last executing test programs: 3m57.449274407s ago: executing program 1 (id=739): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_mark(r1, 0x541, 0x40001019, r2, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x20010, r0, 0x10000000) 3m56.087608533s ago: executing program 1 (id=740): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getrlimit(0x4, &(0x7f0000000200)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) statx(r0, 0x0, 0x3100, 0x40, &(0x7f0000000540)) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x2c, 0x2c, 0x107, 0x4, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1207ce6139d09aeac081abd22aea762485134483df14e044d20311b7f076b7f3343c7750771b54b2f3aad4e5a14c41d430c2ed7bfb90b69e70a445f29c6de2d2aa730358a3104d8091fcc454dfac1f17eddf8ea5f05afa4f4496ad4b1f868f3553605a7fcdfc29b861b5978f06517aa525a0f1d3c6b33b11939311a639e9270b963d881118e6ac039a57b4d504edd701a6f6270ef804da73315c06"]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="9b9536c30c0ac135a2bbc2cdabbe030a7b83c87f577de76f630ae0933be7dea70f54bc4c1d62bbee861547dc852369112611b8a2b1365e4f73223a63103005322db069307e744bcb8e443ac926319c720802dcd559d5354c33ab7a5cfa5585e016f77e7bd35ab35dea873598aecdfab000aa44612873e46c6d44adbc0300"]}, @typed={0x8, 0x4e, 0x0, 0x0, @fd=r4}]}, 0xfffffffffffffee4}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0xd5a, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0x2}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r7}, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@map=r0, r5, 0x1d, 0x0, 0x0, @void, @value=r6}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) 3m55.612874668s ago: executing program 1 (id=743): sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) (async) sysfs$3(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sysfs$3(0x3) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000180)={0x804, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x7ba, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x8, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x804}, 0x1, 0x0, 0x0, 0x4000}, 0x48045) sysfs$3(0x3) (async) sysfs$3(0x3) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80c89282}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80c89282}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) symlink(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysfs$3(0x3) getpid() sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0x100, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x5b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_FILS_KEK={0x19, 0xf2, "07ebbbc43ea67557b6486670d2cf56ad8c871424a7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0x1c, 0x4c, [0xfac0c, 0xfac14, 0xfac04, 0xfac0e, 0xfac0c, 0xfac0b]}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x0, 0x0, 0x4, 0x0, {0x80000001, 0x5, 0x0, 0x3a0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x5, 0x3}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x80, {0x8a4, 0x6, 0x7, 0x7aa}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x1, 0x1, 0x0, {0x7fffffff, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x62, 0xfb}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0b, 0xfac01, 0xfac02, 0xfac0a]}]]}, 0x100}, 0x1, 0x0, 0x0, 0x802}, 0x0) sysfs$3(0x3) (async) sysfs$3(0x3) sysfs$3(0x3) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d01, &(0x7f0000000e00)) sysfs$3(0x3) 3m55.509486014s ago: executing program 1 (id=745): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x3f18, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) 3m55.109145058s ago: executing program 1 (id=746): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x2c, 0x26, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x18014, 0xe}, {0xfff2, 0x5}, {0xd, 0xffe0}}, [{0x4}, {0x4}]}, 0x2c}}, 0x8000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m54.728580447s ago: executing program 1 (id=751): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000400)) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff54, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x593b, 0x1ff, 0x4, 0xfffffffffffffff6, 0x90000000000000, 0x64, 0x100, 0xfc}, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m39.467208344s ago: executing program 32 (id=751): inotify_init() socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000400)) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff54, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x1, 0x8001, 0x0, 0xb49, 0x200000000002, 0x9, 0x8, 0x5}, 0x0) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x593b, 0x1ff, 0x4, 0xfffffffffffffff6, 0x90000000000000, 0x64, 0x100, 0xfc}, &(0x7f0000000340)={0x1, 0x6, 0x8, 0xffffffffffff72aa, 0xab, 0x2, 0x5, 0x5}, &(0x7f00000003c0)={0x9, 0xfffffffffffffff1, 0x9, 0x6, 0xd3, 0x8, 0x7fffffffffffffff, 0xff}, &(0x7f0000000400), &(0x7f0000000580)={&(0x7f0000000540)={[0xfffffffffffffffd]}, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m39.917388514s ago: executing program 5 (id=1033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x0, {0x1c, 0x14, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x4004094) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='source', 0x0, r1) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) 2m37.965249484s ago: executing program 5 (id=1038): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000300)) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x111000, 0x1a3) syz_clone3(&(0x7f0000000900)={0x260000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0, {0x38}, &(0x7f0000000680)=""/249, 0xf9, &(0x7f0000000840)=""/189, &(0x7f0000000780)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000007c0)={r3}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x6c800}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r11 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10800, 0x0) statx(r11, &(0x7f0000000140)='./file0\x00', 0x2000, 0x200, &(0x7f0000000540)) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 2m36.636466389s ago: executing program 5 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d656d6f72795f68756765746c625f6163636f756e74696e672c661b4fb1dbb808fc6ac20361766f7264796e6d6f64732c00"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000100)={@multicast1, @multicast2, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0x81}, 0x3c) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="e90c610fac0800000000c442ef00020800450000240000e00000119078000014000000000000000000001090780001009a47d39f753ccc63b1ea39feed490b835442f3fcc6efd253e99fb02b88ba3e5f524938dd80"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbeebb08004500001c800000020011907800000000000000000000000000089078"], 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x14, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x35b}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x1b0, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xd, 0xffe3}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @filter_kind_options=@f_u32={{0x8}, {0x17c, 0x2, [@TCA_U32_ACT={0x164, 0x7, [@m_bpf={0x160, 0x6, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x98, 0x7, 0x9, 0x3}, {0x100, 0x3, 0x7}, {0xfffd, 0x6, 0x9, 0x5}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x6dd, 0x3d, 0x40, 0x101}, {0x9, 0xe, 0x4, 0x8}, {0x0, 0x3, 0xfc, 0x10000}, {0x7, 0x2, 0x7, 0x3}, {0x4, 0x3, 0x7, 0x5}, {0x3, 0x3, 0x6, 0x4}]}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x5, 0x8, 0x6, 0x1}, {0xcc, 0x0, 0xff, 0x8}, {0x1, 0x40, 0x0, 0xd}, {0x7ff, 0x10, 0x40, 0x1ff}, {0x400, 0x7, 0xfb, 0x8000}, {0x8, 0xff, 0x41, 0x691}]}]}, {0xb4, 0x6, "946867771e68bda5ea8387e18cf577423d2233e7bbe663caebed5d65e085c7150541c3da9809c953d540af3e511dc44bbd9eb41fc9c7dea9b0277e70adfd4c14799d35fa52aada0d077db355399c4826d3e07ae9a22b5d2cc7bb30887fee8400e2908902f82abe123cb33afd42c818d76009fc9d68f0d3d8fcf2be7081a0f029e74d70809c65923f5f5a0498917b8fc33da12ba7aeb0d52c9896976633ddfa37de88a2a8c8b104c791a271ab0c319807"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_U32_SEL={0x14, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) close_range(r2, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m35.01784885s ago: executing program 5 (id=1045): ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000280)={0x18}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000540)="b4e007f06d05", 0x6}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151", 