARNING: possible circular locking dependency detected [ 968.444110][T19482] syzkaller #0 Tainted: G L [ 968.450073][T19482] ------------------------------------------------------ [ 968.457078][T19482] syz.5.3808/19482 is trying to acquire lock: [ 968.463127][T19482] ffff88807695e0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 968.471571][T19482] [ 968.471571][T19482] but task is already holding lock: [ 968.478950][T19482] ffff888033543c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 968.487228][T19482] [ 968.487228][T19482] which lock already depends on the new lock. [ 968.487228][T19482] [ 968.497614][T19482] [ 968.497614][T19482] the existing dependency chain (in reverse order) is: [ 968.506611][T19482] [ 968.506611][T19482] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 968.513961][T19482] __mutex_lock+0x1aa/0x1ca0 [ 968.519052][T19482] anon_pipe_write+0x15d/0x1bd0 [ 968.524401][T19482] __kernel_write_iter+0x720/0xb10 [ 968.530003][T19482] __kernel_write+0xf5/0x140 [ 968.535082][T19482] autofs_notify_daemon+0x4db/0xd60 [ 968.540780][T19482] autofs_wait+0x10f3/0x1ac0 [ 968.545874][T19482] autofs_do_expire_multi+0x14e/0x500 [ 968.551736][T19482] autofs_expire_multi+0x68/0x90 [ 968.557202][T19482] autofs_root_ioctl_unlocked+0x6c7/0x920 [ 968.563448][T19482] autofs_root_ioctl+0x41/0x60 [ 968.568711][T19482] __x64_sys_ioctl+0x18e/0x210 [ 968.573981][T19482] do_syscall_64+0xcd/0xf80 [ 968.578996][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.585408][T19482] [ 968.585408][T19482] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 968.593128][T19482] __mutex_lock+0x1aa/0x1ca0 [ 968.598227][T19482] autofs_notify_daemon+0x4a6/0xd60 [ 968.603951][T19482] autofs_wait+0x10f3/0x1ac0 [ 968.609039][T19482] autofs_mount_wait+0x132/0x3c0 [ 968.614477][T19482] autofs_d_automount+0x4b2/0x960 [ 968.620003][T19482] __traverse_mounts+0x1b9/0x830 [ 968.625453][T19482] step_into_slowpath+0x772/0xf50 [ 968.630979][T19482] path_lookupat+0x627/0xc40 [ 968.636071][T19482] filename_lookup+0x224/0x5f0 [ 968.641336][T19482] kern_path+0x35/0x50 [ 968.645908][T19482] lookup_bdev+0xd8/0x280 [ 968.650742][T19482] resume_store+0x1d6/0x490 [ 968.655837][T19482] kobj_attr_store+0x58/0x80 [ 968.660929][T19482] sysfs_kf_write+0xf2/0x150 [ 968.666035][T19482] kernfs_fop_write_iter+0x3af/0x570 [ 968.671829][T19482] vfs_write+0x7d3/0x11d0 [ 968.676676][T19482] ksys_write+0x12a/0x250 [ 968.681514][T19482] do_syscall_64+0xcd/0xf80 [ 968.686522][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.692915][T19482] [ 968.692915][T19482] -> #1 (&of->mutex){+.+.}-{4:4}: [ 968.700096][T19482] __mutex_lock+0x1aa/0x1ca0 [ 968.705188][T19482] kernfs_seq_start+0x4f/0x2a0 [ 968.710461][T19482] seq_read_iter+0x2c1/0x12d0 [ 968.715650][T19482] kernfs_fop_read_iter+0x46c/0x610 [ 968.721352][T19482] copy_splice_read+0x618/0xc20 [ 968.726702][T19482] do_splice_read+0x285/0x370 [ 968.731881][T19482] splice_direct_to_actor+0x2a1/0xa30 [ 968.737754][T19482] do_splice_direct+0x174/0x240 [ 968.743106][T19482] do_sendfile+0xb06/0xe50 [ 968.748017][T19482] __x64_sys_sendfile64+0x1d8/0x220 [ 968.753716][T19482] do_syscall_64+0xcd/0xf80 [ 968.758720][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.765109][T19482] [ 968.765109][T19482] -> #0 (&p->lock){+.+.}-{4:4}: [ 968.772119][T19482] __lock_acquire+0x1669/0x2890 [ 968.777469][T19482] lock_acquire+0x179/0x330 [ 968.782468][T19482] __mutex_lock+0x1aa/0x1ca0 [ 968.787557][T19482] seq_read_iter+0xe1/0x12d0 [ 968.792651][T19482] kernfs_fop_read_iter+0x46c/0x610 [ 968.798352][T19482] copy_splice_read+0x618/0xc20 [ 968.803703][T19482] do_splice_read+0x285/0x370 [ 968.808891][T19482] splice_file_to_pipe+0x109/0x120 [ 968.814523][T19482] do_sendfile+0x400/0xe50 [ 968.819439][T19482] __x64_sys_sendfile64+0x1d8/0x220 [ 968.825142][T19482] do_syscall_64+0xcd/0xf80 [ 968.830145][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.836541][T19482] [ 