last executing test programs: 11.22449535s ago: executing program 2 (id=289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000056c0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/197, 0xc5}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/106, 0x6a}, {&(0x7f0000001600)=""/180, 0xb4}], 0x9, &(0x7f0000001780)=""/4096, 0x1000}, 0xb2}, {{&(0x7f0000002780)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002800)=""/187, 0xbb}, {&(0x7f00000028c0)=""/44, 0x2c}, {&(0x7f0000002900)=""/126, 0x7e}, {&(0x7f0000002980)=""/97, 0x61}, {&(0x7f0000002a00)=""/61, 0x3d}, {&(0x7f0000002a40)=""/241, 0xf1}, {&(0x7f0000002b40)=""/214, 0xd6}, {&(0x7f0000002c40)=""/172, 0xac}], 0x8, &(0x7f0000002d80)=""/91, 0x5b}}, {{&(0x7f0000002e00)=@alg, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e80)=""/106, 0x6a}], 0x1, &(0x7f0000002f40)=""/86, 0x56}, 0x6}, {{&(0x7f0000002fc0)=@nfc_llcp, 0x80, &(0x7f0000003600)=[{&(0x7f0000003040)=""/255, 0xff}, {&(0x7f0000003140)=""/96, 0x60}, {&(0x7f00000031c0)=""/77, 0x4d}, {&(0x7f0000003240)=""/223, 0xdf}, {&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/35, 0x23}, {&(0x7f00000033c0)=""/230, 0xe6}, {&(0x7f00000034c0)=""/49, 0x31}, {&(0x7f0000003500)=""/181, 0xb5}, {&(0x7f00000035c0)}], 0xa, &(0x7f00000036c0)=""/193, 0xc1}, 0x2b12}, {{&(0x7f00000037c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/217, 0xd9}, {&(0x7f0000003940)=""/4, 0x4}, {&(0x7f0000003980)=""/70, 0x46}], 0x3, &(0x7f0000003a40)=""/179, 0xb3}, 0x7}, {{&(0x7f0000003b00)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000005000)=[{&(0x7f0000003b80)=""/26, 0x1a}, {&(0x7f0000003bc0)}, {&(0x7f0000003c00)=""/211, 0xd3}, {&(0x7f0000003d00)=""/187, 0xbb}, {&(0x7f0000003dc0)=""/187, 0xbb}, {&(0x7f0000003e80)=""/83, 0x53}, {&(0x7f0000003f00)=""/131, 0x83}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x9, &(0x7f00000050c0)=""/27, 0x1b}, 0xd}, {{&(0x7f0000005100)=@phonet, 0x80, &(0x7f0000005640)=[{&(0x7f0000005180)=""/222, 0xde}, {&(0x7f0000005280)=""/239, 0xef}, {&(0x7f0000005380)=""/52, 0x34}, {&(0x7f00000053c0)=""/3, 0x3}, {&(0x7f0000005400)=""/154, 0x9a}, {&(0x7f00000054c0)=""/89, 0x59}, {&(0x7f0000005540)=""/206, 0xce}], 0x7}, 0x80000001}], 0x7, 0x40002000, &(0x7f0000005880)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0) 9.543202977s ago: executing program 0 (id=296): syz_emit_ethernet(0x7a, &(0x7f0000001440)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88ca}}}}}}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) dup(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000002180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.248832388s ago: executing program 2 (id=298): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000de351b5c81463afb40f21c8d6f0633f3c8896456dbab538169bc65d55434405250030a04f5e0b071b51b81c249652a45f0b73945bcdf85116512e9a5d6165e03f4f1cbc53cb81d11c28427ed330158092e2ccfe10a950b6c4241f58d111f042586fd1e4c7d757222f961bed16b38491bf6b328da000883c97b57000000000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000000)=0xb9, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24004080, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r2, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xbf}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="eb7a2bbd7000fcdbdd252100000009001f00706879310000000005002000000000000c0005000000000000006cd44adc4695c9b712c9716b"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d7e703a69702c6d616300000005000400000000000900020073797a31000000001800078005000300050000000c00018208000140ffffffff05000500020000000500010006000010"], 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}]}, 0x24}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002400), 0x1ed201, 0x0) 8.696186868s ago: executing program 0 (id=300): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x47) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x22, 0x2, 0x3) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x4, 0x1dba3693}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000600340076770000080026006c0900002c0051"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008085}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) 8.662157448s ago: executing program 2 (id=302): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044199610b9dea9505bc021e50661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 7.328698557s ago: executing program 0 (id=309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0x10}}}, 0x24}}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r3, 0xc02063a0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) sendmmsg$inet(0xffffffffffffffff, &(0x7f000000c3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x8, 0x0, 0x0, 0xfffff024}, {0x2d, 0x0, 0x0, 0xb}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x18) 6.172364354s ago: executing program 0 (id=311): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) sched_getscheduler(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x4, 0x2, 0x140}]}]}, 0x38}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x98302, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) 6.131266425s ago: executing program 1 (id=313): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000000700)={{r1}, r6, 0x10, @inherit={0x0, 0x0}, @name="048351a73262d8125cce33836e0e2637e972f8d925719455a01e9f6e80063869eb46788894f7436b4d5a26d77dd7a2891c6fe1fad5fa7f548896ff765d9cd7dab1c53103d622a96fd727894c176c6b9d51b5db6ddf515b865f559b63d9d60bfbaab26ff9b9c98c9aa18aed28bd141a8c1563c39f110bea82b0f32978a9a529ac0e3335914f50b64a5d259b93129117182c43b098ffc57decb4d109d34ca8e3eae53dbf93647ab4edb6ee2555402b2709dc01676290256f252a3bafeb2f2d7b3c0f604effa0aed679ddb85c8455242c581be5d21408ae80a44b197b34cde00386a22059fda8aee692dbf3af79c83aa16d2295a0f6d0c00d9d8437af2b98e062ce97942914a90547e03d7d0132954893245b011240e839c85b93bd15fdbd73b420cb56bac6133668382b3eccb69f2ff900511b72fca0c5beffa8745656ebec45608cf2a8fd3b730b643124c6339533f110d92e2d3252f88b2e9895b014a5a8bb26753d650083cd235b7f9a638142c729a0cae76e2abdf5871410c9e70737ecbaea1da80c19d16335003518a4d2574fc1028130f70f0b24e5694ee8ab67448e478d5496f1f11797b84b7890742dea40f4b1445301ca9661038435db4f44073b956076a455e92bcfb8aacdd20aca10dde80a94f3d0105ee8aace098c7a273ea0d98870be77cc1e76d83b222164304372fa5b6acec32adeeb2c3e8f9394da1abfa2ec1133f9493b484e53fadcae3aaf52bc95e39d914fe0c7ad6bd976d3fd7c52c523e6a2876b16be65ec631784fcaa9634e487f7ed3edfb5d1a94de0daea638d85d2568bae331848ac019917a21c58a51e94ec51fcb16cf9254e3377c40055adc0f5942ad660942a0ae7fdcb191e23cbdfa4996d168b721722c47a1f08e4887a3015e6436f03220060d46f36a165dfd976d75afea2e11451b8bd97358e016e2e2972c7b333cd31b594bd91d735c2d3b02b98432f04d143721e18a113f44d04f53b9e64b44dba9423fca50f23040c5921c8aac4394466f41651699ef64ab370398af63eca851f60153208f4a51f8db856b905cc215677929c638c0c2cf4b0d9265ce099296228a593d9e32cb4e8d40542c97eee7996896eaa6d798ea9c7dd672a8eccf6319d31fdb7418a2436fb2821a8abe009b9b68f1a9762b105de4b51ddad1dd705e1f595edc648ad9cfc5aa32504fba767f6817ff426e5313949433bfdbb73b5281665a6b7b4da62cb34aa5949e8d11bf6a66bbf9a5c859da513c9d792d8ecabfb533429c2da4f4e0246d5a813817b8230593f10c9e0000949c58d8d52243a03c902fcde551fb5eae15e6823355f3f03a1f5e585c5bde42c5341ecda6a8ed6a1d6a830879e67cd9db2059536142d960686d2de0aaf1c380c6ff72b3bf9130ce552d05316ca2a17878142c9a202313c0b2735da9044467e80f09f0c641bffe30d9cbd126d0e4be7db1d8059dff1cdd7a1339af4f989a9180fbe7cf8ef109aa23f234363c25927553a4c9874d8bb503522c0c641fb1aa8864a169e5d3ac9fb311b9e8085d506f2d285d26a0f8ec4d80988a6c90cd4801a04d74030d67463c8f10cdb6040bdc74379e00de783f28dba505652b966466d6420b3d99f3126ab0e0cb8bd7e12817eff48e9b42a0f736ec7bd74a2e89213de93839c2fdd3139369853d20ddf8d575875e29a20ece2e53270b82754c6b469d77a6ee861a65fbed0f555d32e785579b0cfa5e2f86c600fa64a33700fec34a29fc12b48bdbbe91db145437d49f6d6010b10f1a742115c0a156feb66e3f5b2686783e7aebc0f4437d02ca404be5a020b46d80410582562e0144798263da18f56e02d6389ef11ce5dd52c6c3c558154891c854e2732c2885111d844677968aa58d9aa90f331974ce412454773ed45e5a2104cb07aef362c15908201fd3cf5f81871697fdfb1c61ae8b420b8a2b208f1b1675afd318b2905dbb62c46e08572eaaf6834bc088ad5c5eb1d1c874787efeb64fdaeef44ead4c853cf56ef1571740d2c18e1b04ec7007ced218b9ec255977e80da264020998980563e3140bbc98f5e817e3ea71be36428e0a0a525e13eb96c6b1db2dd391d0cffa8a6a1114c7a9937efd6366d4bf5c143f2e893f52ec44316f67def102e8e9363fc9f2dc773d688069fe10c193b6dd09eae2f4f72b569e0d307871d6dc80d25327a97102f45f9a3e0c8c92a0457514500cc6febe86fcf6d292ebdadcb168e8547e28b6b32f20f348b04a55492be1e5dfe81651dbd9738cc7e7482f0321135fb394e154e516ea8c7d62ae98fcda11afc9b471574909ebb4f63076359459c600ba50bb68cc1ec3ca7017b5a7f69bcad84181676596c6a24e83443d6bd6f08a0feae803b523f470ec9eb050d84f906e3470e914f00728e96f649131fea6783b8d68e40c52a14458c626cff9adefe81516ffde41f303d1c1c094c26c4f71eb4036757b59af1fb789aa4ffdad03d65b6d94e32abb6b359cfca8c1ab5ef1e1f21750534b1b9a50798175657f58a008c3f0bbfcc9995f3ffd55363e05e14c4a63a274fb6d01fe876c77b1e4aab81f505ce6f6ce3036fece45dbe4e1d91986f0cfcc3b154a716a25cf85c040fc8efe9f688d277a3f828cee97ce8e535971596fcd5cf7a6813f15084a18cea34e5f8699fef207a320a7aba5210c9abd31c02ed9f25c77cdcb08fae9bcd3f4ba54334c7e235ad2e687b3822c8176d91301e01a9a69b7f36d62aeebac1e5d2ce400eee67b0a19fede2c0c682c62c8cf46bfb51bdffe93c0f5d9f1450feaf838e0fba7d9eca184ad3bf43617eccc64d7e13d35998108aaa574bb4106510c38e06b9b45a81ffa98ac85374d2213983688508fd88bf82508ba1a20202a6c8cb43d7b93297a06de722f2f3553d57685d2f95d6311ccb2125c88c160acad6afc864b1e55e9dbce08a9f4f2f577644c9b581e889675e5f2f23db6e148aa581385ef6f53ef3c705bb02bd07a33c3a0cd1203b72fb8cb7ff17841b35744325ef42bf04ef8417a32ed169a56d2997636306ee8260f1bc026532ac1453f4c91aa9004cb3aa739d460644f16ac7494b9b781d6b3a687962f1ffde70baf411f3e66b15d74bf995d5729367c5f97db83c48ac52f9b15043c2fe2179e69cd93bf80f17f16ef3621e548b1f5f19e5d8567314a4efbafee7967214c33b2a24efdf75d0236a096d4ff96e53c254be0ec36dc10e7cd034acc34a9072ca89a0a738488ec71169474c538b158182c665989932f20375345fc18debd81dfe2325beb132b980519cf4bf9c9471101a4c7394c670353a08f3cbd1b1d8a956bb70e3f1f605ca4872bd645981c25aa5c41508710e1acb3dff5002ea10ab2e12e7273107f2b95ce242a4e8769367858d443f2344e8cf0a3624c59523e54e99db4969f9b85b3e497fd92a810ccc0c73b20834a118f75764b5fe07be9bd13b0b0c530207a2bf6f60eef8707a6f4a31694be787b0e85eed39c2d0e7febd8090aa6c6e6836406191a98dcc4edee3e6363b2c9d109960cfe3b6b36227ba19c67f20422b452696c288e521b0722e05a42bca3af6f8e8598c6b1797993ad79a9e6dfb17fa5ed3f4e5ed5c7ccf61a203edd138f7226c298e8af90e118d3df53bb84fdcd3806b0374f53947430124b8eed0486977e8176df87df493374d18ea72d36fee0921a4f6cae07a819b4acb82d18b66332a5664fbab446bd7ec82f525e9627e4b192714a0aa14101c7206ca93daa44342ce7fcf4923fa48f6b44aa0d47d4dc48350af6907b05af299e1e5ed2a470843eb55bbd30849e8b2b58d488fac6995346ad2e22b0f102d82fce5ee5dfdb4dac40310c856c00f46fca96cbf18acec6ad7e969636ca3e65da11329048feced419833d93ed80ea46af9f40c93bad03fd5a338a15e4a24ed5598fd60b3afdb648d63c626861cafeee00e245d3f1bad977e071dca1867b3dd6a805183ad7186d03074e08f7ebf5851ac213508cec813f346afd05970080802c983092602fc3058590ddafb339a50dbcb684eeb32bb23a084435c2cb2123b5dd7f2c5b7a156853a6c41c3b15ddfb3b937a188fe6b7f78461b1bd8fdb4f70c34f3d332e855c94278747800cde08cac3adc071391a6658c20c67c6140f2a58dfa56b3c848513e607012bfd59d9c22fecd21902da2d5b0bedc1fb19aa7c69ec5ff4fb2fb274bace82d2cefda2ee8eb9d1d2af9bffb35f0480e6008d7eb38f95db3c8a3deeb10a78e3f54f0652da887b08cb568d737ee99b3d23bda737d42389069e2b379ce3715c69c4b495641d500631c44b94efc67714aaca0987019298ebf6f5d40fc1cceb98bf7c8e7530452c95012cba442226aab2e0761dae04ff7b5ffbae355ae0256adabfa2982dc6e6a0a69d7e580366c4dbd16f7d7794f06405a301263b18afe5d60c0c7cb4f7d53259b6bc7c8ee8a5ff178f123a86858be0f31d499a6941e58600e8265175412fb6ade85972d02e5c0264b05fbc7514c8038e301a174234a15b65f545d682ff34958609d0aefeaea16603cb133e000c8f64292ecde47a22b786e57824a4252dcf00cc1490a6a279f7d1d70964bab770901428895b22e476bc6c6c8cbec52a3d756ba811c58fbbf58298ce425dc04d7401596af370a7f4f49bd2418e1bb16262f2e514b82781c9741c15de37f5cd1b51c386ce510909e419e3c5965262471a3a93870ea9d066c07acbc347aa6f6cfb150b671f5afaeb3decd46b157986f9f94b31f27055969b3d76242bd27ec819d62233ab88ef7be70e3e0ea1b2921a35b9ea0d523f0491021870fc91a0af73fcee81996bbd978d6471a7237d07749219888f7d77d688380badc9ced207302c815e8ae830372e14e1b3728e7bd57a45e08a24d801b89becc0ac20f7cd1d9ffd8a0c55ca65b93be74fdb4a18c6de6761e75a3b226d5f64b2480d0a197f7e69d9e651b5091e718f53dde9d10f44760e80bc4ab44e98eefc372b942d9112c52e99168b3e3c9fb477b730cc407a967ec55379bd975dd37957c589aacf11e6ee3f4006db0cdf5cd164bd12b17be8c6e4610ab4cabe404240a033b895e3cd42da173862c488ee131cd9e66aa4bf3bd64c3b9fae635def83d218265168b16bce06529d44a1212f657b86f3c1d2ca59a5783c337caf3a3f93a1bab3c77bfdf475c65d5c13ccbb7ca64e260a7511da3dd83a602bf2621ed6b600beb447b893cdce2ff7faafb78d8ee8d7d2266d669def39acc6e2c4bf156188d6d4ac6ce52a376a5d34e7cd858a98eda4c9c227d94c16ddc91a1cb281e188141c75a8763871493045e0a1e86ce61c258a98ff2b99e2801a57a4bb5f27817ba6f6cb02240c35d36404c5bb05d102c7dcd8f9037950358907180af52c05cfc3c2a99526a5df7da68e61920353863d0b86f2474c4fbc6255f76f02d37534aa0dab61721b5f8ca95dcfc0591bc2256ad268cb9bc3182f424039cf88ec529049f49624e269a2502747fa2899fbed1274a75a8752c01b45f483bd5c1203ffb79416342d9318bd35eee037ed6e095ede62c10de4bac4a7d16fc39ac828a4765e60428b402e9cdaefdd9d857299cd27177d85e6110ba9e2248d0ee347b6f1e3faf9800f4e6e7d63e39ab9b1a864d0b8e6e2c0fa7852bbbaaaf3cbe9fc677aa1a782ecc7f245dbda98c5edc78d4d070b341b5d35bba9ea2a1d5bfe50a4e7fa2a77da6df2adb2a4ace558c4975a743609da0fb1a2d50bb"}) capset(&(0x7f00000001c0)={0x20080522, r3}, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x3, 0x6, 0xa}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"60b7d453987c18b4e69aa617732d869f", r6, 0x0, {0xe, 0x1}, {0x0, 0x7}, 0xe, [0x2, 0x8, 0x1ff, 0xfffffffffffffffb, 0x10000, 0x13, 0x1, 0x9, 0x4, 0x4, 0xf, 0x7, 0x0, 0x8, 0x616, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x1, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000500)={0x90000001}) epoll_pwait(r9, &(0x7f0000000040), 0x6, 0x6, 0x0, 0x1e) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 4.733320742s ago: executing program 2 (id=314): ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x100}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffb69b0620bd6601f27effeeb61fffffffff69e7ee", 0x58}], 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10}) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) 4.432554645s ago: executing program 1 (id=315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000240)=0x9, 0x4) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 4.019189604s ago: executing program 2 (id=316): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x2be6, 0x2, 0x4, 0x3, 0xfffffffc, 0x0, 0xf, 0x1ff}, &(0x7f0000000080)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='\"', 0x1, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r7, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0xfffd, 0x0, @local, 0x100}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x25e, 0x40, 0x15) listen(r0, 0x0) lsm_set_self_attr(0x69, 0x0, 0xfffffffffffffffb, 0x0) 3.572390404s ago: executing program 3 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000}, 0x19) 2.998469655s ago: executing program 3 (id=320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (rerun: 32) 2.76013605s ago: executing program 0 (id=321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(0x0, 0x0, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1}, 0x94) socket$packet(0x11, 0x3, 0x300) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x12, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x101, 0x7, 0x5, 0x3, 0xdc0c]}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000380)="f1a17d92c11a82f2", 0x8, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2.759104862s ago: executing program 4 (id=322): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresuid(0x0, 0x0, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') pread64(r2, &(0x7f0000002180)=""/4101, 0x1005, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000191000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x11, r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001d80)=[{{&(0x7f0000000300)=@un=@abs, 0x80, &(0x7f0000000600)=[{&(0x7f0000000480)=""/162, 0xa2}, {&(0x7f00000000c0)}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f00000001c0)}, {&(0x7f00000007c0)=""/164, 0xa4}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000940)=""/214, 0xd6}, {&(0x7f0000000a40)=""/201, 0xc9}], 0x8}, 0x8133}, {{&(0x7f00000006c0)=@can, 0x80, &(0x7f0000000380)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/62, 0x3e}, 0x6}, {{&(0x7f0000001b40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)=""/102, 0x66}, {&(0x7f0000001c40)=""/204, 0xcc}], 0x2}, 0x6}], 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 2.666651202s ago: executing program 3 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f00000001c0)=""/31}, {&(0x7f0000000240)=""/3}, {&(0x7f0000000280)=""/151}, {&(0x7f0000000340)=""/93}], 0x9f}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001380)="3efcfdfc8b42d5", 0x7}, {&(0x7f0000000a00)="c99714b5e9c64f38e45285dce17254e80a31668941e5fdf27241cf7048f26d9ac47c49454812515113eafce23450ec945df709275f56428638389b72bd86c2", 0x3f}, {&(0x7f0000000400)="6797ea374f1ff2b4043788bea9b825b4a0982e4484634650984f0ee49685a302593f879e5b349add72ed5eef905053ac14f68df4cd86d5330157263908f48e66248711835cc15404043bceebc21f835898a2848fdfdbcd8d85641be824ef631225ec4617efb0a84102a0ff131297", 0x6e}], 0x3}, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x12, 0x1, 0x41b}}}, 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, 0x0) (async) keyctl$set_reqkey_keyring(0xe, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000020000000000"], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000800)=ANY=[@ANYRES8=r0, @ANYRES64=r10, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.467055538s ago: executing program 2 (id=324): io_pgetevents(0x0, 0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x612643, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x80000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x40010, r4, 0xffffc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r5 = gettid() (async) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r5, 0x8) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000040000000800000020020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffdfff0000000000000009010000000000001c00000000"], 0x50) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x4, {[@main=@item_012={0x1, 0x0, 0x9, "82"}, @main=@item_012={0x1, 0x0, 0x317882c64651c524, "0f"}]}}, 0x0}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x4001af84, &(0x7f0000000000)) (async) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x5400, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x0) (rerun: 64) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) write$UHID_CREATE2(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000010131f4ffff0300000009000000090000000cc640e86b2286930f642841bf146eb282180f8a5f7d7a174f8198f7b1fe01d62a3553f6270668275f34b2bf95e0bc219ba95364f323d7d9b311dae02860f2cfc8727c3ce3eeb418a44c1bb47861dea18451f75f6b6a50803db79ac03cd5233b"], 0x178) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x50, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x2000c000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.384039295s ago: executing program 3 (id=325): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/17, 0x11}], 0x1, 0x0, 0x47}, 0x40}], 0x1, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@overlay={0x8, 0x0, 0x4, 0x8, 0x1, {0x77359400}, {0x4, 0x8, 0x0, 0x8, 0x4, 0x8, "628998ea"}, 0xebd, 0x3, {}, 0x0, 0x0, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) 2.066255676s ago: executing program 1 (id=326): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback, 0x0}, &(0x7f0000000080)=0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x12, 0x200, 0x70bd26, 0x25dfdbfc, {0x15, 0x3, 0x5, 0xd, {0x4e20, 0x4e21, [0x9, 0xfa1c, 0x3], [0x5, 0x5, 0x8, 0x24], r0, [0xe, 0x8000]}, 0x3, 0x9}}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x200000c5) (async) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)={0x523b, 0x7, [{0x8, 0x1}, {0x4}, {0x5, 0x1}, {0xe, 0x1}, {0x1}, {0x2}, {0xf, 0x1}]}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x40880) (async) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg(r3, &(0x7f0000001a00)=[{{&(0x7f0000000340)=@caif=@dbg={0x25, 0x7, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)="20327eb039bda175141f97debfdab72c623d568b42d09af61ccad7a9bbce0ed52161ee3178f82e44663772a86691c813399bd49dd84815625e7e42998f2088b56e4fbaeda6bf6054ba5a8822c527568e1d031caf506958d2afe69d98c425e2717b78e62ecafd79e8191f2348eb7506b9513bcfa544c71e4a6075d0c59f8dad50ac699c", 