0x33}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a0104000000000000000001000000240004802000018007000100727400001400028008000240ce31b6cf080001400000000308000b40000000000900010073797a3000e9ffff130000000100010000000000000aeeb9c7da275615ac46ea6889d53c4ae599307c3ebec1699a88c01503d6fa07347deedf1ea28f6f72f6f980cf56d609aa0aa2aba830c53cbb6f3d7823e6d132c066dd4c9ee3ec9c0b34dbefe68fa35363bb4c4fdded806dd29f43897acc350256c77f4e6e63466d3481f6bc59325ad99a551a874b901ed7478d589452109e200940bc27d0efb7bbce0bf88495c5e550beba28b917ea48cbb9"], 0xd4}}, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m33.82009417s ago: executing program 5 (id=1051): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) syz_emit_ethernet(0x1de, &(0x7f00000003c0)=ANY=[], 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, &(0x7f0000001200)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r3, 0x0) sendto(r2, 0x0, 0x0, 0x60ec, &(0x7f00000004c0)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80) r4 = socket(0x2b, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[], 0x24, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) setsockopt$packet_int(r6, 0x107, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0xa2, &(0x7f0000000180)=ANY=[@ANYBLOB="0302009a3bf9b1b9e36a4a2d3433281916c0bd09039c6a2c59ab5aacb518bebbcc9543b712d7feee8ce758c0a3c302c1caed730450797c8b4aa4db250ab9ad560241f172d8d4febd2f0b171e727fa41548cbd8ede5acabda956be669aadfcb146065e0ef0f8d89528ded00610356ac9abefa1e0a7a7ce91642d3e587a6c855f6d1066a09a007ffd736cba67993ccb1a5d1ee53"]) 2m32.3868219s ago: executing program 5 (id=1058): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x800, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x10, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22008085}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}], 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid}]}}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 2m18.041448903s ago: executing program 33 (id=1058): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x800, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10}, {0x10, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22008085}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f00000000c0)=[{0x1e, 0x6000, 0x0, 0x0}], 0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid}]}}) splice(r4, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 34.377311334s ago: executing program 6 (id=1538): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg(r5, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="15", 0x1}], 0x1}}], 0x1, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 32.984966744s ago: executing program 6 (id=1542): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="99199e70fdbd9eb9c582cf9799a67fb701cbc79443e2c9514990dc451cf91a2a5b33d1c8bbcb1339be50f2b12446c65c7e3b7b866dc8362d0837a2595e2dc2626535fb9fdb37edca1bada74e96d1e8468d0d3ba3608eb60e"]) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x7) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf0}, 0x94) 30.137205893s ago: executing program 6 (id=1550): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) connect$bt_l2cap(r1, 0x0, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c42, 0x100, 0x1, 0x1e3, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r6, 0x4507, 0x204d1, 0x43, 0x0, 0xfffffe8f) 26.387929129s ago: executing program 6 (id=1560): capset(0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x2000000, 0x1, 0xfffffc00, 0x400, 0x3, "54d208457f0b00"}) 25.809157851s ago: executing program 6 (id=1564): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0xffffffff, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00152e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 20.648096213s ago: executing program 6 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="885fd27bf33b97", 0x7, 0xffffffff80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r5, 0xc08c5102, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x5, 0xfffe, 0x4, 0x0, {0xa, 0x4e21, 0x7, @mcast2, 0x9}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='b\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf25040000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29) 10.168870318s ago: executing program 2 (id=1610): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) (async) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)=@generic={0x0, r5}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, 0x0, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004800) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9.78510243s ago: executing program 2 (id=1614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0800000000000000b70500000800000085000000a70000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="0f2182640fc76dfd0f23180f00edf4660fc7310fc75b0066b91303000066b8a947ffff66baffffffff0f300f01d1baf80c66b87c31008266efbafc0c66b8f547000066ef", 0x44}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000001c0)="0f32ba6100ec0f339fb766b8f4239b8466efbafc0c66b87600000066ef0fc77b08baf80c66b816e8f08766efbafc0ced660fc77100660f3882370f01f2", 0x3d}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104", 0x3, 0x20008894, 0x0, 0x0) 9.062606015s ago: executing program 2 (id=1617): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x9, [@multicast, @remote, @random="3dd4e472216c", @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @broadcast, @remote, @multicast]}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0xfffffffd) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='\"'], 0x33) socketpair(0x26, 0x800, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe874, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xee}]}, 0x3c}}, 0x0) 7.956779011s ago: executing program 0 (id=1621): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x29) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="00000000f3000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.105178793s ago: executing program 0 (id=1623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x7ffffffc) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r4, @ANYBLOB="00f0ffff000000001c0032bc62bbfcf7dbe7c512800b00010062726964676500000c0002800800080088a8ffff5e771a8244f5261d8fe9ade0a04f70430f6b2c0215ae295333b2a4c3ec15d8e25785272966c81865763b56"], 0x3c}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 6.256569778s ago: executing program 34 (id=1576): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc}) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwrite64(r1, &(0x7f0000000140)="885fd27bf33b97", 0x7, 0xffffffff80000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r5, 0xc08c5102, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x5, 0xfffe, 0x4, 0x0, {0xa, 0x4e21, 0x7, @mcast2, 0x9}}}, 0x32) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='b\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf25040000000800090002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x29) 6.238095129s ago: executing program 3 (id=1625): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r1 = getpid() (rerun: 32) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000700), 0x3ff, 0x8000) write(r4, &(0x7f0000000740)="fd075418c154f94693419032f1e4685b3066b7744d2f61ddb33dc60630cd8e6e4a6064f506f790e67da68b54686b5c6cd97a0e224d899510d49009f3897a2b7369cea51345637bc4c293418c1f29132301772fa4533b610d678769618203b4ec8fe3a22eee37c0310a2417e8a403abd617281fbb2be3977eace3dc5cdcb2edf8c0e1c4bc9b40cba5004735080f2d7d5b68fe32698ebb9014d133e5794ccd3be066d7ed51da3981bfe8070b97f00d2138d5108c67cba68aeea99f0f8e77111a83e66d", 0xc2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) (rerun: 64) utimes(&(0x7f0000000100)='./file0\x00', 0x0) (async) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {&(0x7f0000000240)="919f8d5bc6d82af9278cf76cbb8e73729643f3fdebd0c73e9618882cad8e0244e349719c0e4c3b5e6d76d3ea4a9c6e7008ed89ea6ff5007161c80b9ee8ddaa905c76ef93dc93e77c1a01a6418ffdd2f58ff0a151571c5b13982d1929ca1ff45ad66681c0698116c352112395456180e7450b32e54810ba1ac949cdb928e2b63233cfd30078848ed30958e2d2e396a1673858214ef5fa", 0x96}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a0f925ff314ffb10c027746fcc0d54d637c27f908ce9653ea5d7bf9f0c681ab60972ee153d2dc8075849330ac6f6dbe898337e36b9615cb2ba2cb963a138737b3d17c36613d", 0xa2}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5bf26b8aba4e536bb08c9b9f1361295099f715bf23dac89be34f40be2", 0xba}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfeec722721", 