968.836541][T19482] other info that might help us debug this: [ 968.836541][T19482] [ 968.846754][T19482] Chain exists of: [ 968.846754][T19482] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 968.846754][T19482] [ 968.858993][T19482] Possible unsafe locking scenario: [ 968.858993][T19482] [ 968.866421][T19482] CPU0 CPU1 [ 968.871767][T19482] ---- ---- [ 968.877116][T19482] lock(&pipe->mutex); [ 968.881258][T19482] lock(&sbi->pipe_mutex); [ 968.888265][T19482] lock(&pipe->mutex); [ 968.895012][T19482] lock(&p->lock); [ 968.898814][T19482] [ 968.898814][T19482] *** DEADLOCK *** [ 968.898814][T19482] [ 968.906968][T19482] 1 lock held by syz.5.3808/19482: [ 968.912069][T19482] #0: ffff888033543c68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 968.920750][T19482] [ 968.920750][T19482] stack backtrace: [ 968.926622][T19482] CPU: 1 UID: 0 PID: 19482 Comm: syz.5.3808 Tainted: G L syzkaller #0 PREEMPT(full) [ 968.926641][T19482] Tainted: [L]=SOFTLOCKUP [ 968.926646][T19482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 968.926654][T19482] Call Trace: [ 968.926659][T19482] [ 968.926665][T19482] dump_stack_lvl+0x116/0x1f0 [ 968.926684][T19482] print_circular_bug+0x275/0x340 [ 968.926700][T19482] check_noncircular+0x146/0x160 [ 968.926716][T19482] __lock_acquire+0x1669/0x2890 [ 968.926732][T19482] ? find_held_lock+0x2b/0x80 [ 968.926751][T19482] lock_acquire+0x179/0x330 [ 968.926765][T19482] ? seq_read_iter+0xe1/0x12d0 [ 968.926783][T19482] ? __pfx___might_resched+0x10/0x10 [ 968.926795][T19482] ? rcu_is_watching+0x12/0xc0 [ 968.926808][T19482] __mutex_lock+0x1aa/0x1ca0 [ 968.926830][T19482] ? seq_read_iter+0xe1/0x12d0 [ 968.926847][T19482] ? seq_read_iter+0xe1/0x12d0 [ 968.926863][T19482] ? __pfx___mutex_lock+0x10/0x10 [ 968.926882][T19482] ? irqentry_exit+0x1dd/0x8c0 [ 968.926898][T19482] ? lockdep_hardirqs_on+0x7c/0x110 [ 968.926915][T19482] ? seq_read_iter+0xe1/0x12d0 [ 968.926931][T19482] seq_read_iter+0xe1/0x12d0 [ 968.926949][T19482] ? kernfs_fop_read_iter+0x1d/0x610 [ 968.926970][T19482] kernfs_fop_read_iter+0x46c/0x610 [ 968.926991][T19482] copy_splice_read+0x618/0xc20 [ 968.927011][T19482] ? irqentry_exit+0x1dd/0x8c0 [ 968.927027][T19482] ? __pfx_copy_splice_read+0x10/0x10 [ 968.927043][T19482] ? irqentry_exit+0x1dd/0x8c0 [ 968.927063][T19482] ? __pfx_copy_splice_read+0x10/0x10 [ 968.927080][T19482] do_splice_read+0x285/0x370 [ 968.927098][T19482] splice_file_to_pipe+0x109/0x120 [ 968.927118][T19482] do_sendfile+0x400/0xe50 [ 968.927135][T19482] ? __pfx_do_sendfile+0x10/0x10 [ 968.927150][T19482] ? __pfx___seccomp_filter+0x10/0x10 [ 968.927171][T19482] __x64_sys_sendfile64+0x1d8/0x220 [ 968.927190][T19482] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 968.927209][T19482] ? __secure_computing+0x28e/0x3b0 [ 968.927228][T19482] do_syscall_64+0xcd/0xf80 [ 968.927245][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.927259][T19482] RIP: 0033:0x7f9dde38f749 [ 968.927271][T19482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.927284][T19482] RSP: 002b:00007f9ddf310038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 968.927296][T19482] RAX: ffffffffffffffda RBX: 00007f9dde5e5fa0 RCX: 00007f9dde38f749 [ 968.927305][T19482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000000 [ 968.927313][T19482] RBP: 00007f9dde413f91 R08: 0000000000000000 R09: 0000000000000000 [ 968.927321][T19482] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 968.927329][T19482] R13: 00007f9dde5e6038 R14: 00007f9dde5e5fa0 R15: 00007ffda824a628 [ 968.927342][T19482] [ 969.243362][ T5937] omninet 7-1:0.0: ZyXEL - omni.net usb converter detected [ 969.259925][ T5937] usb 7-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 969.434521][ T5937] usb 7-1: USB disconnect, device number 21 [ 969.441544][ T5937] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 969.450709][ T5937] omninet 7-1:0.0: device disconnected