0x83}, {&(0x7f0000000480)="696b5f9dd440cc851efe3dbb02d9fd384f3bf4fbb44c95c2d7bf4578938566f2ccd0af5ade49f6f857bcf532b9d282d661c9cd0c811c205c96e1dc2dbd9432e67ed1e6e8b66ed654828142e259349650e96865fc6d828012c5d81c4d515c6b3d56654bfdf1f2b63427b4346c78d8700fca6a27e8e0f13c85b02db75e3f724ccb87b9558049f29a1e9e4957eb661eba8925e5f73d01cf1dd4b4afa43225004482c7cd63c6ef1a168b3d52e1953a104efa0779997affd84bd9f2d8ab5188d8e63ee9933564e91fbcf4a69bd66228ae9e04c1e0e1cec57a4b4baf1fb900d3c4aa4801a8a843c83126ae", 0xe8}, {&(0x7f0000000580)="52a94c7c84ae2c81aa8e518cab00051f5926ca9b9f4df0ccf9bf572e6f8ad15c881b2228c68d298f8a29189d835eff890583a552a2d3a48ff56f85d2b1088724aa30de7ad996a7775f61e8942fa1d0ffda080feb29ea48554ef186f9165ed8666e7038351f6f96ec55e8b9f0358f19b1510c49a0ce6419c1fda58e9730428d16c0078ed7792a384e5fb2fe5b0cc82dae693d4f5f3f385b98a7832acc7106bc9fb340526d807cc594c1f795fa975a04f57023dc0b50e3fb945689a8605173e7be2d0d54c73a31d6dfae28e79fec14f12361015652db91500d60359bb04fa8c0a3e756c044", 0xe4}, {&(0x7f0000000680)="9cc39106beee77c7ce5412616c4079d60079ad85540377115c0f8b1594443e1e7380ed83ff358454f1d3832145aac81563f453f4e354bf3aa0f3f6ff13b101ac6f0f924e78b725f8211775c2e2881b488417acee3ff3127c02a6b4d40eab74838b2c8e34abb52383ff0bd8fbdbf4c1afc79aa84c5d9ae9f20cce7f4cd609744abe25149114a7660b4203adbf219f8ace33c195b53e0f34cdd5b32b0a82f009591576493a516fef8806a9456e80a44ada922da9a9f6b3c8be5f673bbf26c009066819c3a4866252e3ea5c487338eb5163ad4a2fcee97d199ce64ea4ba2df4b849f702d9", 0xe3}, {&(0x7f0000000780)="299034108a78911ea07dd4d0a0de1bc7a1485e9c3a72661c46b939ed527121617c601ee25aa2", 0x26}], 0x5, &(0x7f0000000840)=[{0xc8, 0x117, 0x3, "3573cdeb912671140148ca5909b31b44820fd0975c12a2e4629a030f3c8765ea2ce3d21b4d24629063cc9fcdd52c6b8b29ccdd3efd453710582f4f421e52fb5a49c513c6a468fc164992f839ef12cb7cd56a5f1c10541dc7535eb4e3df4507d6a958557f8a21435a55ec34f85e9f084b33991bec24fa40447d7d42019e78c2935d25d586aec819595cd932399d0ebed258597dac5694994f84fc1cec59f713323788c047174cc23af4153dd89783c8986876"}, {0x1010, 0x10a, 0x7, "e53bb8515b957d92a8823eb8960320047996caeef3974588920e7a469c90713afdb33f503c9e62f2bc56efdd86cefcebe4f54fb29ceb99b19e77de61bc181ee2281e1c145e35c7230891c3785a7bafc47f602c3fd6127e1dcf8cbac89ea9a81bcdf1724951d7d70ac832f1500c493aef232eaac6eb8235aead9d32c3c5ff7dee7696d052e1ea10529fe0e1faa15fed3ebae521506dab3153407b6875c3cee7fcb1006fdb07ebfea45b2ec79db4d75dea673336db59ca9d0047a08438ad49d089b79840fc4232adcceed06950d6cbf5f9269799da081f075ea1f74d31054b19254b191164872c682921da20c6ddb9a7d110ddf71f0b3264b509c6135de24073d8c189909718b44d305d5bc68469ecb56420f07ebbff1ab61c1d77b6004e4c422f38476b7e19fd1a3592ec24f090d7e1e12985b9e996aa1f073d96e91c862fc4b0b3a255b7ed5c125abaa5e0f824609f81350b09785cd26db3756b3f0da828652ddd1c477be4914073d61884bca1a764cf455d2582d4ca68f5ab4607c1f1eb6502906c8c47015de951f466d61f163721de6bd7b4b2ad8476dc825743c8afcd844a768a9857c33a97c379b28f6abd8d28f0afcc45f1ebd7825ab6fd132a38b7e69a71cd1e63be2ce5ea25aa30e8044d17a6b6232369c82070aa1125e1c27f250e134c21f2e3a01ce6acc69d0d96c4fe8508381795e7cee648787d3fa17324929c871718b3a07761b1eed64c20684a1739d178cad5c33033a1712b9d9f4401abed54dde383dbe1d5a165e537d012da8185df3ef619c4d797a971ca2c3ba8ecacc43bd83db8f07157f13654ffd0dd32c4085c347c3abd2e1445236319fa3a99e21a84bded5c640eda641635b324d611c82cdfc3a80a3a13291ad282505f214d12e2618284ae612037bc254c9b238d90eed649f7e01e29329b0f88c9d2c89338341a4afd87eb13e774a77e6e45cf9e435f9104aba3c96f694158664f347a2d1466a9f6e1211697c8c2e24a8da84e1f7473a70ac91c9409e6f3da9287576df6e8823b8e3c86760553d973108af31f83216c63c9f86e71608fd27027272f13d065abfa3609a7f29dd3cc8aa4a745dd564a827c04bb4ef30d6a1462f98e5b84ceb21aa0f16ab8c618f6dd008f4295ee760ff6a514eb76bd8cfbe933425c3269d65ef3a6d1f9505aa1f03fc1cb4beaf21862947ed418cf5cc423d50cfafc675db31ea59dc9e6c41352727b45a27f2a9e63264e463b753ba95b7fc5f6828decb4722253f865262f2624382d5facbea641f0f82ff30be73c6d450c3f3ef9bb36b7aabc559e8aeb4d980b8545f5c92da9caedf3d7b64f55060047e555281ceaad5377c6a98c6f20f21eae00a9b52e7fd4f01bd57935ee5407a3eb6131b78e919469400bd976387656639567cf45cef95e77832e0a61a765f039238acab5f567cdbbcf50a6b7da5391c5359a2695ead9b69ad05e8e9ca9034e99dd75552741a1ba6f160d311dedd1d9b1b13950fe88a3bf44891bc9c057148e228f38678711b423586d9c1e0af235dd5a5ea9e295fae06ac92dd4e3fbdfe88f38298739b83e0aed5e16abfe1c95edcb6fd325d4c4e2471dd0a7ca58771594bb87448513ed70401f6ea00e14a2231ff9168b31202bdcb95efe8ff4a833375c40f3fdbce29e29d8f94f2e9cbd6acb489f2ddf9dfd7693f98b14ea6ec4b1d207260ac720ca6959e327e463cf0e5c733db26b0f224a6b5ed00e836540f38850172b2d31d71a7c377edef53e2eb7dab8730269c4221e560429b421f92fe2236e19957f963076570ea0c2f1afb848545e2e500420983148233a376bff2fe2ab627d1d002e76f38ce51e54e4ae3707847ecb1ae561a057a0b4e9f0dae48ab53be60a65e397a513e386e011b52c0b5758fcdd8a947668ab771205d3a679da00e70360a73de9301a0abc2af43a2fd9ce1a0586da2c0bf512de5f84e843a8992703d7e3e0d8d9e788ce533eccec83c16b49e2ce5ad37e2186a230062e957e96b4288e9add8512756463880e22345c829a792c87b7e1e43d7dadea14cb12b1c31b92829ba56350b4a9f873fb563f33900c8e97971a787c43656ce883818a0bb2154ad1aee70eead418ccf94a8581a6b83958ae7f3d4f665e37c73addc0cfee6d22c3c1f4e14875046118113ae15fde4ecd6d0fbbb1a104db264085b86bafe5876f98a9652f98e976c04e33d18eae32a8bc52cc559bcb01d82b210cb90f70ba286cf6d8866f05479357e631485331e6be00edb23c6dfa4a67ebe1dde45795e3366cfebded16ad1e401ea0dfdfc1a3f72091da3b9426dcd810c604e473c4c498bd75781d531fb8a1601d547f19f4fe51dab615d4b09592122ae61072128255084d81c25e70f1ea0ce5a99856545e9c319da1a65e6cf43b2ff50a5e44f2d85009407e7a61bbc0e0691ef5bcb8d772e2bdafdfb07f4d0a788925788c4090cbfd098b082122531f5efe9030d6ad07f1219920553869cac5723f0b00f486584914754eec70b5ef733b0b48fd61a0342cee6babd7ee0b6122c0e5737af4119d4ecbcea200a07435c678c1cf447f23ac9dcf7ef3e3e2d55cd03eba34e11f1e4255f3ef25310c69f782cca31c5462a0eaaf4e9e71022569dbef332765e95c0fe66a4d60c8e16e0648bc042bc1befa829fd5074d2c8acb2d0ef137464f8941db164bc1d2daccf35758955453cb9cab23385873fca041f44337388158f900d13e70f4d88806169c1f39942c38250d6cf084c8ae6160a57ea0e8046752b75dbc9d2afbd8763285a40706a9de6b49ffc788382c0729d75a83003ce8ccd67bfc5440a11a1b7be5b2b6946026e46012f4cbca0c7d4fbf75d5eaf07d279d80853261dcdb9d70b84e48e3d34650d7e7a36f8803a98da69610c818f86cd0587989f6e7756b47ddb1873e5a89b1c472758f6cedef68dc815bda3198378fae43bb263c2d02a537a982933eb590bd6abb12d300db69a3c4fbac287edf8ca746e82bdae38f4060b99dbbc135c41a4b236537897dfb96f045489c2d36f02ab8e9c0e0520144b3ee4eba8ebcc434305ca6dbad069dbc136ac57e6a8e2c9848f224962d7feda86533a8129b6997197ab33d7f14b0e0321a91a1da9689f4c8d98d34df932307ea514819abe5ce5e626bb79623a871583c9c5fcdf2f9080cc0392de382ee314ee33b4dfdc5c59f4f78d720f48a2cf3d07c6e349f6cf631fa876729f2380e472266de4c61859c4137335be26833822a1d89b53b77cf0d5af5a74fc78280ccf202b47adcf996e6158b29d4b84c39776e46aebee84d058d9038bda894294e98ee1cac7ebb66e60d63fc54eb56eeadd3ecfde935f4c7d1c9d7cca77f5630a9c713c88634b2b73a4a989834ce00e35231283b84c36d4e254993af41253c0b09d9b27d8f99e5bc13eb9cceab26f131aa8f24d125f050bdccae729f9a90009a610f8f25bcfe685db5a49b9b968fcbbfc7b281e28d93148146849e8e01f46ae664e5fe0cef1884df02a377f8fb10959160a0521d898a264f67d86f998c705deedc7231b33453e720a0cdc5fc6319ce82364e8bdd711b93c1f966069493af0fa24c842dc40eed620d28720ccd1ac1fc562a5e1cb313eaa6fbc3e542bfd81c6049bbebdfe6bab3b014ee0192fefcadf9a5edc9ccba8beda7e3236d41998b66bc8422b573c38650d904c8ea4047cc1ecf788a608cbae6b8fb0a265be24eecd113f46f32064ddac5d264801f12ba9feed02e184d369bcb30c1594e4a12b190a09f585cdc2710b1ef0b4a00ad87ee39f2eaaf8198469f6df8766717ed1c35063bd534edd1cc52d4ca28fa3f60ec273058fbbbad350f6b8f60c2630add237a273dd6b4eaa1961122ed4db23d07b963a84c18d01eee63faa3e05dcc7b2fd96822b4f95571b2a196d177d8e0de239ca4c9e917389ce310edc69e19658a2ef95d45563d65afb53b3442a4c3a55d62fd200f46ec8fb7fd645fdea08f3da3b167d4a6a7f5dbe94e6507055c0452e09144a42b90b383f22c441c821a81a30df70e52372a907b931f17aff5d8ea6da8c2bdb970ac5a47b11685f031bbef45fbfae5c8aef6100787d183f398331a80a7679316aace394676994f8f02153da272da14b909677050fb0a50eb15a829573f64d53c8549ecd9cfcb22d6cf993d10d890e54596cd1b39476fb4f31e285e5c747be970215d298308d9cfb587c991f9c4162c94a78688a582c1fd969f4218fcaea2765749272029e613dd1ad48f3c73fbd0b7fa89e45822aad06bf393889c70b818fe858f14e5a4e59684c6872135a48f50c33735ca8479472b09cdec2efcce0a25c98fec111505173197c8c757260a29fbf1fe15792d5175b6095378637f91e01ba962e53c39567b3c6cef912bab6b2a502ad115887f90f623df78706a3a2170d2f3726c06acc6c91ffc89cb889ae4d3af575169804fa7cbdfdb94dd94c817b807c8ff89aa4c3b66a38597dd3e2edd66e9276c330a18f43256800a42b32a2ba304d81166020c5e1ac7c4dbd8bc8b4cc581fe61a242ce0f8e438ea926a99e06fb19d8b1636545a699d4299bab193384b857cad642345198b50e27a97a5a2e1118d6d1cc8278b4a0f2b95cc9c6609b6747c05407f7e8807d050d238e0ae0da3c2083bef0ec7393d9baf070d9eb0af0b45ed44d04c06448d276b2e85891b01c75057b78f38f308632ae5796982eaf9206ac2da0f1cdc3c600a6ae42bab615096312e25e994b2e4a4c40d8b0ad34d52ffac1ba84cc16df91aa081dd33d67690c8a8fc7f4f4ba2dc11b730711a5178ad0c54f6a3038c8a96b5c7c05533f2e8e2ef746d1d06698551006a42f3fba346cd16cc91fdc6ea77f86358acbaa8af3e2910f6eab8e52fce68e0a2176730224c3563722b157103bf77ea07d3176bab4c229340f823a6e0efd8980261433c06415ee9901e0e187a7746dcc771dc7c1cfc69adaec4b6e74a57c7bc832059d2abfb7fca0eb2d8fda33f3c8afaa42a47171f0b7dbcb1dfdd950e4c24f4828e3f32748f0b3cd06c855bd08acdb496fe48e014a66643047456e61eae750ac4567702223a9e08c310f207a17d508f3acee35db46ac40a92284ea18eeecac1384c8174af2890534cadce77da350f41dabcb4436d046e713bf4013e0fc8477418ce45a5f9c0e9bdb52fe2abe3ea708477cd5fdd41458daeb19fa1d49deae838e14ce1b96549957f237d0e5dfc5a785bcae83b71db3feb2877382c1abe1d50172f6bb3bb59f4dbb5f997ca3db7b77842e00efe36d5fe4c70a1523c316e8be48bf7abb41424ea6fde466d4a3ef5da4545f01a811552d2da7a0c9e06a32f3afd370fdb4a500fda300c413b7a17fbd71ad1eb20fdfdde9e3a0a4c43ef6dd4051e2776f1e7c2efd3d7d5cc97f9f1b1ff45092d7d2099cc64feccca5b72bba03ae46af720b8fa835cf1ebcfa1e88a3b3839d5fd3efe2cb5034c2b65dfe92982eb7c8c24f76b59676adf301fd297bd3986bf2b93712d3f7242faa88f3bac85b117d0be58e85b64e2685a5bc60c4007829cffa292ae5750b7b12131753468e5a44705660de1503ad671a04078c0ac7e00fde5531d0cf8430a0b8ac3951d11b132a12e75e6d5cb78d4daebf6d0b3f99a13c8bdd1f453322a5c229dc82548e36d19c97ea8c3fa6066d3d2534313a4eec6d82453a4d13b9e9d07045edceb4cd6cf9ff6449849fbcdd7e2799f7c77d3888e9b829399f1a87a887910c12ac5266b4880dc8922491b534a334210552fbd47aed5ce1cf14ed29d23f58324c0097388e9da5a01a65c698371f8b5f50ccad2c5f9f28"}, {0xd0, 0x3a, 0x1, "6a2a6fc3041e7bb5a2fcfeae9ac7f020f04638318560de620b66c1e8a54e527911fed77a6095e8b41b9c2a3a1be8d7fdb0514878d108ecc67bc91c8701b58ab5ed02cf25eb607a7b40919a0799b45c9e452674c0a5304d64024e13f04959a7c4278c7723b5cdbbf2d9fae81977baa6ec7616394fbe641e2f9329b19288d435c27ead1f209625b4cc6a03a093bfb35d052e817e4c7578a5de67613d7b1ac617114e2b5898cb1b05d34f1b2e503e6ac837259f9aad32a18521f80757"}], 0x11a8}}], 0x1, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001c80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x178, r5, 0x403, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x41}, 0x2000c000) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000001cc0)={0xeeef0000, 0x9000}) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001d40), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23b2512c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa1c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001e80)={0x7bfb, 0x1, 0x200, 0x3, 0x0}, &(0x7f0000001ec0)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001f00)={0x6, 0xb, 0x9, 0x3, 0xfffffff9, 0x8, 0xff, 0x5, r9}, &(0x7f0000001f40)=0x20) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000001fc0), r4) sendmsg$SMC_PNETID_DEL(r10, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x50, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044804}, 0x2004c006) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000002100)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) (async, rerun: 32) r13 = openat(0xffffffffffffffff, &(0x7f0000002140)='./file0\x00', 0x42001, 0x80) (rerun: 32) ioctl$vim2m_VIDIOC_S_CTRL(r13, 0xc008561c, &(0x7f0000002180)={0xff, 0x5}) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002200), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r14, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x20, r15, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x40094) 1.95862183s ago: executing program 1 (id=327): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x200000000000011, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x100000000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x6}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0x10}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000540)=""/233, 0xe9}, {&(0x7f0000000a40)=""/253, 0xfd}, {&(0x7f0000000840)=""/248, 0xf8}, {}], 0x5, 0x80000001, 0x7) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f0000000000)) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0x1000000}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) 1.776291091s ago: executing program 4 (id=328): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00'}) 1.366700018s ago: executing program 3 (id=329): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb9, 0xa9, @random="78a99d643561b6762c3e3a31865bea4316b19b5362cf4e5c331824ec12ec846c47dcd099f273ff0635be1bac979ec79ee84d93e3038adaaa477d41b07eca6fc8610c6ca19c7c90c239feb5738d414cb05370740c89030d9df416b67f571e4e1a92d98792c72a6a95c09c744cf0f4dd36d8317eae18f7f784e2cd51c4f984bc95670995b17b3e15d62eba0787d067ccb4ad683c81404791bda154a443d45871d4f2c03ccefafc6ba17909e287212883c24490cc8b7e"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xdd45}]}, 0xf4}, 0x1, 0x0, 0x0, 0x1}, 0x880) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="816900000000080000000000000000002100010008081c"], 0x70}}, 0x0) 1.278158534s ago: executing program 4 (id=330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x32, &(0x7f00000002c0)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3000000}, 0x19) 1.208746144s ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000080000000000000000000000000000000000000000000000a79c94a8ca58f15786ba74aef4d640b16796a7b4"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_disconnect(r1) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8000000000000001, r2, 0x1}) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000080)=0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 1.192834102s ago: executing program 4 (id=332): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000001c0)="7c5e99f089554513875df77eef4487c59cb6e6d1924c0041b62e94aea02c0028b94a4082d1e6dc7a42badbdc9711b33a60e1a72928b414627556d948a69b3048ed74971421f541ad12d8c9084ec4a8e2e032227bcb8942f0c68e3f763481ac489ae9272316a84409d28bed1dd90209630bf33b611c923de26d241029a849a721154c3535147815512de1e822859e55f1cdb5d9ac71e54887db08331c00385a2e6973407b7924e7da68d73b0e727c48b1", 0xb0}, {&(0x7f0000000280)="af1e94b5f5ebbb77499b6d64435eac10efb2e7b0593464a01c1e130579cd2b728bf4590ae0c5dca50f9252ff9fa6e1ef74ba58c6e9da16a4bdf9d054b804d2a262ec6ca924ea515b3f86088275ec9fb51aa701651f9b12e17abefa8a89282d40ed17f3b466d1d4", 0x67}, {&(0x7f0000000300)="10fcef3e0787684d970342beddf592239121307ffc81ae6fcdc4171bab6738b650beff5e1583a4f5dc42a65f9f29d47aa28d64062ee760e9c1b0022fc70e0f80f2825bf754e9da0157673811072d4133bb706c489e22dd89744f3bed4f", 0x5d}, {&(0x7f0000000840)="ab84f5fbbc70315292ccb1584bd91bf8982dc523fce3ec9d073070741531dd8dc3ad008207a170f17edf6fcecdb6962aa6ca396d95b655f0fc1bc97221100d3fb2360a89a3faa2b2d2e3d642f5f1838c24ce34b97b2e15882827e195e8241d244a2e76b7604b318c77fe589694e64692c35a6a96e3d0f7ff1e4bc3cd9a3295296dc02456d7036ad7747bc4a659ed652ec7e880e231cac19fc354bae12dfe59482fa0d82161732fee23bc7b1b69e3818338a81f2c6dd720fe", 0xb8}, {&(0x7f0000000380)="6506ae9092231fb9e49c782c642a082490849f0609ffd8a7ff4f1a0253df753a921d5583f70f530ac39f1e70b62ed538602745fd5308b81e11de257c2601981e66a6b5ce6d33e329b68921f4c465ee91f6c82c1f516be5e4d7a3e599e567f44208329380b729e01a3abb1105e1dfb443483d1d7fa235a68e33", 0x79}, {&(0x7f0000000900)="fa336ea6fd0d44eb18d6ee642294b8ccfe3506ed545f3fea0f491541fdc4051735f0b550fa531e99cd3345e480eeb0438d9d7954c27e0aa9bb7a3cfc2c900dbd16d5feda61c9b0e77eecf2c4ded65f4a1ce6f8b39b09a8a512711e2028bd8721fe8c69677f1ea289d3920a46", 0x6c}], 0x6, &(0x7f0000001000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r0, r1, r4, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r0, r0, r0, 0xffffffffffffffff, r3, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r3, r0, r1, r0, r4, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x158, 0x44080}}, {{&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001200), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="30000000000000000100000001000000fab9348e310693b78bfe185bff3a7a47e8a2e0996e183451cccd0c47b4994ac62a458f6a3959b8db44d5654c2a2b8785cf6a3cf57a8870b13b4c9363626ca2402d119a145bf4cf1ba8fab084d404c98157d8da468486d9a5e90564eaee7125c838f84bc08687385476c88f2021fa616c5b18bf0caa607ea1e0a7dce1b6d75a3c4d51df7d92c8cbc4da72fec015350fe219023eacc70113d65d66778c8f1c7bbe90a3344e253ade47e844557981199ce9c5e09f666b0ab15805", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xa0, 0x2404c850}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001400)="d71bfe63370c820799c222e82ae0844f348226d358d6a62cb5634e3ba28bba442f3a0a12551b86b077697d3277d8dc006633b271499acdd8dad1fbb7ef7a54f7073fc16211eaedc0bbdb884edd46a52d810a8cac31c2b08e384478366babcd3c78c037279b946612785d67fe5a56e1b2adcf84e594c77ae9c07624e3a962050612ad770406277ae2dfe70c1129fb3fadd99f9cb3fa0367f971f00ce7a2679fbdd7db1e5c8c24d7a1829e6a6844ae95d89977c3bbd81cf78a45b86587b0b1", 0xbe}, {&(0x7f00000014c0)="619a1911e01caf67f09de105850bb9f04eddea7789e8d78cc44608dfaf88561be8f33e9feccfc9fade00bcdf8d1b23fe7ada33f32ca2c37d262d070ccf2ce41fa1bccfc7a92782733aee5bee89f306dcca0cffd75a9b35e6093faa3e9fc78826ce3e4227f3392fb16d09b3b70acc0070ccdeae46c09bc3b2956bd4e758587486b3dfe5fc4c2326e24853164067e217fae513d65256af14a33b5b9be848a8cdd5f8945412326968214bbb2fcf1f0cef86468608f4780e3d9cc929c6e47526ccade45b56996887260b", 0xc8}, {&(0x7f00000015c0)="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", 0xfa}, {&(0x7f00000016c0)="1afba19ec0758d006055a4f1664162f7069e2875747539f95f705335a70f42551eb2c6e7a21bd32a0d1e51cc66740b884433dd64300ba1647c21dc1ae456e13e1ed2baab2bddd54fb24ddc63bf00af5b98f23f04182ce01fe88b1be4a5815e9bf95cdb9a317f2fcd176f1bca50f5efc405c193c0f51ffffa80a9580fbb7469913c1c3c2ab650963610ba04996bf883fc306f740ae919e34ee4327c6663708efbb11fed963f35", 0xa6}], 0x4, 0x0, 0x0, 0x400e8c4}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001840)="543d0c7731d8e0c0dadcf0ad4c898702843ef820a57e0945521570612542f5bfab8e3ef2e064e8108bd5233e69878ad50807409f9cc03edb1c12eee3f9f735fb40df4552f1148d23aa4a1cde8f578b701e0c36c2a9e4bbb37db1b99b0f8f70f1cbbf62318336ce9557447302fd711f92e8ea8516552921f2aa68e4b72fd1f78bb9aa08e744ebe60c96949312bd36d2cbef6133456a6b1f18c2849959c9eb5200a1ed2225019d93c1ec36bf2462e99964f93b07279b789c2b3ef190656751367efe", 0xc1}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f0000001940)="4d6e4d99acf957050ad37861827e23a0d9a4493fbb1f1a2ff56f57c18b5808a9ff8683ff327b0d93171a98935ec17fd994329b4e5589f5caf4a4ebe809c11cb90c3097c6a8f0e2f49bb847ac7af625da9655187819312e16db32035655b651d2a20b423e0ecf236eb2caa9cbb7fc9f05b67a81a0c6063cf27594ede34c9bd979e3aa3705f2f8cec3e8aa219ca9533397259aa372a05da51e31dffd35a45a2528d2fc4f56f48e892debdf20dfdd52f930acf8f875d9c45a928a94f640ef7fa8e580c2e4a9c8d5a6d58c96eb91930187347b6fe3", 0xd3}, {&(0x7f0000001a40)="e4379341cb970ecd19a8eacc0e5bbdecaa8be6d1b96f9b297e756dbe1f19da656c577bbaec81f57da2a7a63998bdeb7acd7e4b57698c9a7e2a527148dbff3060ea8d48a8d9b06486adffec4b5a8d7957cbbeb74b094e0959eab9e5367406b2ebd300bbb948c1ba17b9fda3f57816f978de6f28a83d360b78f38eb2cfcea45d89ff9a6ecefae179d451a99c7390b59f06eb507be25a88", 0x96}], 0x4}}], 0x4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x20000, 0x40, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) open$dir(0x0, 0x490202, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440480, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x9, 0x7}]}) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1f00, 0x12) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) gettid() 1.024482954s ago: executing program 1 (id=333): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000522000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x0, 0x4000080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000100)={0xcf47, 0x4cc, 0x5, 0x7, 0xa, "8003316625532000"}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a5ae4c65dce95956162d85bf465d0b26b42af3277e9683cd5783e296ca235c819ec6b4719b3df186e047587a058ae33e772cabe4d5c444de76744c001ff409dd2420079f833a0a3b5694eb3faeff3aec2e0b797ed0c49dad4419bfa7fdf045b5612284e69fdfddaaa214047613f6b698fbbdb201c35ff8a"], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0xff) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 