0x4d}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x7) (async) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) (async) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000200)) 5.792807713s ago: executing program 3 (id=1626): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.791062756s ago: executing program 4 (id=1627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x8, 0x3ff, 0x1, 'queue1\x00', 0x6}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xf, 0x4, 0x8, 0x4000000b}, 0x50) epoll_create1(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x512, 0x1, 0x7fff}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000580)={@val={0x0, 0x806}, @val={0x2, 0x3, 0x7f, 0x7fff, 0x4}, @ipv6=@icmpv6={0xf, 0x6, "879bec", 0x57, 0x3a, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x1f, 0x9, "5bcc76dc61884f68e88b248bd561d2f07998aea7da4de135e3131d65e1d72c16da0c8f6789a11ea74e7c9a9e7abc6d745f60b4c6642ca7c4e2431c26058996ca92ac1aae54707e6dbb453709de"}]}}}}, 0x8d) sendmsg$inet(r6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @empty}}}], 0x20}, 0x0) 5.17234812s ago: executing program 3 (id=1628): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x50a) write$vhost_msg_v2(r6, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0x74, 0x0, 0x2, 0x2}}, 0x48) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000040)='/dev/dvb/adapter#/demux#\x00', 0x19) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) close_range(r2, 0xffffffffffffffff, 0x0) 5.020076159s ago: executing program 0 (id=1629): syz_emit_ethernet(0x2a, &(0x7f00000015c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaac15b08001cfffe0000a02f9078e0000002e00000012001880b00089078000000"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x48885}, 0x40000) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0, 0x1200}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="7b484e02b4970114037a5beb822fa82c689487372e2a217c02dbcdcfe94a766eb77e038dbc4f06de47757e99986d6bd9c8f46e268261aa3af9b49b3e039824e6a69aede1517fec8da124d6c0d06a69f6a4b9aaf312bfde059d62cd72fa36024501ccdc29b0a5127d8db8d9e2b56e6bffb8187bc4d377d72e35c1627a6b462ba16228dd1d6343398944e4df43ece30e05", @ANYRES16=r3, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYRES32=r4, @ANYRESOCT=r4], 0x7c}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x8000, 0x0) read$msr(r5, &(0x7f000001efc0)=""/102380, 0x18fec) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x0, 0xa, 0x3, 0x0, 0x0, 0x0, 0xd, 0xfd, 0xfffffffffffffffe, 0xfffffdfffffbffff, 0xa, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x80000000, 0x8, 0xffffffffffffffff, 0x8000, 0x40000, 0x3}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x1, @remote}, 0xa}}, 0x26) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000080)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1, 0x8041) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r8}) close(0x3) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000db5000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3f7b80, 0xca03}) 4.788433153s ago: executing program 4 (id=1630): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x4007}, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) connect$bt_l2cap(r1, 0x0, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c42, 0x100, 0x1, 0x1e3, 0x0, r5}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r6, 0x4507, 0x204d1, 0x43, 0x0, 0xfffffe8f) 4.137537837s ago: executing program 0 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_io_uring_setup(0x4cf7, &(0x7f00000003c0)={0x0, 0x840f, 0x20803, 0x1, 0x1d5}, &(0x7f00000000c0), &(0x7f0000000240)) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000300)=[{0x0}], 0x1, 0x5, 0xfff5) 4.071946304s ago: executing program 2 (id=1632): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYBLOB="9bb78b0df8c90cd46df6be87fabe191a4c9407089c9851d1ca4b093e4595221554dfca9bd0a2c1fd509b84d87d19070e8b8f27b3ef60dbb090b37ba80b715660"], 0x48}}, 0x40000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @dev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtclass={0x6c, 0x28, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x6}, {0xffe0}, {0x10, 0x3}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x4, 0x7d}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x5}}, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x7f, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4080) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x107) (async) r4 = open(0x0, 0x328103, 0x80) r5 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5e0100001000010000d519000000000000000000924b50d7ffffffff000000c632026f83b2b321951ca90cb7b0322312eb3376bb9e163438dd34e5ae2801021944b5ca6d5d9dc1b2bed9da7a5fa81e9b66f6401a115631fdd1e44ab21956dc04ff4b0000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a801400070020010000000000000000000000000000140035006772653000"/56], 0x50}}, 0x0) (async, rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) (async, rerun: 64) r8 = getpid() (rerun: 64) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) accept$phonet_pipe(r4, &(0x7f0000000340), &(0x7f0000000380)=0x10) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000001, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000002c0)) (async) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, &(0x7f0000000100)) 3.704605836s ago: executing program 4 (id=1633): unshare(0x8000000) (async) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async, rerun: 32) unshare(0x8000000) (rerun: 32) 3.175261582s ago: executing program 3 (id=1634): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf56, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f00000000c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x2, {0x100000001, 0xe99}, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 3.174633161s ago: executing program 0 (id=1635): syz_usb_connect(0x3, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3", @ANYBLOB="d954"], 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0xc1, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x200040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000000)=0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x7) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0x84, "963264cd2125de40886b2287ce6b47d40db8920151e3b89db3aa42692dd26c70b8feaf1f3c4d13ab9ec009ff0fb715ddd49e550ef8f8fe79a1f8bb415b575e224c64ea938b8788c12dbab4f8901bdb9a97b6563eaf87ee74a7fa3b05c5045242541520d40b3d8d0df12f1f0bd8c4bd1a73bd24adcfe03f45f9bb204c91817e89f37d2dc2"}, &(0x7f0000000140)=0xa8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000200)=""/133) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) 3.068923617s ago: executing program 4 (id=1636): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1b0000001a007f029e741683c28f7b331d00000000000000000000e4214f164611302e8b5f380eddcd9d115ab3253bd0cd9b425e7ea932bbfa782f4bc6e0b995ca17bf787282aee53caa6c2f", 0x4c}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f00000003c0)={0x2, 0x1, @stop_pts=0xfffffffffffffffd}) r8 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r8, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/153}, 0x20) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f0000001a40)=[{&(0x7f0000000180)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)='`', 0x1}], 0x1, &(0x7f0000000740)=[@prinfo={0x18, 0x84, 0x5, {0x20}}], 0x18, 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xa, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x16) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000000180)={0x2, 0x3, 0xc3, 0x3, 0x7f}) 2.936261095s ago: executing program 2 (id=1637): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x9f) keyctl$chown(0x4, r2, 0x0, 0xee01) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 2.0757662s ago: executing program 3 (id=1638): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 32) r2 = memfd_create(&(0x7f0000001040)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb \x11\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa88\x1d%\x18V\x97s\xef\'p\xdb\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xc3\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f\xf2\xfa^\xc84\xb0aM\xfd\x8cP\xac\x9e\x9f/\x0e\x81\xaeZ\xdd\x91N\a\'u\xa0\xf6\xa57\x9b\x97\xb9\x17\xbe\x0f\x01\xbd\xd7\x8b(pfC\xf2\x01n\r\xa1\xa7%\xbf+\x11\x96\x1e\\*\v@\x88\x99]j\xbe0\xdeN_)\xf23*w\xcc\xfaOHD9\xd1\x04\xd9\x10\xab\xe9\xdc\xa3n\x13\x93q\x12\x12r\xdfn\x96\xf2(\xc7\x8d#7\xeel\x1c\xee\x1e\xccx\xfd1\x91\xbf\xb5\xdeL,\x93s\x05\xc1\xec\xb3\x89\xe5\xe2\xa9\x1c\xbb&\xff\x15\x1a`\x04d\xe6\x9e\xe0\xcf\xce\xadq\x94\'A\x96\xafet/[\x1ah!\xbf\x17\xa9H\xa0\xd5?\x85\x11\x84j*\x13\x83\x19\xd8\xc4\x1e\x16[lS&\xbb&xX\xb9\n\x8d\xd0\x9e\xbc\xa4\x8f\x04N\x8c\xfan\xcb\x83\xc2\xb6\x8e\x02\x9bC0M\xb5\xb1\x88\xbb\xf2\x8b\x94\x01\x10\xcb3I\xc0\xb5\xfd\xab\xeb@6\xaa\xf6\xcf\xb0\xe9\xca@M\xf9J\xc7\x06%i:J\x9a1+XQ\xdf\xc4}\xcd\xd4\xe9^\xc1T|\xec\x11n\xf7\x9a$\x82\x19vC\xd1\xdfy/+', 0x2) (rerun: 32) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x1f9, 0x4) (async) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) (async, rerun: 64) r7 = getpid() (rerun: 64) sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x3) ptrace$poke(0xc, r7, &(0x7f0000000140), 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x1) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) 2.074609366s ago: executing program 3 (id=1639): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503e45fd4932603d4d50bc5bf7b989a765abeb188c5d43c0d81846a1e737e3cada9aeb9e52952ffc03a5efae6", @ANYRESDEC], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000001d0000000000080be274ae805b4c2dc8bcffc4a07a388f358c403ea5bce93237a5e5e189adfa521d872f07c5aeb431bed1abb8c2f99f4ec736467cdf78b5075d0121dc2610a95f63ad3cb7d9996dcb83424d837c9b08713934458e430f4dcc29d4a72363184180856b132b3d53d7f7c940004595e1b11de8e07d3ef944"], &(0x7f0000000180)='syzkaller\x00', 0xc438, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x13, 0x0, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0, 0x8d}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}], 0x1, 0xcb, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r9, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2.073820043s ago: executing program 4 (id=1640): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) 2.072351536s ago: executing program 4 (id=1641): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x0, &(0x7f0000000040)=0x4) 2.066158296s ago: executing program 2 (id=1642): pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00007fc000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r1, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) add_key(0x0, 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 0 (id=1643): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tgkill(r0, r0, 0x29) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r4, @ANYBLOB="0000000000050000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ode [ 377.927511][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.942910][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.018701][T10377] team0: Port device team_slave_0 added [ 378.027413][T10377] team0: Port device team_slave_1 added [ 378.106433][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.119462][ T5813] Bluetooth: hci3: command tx timeout [ 378.154941][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.173337][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 378.181470][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.207697][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.271206][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 378.271220][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.326974][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.363717][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.371828][T10418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.412126][ T5822] usb 3-1: USB disconnect, device number 34 [ 378.434114][T10418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.809486][T10377] hsr_slave_0: entered promiscuous mode [ 378.825162][T10377] hsr_slave_1: entered promiscuous mode [ 378.831428][T10377] debugfs: 'hsr0' already exists in 'hsr' [ 378.838704][T10377] Cannot create hsr debugfs directory [ 379.032791][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 379.499546][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.607111][ T29] audit: type=1400 audit(1772306040.840:1165): avc: denied { getattr } for pid=10435 comm="syz.0.1146" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.902643][T10430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.913967][T10441] FAULT_INJECTION: forcing a failure. [ 379.913967][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.927480][T10441] CPU: 1 UID: 0 PID: 10441 Comm: syz.3.1148 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.927506][T10441] Tainted: [L]=SOFTLOCKUP [ 379.927512][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.927522][T10441] Call Trace: [ 379.927527][T10441] [ 379.927533][T10441] dump_stack_lvl+0x100/0x190 [ 379.927565][T10441] should_fail_ex.cold+0x5/0xa [ 379.927586][T10441] _copy_from_iter+0x1f4/0x1690 [ 379.927614][T10441] ? __pfx__copy_from_iter+0x10/0x10 [ 379.927639][T10441] ? sock_has_perm+0x258/0x2f0 [ 379.927665][T10441] ? __pfx_sock_has_perm+0x10/0x10 [ 379.927693][T10441] hci_sock_sendmsg+0x4a1/0x2620 [ 379.927724][T10441] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 379.927758][T10441] sock_write_iter+0x566/0x610 [ 379.927782][T10441] ? __pfx_sock_write_iter+0x10/0x10 [ 379.927811][T10441] ? bpf_lsm_file_permission+0x9/0x10 [ 379.927832][T10441] ? security_file_permission+0x76/0x210 [ 379.927853][T10441] ? rw_verify_area+0xce/0x6d0 [ 379.927877][T10441] vfs_write+0x6ac/0x1070 [ 379.927902][T10441] ? __pfx_sock_write_iter+0x10/0x10 [ 379.927924][T10441] ? __pfx_vfs_write+0x10/0x10 [ 379.927949][T10441] ? find_held_lock+0x2b/0x80 [ 379.927984][T10441] ksys_write+0x1f8/0x250 [ 379.928008][T10441] ? __pfx_ksys_write+0x10/0x10 [ 379.928040][T10441] do_syscall_64+0x106/0xf80 [ 379.928057][T10441] ? clear_bhb_loop+0x40/0x90 [ 379.928079][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.928095][T10441] RIP: 0033:0x7fd5dfd9c799 [ 379.928110][T10441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.928126][T10441] RSP: 002b:00007fd5e0c02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 379.928142][T10441] RAX: ffffffffffffffda RBX: 00007fd5e0015fa0 RCX: 00007fd5dfd9c799 [ 379.928152][T10441] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 379.928162][T10441] RBP: 00007fd5e0c02090 R08: 0000000000000000 R09: 0000000000000000 [ 379.928178][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.928186][T10441] R13: 00007fd5e0016038 R14: 00007fd5e0015fa0 R15: 00007ffed25938d8 [ 379.928210][T10441] [ 379.945533][T10430] tipc: Resetting bearer [ 380.104582][ T5813] Bluetooth: hci3: command tx timeout [ 380.160279][ T29] audit: type=1400 audit(1772306041.386:1166): avc: denied { append } for pid=10442 comm="syz.3.1149" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 380.243586][ T1138] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.281999][ T1138] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.298182][ T1138] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.325187][T10448] program syz.0.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.337295][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 380.347720][ T5915] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 380.357756][ T1138] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.368415][T10448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.379750][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1152'. [ 380.386876][T10448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.444589][T10377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 380.454355][T10377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 380.709613][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 380.888708][T10454] overlayfs: overlapping lowerdir path [ 380.944125][T10456] comedi comedi3: Minor 20263 is invalid! [ 381.580134][ T12] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 381.588040][ T5915] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 381.597059][ T5915] usb 4-1: config 0 has no interface number 0 [ 381.603421][ T12] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 381.611406][ T5915] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 381.622155][ T24] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 381.631169][T10377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.638121][ T5915] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 381.650673][T10377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 381.658163][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.683366][ T5915] usb 4-1: config 0 