943.322877ms ago: executing program 0 (id=334): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x2be6, 0x2, 0x4, 0x3, 0xfffffffc, 0x0, 0xf, 0x1ff}, &(0x7f0000000080)=0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='\"', 0x1, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r7, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={'rmd160\x00'}}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0xfffd, 0x0, @local, 0x100}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x25e, 0x40, 0x15) listen(r0, 0x0) lsm_set_self_attr(0x69, 0x0, 0xfffffffffffffffb, 0x0) 238.919012ms ago: executing program 4 (id=335): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000080)=0x80, 0x80000) flistxattr(r1, &(0x7f00000000c0)=""/203, 0xcb) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}]}, 0x30}}, 0x80) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r3}, 0x8) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x13) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = accept4(r8, &(0x7f0000000600)=@isdn, &(0x7f0000000680)=0x80, 0x0) sendto(0xffffffffffffffff, &(0x7f00000006c0)="1e5465ffa7d5781c04065bb77fcf7596051e17f74fbc02b767f4eea42128f3ecaff9dfc63e14aedc1891ed", 0x2b, 0x81, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x78, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9e}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x4000000) accept$unix(r1, &(0x7f0000000840), &(0x7f00000008c0)=0x6e) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000009c0), 0x900, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x84, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$inet(r10, &(0x7f0000000b80)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000bc0)=0x0) socketpair(0x3, 0x6, 0x8001, &(0x7f0000000c00)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000c80)={0x4da, 0x8e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000008100)={0x7c}, 0x1) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000008140)=0x8001) r12 = getpgid(r11) prctl$PR_SCHED_CORE(0x3e, 0x3, r12, 0x1, &(0x7f0000008180)) 110.969194ms ago: executing program 1 (id=336): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x1, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x44cc0) 0s ago: executing program 4 (id=337): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) (async, rerun: 64) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000300000085005e3ed00000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000020850000002d0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) (async) ftruncate(r0, 0x8800000) (async, rerun: 64) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (rerun: 32) listen(0xffffffffffffffff, 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd3283d0368e269bb, 0x10, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ustat(0x11, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000180), 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4}) (async, rerun: 64) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) (rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 32) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) (async, rerun: 32) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e000900836e7000000000000400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) kernel console output (not intermixed with test programs): unexpected cc 0x0c38 length: 249 > 2 [ 64.148014][ T30] audit: type=1400 audit(1765838292.035:80): avc: denied { read } for pid=5806 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.152345][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.181947][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.197564][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.207400][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.223967][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.231864][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.239319][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.247030][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.250440][ T30] audit: type=1400 audit(1765838292.035:81): avc: denied { open } for pid=5806 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 64.278785][ T30] audit: type=1400 audit(1765838292.045:82): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 64.313851][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.320838][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.328583][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.335760][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.563861][ T30] audit: type=1400 audit(1765838292.465:83): avc: denied { module_request } for pid=5806 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 64.669994][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 64.748955][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 64.804211][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 64.814022][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 64.895297][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.902986][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.910179][ T5806] bridge_slave_0: entered allmulticast mode [ 64.917626][ T5806] bridge_slave_0: entered promiscuous mode [ 64.954346][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 64.963725][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.970798][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.978240][ T5806] bridge_slave_1: entered allmulticast mode [ 64.985002][ T5806] bridge_slave_1: entered promiscuous mode [ 65.015125][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.022273][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.029811][ T5818] bridge_slave_0: entered allmulticast mode [ 65.036431][ T5818] bridge_slave_0: entered promiscuous mode [ 65.073524][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.080620][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.088322][ T5818] bridge_slave_1: entered allmulticast mode [ 65.094994][ T5818] bridge_slave_1: entered promiscuous mode [ 65.129772][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.164495][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.190383][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.197711][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.205013][ T5812] bridge_slave_0: entered allmulticast mode [ 65.211586][ T5812] bridge_slave_0: entered promiscuous mode [ 65.228114][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.237597][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.244736][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.251807][ T5809] bridge_slave_0: entered allmulticast mode [ 65.258693][ T5809] bridge_slave_0: entered promiscuous mode [ 65.275012][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.282115][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.289253][ T5812] bridge_slave_1: entered allmulticast mode [ 65.295887][ T5812] bridge_slave_1: entered promiscuous mode [ 65.310687][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.319897][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.327170][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.334341][ T5809] bridge_slave_1: entered allmulticast mode [ 65.340890][ T5809] bridge_slave_1: entered promiscuous mode [ 65.362120][ T5806] team0: Port device team_slave_0 added [ 65.381210][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.389053][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.396503][ T5820] bridge_slave_0: entered allmulticast mode [ 65.403509][ T5820] bridge_slave_0: entered promiscuous mode [ 65.419225][ T5806] team0: Port device team_slave_1 added [ 65.438253][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.445514][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.452797][ T5820] bridge_slave_1: entered allmulticast mode [ 65.459712][ T5820] bridge_slave_1: entered promiscuous mode [ 65.468149][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.485579][ T5818] team0: Port device team_slave_0 added [ 65.493091][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.503497][ T5818] team0: Port device team_slave_1 added [ 65.516508][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.534408][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.564678][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.571612][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.597627][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.626470][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.642626][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.649955][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.676312][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.698953][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.705908][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.732008][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.744497][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.754553][ T5812] team0: Port device team_slave_0 added [ 65.765975][ T5809] team0: Port device team_slave_0 added [ 65.771981][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.779010][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.806179][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.825225][ T5812] team0: Port device team_slave_1 added [ 65.832327][ T5809] team0: Port device team_slave_1 added [ 65.870989][ T5820] team0: Port device team_slave_0 added [ 65.877334][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.884441][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.910328][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.936431][ T5820] team0: Port device team_slave_1 added [ 65.942427][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.949774][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.975668][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.986840][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.993974][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.020298][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.055993][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.063017][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.088946][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.103690][ T5806] hsr_slave_0: entered promiscuous mode [ 66.109761][ T5806] hsr_slave_1: entered promiscuous mode [ 66.131278][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.138418][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.164634][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.183573][ T5819] Bluetooth: hci0: command tx timeout [ 66.189772][ T5818] hsr_slave_0: entered promiscuous mode [ 66.196068][ T5818] hsr_slave_1: entered promiscuous mode [ 66.201875][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 66.207659][ T5818] Cannot create hsr debugfs directory [ 66.214637][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.221553][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.247743][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.263204][ T5819] Bluetooth: hci1: command tx timeout [ 66.263214][ T5815] Bluetooth: hci2: command tx timeout [ 66.328598][ T5809] hsr_slave_0: entered promiscuous mode [ 66.334855][ T5809] hsr_slave_1: entered promiscuous mode [ 66.340686][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 66.346898][ T5809] Cannot create hsr debugfs directory [ 66.372048][ T5812] hsr_slave_0: entered promiscuous mode [ 66.378075][ T5812] hsr_slave_1: entered promiscuous mode [ 66.384429][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 66.390142][ T5812] Cannot create hsr debugfs directory [ 66.423518][ T5819] Bluetooth: hci3: command tx timeout [ 66.423521][ T5815] Bluetooth: hci4: command tx timeout [ 66.444307][ T5820] hsr_slave_0: entered promiscuous mode [ 66.451023][ T5820] hsr_slave_1: entered promiscuous mode [ 66.457092][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 66.462795][ T5820] Cannot create hsr debugfs directory [ 66.755572][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.766184][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.775499][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.791314][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.837645][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.850214][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.869269][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.880616][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.940627][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.951840][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.962429][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.985993][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.043664][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.055411][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.069051][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.080746][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.101596][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.155062][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.165236][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.175738][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.185606][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.203411][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.214715][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.221940][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.247658][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.254742][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.283743][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.333698][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.357751][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.364861][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.394039][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.401112][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.411797][ T30] audit: type=1400 audit(1765838295.305:84): avc: denied { sys_module } for pid=5806 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.507499][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.526569][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.546358][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.564781][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.592122][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.600680][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.607865][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.630105][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.637256][ T4149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.665644][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.672765][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.699008][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.706156][ T4149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.739772][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.755609][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.764699][ T3419] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.771841][ T3419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.798309][ T3419] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.805385][ T3419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.850097][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.929517][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.987209][ T5806] veth0_vlan: entered promiscuous mode [ 68.017985][ T5806] veth1_vlan: entered promiscuous mode [ 68.049150][ T5809] veth0_vlan: entered promiscuous mode [ 68.078495][ T5809] veth1_vlan: entered promiscuous mode [ 68.157528][ T5806] veth0_macvtap: entered promiscuous mode [ 68.193992][ T5806] veth1_macvtap: entered promiscuous mode [ 68.221767][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.246477][ T5809] veth0_macvtap: entered promiscuous mode [ 68.255698][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.263466][ T5815] Bluetooth: hci0: command tx timeout [ 68.278923][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.287065][ T5809] veth1_macvtap: entered promiscuous mode [ 68.301444][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.321624][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.339583][ T3419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.350209][ T5815] Bluetooth: hci1: command tx timeout [ 68.350234][ T5819] Bluetooth: hci2: command tx timeout [ 68.372163][ T3419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.384508][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.394974][ T5818] veth0_vlan: entered promiscuous mode [ 68.401037][ T3419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.411318][ T3419] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.431369][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.457461][ T3419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.469357][ T5818] veth1_vlan: entered promiscuous mode [ 68.478666][ T3419] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.489021][ T3419] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.503805][ T5819] Bluetooth: hci3: command tx timeout [ 68.503811][ T5815] Bluetooth: hci4: command tx timeout [ 68.522346][ T3419] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.646903][ T5812] veth0_vlan: entered promiscuous mode [ 68.655023][ T1947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.664400][ T1947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.687446][ T1947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.695643][ T1947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.695975][ T5818] veth0_macvtap: entered promiscuous mode [ 68.721569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.729508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.741997][ T5818] veth1_macvtap: entered promiscuous mode [ 68.760258][ T5812] veth1_vlan: entered promiscuous mode [ 68.780580][ T30] audit: type=1400 audit(1765838296.675:85): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/root/syzkaller.Vc6M8O/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.802349][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.812928][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.850668][ T5806] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.852185][ T5820] veth0_vlan: entered promiscuous mode [ 68.888922][ T5820] veth1_vlan: entered promiscuous mode [ 68.910705][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.927318][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 68.927333][ T30] audit: type=1400 audit(1765838296.815:97): avc: denied { read write } for pid=5806 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.961707][ T30] audit: type=1400 audit(1765838296.815:98): avc: denied { open } for pid=5806 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 68.972193][ T5812] veth0_macvtap: entered promiscuous mode [ 68.997555][ T30] audit: type=1400 audit(1765838296.815:99): avc: denied { ioctl } for pid=5806 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.042064][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.053194][ T5812] veth1_macvtap: entered promiscuous mode [ 69.072774][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.088962][ T30] audit: type=1400 audit(1765838296.985:100): avc: denied { create } for pid=5923 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.122802][ T30] audit: type=1400 audit(1765838297.015:101): avc: denied { read } for pid=5923 comm="syz.1.2" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.152707][ T5926] mmap: syz.0.1 (5926) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.166225][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.173453][ T30] audit: type=1400 audit(1765838297.015:102): avc: denied { open } for pid=5923 comm="syz.1.2" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.202452][ T30] audit: type=1400 audit(1765838297.015:103): avc: denied { ioctl } for pid=5923 comm="syz.1.2" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.230854][ T4149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.239284][ T4149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.248039][ T30] audit: type=1400 audit(1765838297.045:104): avc: denied { read } for pid=5924 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.272936][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.273006][ T30] audit: type=1400 audit(1765838297.045:105): avc: denied { open } for pid=5924 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.282074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.306123][ T30] audit: type=1400 audit(1765838297.145:106): avc: denied { map_create } for pid=5924 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 69.350791][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.364979][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.383073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 69.399679][ T5820] veth0_macvtap: entered promiscuous mode [ 69.409565][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.432539][ T5820] veth1_macvtap: entered promiscuous mode [ 69.445908][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.456254][ T774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.466740][ T774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.483581][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503862][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.517224][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.577777][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.606113][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.625175][ T5930] ======================================================= [ 69.625175][ T5930] WARNING: The mand mount option has been deprecated and [ 69.625175][ T5930] and is ignored by this kernel. Remove the mand [ 69.625175][ T5930] option from the mount to silence this warning. [ 69.625175][ T5930] ======================================================= [ 69.692496][ T4149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.708062][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 69.719356][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 69.731199][ T5930] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 69.746371][ T4149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.750117][ T5930] UDF-fs: Scanning with blocksize 512 failed [ 69.763355][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 69.773360][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 69.789008][ T5930] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 69.797870][ T5934] bond0: entered allmulticast mode [ 69.805404][ T5934] bond_slave_0: entered allmulticast mode [ 69.811191][ T5934] bond_slave_1: entered allmulticast mode [ 69.817943][ T5930] UDF-fs: Scanning with blocksize 1024 failed [ 69.825364][ T3419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.831006][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 69.831098][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 69.831114][ T5930] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 69.831127][ T5930] UDF-fs: Scanning with blocksize 2048 failed [ 69.831562][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 69.831637][ T5930] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 69.831654][ T5930] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 69.831666][ T5930] UDF-fs: Scanning with blocksize 4096 failed [ 69.831674][ T5930] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 69.839613][ T5934] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 69.910551][ T3419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.940060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.940078][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.003416][ T5940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=5940 comm=syz.2.7 [ 70.018874][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.018935][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.098238][ T3889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.098257][ T3889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.165730][ T5940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5940 comm=syz.2.7 [ 70.167000][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.167017][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.343576][ T5819] Bluetooth: hci0: command tx timeout [ 70.424327][ T5819] Bluetooth: hci2: command tx timeout [ 70.427572][ T5815] Bluetooth: hci1: command tx timeout [ 70.583528][ T5815] Bluetooth: hci4: command tx timeout [ 70.588346][ T5819] Bluetooth: hci3: command tx timeout [ 70.667420][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.687061][ T5959] warning: `syz.4.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.775778][ T5957] kvm: pic: non byte read [ 70.785097][ T5957] kvm: pic: non byte read [ 70.789522][ T5957] kvm: pic: non byte read [ 70.823732][ T5957] kvm: pic: non byte read [ 70.843692][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 70.859554][ T5957] kvm: pic: level sensitive irq not supported [ 70.859632][ T5957] kvm: pic: non byte read [ 70.883817][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.909005][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 70.911683][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.928997][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.086446][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 71.099512][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 71.109488][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 71.126990][ T5936] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 71.144248][ T5811] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.388335][ T5811] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 71.460950][ T5811] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 71.490100][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 71.498286][ T5936] usb 3-1: Product: syz [ 71.502456][ T5936] usb 3-1: Manufacturer: syz [ 71.507295][ T5936] usb 3-1: SerialNumber: syz [ 71.527911][ T5936] usb 3-1: config 0 descriptor?? [ 71.528668][ T5811] usb 4-1: config 220 has an invalid descriptor of length 64, skipping remainder of the config [ 71.550115][ T5811] usb 4-1: config 220 has no interface number 2 [ 71.557347][ T5811] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 71.573280][ T5811] usb 4-1: config 220 interface 0 has no altsetting 0 [ 71.584976][ T5811] usb 4-1: config 220 interface 76 has no altsetting 0 [ 71.591899][ T5811] usb 4-1: config 220 interface 1 has no altsetting 0 [ 71.607210][ T5811] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 71.625960][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.638266][ T5811] usb 4-1: Product: syz [ 71.642482][ T5811] usb 4-1: Manufacturer: syz [ 71.647654][ T5811] usb 4-1: SerialNumber: syz [ 71.753657][ T5936] radio-si470x 3-1:0.0: DeviceID=0xdf7c ChipID=0x0000 [ 71.780924][ T5936] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 71.833212][ T5936] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 71.877528][ T5811] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 71.888936][ T5811] uvcvideo 4-1:220.0: No valid video chain found. [ 71.898587][ T5936] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 71.907587][ T5811] usb 4-1: selecting invalid altsetting 0 [ 71.924879][ T5811] usb 4-1: selecting invalid altsetting 0 [ 71.930691][ T5811] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 71.960992][ T5936] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 71.963992][ T5811] usb 4-1: USB disconnect, device number 2 [ 72.016098][ T5936] usb 3-1: USB disconnect, device number 2 [ 72.585205][ T5819] Bluetooth: hci0: command tx timeout [ 72.590634][ T5819] Bluetooth: hci2: command tx timeout [ 72.597643][ T5819] Bluetooth: hci1: command tx timeout [ 72.663314][ T5134] Bluetooth: hci3: command tx timeout [ 72.673611][ T5134] Bluetooth: hci4: command tx timeout [ 72.696731][ T5996] Bluetooth: MGMT ver 1.23 [ 72.950964][ T5946] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.405539][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 73.473835][ T6010] Zero length message leads to an empty skb [ 73.830354][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 73.847899][ T5946] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.025396][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.076149][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.281894][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.302402][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.887180][ T5946] usb 2-1: Product: syz [ 74.892760][ T5946] usb 2-1: Manufacturer: syz [ 74.897686][ T5946] usb 2-1: SerialNumber: syz [ 75.297441][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 75.297455][ T30] audit: type=1400 audit(1765838303.195:146): avc: denied { ioctl } for pid=6017 comm="syz.4.23" path="socket:[8921]" dev="sockfs" ino=8921 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.310631][ T6018] erspan1: entered allmulticast mode [ 75.345197][ T30] audit: type=1400 audit(1765838303.195:147): avc: denied { ioctl } for pid=6017 comm="syz.4.23" path="socket:[8920]" dev="sockfs" ino=8920 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.346944][ T5946] usb 2-1: 0:2 : does not exist [ 75.442909][ T30] audit: type=1400 audit(1765838303.335:148): avc: denied { write } for pid=6022 comm="syz.3.24" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.451801][ T5946] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 75.558959][ T30] audit: type=1400 audit(1765838303.335:149): avc: denied { open } for pid=6022 comm="syz.3.24" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.573195][ T5946] usb 2-1: USB disconnect, device number 2 [ 75.661890][ T30] audit: type=1400 audit(1765838303.385:150): avc: denied { read write } for pid=6023 comm="syz.1.25" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 75.792898][ T30] audit: type=1400 audit(1765838303.385:151): avc: denied { ioctl open } for pid=6023 comm="syz.1.25" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 75.962966][ T30] audit: type=1400 audit(1765838303.495:152): avc: denied { map } for pid=6023 comm="syz.1.25" path="socket:[9357]" dev="sockfs" ino=9357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.046007][ T6037] capability: warning: `syz.3.26' uses deprecated v2 capabilities in a way that may be insecure [ 76.363044][ T5946] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.509988][ T30] audit: type=1400 audit(1765838303.495:153): avc: denied { read } for pid=6023 comm="syz.1.25" path="socket:[9357]" dev="sockfs" ino=9357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.835998][ T30] audit: type=1400 audit(1765838303.645:154): avc: denied { read } for pid=6031 comm="syz.3.26" name="radio3" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.886618][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 76.906355][ T30] audit: type=1400 audit(1765838303.765:155): avc: denied { write } for pid=6034 comm="syz.4.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.932939][ T5946] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 76.952398][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.076313][ T5946] usb 5-1: config 0 descriptor?? [ 77.107242][ T5946] smsusb:smsusb_probe: board id=8, interface number 0 [ 77.156766][ T5946] smsusb:smsusb_probe: Device initialized with return code -19 [ 77.485216][ T5946] usb 5-1: USB disconnect, device number 2 [ 77.858272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.867676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.882946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 77.883160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 77.891852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.032925][ T5946] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.303086][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.712987][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 78.723054][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 78.739658][ T5946] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 78.741209][ T5879] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 78.748946][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.765148][ T5946] usb 3-1: Product: syz [ 78.769605][ T5946] usb 3-1: Manufacturer: syz [ 78.774305][ T5946] usb 3-1: SerialNumber: syz [ 79.005157][ T5946] usb 3-1: config 0 descriptor?? [ 79.022352][ T5879] usb 1-1: config 0 has no interface number 0 [ 79.053167][ T5879] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 79.064615][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.078854][ T5879] usb 1-1: Product: syz [ 79.085054][ T5879] usb 1-1: Manufacturer: syz [ 79.153419][ T5879] usb 1-1: SerialNumber: syz [ 79.194912][ T5879] usb 1-1: config 0 descriptor?? [ 79.220749][ T5879] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 79.335282][ T5879] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -22 [ 79.371319][ T5946] usb 3-1: USB disconnect, device number 3 [ 79.377339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.386032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.300914][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.330877][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 80.330892][ T30] audit: type=1400 audit(1765838308.225:194): avc: denied { read } for pid=6095 comm="syz.4.39" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.353876][ T6021] usb 1-1: USB disconnect, device number 2 [ 80.363363][ T30] audit: type=1400 audit(1765838308.225:195): avc: denied { open } for pid=6095 comm="syz.4.39" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.394897][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.403334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 80.453947][ T30] audit: type=1400 audit(1765838308.235:196): avc: denied { create } for pid=6095 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.535588][ T6097] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.593800][ T30] audit: type=1400 audit(1765838308.235:197): avc: denied { connect } for pid=6095 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.613113][ T30] audit: type=1400 audit(1765838308.285:198): avc: denied { create } for pid=6095 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.632286][ T30] audit: type=1400 audit(1765838308.285:199): avc: denied { ioctl } for pid=6095 comm="syz.4.39" path="socket:[9462]" dev="sockfs" ino=9462 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.705152][ T30] audit: type=1400 audit(1765838308.345:200): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.755081][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 80.773070][ T30] audit: type=1400 audit(1765838308.405:201): avc: denied { getattr } for pid=6099 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.957095][ T6109] dvmrp0: entered allmulticast mode [ 81.215486][ T9] cfg80211: failed to load regulatory.db [ 81.383853][ C1] llc_conn_state_process: llc_conn_service failed [ 81.779811][ T6119] tmpfs: Bad value for 'mpol' [ 81.830604][ T30] audit: type=1400 audit(1765838308.465:202): avc: denied { ioctl } for pid=6095 comm="syz.4.39" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 81.852385][ T6121] faux_driver vgem: [drm] Unknown color mode 4091; guessing buffer size. [ 81.855657][ T30] audit: type=1400 audit(1765838308.475:203): avc: denied { write } for pid=6095 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.254801][ T6021] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.801780][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.894595][ T6021] usb 3-1: Using ep0 maxpacket: 32 [ 83.904766][ T6021] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.915599][ T6021] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.940435][ T6021] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.962884][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 83.969285][ T6021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.979513][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.990681][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.002250][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.010776][ T6021] usb 3-1: string descriptor 0 read error: -22 [ 84.017802][ T6021] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.032540][ T24] usb 4-1: config 0 descriptor?? [ 84.039370][ T6021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.155279][ T6021] usb 3-1: 0:2 : does not exist [ 84.459845][ T24] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 85.113720][ T6149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.148286][ T6149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.225284][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49'. [ 85.296430][ T9] usb 4-1: USB disconnect, device number 3 [ 85.466494][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 85.466509][ T30] audit: type=1400 audit(1765838313.365:233): avc: denied { getopt } for pid=6144 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.618714][ T10] usb 3-1: USB disconnect, device number 4 [ 85.677965][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 85.708146][ T30] audit: type=1400 audit(1765838313.605:234): avc: denied { bind } for pid=6185 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.803767][ T30] audit: type=1400 audit(1765838313.695:235): avc: denied { create } for pid=6208 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 85.915804][ T30] audit: type=1326 audit(1765838313.815:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.1.60" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba3738f749 code=0x0 [ 85.973775][ T6216] ubi31: attaching mtd0 [ 85.978051][ T6216] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 86.011694][ T30] audit: type=1400 audit(1765838313.875:237): avc: denied { append } for pid=6215 comm="syz.3.61" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.043836][ T30] audit: type=1400 audit(1765838313.895:238): avc: denied { name_bind } for pid=6215 comm="syz.3.61" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 86.125494][ T30] audit: type=1400 audit(1765838313.895:239): avc: denied { node_bind } for pid=6215 comm="syz.3.61" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 86.223535][ T30] audit: type=1400 audit(1765838313.895:240): avc: denied { setopt } for pid=6215 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.272949][ T30] audit: type=1400 audit(1765838313.945:241): avc: denied { shutdown } for pid=6218 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.337145][ T30] audit: type=1400 audit(1765838313.975:242): avc: denied { name_connect } for pid=6218 comm="syz.4.62" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 86.463029][ T6137] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.623140][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.623324][ T6137] usb 5-1: Using ep0 maxpacket: 16 [ 86.661153][ T6137] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 86.672887][ T6137] usb 5-1: config 251 has no interface number 0 [ 86.689773][ T6137] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 86.710206][ T6137] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 86.733106][ T6137] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 86.792126][ T6137] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 86.832909][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 86.833124][ T6137] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 13688, setting to 1024 [ 86.853949][ T10] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 86.865464][ T6137] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 86.975572][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.991302][ T6137] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.015438][ T6137] usb 5-1: config 251 interface 202 has no altsetting 0 [ 87.474609][ T6137] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 87.484192][ T6137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.492534][ T6137] usb 5-1: Product: syz [ 87.492640][ T10] usb 4-1: config 0 descriptor?? [ 87.497841][ T6137] usb 5-1: Manufacturer: syz [ 87.518398][ T6137] usb 5-1: SerialNumber: syz [ 87.518808][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 87.539386][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 87.552748][ T6225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.563763][ T6225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.702501][ T6254] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.759440][ T6021] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 87.878083][ T5872] usb 4-1: USB disconnect, device number 4 [ 87.921999][ T6021] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 87.958664][ T6021] usb 1-1: config 0 has no interface number 0 [ 87.985305][ T6021] usb 1-1: config 0 interface 41 has no altsetting 0 [ 88.350945][ T6021] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 88.373710][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.382228][ T6021] usb 1-1: Product: syz [ 88.386780][ T6021] usb 1-1: Manufacturer: syz [ 88.391638][ T6021] usb 1-1: SerialNumber: syz [ 88.407869][ T6021] usb 1-1: config 0 