descriptor?? [ 381.788340][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.810177][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.822299][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.829487][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.859669][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.866827][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.902979][ T5822] usb 4-1: USB disconnect, device number 35 [ 382.081327][ T5813] Bluetooth: hci3: command tx timeout [ 382.261356][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.310237][ T978] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 382.498903][T10485] FAULT_INJECTION: forcing a failure. [ 382.498903][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 382.513342][T10487] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1159'. [ 382.550577][ T978] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 382.585115][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.2.1158 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.585144][T10485] Tainted: [L]=SOFTLOCKUP [ 382.585149][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.585158][T10485] Call Trace: [ 382.585163][T10485] [ 382.585169][T10485] dump_stack_lvl+0x100/0x190 [ 382.585197][T10485] should_fail_ex.cold+0x5/0xa [ 382.585212][T10485] should_failslab+0xc2/0x120 [ 382.585230][T10485] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 382.585251][T10485] ? __alloc_skb+0x140/0x710 [ 382.585279][T10485] __alloc_skb+0x140/0x710 [ 382.585302][T10485] ? __alloc_skb+0x5b7/0x710 [ 382.585326][T10485] ? __pfx___alloc_skb+0x10/0x10 [ 382.585357][T10485] hci_sock_sendmsg+0x1b01/0x2620 [ 382.585389][T10485] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 382.585421][T10485] sock_write_iter+0x566/0x610 [ 382.585443][T10485] ? __pfx_sock_write_iter+0x10/0x10 [ 382.585473][T10485] ? bpf_lsm_file_permission+0x9/0x10 [ 382.585496][T10485] ? security_file_permission+0x76/0x210 [ 382.585518][T10485] ? rw_verify_area+0xce/0x6d0 [ 382.585541][T10485] vfs_write+0x6ac/0x1070 [ 382.585564][T10485] ? __pfx_sock_write_iter+0x10/0x10 [ 382.585587][T10485] ? __pfx_vfs_write+0x10/0x10 [ 382.585608][T10485] ? find_held_lock+0x2b/0x80 [ 382.585646][T10485] ksys_write+0x1f8/0x250 [ 382.585672][T10485] ? __pfx_ksys_write+0x10/0x10 [ 382.585703][T10485] do_syscall_64+0x106/0xf80 [ 382.585721][T10485] ? clear_bhb_loop+0x40/0x90 [ 382.585743][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.585760][T10485] RIP: 0033:0x7fce9719c799 [ 382.585776][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.585792][T10485] RSP: 002b:00007fce980f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.585809][T10485] RAX: ffffffffffffffda RBX: 00007fce97415fa0 RCX: 00007fce9719c799 [ 382.585820][T10485] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000007 [ 382.585830][T10485] RBP: 00007fce980f6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.585840][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.585849][T10485] R13: 00007fce97416038 R14: 00007fce97415fa0 R15: 00007ffda2211488 [ 382.585873][T10485] [ 383.778995][T10377] veth0_vlan: entered promiscuous mode [ 383.807354][T10377] veth1_vlan: entered promiscuous mode [ 383.816461][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 383.847252][T10501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 383.907919][T10377] veth0_macvtap: entered promiscuous mode [ 383.930508][T10377] veth1_macvtap: entered promiscuous mode [ 384.011633][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.038427][T10506] program syz.2.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.056448][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.063131][ T5813] Bluetooth: hci3: command tx timeout [ 384.082720][ T29] audit: type=1400 audit(1772306045.533:1167): avc: denied { map } for pid=10509 comm="syz.0.1166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.109261][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.119374][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.128153][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.151053][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.166289][ T29] audit: type=1400 audit(1772306045.533:1168): avc: denied { execute } for pid=10509 comm="syz.0.1166" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 384.262854][ T1138] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.367064][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 384.523808][ T9] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.523825][ T1138] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.600546][ T978] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 384.696222][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.710021][ T5954] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.714352][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.784142][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 384.827443][ T5887] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 384.848751][ T978] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.865492][ T978] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 384.880940][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.907885][ T978] usb 3-1: Product: syz [ 384.913985][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.917734][ T978] usb 3-1: Manufacturer: ј [ 384.926558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.931533][ T978] usb 3-1: SerialNumber: syz [ 385.368441][ T978] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 385.399578][ T978] usb 3-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 385.586351][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 386.195652][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 386.624534][ T978] usb 3-1: found format II with max.bitrate = 3705, frame size=7 [ 386.632302][ T978] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 386.735162][ T978] usb 3-1: USB disconnect, device number 35 [ 386.877493][ T9349] udevd[9349]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.187825][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 387.224627][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1175'. [ 387.297432][ T419] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 387.305645][ T5822] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 387.313432][ T419] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 387.481750][ T5822] usb 5-1: Using ep0 maxpacket: 8 [ 387.492985][ T5822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.520788][ T5822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 387.538514][ T5822] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.574838][ T29] audit: type=1400 audit(1772306049.197:1169): avc: denied { connect } for pid=10558 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 387.656487][ T5822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.673951][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.729042][ T5822] usb 5-1: Product: syz [ 387.736683][ T5822] usb 5-1: Manufacturer: syz [ 387.754749][ T5822] usb 5-1: SerialNumber: syz [ 387.983146][ T29] audit: type=1400 audit(1772306049.628:1170): avc: denied { map } for pid=10564 comm="syz.0.1179" path="socket:[30404]" dev="sockfs" ino=30404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.020024][T10544] xt_hashlimit: size too large, truncated to 1048576 [ 388.102492][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1173'. [ 388.193593][ T5822] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 388.212394][ T5822] cdc_ncm 5-1:1.0: bind() failure [ 388.259609][ T5822] usb 5-1: USB disconnect, device number 29 [ 388.504735][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.530192][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.553431][T10587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.562492][T10587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.680065][T10463] Process accounting resumed [ 388.880811][ T5822] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 389.026067][T10589] Process accounting resumed [ 389.057738][T10592] F2FS-fs: Conflicting test_dummy_encryption options [ 389.129731][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 389.142072][ T5822] usb 4-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 389.155209][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 389.164590][ T5822] usb 4-1: config 1 interface 0 has no altsetting 