descriptor?? [ 88.813781][ T6272] binder: BINDER_SET_CONTEXT_MGR already set [ 88.820832][ T6272] binder: 6268:6272 ioctl 4018620d 2000000002c0 returned -16 [ 89.079397][ T6021] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 89.114316][ T6021] usb 1-1: USB disconnect, device number 3 [ 89.524055][ T6137] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 89.531743][ T6137] cxacru 5-1:251.202: probe with driver cxacru failed with error -22 [ 91.550810][ T6137] usb 5-1: USB disconnect, device number 3 [ 91.680037][ T6294] futex_wake_op: syz.4.81 tries to shift op by -1; fix this program [ 91.797569][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 91.797584][ T30] audit: type=1400 audit(1765838319.565:273): avc: denied { bind } for pid=6289 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.832434][ T30] audit: type=1400 audit(1765838319.565:274): avc: denied { listen } for pid=6289 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.852678][ T30] audit: type=1400 audit(1765838319.565:275): avc: denied { connect } for pid=6289 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.962279][ T6302] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.970248][ T6302] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 91.979328][ T6302] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 91.987223][ T6302] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 92.248209][ T6133] libceph: connect (1)[c::]:6789 error -101 [ 92.280434][ T6133] libceph: mon0 (1)[c::]:6789 connect error [ 92.317392][ T30] audit: type=1400 audit(1765838319.565:276): avc: denied { ioctl } for pid=6289 comm="syz.0.79" path="socket:[10648]" dev="sockfs" ino=10648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.346342][ T30] audit: type=1400 audit(1765838320.085:277): avc: denied { execute } for pid=6298 comm="syz.2.82" path="/18/cpu.stat" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.399244][ T30] audit: type=1400 audit(1765838320.295:278): avc: denied { name_bind } for pid=6312 comm="syz.3.83" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.402690][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 92.509471][ T6301] ceph: No mds server is up or the cluster is laggy [ 92.686244][ T30] audit: type=1400 audit(1765838320.565:279): avc: denied { write } for pid=6317 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 92.752051][ T30] audit: type=1400 audit(1765838320.635:280): avc: denied { create } for pid=6322 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 92.920855][ T30] audit: type=1400 audit(1765838320.635:281): avc: denied { ioctl } for pid=6322 comm="syz.4.87" path="socket:[9774]" dev="sockfs" ino=9774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.162960][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.312900][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 93.319551][ T5870] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 93.328452][ T5870] usb 1-1: config 1 has no interface number 0 [ 93.335697][ T5870] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.349100][ T5870] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 93.421750][ T5870] usb 1-1: config 1 interface 214 has no altsetting 0 [ 93.430714][ T30] audit: type=1400 audit(1765838321.335:282): avc: denied { connect } for pid=6333 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.570273][ T5870] usb 1-1: New USB device found, idVendor=07b4, idProduct=050a, bcdDevice= 1.02 [ 95.536549][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.544696][ T5870] usb 1-1: Product: syz [ 95.548843][ T5870] usb 1-1: Manufacturer: syz [ 95.553834][ T5870] usb 1-1: SerialNumber: syz [ 95.589379][ T6329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.749100][ T6329] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.789279][ T6341] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 95.934067][ T6341] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 95.950263][ T5870] usb 1-1: USB disconnect, device number 4 [ 96.283246][ T5936] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.547743][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.572389][ T5936] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.595446][ T5936] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.631079][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.640789][ T5936] usb 4-1: config 0 descriptor?? [ 97.238063][ T6351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.254388][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 97.254403][ T30] audit: type=1400 audit(1765838325.155:295): avc: denied { bind } for pid=6350 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.329181][ T30] audit: type=1400 audit(1765838325.225:296): avc: denied { name_bind } for pid=6350 comm="syz.3.93" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.393153][ T30] audit: type=1400 audit(1765838325.225:297): avc: denied { node_bind } for pid=6350 comm="syz.3.93" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.441905][ T30] audit: type=1400 audit(1765838325.275:298): avc: denied { append } for pid=6368 comm="syz.1.96" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 97.520617][ T30] audit: type=1400 audit(1765838325.395:299): avc: denied { create } for pid=6357 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.551125][ T30] audit: type=1400 audit(1765838325.395:300): avc: denied { write } for pid=6357 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 97.778010][ T30] audit: type=1400 audit(1765838325.675:301): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.913050][ T30] audit: type=1400 audit(1765838325.675:302): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.031201][ T30] audit: type=1400 audit(1765838325.675:303): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.062955][ T30] audit: type=1400 audit(1765838325.675:304): avc: denied { search } for pid=6372 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.092912][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.222400][ T6021] usb 4-1: USB disconnect, device number 5 [ 99.334614][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.103'. [ 99.384201][ T5870] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 99.406483][ T5870] usb 2-1: config 0 has no interface number 0 [ 99.429225][ T5870] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 99.450077][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.592023][ T5870] usb 2-1: Product: syz [ 99.611494][ T5870] usb 2-1: Manufacturer: syz [ 99.722622][ T6430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.181606][ T5870] usb 2-1: SerialNumber: syz [ 100.194118][ T5870] usb 2-1: config 0 descriptor?? [ 100.447906][ T5870] usb 2-1: selecting invalid altsetting 1 [ 100.469194][ T5870] comedi comedi5: could not switch to alternate setting 1 [ 100.477010][ T5870] usbduxfast 2-1:0.120: driver 'usbduxfast' failed to auto-configure device. [ 100.533754][ T5870] usb 2-1: USB disconnect, device number 3 [ 100.598100][ T6421] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.625105][ T6421] bond1: (slave lo): Enslaving as a backup interface with an up link [ 101.122886][ T791] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 102.316039][ T6421] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 102.354023][ T791] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.364264][ T791] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.396275][ T791] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.406398][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 102.465056][ T791] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.473471][ T791] usb 1-1: Product: syz [ 102.477660][ T791] usb 1-1: Manufacturer: syz [ 102.482246][ T791] usb 1-1: SerialNumber: syz [ 102.595865][ T791] usb 1-1: config 0 descriptor?? [ 102.861906][ T791] usb 1-1: selecting invalid altsetting 0 [ 103.078204][ T6398] usb 1-1: USB disconnect, device number 5 [ 103.362004][ T6468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.633855][ T6473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6473 comm=syz.2.116 [ 103.662577][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 103.662592][ T30] audit: type=1400 audit(1765838331.555:319): avc: denied { connect } for pid=6471 comm="syz.2.116" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.692135][ T30] audit: type=1400 audit(1765838331.585:320): avc: denied { write } for pid=6471 comm="syz.2.116" laddr=fe80::b lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.796500][ T30] audit: type=1400 audit(1765838331.685:321): avc: denied { map } for pid=6474 comm="syz.3.115" path="pipe:[11049]" dev="pipefs" ino=11049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 103.939635][ T6477] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 103.954158][ T6477] VFS: Can't find a romfs filesystem on dev nullb0. [ 103.954158][ T6477] [ 104.399252][ T6482] tmpfs: Bad value for 'defcontext' [ 104.577777][ T30] audit: type=1400 audit(1765838332.475:322): avc: denied { create } for pid=6492 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.863231][ T30] audit: type=1400 audit(1765838332.495:323): avc: denied { setopt } for pid=6492 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.893329][ T30] audit: type=1400 audit(1765838332.785:324): avc: denied { bind } for pid=6492 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.154148][ T6483] mmap: syz.4.119 (6483): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 105.240153][ T30] audit: type=1400 audit(1765838333.135:325): avc: denied { mount } for pid=6505 comm="syz.0.127" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 105.319314][ T30] audit: type=1400 audit(1765838333.135:326): avc: denied { create } for pid=6505 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.740858][ T6519] lo speed is unknown, defaulting to 1000 [ 105.747111][ T6519] lo speed is unknown, defaulting to 1000 [ 105.760966][ T6519] lo speed is unknown, defaulting to 1000 [ 105.786754][ T6519] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.840222][ T6519] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.984156][ T6519] lo speed is unknown, defaulting to 1000 [ 105.999619][ T6519] lo speed is unknown, defaulting to 1000 [ 106.014191][ T6519] lo speed is unknown, defaulting to 1000 [ 106.029385][ T6519] lo speed is unknown, defaulting to 1000 [ 106.035840][ T6519] lo speed is unknown, defaulting to 1000 [ 106.314411][ T30] audit: type=1400 audit(1765838334.215:327): avc: denied { write } for pid=6522 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 107.676422][ T30] audit: type=1400 audit(1765838335.565:328): avc: denied { read } for pid=6532 comm="syz.4.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.243984][ T6556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 108.364821][ T5946] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 108.551729][ T5946] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.587106][ T5946] usb 4-1: config 1 has no interface number 1 [ 108.595137][ T5946] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 108.851025][ T5946] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.890189][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.963270][ T5946] usb 4-1: Product: syz [ 108.967861][ T5946] usb 4-1: Manufacturer: syz [ 108.972458][ T5946] usb 4-1: SerialNumber: syz [ 108.980013][ T6568] FAULT_INJECTION: forcing a failure. [ 108.980013][ T6568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.015310][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 109.015332][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.015342][ T6568] Call Trace: [ 109.015347][ T6568] [ 109.015353][ T6568] dump_stack_lvl+0x16c/0x1f0 [ 109.015378][ T6568] should_fail_ex+0x512/0x640 [ 109.015410][ T6568] _copy_from_user+0x2e/0xd0 [ 109.015435][ T6568] __sys_bpf+0x248/0x4980 [ 109.015464][ T6568] ? __pfx___sys_bpf+0x10/0x10 [ 109.015486][ T6568] ? find_held_lock+0x2b/0x80 [ 109.015515][ T6568] ? find_held_lock+0x2b/0x80 [ 109.015543][ T6568] ? __mutex_unlock_slowpath+0x161/0x790 [ 109.015576][ T6568] ? fput+0x70/0xf0 [ 109.015601][ T6568] ? ksys_write+0x1ac/0x250 [ 109.015619][ T6568] ? __pfx_ksys_write+0x10/0x10 [ 109.015644][ T6568] __x64_sys_bpf+0x78/0xc0 [ 109.015666][ T6568] ? lockdep_hardirqs_on+0x7c/0x110 [ 109.015686][ T6568] do_syscall_64+0xcd/0xf80 [ 109.015709][ T6568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.015725][ T6568] RIP: 0033:0x7ff0ecf8f749 [ 109.015739][ T6568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.015753][ T6568] RSP: 002b:00007ff0edebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.015770][ T6568] RAX: ffffffffffffffda RBX: 00007ff0ed1e5fa0 RCX: 00007ff0ecf8f749 [ 109.015780][ T6568] RDX: 0000000000000019 RSI: 0000200000000000 RDI: 000000000000000a [ 109.015789][ T6568] RBP: 00007ff0edebd090 R08: 0000000000000000 R09: 0000000000000000 [ 109.015798][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.015808][ T6568] R13: 00007ff0ed1e6038 R14: 00007ff0ed1e5fa0 R15: 00007ffd3dc3e598 [ 109.015832][ T6568] [ 109.222856][ T5946] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 109.232291][ T5946] usb 4-1: failed to enable PITCH for EP 0x82 [ 109.291643][ T5946] usb 4-1: USB disconnect, device number 6 [ 109.369770][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.652919][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.712898][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 110.724742][ T5870] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 110.743988][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.751986][ T5870] usb 1-1: Product: syz [ 110.821740][ T5870] usb 1-1: Manufacturer: syz [ 110.827135][ T5870] usb 1-1: SerialNumber: syz [ 110.834745][ T5870] usb 1-1: config 0 descriptor?? [ 111.001559][ T6589] binder: 6586:6589 ioctl c0306201 200000001a80 returned -11 [ 111.036379][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 111.036389][ T30] audit: type=1400 audit(1765838338.935:330): avc: denied { create } for pid=6586 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 111.064021][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.072646][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.174590][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 111.238358][ T5870] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 111.274178][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.343720][ T5870] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 111.434470][ T5870] usb 1-1: media controller created [ 111.492730][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.677783][ T5870] zl10353_read_register: readreg error (reg=127, ret==0) [ 111.700018][ T5870] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 111.719553][ T5870] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 111.744411][ T5870] usb 1-1: USB disconnect, device number 6 [ 111.758044][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 111.793128][ T791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.813763][ T5870] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 111.842152][ T30] audit: type=1400 audit(1765838339.735:331): avc: denied { map } for pid=6611 comm="syz.4.143" path="socket:[12332]" dev="sockfs" ino=12332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_kobject_uevent_socket permissive=1 [ 111.924834][ T6614] veth2: entered promiscuous mode [ 111.931133][ T6614] veth2: entered allmulticast mode [ 111.935597][ T5964] udevd[5964]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 111.987560][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 112.005565][ T791] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 112.023437][ T791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.043161][ T791] usb 2-1: config 0 has no interface number 0 [ 112.059516][ T791] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 112.093619][ T791] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 112.135060][ T791] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 112.154027][ T5870] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 112.176077][ T791] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.203498][ T791] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 112.245265][ T791] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 112.270652][ T791] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 112.294085][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.317281][ T791] usb 2-1: Product: syz [ 112.321439][ T791] usb 2-1: Manufacturer: syz [ 112.327457][ T5870] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 112.347972][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 112.359183][ T791] usb 2-1: SerialNumber: syz [ 112.365327][ T791] usb 2-1: config 0 descriptor?? [ 112.371025][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 112.384834][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.393053][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.400387][ T5870] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 112.409505][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.432800][ T5870] usb 1-1: config 0 descriptor?? [ 112.452660][ T6616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 112.526943][ T30] audit: type=1400 audit(1765838340.425:332): avc: denied { create } for pid=6624 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 112.560944][ T6011] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 112.652538][ T791] usb 2-1: NFC: intf ffff8880255c2000 id ffffffff8f3250e0 [ 112.724951][ T6011] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.742598][ T6011] usb 5-1: not running at top speed; connect to a high speed hub [ 112.838843][ T791] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 112.864311][ T6011] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 112.987366][ T6011] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 113.107195][ T791] usb 2-1: USB disconnect, device number 4 [ 113.180558][ T6011] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.214486][ T6636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.224171][ T6636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.253227][ T6133] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 113.306510][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.322861][ T5870] megaworld 0003:07B5:0312.0002: hidraw0: USB HID v20.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 113.432678][ T6011] usb 5-1: Product: syz [ 113.453428][ T791] usb 2-1: NFC: intf ffff8880255c2000 [ 113.462274][ T5870] megaworld 0003:07B5:0312.0002: no inputs found [ 113.477599][ T6011] usb 5-1: Manufacturer: syz [ 113.513851][ T6133] usb 4-1: not running at top speed; connect to a high speed hub [ 113.545408][ T6011] usb 5-1: SerialNumber: syz [ 113.627647][ T6133] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 113.781087][ T6133] usb 4-1: config 1 interface 0 has no altsetting 0 [ 113.980259][ T6133] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 114.108376][ T6133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.179297][ T6133] usb 4-1: Product: ᔲ䠩嚩웿噌棲垈秳퓭恘㹆쫶␡꣣桁踭戕淞쟤箼퀕쳎ㆂᴀ㣻쭊ꉞ흓ٸ㚻겠ᜇ⑼㴲㔔訵맜嘡룮曺碑ⵐ㘶楏푦ᜥ骥遗㉝䭽甜ጴ惉謲ሮꏂ衒氭垧䣼﬑ԉ介䡆첱谏矆们 [ 114.380584][ T6133] usb 4-1: Manufacturer: 䱉㊽꼑େ䩩봙△䑂俷庴ᔿ⩿ゴẫ虶꛻ॿ얀팶⫁護㹦撁奮妭莔ꊥⴢㄴⶽ鉪併꭛Ꝼ睛ঢ়崿卷ᴬ晁骂萖廗䠤⌠铀誩䫍ሇẟ篁젩큿殺羞첫鏮㕸淃ꊽ썸㗾膭㑒䍬ሺ⨂푬黃颂冞뿯 [ 114.491076][ T6133] usb 4-1: SerialNumber: syz [ 114.591789][ T6631] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.705480][ T5920] usb 1-1: USB disconnect, device number 7 [ 114.785826][ T30] audit: type=1400 audit(1765838342.685:333): avc: denied { ioctl } for pid=6643 comm="syz.0.154" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 114.922993][ T30] audit: type=1400 audit(1765838342.725:334): avc: denied { create } for pid=6630 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.964047][ T6623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.974181][ T6623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.002995][ T30] audit: type=1400 audit(1765838342.725:335): avc: denied { read } for pid=6630 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.067782][ T6011] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 115.082143][ T30] audit: type=1400 audit(1765838342.725:336): avc: denied { read } for pid=6630 comm="syz.3.152" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.225962][ T6011] usb 5-1: USB disconnect, device number 4 [ 115.254305][ T30] audit: type=1400 audit(1765838342.735:337): avc: denied { open } for pid=6630 comm="syz.3.152" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.309366][ T30] audit: type=1400 audit(1765838342.735:338): avc: denied { ioctl } for pid=6630 comm="syz.3.152" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.340946][ T30] audit: type=1400 audit(1765838342.745:339): avc: denied { ioctl } for pid=6630 comm="syz.3.152" path="socket:[11506]" dev="sockfs" ino=11506 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.386932][ T6133] usbhid 4-1:1.0: can't add hid device: -71 [ 115.394134][ T6133] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 115.414644][ T6133] usb 4-1: USB disconnect, device number 7 [ 115.708363][ T6659] batadv_slave_1: entered promiscuous mode [ 116.143174][ T6021] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.171248][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 116.171258][ T30] audit: type=1400 audit(1765838344.065:344): avc: denied { getopt } for pid=6675 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.303639][ T6021] usb 5-1: Using ep0 maxpacket: 16 [ 116.328341][ T6021] usb 5-1: config 6 has an invalid interface number: 170 but max is 0 [ 116.355772][ T6021] usb 5-1: config 6 has no interface number 0 [ 116.433700][ T6021] usb 5-1: New USB device found, idVendor=a168, idProduct=0611, bcdDevice=81.2f [ 116.445165][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.466359][ T6021] usb 5-1: Product: syz [ 116.479880][ T6021] usb 5-1: Manufacturer: syz [ 116.485442][ T6656] batadv_slave_1: left promiscuous mode [ 116.495590][ T6656] delete_channel: no stack [ 116.518654][ T6021] usb 5-1: SerialNumber: syz [ 116.700715][ T30] audit: type=1400 audit(1765838344.595:345): avc: denied { ioctl } for pid=6692 comm="syz.2.164" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.825343][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 116.950878][ T30] audit: type=1400 audit(1765838344.825:346): avc: denied { read } for pid=6692 comm="syz.2.164" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.258176][ T30] audit: type=1400 audit(1765838344.835:347): avc: denied { open } for pid=6692 comm="syz.2.164" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.283476][ T30] audit: type=1400 audit(1765838344.835:348): avc: denied { ioctl } for pid=6692 comm="syz.2.164" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.310971][ T30] audit: type=1400 audit(1765838344.935:349): avc: denied { mounton } for pid=6692 comm="syz.2.164" path="/26/file0" dev="tmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.359712][ T6021] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0611 [ 117.370334][ T37] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.397645][ T6021] gspca_sn9c20x: Write register 1000 failed -71 [ 117.403179][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.416138][ T6021] gspca_sn9c20x: Device initialization failed [ 117.426747][ T6021] gspca_sn9c20x 5-1:6.170: probe with driver gspca_sn9c20x failed with error -71 [ 117.438744][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.456463][ T6021] usb 5-1: USB disconnect, device number 5 [ 117.495913][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.823156][ T6133] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.984454][ T6133] usb 1-1: device descriptor read/64, error -71 [ 118.272969][ T6133] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.452976][ T6133] usb 1-1: device descriptor read/64, error -71 [ 118.560767][ T30] audit: type=1400 audit(1765838346.455:350): avc: denied { mount } for pid=6730 comm="syz.3.169" name="/" dev="ramfs" ino=12490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.563149][ T6133] usb usb1-port1: attempt power cycle [ 118.639207][ T30] audit: type=1400 audit(1765838346.535:351): avc: denied { write } for pid=6730 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.652765][ T6734] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.673542][ T6736] netlink: 48 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.685939][ T6736] overlayfs: failed to resolve './file2': -2 [ 118.706446][ T30] audit: type=1400 audit(1765838346.565:352): avc: denied { watch watch_reads } for pid=6727 comm="syz.1.168" path="/41" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 118.750844][ T30] audit: type=1400 audit(1765838346.645:353): avc: denied { getopt } for pid=6730 comm="syz.3.169" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.074461][ T6133] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.096178][ T6133] usb 1-1: device descriptor read/8, error -71 [ 119.345576][ T6133] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 119.384819][ T6133] usb 1-1: device descriptor read/8, error -71 [ 119.400426][ T6765] netlink: 'syz.3.170': attribute type 8 has an invalid length. [ 119.600593][ T6133] usb usb1-port1: unable to enumerate USB device [ 120.244799][ T6778] FAULT_INJECTION: forcing a failure. [ 120.244799][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.284675][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.3.172 Not tainted syzkaller #0 PREEMPT(full) [ 120.284699][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.284709][ T6778] Call Trace: [ 120.284714][ T6778] [ 120.284721][ T6778] dump_stack_lvl+0x16c/0x1f0 [ 120.284747][ T6778] should_fail_ex+0x512/0x640 [ 120.284774][ T6778] _copy_from_user+0x2e/0xd0 [ 120.284799][ T6778] copy_msghdr_from_user+0x98/0x160 [ 120.284817][ T6778] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 120.284846][ T6778] ___sys_sendmsg+0xfe/0x1d0 [ 120.284864][ T6778] ? __pfx____sys_sendmsg+0x10/0x10 [ 120.284912][ T6778] __sys_sendmsg+0x16d/0x220 [ 120.284929][ T6778] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.284963][ T6778] do_syscall_64+0xcd/0xf80 [ 120.284986][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.285003][ T6778] RIP: 0033:0x7f607c98f749 [ 120.285017][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.285032][ T6778] RSP: 002b:00007f607d82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.285048][ T6778] RAX: ffffffffffffffda RBX: 00007f607cbe5fa0 RCX: 00007f607c98f749 [ 120.285058][ T6778] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 120.285073][ T6778] RBP: 00007f607d82c090 R08: 0000000000000000 R09: 0000000000000000 [ 120.285082][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.285091][ T6778] R13: 00007f607cbe6038 R14: 00007f607cbe5fa0 R15: 00007ffef5c93778 [ 120.285115][ T6778] [ 120.953862][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'. [ 121.022562][ T6787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.295287][ T6816] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 121.302344][ T6816] overlayfs: failed to set xattr on upper [ 121.308184][ T6816] overlayfs: ...falling back to redirect_dir=nofollow. [ 121.315059][ T6816] overlayfs: ...falling back to index=off. [ 121.320846][ T6816] overlayfs: ...falling back to uuid=null. [ 121.328908][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 121.328923][ T30] audit: type=1400 audit(1765838349.185:358): avc: denied { mounton } for pid=6810 comm="syz.3.179" path="/file0" dev="ramfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 121.360376][ T6817] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 121.421942][ T6788] vlan2: entered allmulticast mode [ 121.427144][ T6788] macsec0: entered allmulticast mode [ 121.432445][ T6788] veth1_macvtap: entered allmulticast mode [ 121.440640][ T6788] bond2: (slave vlan2): Error -34 calling dev_set_mtu [ 121.711026][ T30] audit: type=1400 audit(1765838349.605:359): avc: denied { getopt } for pid=6819 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.748388][ T6011] Process accounting resumed [ 121.791813][ T30] audit: type=1400 audit(1765838349.675:360): avc: denied { mounton } for pid=6819 comm="syz.0.180" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.024064][ T49] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 122.186425][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 122.208056][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 122.238421][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.274137][ T49] usb 1-1: config 0 descriptor?? [ 122.292775][ T49] smsusb:smsusb_probe: board id=8, interface number 0 [ 122.633204][ T49] smsusb:smsusb_probe: Device initialized with return code -19 [ 122.636116][ T30] audit: type=1400 audit(1765838350.525:361): avc: denied { create } for pid=6844 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 123.030156][ T49] usb 1-1: USB disconnect, device number 12 [ 123.049932][ T30] audit: type=1400 audit(1765838350.945:362): avc: denied { map } for pid=6851 comm="syz.4.185" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 123.263694][ T30] audit: type=1400 audit(1765838351.145:363): avc: denied { mount } for pid=6856 comm="syz.0.187" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 123.489199][ T6861] FAULT_INJECTION: forcing a failure. [ 123.489199][ T6861] name failslab, interval 1, probability 0, space 0, times 1 [ 123.502367][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.2.186 Not tainted syzkaller #0 PREEMPT(full) [ 123.502388][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.502397][ T6861] Call Trace: [ 123.502404][ T6861] [ 123.502411][ T6861] dump_stack_lvl+0x16c/0x1f0 [ 123.502436][ T6861] should_fail_ex+0x512/0x640 [ 123.502460][ T6861] ? fs_reclaim_acquire+0xae/0x150 [ 123.502484][ T6861] should_failslab+0xc2/0x120 [ 123.502507][ T6861] __kmalloc_noprof+0xeb/0x910 [ 123.502533][ T6861] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.502561][ T6861] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.502582][ T6861] tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.502607][ T6861] ? tomoyo_profile+0x47/0x60 [ 123.502633][ T6861] tomoyo_path_number_perm+0x245/0x580 [ 123.502651][ T6861] ? tomoyo_path_number_perm+0x237/0x580 [ 123.502672][ T6861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.502718][ T6861] ? hook_file_ioctl_common+0x144/0x410 [ 123.502746][ T6861] ? __rcu_read_unlock+0x2b5/0x5a0 [ 123.502769][ T6861] ? __fget_files+0x20e/0x3c0 [ 123.502795][ T6861] security_file_ioctl+0x9b/0x240 [ 123.502820][ T6861] __x64_sys_ioctl+0xb7/0x210 [ 123.502842][ T6861] do_syscall_64+0xcd/0xf80 [ 123.502864][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.502881][ T6861] RIP: 0033:0x7f3886d8f749 [ 123.502895][ T6861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.502910][ T6861] RSP: 002b:00007f3887bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.502926][ T6861] RAX: ffffffffffffffda RBX: 00007f3886fe6180 RCX: 00007f3886d8f749 [ 123.502937][ T6861] RDX: 0000200000000180 RSI: 00000000c058560f RDI: 0000000000000006 [ 123.502948][ T6861] RBP: 00007f3887bca090 R08: 0000000000000000 R09: 0000000000000000 [ 123.502957][ T6861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.502967][ T6861] R13: 00007f3886fe6218 R14: 00007f3886fe6180 R15: 00007ffcd7fdfda8 [ 123.502992][ T6861] [ 123.701514][ T6861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.983374][ T30] audit: type=1400 audit(1765838351.225:364): avc: denied { bind } for pid=6859 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.054935][ T30] audit: type=1400 audit(1765838351.905:365): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.167896][ T30] audit: type=1400 audit(1765838352.005:366): avc: denied { ioctl } for pid=6859 comm="syz.1.188" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.830342][ T30] audit: type=1400 audit(1765838352.725:367): avc: denied { mount } for pid=6878 comm="syz.3.193" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.977228][ T6877] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 125.001642][ T6877] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 125.040149][ T6877] overlayfs: missing 'lowerdir' [ 126.048930][ T6901] bond0: (slave bond_slave_0): Releasing backup interface [ 127.393435][ T6021] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 127.410487][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 127.410497][ T30] audit: type=1326 audit(1765838355.305:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3886d8f749 code=0x7ffc0000 [ 127.456848][ T30] audit: type=1326 audit(1765838355.345:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3886d8df90 code=0x7ffc0000 [ 127.481785][ T30] audit: type=1326 audit(1765838355.345:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.508894][ T30] audit: type=1326 audit(1765838355.345:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.546101][ T30] audit: type=1326 audit(1765838355.345:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.580212][ T30] audit: type=1326 audit(1765838355.345:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.604224][ T116] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.614094][ T30] audit: type=1326 audit(1765838355.475:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.638042][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.674867][ T30] audit: type=1326 audit(1765838355.555:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.723005][ T6133] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 127.784455][ T6021] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.792468][ T6021] usb 1-1: config 0 has no interface number 0 [ 127.799479][ T6021] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 127.813834][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.828959][ T6021] usb 1-1: config 0 descriptor?? [ 127.834467][ T49] usb 4-1: device descriptor read/64, error -71 [ 127.843420][ T30] audit: type=1326 audit(1765838355.735:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 127.867921][ T116] usb 2-1: Using ep0 maxpacket: 32 [ 127.887315][ T116] usb 2-1: config 0 has an invalid interface number: 219 but max is 2 [ 127.898271][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.387046][ T6021] usb 1-1: selecting invalid altsetting 1 [ 128.405266][ T6021] dvb_ttusb_budget: ttusb_init_controller: error [ 128.413502][ T49] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 128.421044][ T30] audit: type=1326 audit(1765838355.735:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6933 comm="syz.2.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3886d8f34b code=0x7ffc0000 [ 128.445709][ T116] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 128.456233][ T6021] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 128.456457][ T6133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.467620][ T116] usb 2-1: config 0 has no interface number 0 [ 128.496015][ T116] usb 2-1: config 0 interface 219 altsetting 13 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 128.526704][ T116] usb 2-1: config 0 interface 219 altsetting 13 bulk endpoint 0xD has invalid maxpacket 64 [ 128.544259][ T6133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.547615][ T116] usb 2-1: config 0 interface 219 altsetting 13 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 128.564316][ T6133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.580447][ T6021] DVB: Unable to find symbol cx22700_attach() [ 128.580610][ T116] usb 2-1: config 0 interface 219 has no altsetting 0 [ 128.594749][ T49] usb 4-1: device descriptor read/64, error -71 [ 128.692118][ T6133] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 128.701614][ T6133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.706017][ T49] usb usb4-port1: attempt power cycle [ 128.717263][ T6133] usb 3-1: config 0 descriptor?? [ 129.176070][ T116] usb 2-1: New USB device found, idVendor=0af0, idProduct=7401, bcdDevice= 0.00 [ 129.195004][ T6021] DVB: Unable to find symbol tda10046_attach() [ 129.201915][ T6021] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 129.218483][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.257309][ T116] usb 2-1: config 0 descriptor?? [ 129.269358][ T6928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 129.494350][ T116] usb 2-1: string descriptor 0 read error: -71 [ 129.509627][ T116] hso 2-1:0.219: Not our interface [ 129.519379][ T116] usb-storage 2-1:0.219: USB Mass Storage device detected [ 129.527039][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 129.535329][ T5872] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.564135][ T49] usb 4-1: device descriptor read/8, error -71 [ 129.640605][ T116] usb 2-1: USB disconnect, device number 5 [ 129.690873][ T6133] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 129.704947][ T5872] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 129.722477][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.734813][ T5872] usb 5-1: config 0 has no interface number 0 [ 129.746743][ T5872] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 129.757322][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.767765][ T5872] usb 5-1: Product: syz [ 129.771934][ T5872] usb 5-1: Manufacturer: syz [ 129.779131][ T5872] usb 5-1: SerialNumber: syz [ 129.791735][ T5872] usb 5-1: config 0 descriptor?? [ 129.800540][ T5872] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 129.813252][ T49] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.844014][ T49] usb 4-1: device descriptor read/8, error -71 [ 129.954546][ T49] usb usb4-port1: unable to enumerate USB device [ 130.171631][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.345789][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.363090][ T5886] usb 1-1: USB disconnect, device number 13 [ 130.386609][ T5872] usb 3-1: USB disconnect, device number 5 [ 130.470546][ T6133] usb 5-1: USB disconnect, device number 6 [ 130.850360][ T6961] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 130.860533][ T6961] block device autoloading is deprecated and will be removed. [ 130.891562][ T6959] syzkaller0: entered promiscuous mode [ 130.903661][ T6959] syzkaller0: entered allmulticast mode [ 131.244810][ T5886] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.403177][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 131.414615][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.442974][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.472165][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.486401][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.498489][ T5886] usb 1-1: config 0 descriptor?? [ 131.505591][ T5886] hub 1-1:0.0: USB hub found [ 131.584595][ T6021] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 131.635085][ T6997] process 'syz.1.222' launched './file2' with NULL argv: empty string added [ 131.705030][ T5886] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 131.724827][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.733396][ T6021] usb 5-1: device descriptor read/64, error -71 [ 131.894130][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 131.906959][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.916375][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.917738][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.931790][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.957433][ T6968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.974259][ T6968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.975095][ T6021] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 131.990665][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.002899][ T5886] usbhid 1-1:0.0: can't add hid device: -71 [ 132.005681][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.008873][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 132.017741][ T5920] usb 3-1: Product: syz [ 132.034988][ T5920] usb 3-1: Manufacturer: syz [ 132.044178][ T5920] usb 3-1: SerialNumber: syz [ 132.051591][ T5920] usb 3-1: config 0 descriptor?? [ 132.080348][ T5886] usb 1-1: USB disconnect, device number 14 [ 132.164586][ T6021] usb 5-1: device descriptor read/64, error -71 [ 132.275788][ T6021] usb usb5-port1: attempt power cycle [ 132.358376][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.365025][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.446502][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.454463][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.512769][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 132.512783][ T30] audit: type=1400 audit(1765838360.405:448): avc: denied { lock } for pid=7009 comm="syz.3.225" path="socket:[12894]" dev="sockfs" ino=12894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 132.542130][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.559883][ T6999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.623509][ T6021] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 132.656142][ T6021] usb 5-1: device descriptor read/8, error -71 [ 132.668120][ T6015] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.684086][ T6015] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.694255][ T6015] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.719735][ T7017] binder: BINDER_SET_CONTEXT_MGR already set [ 132.725862][ T7017] binder: 7014:7017 ioctl 4018620d 200000004a80 returned -16 [ 132.735485][ T7017] binder: 7014:7017 unknown command 1 [ 132.740921][ T7017] binder: 7014:7017 ioctl c0306201 200000004a40 returned -22 [ 132.753473][ T6015] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.903061][ T6021] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 132.920188][ T7024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.951255][ T30] audit: type=1400 audit(1765838360.825:449): avc: denied { ioctl } for pid=7023 comm="syz.3.229" path="socket:[13594]" dev="sockfs" ino=13594 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.559435][ T7035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.571010][ T6021] usb 5-1: device descriptor read/8, error -71 [ 133.617544][ T7035] netlink: 72 bytes leftover after parsing attributes in process `syz.0.227'. [ 133.714473][ T6021] usb usb5-port1: unable to enumerate USB device [ 133.815805][ T7028] lo speed is unknown, defaulting to 1000 [ 134.620896][ T5886] usb 3-1: USB disconnect, device number 6 [ 135.604568][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'. [ 135.693462][ T5920] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.874155][ T5920] usb 5-1: device descriptor read/64, error -71 [ 136.041097][ T30] audit: type=1400 audit(1765838363.935:450): avc: denied { create } for pid=7072 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 136.079562][ T7082] xt_TCPMSS: Only works on TCP SYN packets [ 136.110417][ T30] audit: type=1400 audit(1765838363.935:451): avc: denied { map } for pid=7072 comm="syz.1.239" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.243645][ T5920] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.453402][ T5920] usb 5-1: device descriptor read/64, error -71 [ 136.688981][ T30] audit: type=1326 audit(1765838364.525:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7087 comm="syz.2.