0 [ 389.189031][ T5822] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.40 [ 389.203624][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.222451][ T5822] usb 4-1: Product: syz [ 389.227175][ T5822] usb 4-1: Manufacturer: syz [ 389.231833][ T5822] usb 4-1: SerialNumber: syz [ 389.279309][ T29] audit: type=1400 audit(1772306050.993:1171): avc: denied { execute } for pid=10601 comm="syz.4.1189" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 389.475328][ T29] audit: type=1400 audit(1772306051.182:1172): avc: denied { map } for pid=10594 comm="syz.2.1186" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 389.504091][ T29] audit: type=1400 audit(1772306051.182:1173): avc: denied { execute } for pid=10594 comm="syz.2.1186" path="/dev/video8" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 389.530954][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 389.859261][T10609] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1190'. [ 391.395421][T10614] xfrm0 speed is unknown, defaulting to 1000 [ 391.453083][ C0] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 391.453103][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 391.585044][T10614] lo speed is unknown, defaulting to 1000 [ 392.064106][T10614] vxcan1 speed is unknown, defaulting to 1000 [ 393.235991][ T5859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 393.510800][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 393.520136][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 393.533942][ T5859] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 393.554857][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.577750][ T5859] usb 7-1: config 0 descriptor?? [ 393.597221][ T5859] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 394.121889][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.145151][ T5822] usbhid 4-1:1.0: can't add hid device: -32 [ 394.163248][ T5822] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 394.583161][ T5859] usb 4-1: USB disconnect, device number 36 [ 394.676507][T10663] program syz.4.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.807392][ T29] audit: type=1400 audit(1772306056.799:1174): avc: denied { map } for pid=10664 comm="syz.3.1204" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 394.957902][ T5915] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 395.340646][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 395.973866][T10463] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 395.995902][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 396.035305][ T5822] usb 7-1: USB disconnect, device number 2 [ 396.131432][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.158122][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.179269][T10463] usb 4-1: device descriptor read/64, error -71 [ 396.187189][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.218424][ T5915] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.246479][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.416364][ T5915] usb 5-1: config 0 descriptor?? [ 396.501207][T10463] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 396.558350][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 396.671766][T10463] usb 4-1: device descriptor read/64, error -71 [ 396.728049][ T29] audit: type=1400 audit(1772306058.815:1175): avc: denied { write } for pid=10681 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 396.787810][T10463] usb usb4-port1: attempt power cycle [ 397.157964][T10463] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 397.191902][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 397.202790][T10463] usb 4-1: device descriptor read/8, error -71 [ 397.453317][T10463] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 397.495074][T10463] usb 4-1: device descriptor read/8, error -71 [ 397.512509][ T5887] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 397.634566][T10463] usb usb4-port1: unable to enumerate USB device [ 397.748441][ T5887] usb 3-1: device descriptor read/64, error -71 [ 397.835211][ T29] audit: type=1400 audit(1772306059.980:1176): avc: denied { connect } for pid=10707 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.897677][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 397.904191][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 397.904663][ T29] audit: type=1400 audit(1772306060.054:1177): avc: denied { write } for pid=10707 comm="syz.0.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.914797][ T5915] usb 5-1: USB disconnect, device number 30 [ 397.961844][ T29] audit: type=1400 audit(1772306060.106:1178): avc: denied { ioctl } for pid=10707 comm="syz.0.1217" path="socket:[31147]" dev="sockfs" ino=31147 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 398.006664][ T5887] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 398.072755][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1219'. [ 398.139965][ T5887] usb 3-1: device descriptor read/64, error -71 [ 398.168131][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1217'. [ 398.263825][ T5887] usb usb3-port1: attempt power cycle [ 398.331495][ T29] audit: type=1400 audit(1772306060.505:1179): avc: denied { write } for pid=10724 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 398.378139][ T29] audit: type=1400 audit(1772306060.537:1180): avc: denied { read } for pid=10724 comm="syz.6.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 398.519464][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 398.568712][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1223'. [ 398.586818][ T5887] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 398.606397][ T5887] usb 3-1: device descriptor read/8, error -71 [ 398.844209][ T5887] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 398.864206][ T5887] usb 3-1: device descriptor read/8, error -71 [ 398.997161][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 399.029809][ T5887] usb usb3-port1: unable to enumerate USB device [ 399.119474][ T35] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 399.128763][ T35] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 399.150387][T10463] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 399.208511][T10736] netlink: 248 bytes leftover after parsing attributes in process `syz.6.1224'. [ 399.293696][T10736] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 399.567884][T10463] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 399.605934][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 400.140576][ T5915] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 400.215365][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 400.320583][ T5915] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 400.653733][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.676677][ T5915] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.743967][ T5915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 400.789734][ T5915] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 400.804766][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 400.846883][ T5915] usb 7-1: Product: syz [ 400.861709][ T5915] usb 7-1: Manufacturer: syz [ 400.892712][ T5915] usb 7-1: SerialNumber: syz [ 400.921570][ T5915] usb 7-1: config 0 descriptor?? [ 401.094892][ T5915] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 401.234126][ T9559] udevd[9559]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 401.326958][ T29] audit: type=1400 audit(1772306063.644:1181): avc: denied { name_bind } for pid=10766 comm="syz.3.1237" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 401.507093][ T5915] usb 7-1: USB disconnect, device number 3 [ 401.615021][T10784] FAULT_INJECTION: forcing a failure. [ 401.615021][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 401.628715][T10784] CPU: 0 UID: 0 PID: 10784 Comm: syz.3.1243 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.628744][T10784] Tainted: [L]=SOFTLOCKUP [ 401.628749][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.628759][T10784] Call Trace: [ 401.628765][T10784] [ 401.628771][T10784] dump_stack_lvl+0x100/0x190 [ 401.628803][T10784] should_fail_ex.cold+0x5/0xa [ 401.628826][T10784] should_failslab+0xc2/0x120 [ 401.628858][T10784] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 401.628881][T10784] ? __alloc_skb+0x140/0x710 [ 401.628910][T10784] __alloc_skb+0x140/0x710 [ 401.628932][T10784] ? __alloc_skb+0x5b7/0x710 [ 401.628956][T10784] ? __pfx___alloc_skb+0x10/0x10 [ 401.628981][T10784] ? __nla_parse+0x40/0x60 [ 401.629000][T10784] nft_get_set_elem+0x412/0xb10 [ 401.629023][T10784] ? __pfx_nft_get_set_elem+0x10/0x10 [ 401.629042][T10784] ? is_bpf_text_address+0x94/0x1a0 [ 401.629088][T10784] ? nft_set_dump_ctx_init+0x695/0x920 [ 401.629114][T10784] nf_tables_getsetelem+0x31d/0x790 [ 401.629135][T10784] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 401.629159][T10784] ? __pfx___nla_validate_parse+0x10/0x10 [ 401.629186][T10784] ? __nla_parse+0x40/0x60 [ 401.629204][T10784] ? __pfx_nf_tables_getsetelem+0x10/0x10 [ 401.629225][T10784] nfnetlink_rcv_msg+0x57b/0x1200 [ 401.629258][T10784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 401.629286][T10784] ? __lock_acquire+0x4a5/0x2630 [ 401.629334][T10784] ? avc_has_perm_noaudit+0x145/0x3b0 [ 401.629365][T10784] netlink_rcv_skb+0x159/0x420 [ 401.629384][T10784] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 401.629408][T10784] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.629439][T10784] ? ns_capable+0xd2/0xf0 [ 401.629463][T10784] nfnetlink_rcv+0x1b3/0x440 [ 401.629486][T10784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 401.629510][T10784] ? netlink_deliver_tap+0x1ae/0xcc0 [ 401.629537][T10784] netlink_unicast+0x5aa/0x870 [ 401.629560][T10784] ? __pfx_netlink_unicast+0x10/0x10 [ 401.629589][T10784] netlink_sendmsg+0x8b0/0xda0 [ 401.629613][T10784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.629630][T10784] ? __might_fault+0xa0/0x140 [ 401.629659][T10784] ____sys_sendmsg+0xa54/0xc30 [ 401.629681][T10784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.629712][T10784] ___sys_sendmsg+0x190/0x1e0 [ 401.629735][T10784] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.629785][T10784] __sys_sendmsg+0x170/0x220 [ 401.629803][T10784] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.629841][T10784] do_syscall_64+0x106/0xf80 [ 401.629858][T10784] ? clear_bhb_loop+0x40/0x90 [ 401.629878][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.629895][T10784] RIP: 0033:0x7fd5dfd9c799 [ 401.629912][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.629928][T10784] RSP: 002b:00007fd5e0c02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.629944][T10784] RAX: ffffffffffffffda RBX: 00007fd5e0015fa0 RCX: 00007fd5dfd9c799 [ 401.629954][T10784] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 401.629963][T10784] RBP: 00007fd5e0c02090 R08: 0000000000000000 R09: 0000000000000000 [ 401.629972][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.629981][T10784] R13: 00007fd5e0016038 R14: 00007fd5e0015fa0 R15: 00007ffed25938d8 [ 401.630005][T10784] [ 402.044545][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.654097][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 403.592167][T10806] vlan0: entered promiscuous mode [ 404.100176][T10805] FAULT_INJECTION: forcing a failure. [ 404.100176][T10805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.122377][T10805] CPU: 1 UID: 0 PID: 10805 Comm: syz.3.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.122407][T10805] Tainted: [L]=SOFTLOCKUP [ 404.122413][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.122422][T10805] Call Trace: [ 404.122427][T10805] [ 404.122434][T10805] dump_stack_lvl+0x100/0x190 [ 404.122467][T10805] should_fail_ex.cold+0x5/0xa [ 404.122490][T10805] _copy_from_user+0x2e/0xd0 [ 404.122516][T10805] memdup_user+0x6b/0xe0 [ 404.122542][T10805] strndup_user+0x78/0xe0 [ 404.122567][T10805] __do_sys_fsconfig+0x276/0xcb0 [ 404.122592][T10805] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 404.122615][T10805] ? fput+0x79/0x100 [ 404.122644][T10805] do_syscall_64+0x106/0xf80 [ 404.122662][T10805] ? clear_bhb_loop+0x40/0x90 [ 404.122683][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.122700][T10805] RIP: 0033:0x7fd5dfd9c799 [ 404.122714][T10805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.122731][T10805] RSP: 002b:00007fd5e0c02028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 404.122748][T10805] RAX: ffffffffffffffda RBX: 00007fd5e0015fa0 RCX: 00007fd5dfd9c799 [ 404.122759][T10805] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000004 [ 404.122768][T10805] RBP: 00007fd5e0c02090 R08: 0000000000000000 R09: 0000000000000000 [ 404.122778][T10805] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 404.122788][T10805] R13: 00007fd5e0016038 R14: 00007fd5e0015fa0 R15: 00007ffed25938d8 [ 404.122812][T10805] [ 404.624058][T10821] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 404.647065][T10812] hfs: unable to load iocharset "io#harset" [ 405.617427][ T29] audit: type=1326 audit(1772306068.148:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 405.642724][ T29] audit: type=1326 audit(1772306068.148:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 405.676084][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.727966][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.859438][ T29] audit: type=1326 audit(1772306068.232:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 405.911554][ T29] audit: type=1326 audit(1772306068.232:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 405.988033][ T29] audit: type=1326 audit(1772306068.232:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.146920][ T29] audit: type=1326 audit(1772306068.306:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.171881][ T5887] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 406.186570][ T29] audit: type=1326 audit(1772306068.306:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.218554][ T29] audit: type=1326 audit(1772306068.306:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.246104][ T29] audit: type=1326 audit(1772306068.390:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.273115][ T29] audit: type=1326 audit(1772306068.390:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.2.1255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce9719c799 code=0x7ffc0000 [ 406.332946][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.348165][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.370423][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 406.399216][ T5887] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 406.419411][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.448937][ T5887] usb 4-1: config 0 descriptor?? [ 406.553724][ T29] audit: type=1400 audit(1772306069.135:1192): avc: denied { create } for pid=10842 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 406.725523][ T29] audit: type=1400 audit(1772306069.314:1193): avc: denied { cmd } for pid=10845 comm="syz.4.1264" path="socket:[31426]" dev="sockfs" ino=31426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 407.181594][ T29] audit: type=1400 audit(1772306069.398:1194): avc: denied { ioctl } for pid=10842 comm="syz.2.1263" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 407.221582][ T5887] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 407.290400][ T5887] usb 4-1: USB disconnect, device number 41 [ 407.310417][T10850] program syz.4.1265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.324851][T10848] fido_id[10848]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 407.531358][T10855] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1258'. [ 407.749209][T10526] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 407.764637][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1258'. [ 407.930833][T10526] usb 5-1: Using ep0 maxpacket: 8 [ 407.948080][T10526] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 407.982037][T10526] usb 5-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 408.915878][T10526] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.933989][T10526] usb 5-1: Product: syz [ 408.948272][T10526] usb 5-1: Manufacturer: ј [ 408.973639][T10526] usb 5-1: SerialNumber: syz [ 409.355673][T10526] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 409.362800][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 409.423371][T10526] usb 5-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 409.460501][T10526] usb 5-1: found format II with max.bitrate = 3705, frame size=7 [ 409.490807][T10526] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 409.526259][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 409.536393][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1271'. [ 409.736856][T10526] usb 5-1: USB disconnect, device number 31 [ 