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3886d8f749 code=0x0 [ 136.917514][ T5920] usb usb5-port1: attempt power cycle [ 137.473155][ T5920] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.579009][ T5920] usb 5-1: device descriptor read/8, error -71 [ 137.803009][ T6133] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 137.896006][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.973752][ T5920] usb 5-1: device descriptor read/8, error -71 [ 137.982861][ T6133] usb 1-1: Using ep0 maxpacket: 16 [ 137.989476][ T6133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.030826][ T6133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.192294][ T5920] usb usb5-port1: unable to enumerate USB device [ 138.243720][ T6133] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice=e5.00 [ 138.253601][ T6133] usb 1-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 138.273022][ T6133] usb 1-1: Manufacturer: syz [ 138.291510][ T6133] usb 1-1: config 0 descriptor?? [ 138.749042][ T7120] x_tables: duplicate underflow at hook 1 [ 139.916982][ T6133] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 139.924068][ T6133] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 139.931073][ T6133] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 139.938116][ T6133] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 139.945520][ T6133] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 139.956685][ T6133] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [syz] on usb-dummy_hcd.0-1/input0 [ 141.062250][ T7130] netlink: 'syz.0.244': attribute type 10 has an invalid length. [ 141.096054][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.112913][ T7130] bond0: (slave team0): Enslaving as an active interface with an up link [ 141.288814][ T7136] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 141.698964][ T7136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.722006][ T7144] sit0: entered promiscuous mode [ 141.728632][ T30] audit: type=1400 audit(1765838369.625:453): avc: denied { setopt } for pid=7099 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.728814][ T7144] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 141.757159][ T7144] netlink: 1 bytes leftover after parsing attributes in process `syz.1.255'. [ 141.766169][ T7100] bridge0: entered promiscuous mode [ 141.777354][ T7100] i2c i2c-1: unsupported multi-msg i2c transaction [ 141.794124][ T7099] bridge0: left promiscuous mode [ 141.868161][ T7142] erspan0: entered promiscuous mode [ 141.873936][ T7142] erspan0: entered allmulticast mode [ 141.969666][ T7156] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 142.027592][ T30] audit: type=1400 audit(1765838369.925:454): avc: denied { ioctl } for pid=7153 comm="syz.4.258" path="socket:[13231]" dev="sockfs" ino=13231 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.292936][ T5870] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.502989][ T791] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.529201][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 142.545726][ T30] audit: type=1400 audit(1765838370.445:455): avc: denied { setopt } for pid=7166 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.601515][ T5870] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.768620][ T5811] usb 1-1: USB disconnect, device number 15 [ 142.780962][ T5870] usb 5-1: config 0 has no interface number 0 [ 142.795584][ T5870] usb 5-1: config 0 interface 184 has no altsetting 0 [ 142.804888][ T5870] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.814892][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.823089][ T5870] usb 5-1: Product: syz [ 142.827414][ T5870] usb 5-1: Manufacturer: syz [ 142.831983][ T5870] usb 5-1: SerialNumber: syz [ 142.838276][ T5870] usb 5-1: config 0 descriptor?? [ 142.843840][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 142.856181][ T791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.872325][ T5870] smsc75xx v1.0.0 [ 142.876487][ T5870] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 142.888008][ T791] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 142.902110][ T5870] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 142.910844][ T791] usb 2-1: config 0 has no interface number 0 [ 142.917606][ T791] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 142.934791][ T791] usb 2-1: config 0 interface 88 has no altsetting 0 [ 142.946500][ T791] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 142.956490][ T791] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 142.964712][ T791] usb 2-1: Product: syz [ 142.969303][ T791] usb 2-1: Manufacturer: 빯視స捄㻀囁驪癅䞿ڰ傡붾⊻儝봚끪߮莼厔Ⱋᣪ舣趕ㆊ픏框뺩凑Ꚕ⢋ꬥ╪䬑茷瓉钌鸊㱓멍ްൢ顿ᆩ桳➰㜽쳧綴쎎鉅⟻ค갪棝뻷京ﷴ㹡䆖ʞ찓渋芾耭櫢Ƿ匋ࣔ歰ᵣ혱鼏㲳ᑀ嚾끦卭⳹度ᎍ룇ﺫ噙凚 [ 142.996720][ T791] usb 2-1: SerialNumber: ည [ 143.017542][ T791] usb 2-1: config 0 descriptor?? [ 143.073752][ T5872] usb 5-1: USB disconnect, device number 15 [ 143.219171][ T7181] netlink: 'syz.0.265': attribute type 2 has an invalid length. [ 143.234457][ T30] audit: type=1400 audit(1765838371.135:456): avc: denied { mounton } for pid=7180 comm="syz.0.265" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 143.272476][ T791] input: 빯視స捄㻀囁驪癅䞿ڰ傡붾⊻儝봚끪߮莼厔Ⱋᣪ舣趕ㆊ픏框뺩凑Ꚕ⢋ꬥ╪䬑茷瓉钌鸊㱓멍ް as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input7 [ 143.298809][ T7181] XFS (nullb0): Invalid superblock magic number [ 143.305136][ T791] usb 2-1: USB disconnect, device number 6 [ 143.918764][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.268'. [ 144.231191][ T791] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.383049][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 144.391306][ T791] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 144.401638][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.410581][ T791] usb 3-1: Product: syz [ 144.415056][ T791] usb 3-1: Manufacturer: syz [ 144.419912][ T791] usb 3-1: SerialNumber: syz [ 144.427662][ T791] usb 3-1: config 0 descriptor?? [ 144.436056][ T791] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 144.700312][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 144.732023][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 144.732082][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 144.763690][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 144.772600][ T7215] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 144.781141][ T7214] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 144.789905][ T7215] netlink: 'syz.4.274': attribute type 13 has an invalid length. [ 144.826492][ T7214] netlink: 'syz.4.274': attribute type 13 has an invalid length. [ 145.247474][ T30] audit: type=1400 audit(1765838373.145:457): avc: denied { ioctl } for pid=7223 comm="syz.4.276" path="socket:[14346]" dev="sockfs" ino=14346 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.683733][ T791] gspca_sonixj: reg_r err -110 [ 145.689589][ T791] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 145.713287][ T6398] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 145.812598][ T30] audit: type=1400 audit(1765838373.705:458): avc: denied { read write } for pid=7241 comm="syz.0.280" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.852979][ T791] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 145.992617][ T791] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.226051][ T30] audit: type=1400 audit(1765838373.705:459): avc: denied { open } for pid=7241 comm="syz.0.280" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 146.329222][ T30] audit: type=1400 audit(1765838373.835:460): avc: denied { watch_mount } for pid=7238 comm="syz.3.279" path="/62" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 146.741147][ T30] audit: type=1400 audit(1765838374.635:461): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 146.945097][ T7253] : renamed from vlan0 [ 147.015907][ T7257] openvswitch: netlink: IPv6 tunnel dst address is zero [ 147.048804][ T30] audit: type=1400 audit(1765838374.935:462): avc: denied { write } for pid=7241 comm="syz.0.280" name="hidraw0" dev="devtmpfs" ino=3067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 147.142415][ T7242] lo speed is unknown, defaulting to 1000 [ 147.398842][ T30] audit: type=1400 audit(1765838375.295:463): avc: denied { map } for pid=7260 comm="syz.4.284" path="socket:[14019]" dev="sockfs" ino=14019 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 147.601910][ T7265] netlink: 'syz.1.283': attribute type 8 has an invalid length. [ 147.731622][ T116] usb 3-1: USB disconnect, device number 7 [ 147.742158][ T30] audit: type=1400 audit(1765838375.645:464): avc: denied { getopt } for pid=7267 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.125604][ T7278] ip6t_rpfilter: unknown options [ 148.156083][ T7278] affs: No valid root block on device nullb0 [ 148.373357][ T5920] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 148.491228][ T7280] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 148.544825][ T7283] netlink: 'syz.1.288': attribute type 1 has an invalid length. [ 148.553299][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 148.560532][ T5920] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 148.573304][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.591620][ T5920] usb 5-1: config 0 descriptor?? [ 148.618586][ T5920] as10x_usb: device has been detected [ 148.634999][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 148.651122][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.689159][ T7287] fuse: Bad value for 'fd' [ 148.698767][ T5920] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 148.730337][ T5920] as10x_usb: error during firmware upload part1 [ 148.737092][ T5920] Registered device nBox DVB-T Dongle [ 148.744783][ T30] audit: type=1400 audit(1765838376.625:465): avc: denied { firmware_load } for pid=5920 comm="kworker/1:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 148.810164][ T5920] usb 5-1: USB disconnect, device number 16 [ 148.863582][ T6133] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 148.869021][ T5920] Unregistered device nBox DVB-T Dongle [ 148.877229][ T5920] as10x_usb: device has been disconnected [ 149.035942][ T6133] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 149.044361][ T6133] usb 3-1: config 0 has no interface number 0 [ 149.056297][ T6133] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.075197][ T6133] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 149.086725][ T6133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.097452][ T6133] usb 3-1: Product: syz [ 149.101847][ T6133] usb 3-1: Manufacturer: syz [ 149.173221][ T30] audit: type=1400 audit(1765838377.065:466): avc: denied { getopt } for pid=7289 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.374321][ T6133] usb 3-1: SerialNumber: syz [ 149.479829][ T6133] usb 3-1: config 0 descriptor?? [ 149.487528][ T30] audit: type=1400 audit(1765838377.065:467): avc: denied { append } for pid=7289 comm="syz.1.291" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.775850][ T7304] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 149.805884][ T7304] binder: 7298:7304 ioctl c0306201 200000000040 returned -22 [ 150.100964][ T6133] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 150.109123][ T6133] keyspan 3-1:0.133: unsupported endpoint type 0 [ 150.118514][ T6133] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 150.126475][ T6133] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 150.134629][ T6133] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 150.146661][ T6133] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 150.178906][ T6133] usb 3-1: USB disconnect, device number 8 [ 150.209262][ T6133] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 150.228854][ T6133] keyspan 3-1:0.133: device disconnected [ 150.464231][ T30] audit: type=1400 audit(1765838378.355:468): avc: denied { create } for pid=7310 comm="syz.1.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.548117][ T30] audit: type=1400 audit(1765838378.385:469): avc: denied { map } for pid=7310 comm="syz.1.297" path="socket:[14131]" dev="sockfs" ino=14131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.949514][ T30] audit: type=1400 audit(1765838378.385:470): avc: denied { read } for pid=7310 comm="syz.1.297" path="socket:[14131]" dev="sockfs" ino=14131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.279974][ T7328] macsec1: entered promiscuous mode [ 151.285763][ T7328] macsec1: entered allmulticast mode [ 151.411713][ T7330] openvswitch: netlink: Message has 4 unknown bytes. [ 151.443289][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.495882][ T7330] netlink: 112 bytes leftover after parsing attributes in process `syz.1.303'. [ 151.606429][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 151.619183][ T5920] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 151.661147][ T5920] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 151.688562][ T5920] usb 3-1: can't read configurations, error -61 [ 151.999387][ T5920] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 152.373276][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 152.378875][ T5920] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 152.393233][ T5920] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 152.420653][ T5920] usb 3-1: can't read configurations, error -61 [ 152.432548][ T5920] usb usb3-port1: attempt power cycle [ 153.498565][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 153.498584][ T30] audit: type=1400 audit(1765838380.805:481): avc: denied { ioctl } for pid=7347 comm="syz.0.309" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 153.499846][ T6133] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 153.691200][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.702720][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.933358][ T5920] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.942913][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 153.979089][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 154.022075][ T7365] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 154.142157][ T7365] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 154.153840][ T7365] overlayfs: failed to look up (tracing) for ino (-66) [ 154.352158][ T30] audit: type=1400 audit(1765838381.905:482): avc: denied { mount } for pid=7341 comm="syz.3.308" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 154.806569][ T30] audit: type=1400 audit(1765838381.915:483): avc: denied { mounton } for pid=7341 comm="syz.3.308" path="/67/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 154.991608][ T5920] usb 3-1: device descriptor read/all, error -71 [ 155.183906][ T7357] syz.1.313 (7357) used greatest stack depth: 19688 bytes left [ 155.733207][ T6133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.744955][ T6133] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 155.754473][ T6133] usb 4-1: can't read configurations, error -71 [ 155.806291][ T30] audit: type=1400 audit(1765838383.705:484): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 155.888589][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 156.054166][ T7380] netlink: 'syz.0.311': attribute type 2 has an invalid length. [ 156.091036][ T30] audit: type=1400 audit(1765838383.985:485): avc: denied { getopt } for pid=7378 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.249908][ T30] audit: type=1400 audit(1765838385.145:486): avc: denied { write } for pid=7391 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.438909][ T30] audit: type=1400 audit(1765838385.255:487): avc: denied { connect } for pid=7404 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 157.758675][ T30] audit: type=1400 audit(1765838385.655:488): avc: denied { shutdown } for pid=7411 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 158.456526][ T30] audit: type=1400 audit(1765838386.355:489): avc: denied { getopt } for pid=7415 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.815191][ T30] audit: type=1400 audit(1765838386.715:490): avc: denied { map } for pid=7430 comm="syz.1.333" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.845871][ T30] audit: type=1400 audit(1765838386.715:491): avc: denied { read } for pid=7430 comm="syz.1.333" path="socket:[14733]" dev="sockfs" ino=14733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.869660][ T5920] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.273323][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 159.282528][ T5920] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 159.302658][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.324482][ T5920] usb 4-1: config 0 descriptor?? [ 159.341126][ T5920] as10x_usb: device has been detected [ 159.354091][ T5920] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 159.379567][ T5920] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 159.411645][ T5920] as10x_usb: error during firmware upload part1 [ 159.429875][ T5920] Registered device nBox DVB-T Dongle [ 159.546277][ T5920] usb 4-1: USB disconnect, device number 15 [ 159.595797][ T30] audit: type=1400 audit(1765838387.485:492): avc: denied { create } for pid=7439 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.616800][ T5920] Unregistered device nBox DVB-T Dongle [ 159.622360][ T5920] as10x_usb: device has been disconnected [ 159.676801][ T30] audit: type=1400 audit(1765838387.495:493): avc: denied { ioctl } for pid=7439 comm="syz.4.335" path="socket:[15565]" dev="sockfs" ino=15565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.783777][ T30] audit: type=1400 audit(1765838387.515:494): avc: denied { accept } for pid=7439 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.814090][ T7447] netlink: 'syz.1.336': attribute type 13 has an invalid length. [ 264.772776][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 264.772793][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7410/1:b..l [ 264.773217][ C0] rcu: (detected by 0, t=10502 jiffies, g=16109, q=708 ncpus=2) [ 264.773232][ C0] task:syz.2.324 state:R running task stack:23576 pid:7410 tgid:7407 ppid:5818 task_flags:0x40064c flags:0x00080001 [ 264.773283][ C0] Call Trace: [ 264.773289][ C0] [ 264.773298][ C0] ? __schedule+0x10b9/0x6150 [ 264.773321][ C0] __schedule+0x1139/0x6150 [ 264.773344][ C0] ? mark_held_locks+0x49/0x80 [ 264.773365][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.773389][ C0] ? __pfx___schedule+0x10/0x10 [ 264.773412][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 264.773430][ C0] preempt_schedule_common+0x44/0xc0 [ 264.773451][ C0] preempt_schedule_thunk+0x16/0x30 [ 264.773472][ C0] _raw_spin_unlock+0x3e/0x50 [ 264.773501][ C0] unmap_page_range+0x1047/0x43c0 [ 264.773544][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 264.773564][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 264.773590][ C0] ? uprobe_munmap+0x20/0x600 [ 264.773609][ C0] unmap_single_vma+0x153/0x240 [ 264.773632][ C0] unmap_vmas+0x218/0x470 [ 264.773656][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 264.773677][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 264.773714][ C0] exit_mmap+0x1b0/0xb60 [ 264.773742][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 264.773769][ C0] ? kasan_quarantine_put+0x10a/0x240 [ 264.773787][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.773824][ C0] __mmput+0x12a/0x410 [ 264.773849][ C0] mmput+0x62/0x70 [ 264.773871][ C0] do_exit+0x7d7/0x2bd0 [ 264.773888][ C0] ? recalc_sigpending+0x1ef/0x290 [ 264.773908][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 264.773929][ C0] ? __pfx_do_exit+0x10/0x10 [ 264.773953][ C0] do_group_exit+0xd3/0x2a0 [ 264.773972][ C0] get_signal+0x2671/0x26d0 [ 264.774001][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 264.774023][ C0] ? __pfx_get_signal+0x10/0x10 [ 264.774048][ C0] ? do_futex+0x122/0x350 [ 264.774072][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 264.774095][ C0] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 264.774115][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 264.774145][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 264.774171][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 264.774197][ C0] do_syscall_64+0x4ee/0xf80 [ 264.774219][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.774236][ C0] RIP: 0033:0x7f3886d8f749 [ 264.774249][ C0] RSP: 002b:00007f3887bca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 264.774265][ C0] RAX: fffffffffffffe00 RBX: 00007f3886fe6188 RCX: 00007f3886d8f749 [ 264.774277][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3886fe6188 [ 264.774287][ C0] RBP: 00007f3886fe6180 R08: 0000000000000000 R09: 0000000000000000 [ 264.774297][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.774307][ C0] R13: 00007f3886fe6218 R14: 00007ffcd7fdfcc0 R15: 00007ffcd7fdfda8 [ 264.774331][ C0] [ 264.774338][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g16109 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 264.774355][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 264.774363][ C0] rcu: RCU grace-period kthread stack dump: [ 264.774368][ C0] task:rcu_preempt state:R running task stack:28528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 264.774421][ C0] Call Trace: [ 264.774426][ C0] [ 264.774435][ C0] ? __schedule+0x10b9/0x6150 [ 264.774451][ C0] __schedule+0x1139/0x6150 [ 264.774469][ C0] ? __lock_acquire+0x436/0x2890 [ 264.774489][ C0] ? __mod_timer+0x8f2/0xd30 [ 264.774517][ C0] ? __pfx___schedule+0x10/0x10 [ 264.774533][ C0] ? find_held_lock+0x2b/0x80 [ 264.774557][ C0] ? schedule+0x2d7/0x3a0 [ 264.774577][ C0] schedule+0xe7/0x3a0 [ 264.774596][ C0] schedule_timeout+0x123/0x290 [ 264.774611][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 264.774628][ C0] ? __pfx_process_timeout+0x10/0x10 [ 264.774649][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 264.774667][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 264.774690][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 264.774713][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 264.774733][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.774757][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 264.774775][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 264.774799][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 264.774820][ C0] rcu_gp_kthread+0x26d/0x380 [ 264.774841][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 264.774860][ C0] ? rcu_is_watching+0x12/0xc0 [ 264.774876][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.774896][ C0] ? __kthread_parkme+0x19e/0x250 [ 264.774914][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 264.774934][ C0] kthread+0x3c5/0x780 [ 264.774953][ C0] ? __pfx_kthread+0x10/0x10 [ 264.774974][ C0] ? rcu_is_watching+0x12/0xc0 [ 264.774989][ C0] ? __pfx_kthread+0x10/0x10 [ 264.775009][ C0] ret_from_fork+0x983/0xb10 [ 264.775028][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 264.775047][ C0] ? __switch_to+0x7af/0x10d0 [ 264.775067][ C0] ? __pfx_kthread+0x10/0x10 [ 264.775087][ C0] ret_from_fork_asm+0x1a/0x30 [ 264.775122][ C0] [ 264.775128][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 264.775138][ C0] CPU: 0 UID: 0 PID: 7448 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 264.775155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.775165][ C0] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 264.775184][ C0] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 5a 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 264.775199][ C0] RSP: 0018:ffffc9000c227918 EFLAGS: 00000293 [ 264.775212][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b28971 [ 264.775223][ C0] RDX: ffff88802ee30000 RSI: ffffffff81b2894b RDI: 0000000000000005 [ 264.775233][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 264.775243][ C0] R10: 0000000000000001 R11: ffff88802ee30b30 R12: dffffc0000000000 [ 264.775253][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 264.775264][ C0] FS: 00007fcbe5fb46c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 264.775280][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.775291][ C0] CR2: 000020000000e038 CR3: 0000000030cbc000 CR4: 00000000003526f0 [ 264.775301][ C0] Call Trace: [ 264.775306][ C0] [ 264.775316][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 264.775341][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 264.775358][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 264.775376][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 264.775402][ C0] ? __pfx___text_poke+0x10/0x10 [ 264.775423][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 264.775442][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 264.775462][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 264.775476][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 264.775502][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 264.775529][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 264.775552][ C0] ? find_held_lock+0x2b/0x80 [ 264.775581][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 264.775603][ C0] jump_label_update+0x376/0x550 [ 264.775624][ C0] static_key_slow_inc_cpuslocked+0x86/0x150 [ 264.775645][ C0] static_key_slow_inc+0x1a/0x30 [ 264.775665][ C0] __sys_bpf+0x1cc0/0x4980 [ 264.775690][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 264.775712][ C0] ? __pfx_futex_wait+0x10/0x10 [ 264.775727][ C0] ? restore_sigcontext+0x4d1/0x6a0 [ 264.775766][ C0] ? do_futex+0x122/0x350 [ 264.775800][ C0] ? restore_signal_shadow_stack+0x63/0x460 [ 264.775826][ C0] ? xfd_validate_state+0x61/0x180 [ 264.775841][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 264.775867][ C0] __x64_sys_bpf+0x78/0xc0 [ 264.775888][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.775907][ C0] do_syscall_64+0xcd/0xf80 [ 264.775928][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.775944][ C0] RIP: 0033:0x7fcbe7d8f749 [ 264.775958][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.775972][ C0] RSP: 002b:00007fcbe5fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.775988][ C0] RAX: ffffffffffffffda RBX: 00007fcbe7fe6180 RCX: 00007fcbe7d8f749 [ 264.775998][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 264.776008][ C0] RBP: 00007fcbe7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.776018][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.776027][ C0] R13: 00007fcbe7fe6218 R14: 00007fcbe7fe6180 R15: 00007ffefdf6f9f8 [ 264.776051][ C0] [ 397.760253][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 225s! [syz.4.337:7448] [ 397.760275][ C0] Modules linked in: [ 397.760284][ C0] irq event stamp: 635512 [ 397.760290][ C0] hardirqs last enabled at (635511): [] irqentry_exit+0x1dd/0x8c0 [ 397.760318][ C0] hardirqs last disabled at (635512): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 397.760343][ C0] softirqs last enabled at (635510): [] __irq_exit_rcu+0x109/0x170 [ 397.760366][ C0] softirqs last disabled at (635485): [] __irq_exit_rcu+0x109/0x170 [ 397.760394][ C0] CPU: 0 UID: 0 PID: 7448 Comm: syz.4.337 Not tainted syzkaller #0 PREEMPT(full) [ 397.760411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.760420][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0 [ 397.760439][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 5a 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 397.760454][ C0] RSP: 0018:ffffc9000c227918 EFLAGS: 00000293 [ 397.760465][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b28971 [ 397.760475][ C0] RDX: ffff88802ee30000 RSI: ffffffff81b2894b RDI: 0000000000000005 [ 397.760485][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 397.760494][ C0] R10: 0000000000000001 R11: ffff88802ee30b30 R12: dffffc0000000000 [ 397.760503][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 397.760512][ C0] FS: 00007fcbe5fb46c0(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 397.760528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.760538][ C0] CR2: 000020000000e038 CR3: 0000000030cbc000 CR4: 00000000003526f0 [ 397.760547][ C0] Call Trace: [ 397.760554][ C0] [ 397.760565][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.760588][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 397.760605][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 397.760622][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 397.760646][ C0] ? __pfx___text_poke+0x10/0x10 [ 397.760666][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.760685][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 397.760704][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 397.760717][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 397.760743][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 397.760768][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 397.760790][ C0] ? find_held_lock+0x2b/0x80 [ 397.760817][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 397.760839][ C0] jump_label_update+0x376/0x550 [ 397.760862][ C0] static_key_slow_inc_cpuslocked+0x86/0x150 [ 397.760883][ C0] static_key_slow_inc+0x1a/0x30 [ 397.760901][ C0] __sys_bpf+0x1cc0/0x4980 [ 397.760927][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 397.760948][ C0] ? __pfx_futex_wait+0x10/0x10 [ 397.760962][ C0] ? restore_sigcontext+0x4d1/0x6a0 [ 397.760996][ C0] ? do_futex+0x122/0x350 [ 397.761030][ C0] ? restore_signal_shadow_stack+0x63/0x460 [ 397.761055][ C0] ? xfd_validate_state+0x61/0x180 [ 397.761069][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 397.761095][ C0] __x64_sys_bpf+0x78/0xc0 [ 397.761116][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.761133][ C0] do_syscall_64+0xcd/0xf80 [ 397.761153][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.761169][ C0] RIP: 0033:0x7fcbe7d8f749 [ 397.761183][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.761196][ C0] RSP: 002b:00007fcbe5fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.761210][ C0] RAX: ffffffffffffffda RBX: 00007fcbe7fe6180 RCX: 00007fcbe7d8f749 [ 397.761220][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 397.761228][ C0] RBP: 00007fcbe7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.761237][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.761246][ C0] R13: 00007fcbe7fe6218 R14: 00007fcbe7fe6180 R15: 00007ffefdf6f9f8 [ 397.761269][ C0] [ 397.761275][ C0] Sending NMI from CPU 0 to CPUs 1: [ 397.761297][ C1] NMI backtrace for cpu 1 [ 397.761306][ C1] CPU: 1 UID: 0 PID: 30 Comm: kauditd Not tainted syzkaller #0 PREEMPT(full) [ 397.761319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.761326][ C1] RIP: 0010:do_raw_spin_unlock+0x68/0x230 [ 397.761343][ C1] Code: ad de 0f 85 75 01 00 00 be 04 00 00 00 48 89 df e8 7d 7b 8e 00 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 6c 01 00 00 8b [ 397.761354][ C1] RSP: 0018:ffffc90000a08d60 EFLAGS: 00000806 [ 397.761363][ C1] RAX: dffffc0000000000 RBX: ffff888057c6a2a8 RCX: ffffffff819a45a3 [ 397.761371][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888057c6a2a8 [ 397.761378][ C1] RBP: ffff888057b2a400 R08: 0000000000000000 R09: ffffed100af8d455 [ 397.761386][ C1] R10: ffff888057c6a2ab R11: ffff88801de9d4b0 R12: 189123beadcc86b0 [ 397.761394][ C1] R13: 189123beadcc86b0 R14: 0000000000000002 R15: ffff88807b576c10 [ 397.761402][ C1] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 397.761415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.761424][ C1] CR2: 00007f3cd2000020 CR3: 0000000030cbb000 CR4: 00000000003526f0 [ 397.761431][ C1] Call Trace: [ 397.761435][ C1] [ 397.761440][ C1] _raw_spin_unlock+0x1e/0x50 [ 397.761454][ C1] advance_sched+0x62b/0xc80 [ 397.761476][ C1] ? __pfx_advance_sched+0x10/0x10 [ 397.761491][ C1] __hrtimer_run_queues+0x202/0xc40 [ 397.761512][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 397.761529][ C1] ? read_tsc+0x9/0x20 [ 397.761549][ C1] hrtimer_interrupt+0x397/0x8e0 [ 397.761566][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 397.761587][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 397.761602][ C1] [ 397.761606][ C1] [ 397.761610][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.761624][ C1] RIP: 0010:console_flush_one_record+0x995/0xc60 [ 397.761642][ C1] Code: 00 e8 ff 2a 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 1d 03 22 00 48 85 ed 0f 85 8e 01 00 00 e8 3f 08 22 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 84 b4 fe ff ff 4c 89 ef e8 a4 dd 8b [ 397.761653][ C1] RSP: 0018:ffffc90000a67930 EFLAGS: 00000293 [ 397.761662][ C1] RAX: ffffffff8f093298 RBX: 0000000000000001 RCX: ffffffff819cdbb3 [ 397.761670][ C1] RDX: ffff88801de9c980 RSI: ffffffff819cdbc1 RDI: 0000000000000007 [ 397.761678][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 397.761685][ C1] R10: 0000000000000000 R11: ffff88801de9d4b0 R12: 0000000000000000 [ 397.761692][ C1] R13: ffffffff8f093298 R14: ffffffff8f093240 R15: dffffc0000000000 [ 397.761704][ C1] ? console_flush_one_record+0x983/0xc60 [ 397.761721][ C1] ? console_flush_one_record+0x991/0xc60 [ 397.761743][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 397.761761][ C1] ? __lock_acquire+0x436/0x2890 [ 397.761778][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 397.761792][ C1] console_unlock+0xef/0x240 [ 397.761809][ C1] ? __pfx_console_unlock+0x10/0x10 [ 397.761827][ C1] ? do_raw_spin_unlock+0xb0/0x230 [ 397.761843][ C1] ? _printk+0xc7/0x100 [ 397.761857][ C1] ? __down_trylock_console_sem+0xb0/0x140 [ 397.761873][ C1] vprintk_emit+0x407/0x6b0 [ 397.761885][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 397.761896][ C1] ? find_held_lock+0x2b/0x80 [ 397.761914][ C1] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 397.761932][ C1] _printk+0xc7/0x100 [ 397.761946][ C1] ? __pfx__printk+0x10/0x10 [ 397.761961][ C1] ? netlink_has_listeners+0x20f/0x430 [ 397.761975][ C1] ? __pfx____ratelimit+0x10/0x10 [ 397.761990][ C1] ? kauditd_hold_skb+0x1bc/0x250 [ 397.762007][ C1] kauditd_hold_skb+0x205/0x250 [ 397.762025][ C1] kauditd_send_queue+0x239/0x290 [ 397.762042][ C1] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 397.762060][ C1] kauditd_thread+0x621/0xb30 [ 397.762077][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 397.762095][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 397.762108][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.762123][ C1] ? __kthread_parkme+0x19e/0x250 [ 397.762135][ C1] ? __pfx_kauditd_thread+0x10/0x10 [ 397.762152][ C1] kthread+0x3c5/0x780 [ 397.762166][ C1] ? __pfx_kthread+0x10/0x10 [ 397.762181][ C1] ? rcu_is_watching+0x12/0xc0 [ 397.762193][ C1] ? __pfx_kthread+0x10/0x10 [ 397.762206][ C1] ret_from_fork+0x983/0xb10 [ 397.762220][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 397.762234][ C1] ? __switch_to+0x7af/0x10d0 [ 397.762248][ C1] ? __pfx_kthread+0x10/0x10 [ 397.762262][ C1] ret_from_fork_asm+0x1a/0x30 [ 397.762286][ C1] [ 397.762294][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 397.762307][ C0] CPU: 0 UID: 0 PID: 7448 Comm: syz.4.337 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.762328][ C0] Tainted: [L]=SOFTLOCKUP [ 397.762338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.762347][ C0] Call Trace: [ 397.762353][ C0] [ 397.762359][ C0] dump_stack_lvl+0x3d/0x1f0 [ 397.762379][ C0] vpanic+0x640/0x6f0 [ 397.762399][ C0] panic+0xca/0xd0 [ 397.762414][ C0] ? __pfx_panic+0x10/0x10 [ 397.762430][ C0] ? printk_trigger_flush+0xd3/0x1a0 [ 397.762447][ C0] ? nmi_backtrace_stall_snap+0x1e3/0x2b0 [ 397.762465][ C0] ? wq_watchdog_touch+0xe2/0x190 [ 397.762484][ C0] ? watchdog_timer_fn+0x609/0x7d0 [ 397.762501][ C0] ? watchdog_timer_fn+0x5fc/0x7d0 [ 397.762520][ C0] watchdog_timer_fn+0x61a/0x7d0 [ 397.762541][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 397.762558][ C0] __hrtimer_run_queues+0x64e/0xc40 [ 397.762586][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 397.762608][ C0] ? read_tsc+0x9/0x20 [ 397.762635][ C0] hrtimer_interrupt+0x397/0x8e0 [ 397.762661][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 397.762682][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 397.762700][ C0] [ 397.762705][ C0] [ 397.762712][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.762729][ C0] RIP: 0010:smp_call_function_many_cond+0xe02/0x15e0 [ 397.762747][ C0] Code: 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 b5 5a 0c 00 f3 90 41 0f b6 45 00 <40> 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 ff 83 e0 01 41 [ 397.762762][ C0] RSP: 0018:ffffc9000c227918 EFLAGS: 00000293 [ 397.762774][ C0] RAX: 0000000000000000 RBX: ffff8880b8540cc0 RCX: ffffffff81b28971 [ 397.762784][ C0] RDX: ffff88802ee30000 RSI: ffffffff81b2894b RDI: 0000000000000005 [ 397.762793][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 397.762803][ C0] R10: 0000000000000001 R11: ffff88802ee30b30 R12: dffffc0000000000 [ 397.762813][ C0] R13: ffffed10170a8199 R14: 0000000000000001 R15: 0000000000000001 [ 397.762829][ C0] ? smp_call_function_many_cond+0xe21/0x15e0 [ 397.762848][ C0] ? smp_call_function_many_cond+0xdfb/0x15e0 [ 397.762870][ C0] ? smp_call_function_many_cond+0xdfb/0x15e0 [ 397.762892][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.762915][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 397.762931][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 397.762949][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 397.762974][ C0] ? __pfx___text_poke+0x10/0x10 [ 397.762995][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 397.763015][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 397.763034][ C0] ? kcm_parse_func_strparser+0xe8/0x500 [ 397.763049][ C0] smp_text_poke_batch_finish+0x27b/0xdb0 [ 397.763076][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 397.763102][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 397.763124][ C0] ? find_held_lock+0x2b/0x80 [ 397.763152][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 397.763174][ C0] jump_label_update+0x376/0x550 [ 397.763195][ C0] static_key_slow_inc_cpuslocked+0x86/0x150 [ 397.763216][ C0] static_key_slow_inc+0x1a/0x30 [ 397.763235][ C0] __sys_bpf+0x1cc0/0x4980 [ 397.763260][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 397.763281][ C0] ? __pfx_futex_wait+0x10/0x10 [ 397.763297][ C0] ? restore_sigcontext+0x4d1/0x6a0 [ 397.763334][ C0] ? do_futex+0x122/0x350 [ 397.763368][ C0] ? restore_signal_shadow_stack+0x63/0x460 [ 397.763393][ C0] ? xfd_validate_state+0x61/0x180 [ 397.763408][ C0] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 397.763434][ C0] __x64_sys_bpf+0x78/0xc0 [ 397.763455][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.763473][ C0] do_syscall_64+0xcd/0xf80 [ 397.763493][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.763509][ C0] RIP: 0033:0x7fcbe7d8f749 [ 397.763521][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.763536][ C0] RSP: 002b:00007fcbe5fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.763550][ C0] RAX: ffffffffffffffda RBX: 00007fcbe7fe6180 RCX: 00007fcbe7d8f749 [ 397.763561][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 397.763570][ C0] RBP: 00007fcbe7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.763580][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.763589][ C0] R13: 00007fcbe7fe6218 R14: 00007fcbe7fe6180 R15: 00007ffefdf6f9f8 [ 397.763613][ C0] [ 398.861316][ C0] Shutting down cpus with NMI [ 398.861595][ C0] Kernel Offset: disabled