409.829240][T10875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 409.968488][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 409.976372][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 410.171991][ T9438] udevd[9438]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.320105][ T5813] Bluetooth: hci0: unexpected event for opcode 0x080c [ 410.323527][T10869] [U]  [ 410.570941][ T29] audit: type=1400 audit(1772306073.325:1195): avc: denied { write } for pid=10888 comm="syz.2.1277" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 411.040586][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1279'. [ 411.311162][T10909] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 411.378558][T10909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 411.458362][ T29] audit: type=1400 audit(1772306074.143:1196): avc: denied { relabelto } for pid=10903 comm="syz.2.1280" name="269" dev="tmpfs" ino=1495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 411.683180][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1279'. [ 411.716914][ T29] audit: type=1400 audit(1772306074.143:1197): avc: denied { associate } for pid=10903 comm="syz.2.1280" name="269" dev="tmpfs" ino=1495 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 411.748818][ T29] audit: type=1400 audit(1772306074.164:1198): avc: denied { add_name } for pid=10903 comm="syz.2.1280" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 411.823854][ T29] audit: type=1400 audit(1772306074.164:1199): avc: denied { create } for pid=10903 comm="syz.2.1280" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 411.847171][ T29] audit: type=1400 audit(1772306074.164:1200): avc: denied { associate } for pid=10903 comm="syz.2.1280" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 412.411835][T10920] macvlan2: left promiscuous mode [ 412.799253][ T29] audit: type=1400 audit(1772306074.175:1201): avc: denied { mounton } for pid=10903 comm="syz.2.1280" path="/269/bus" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 412.838820][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.847080][ T5887] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 412.859216][ T29] audit: type=1400 audit(1772306074.185:1202): avc: denied { add_name } for pid=10903 comm="syz.2.1280" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 412.889852][ T29] audit: type=1400 audit(1772306074.185:1203): avc: denied { setattr } for pid=10903 comm="syz.2.1280" name="work" dev="tmpfs" ino=1503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 412.893188][ T5859] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 412.912436][ T29] audit: type=1400 audit(1772306074.185:1204): avc: denied { write open } for pid=10903 comm="syz.2.1280" path=2F202864656C6574656429 dev="tmpfs" ino=1504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 412.957931][ T29] audit: type=1400 audit(1772306074.196:1205): avc: denied { create } for pid=10903 comm="syz.2.1280" name="#46" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 413.016952][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.034324][ T5859] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 413.124837][ T5859] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 413.172364][ T5859] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 414.136315][ T5859] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 414.136332][ T5859] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 414.854812][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 415.280727][T10962] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 415.343170][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1285'. [ 417.360925][T10991] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.523885][T10994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.894210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.266434][T10962] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 418.376632][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 418.789793][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 418.789810][ T29] audit: type=1400 audit(1772306081.976:1221): avc: denied { write } for pid=11015 comm="syz.4.1309" path="socket:[32367]" dev="sockfs" ino=32367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 419.011263][T11031] kvm: emulating exchange as write [ 419.567533][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 419.593785][T11044] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1316'. [ 419.642624][ T35] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 419.677241][ T5915] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 419.685219][ T35] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 419.733116][ T5915] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 419.823003][T11050] 8021q: VLANs not supported on vxcan1 [ 419.864981][T11050] sctp: [Deprecated]: syz.3.1318 (pid 11050) Use of int in maxseg socket option. [ 419.864981][T11050] Use struct sctp_assoc_value instead [ 419.868740][ T29] audit: type=1400 audit(1772306083.099:1222): avc: denied { getopt } for pid=11049 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 420.028230][ T5915] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 420.217964][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 420.315916][ T29] audit: type=1400 audit(1772306083.288:1223): avc: denied { connect } for pid=11049 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 420.458603][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 420.488845][ T29] audit: type=1400 audit(1772306083.488:1224): avc: denied { create } for pid=11058 comm="syz.0.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 420.514985][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 420.563811][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.592728][ T9] usb 5-1: config 0 descriptor?? [ 420.634199][ T9] as10x_usb: device has been detected [ 420.640304][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 420.701496][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 420.803530][T11029] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 420.815838][ T9] as10x_usb: error during firmware upload part1 [ 420.874717][ T9] Registered device nBox DVB-T Dongle [ 420.895177][ T5859] usb 5-1: USB disconnect, device number 32 [ 421.138487][ T5859] Unregistered device nBox DVB-T Dongle [ 421.168353][ T5859] as10x_usb: device has been disconnected [ 421.498419][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1325'. [ 421.528109][T11077] bond0: entered promiscuous mode [ 421.534332][T11077] bond_slave_0: entered promiscuous mode [ 421.540723][T11077] bond_slave_1: entered promiscuous mode [ 421.551555][T11077] batadv0: entered promiscuous mode [ 421.653980][T11077] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.661297][T11079] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 422.125982][T11092] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 422.697269][T11085] [U]  [ 422.883725][ T29] audit: type=1400 audit(1772306086.197:1225): avc: denied { create } for pid=11093 comm="syz.2.1330" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 423.912996][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 423.989091][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 424.020186][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.030204][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.381560][ T29] audit: type=1400 audit(1772306087.824:1226): avc: denied { unlink } for pid=5807 comm="syz-executor" name="file0" dev="tmpfs" ino=1573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 424.598668][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.813575][T11115] program syz.6.1335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.875279][T11119] Unsupported ieee802154 address type: 0 [ 424.893638][ T29] audit: type=1400 audit(1772306088.370:1227): avc: denied { bind } for pid=11118 comm="syz.4.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.952278][ T29] audit: type=1400 audit(1772306088.370:1228): avc: denied { write } for pid=11118 comm="syz.4.1337" path="socket:[32971]" dev="sockfs" ino=32971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 425.119358][ T29] audit: type=1400 audit(1772306088.506:1229): avc: denied { mount } for pid=11116 comm="syz.2.1336" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 425.145726][T11124] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 425.536948][T11129] evm: overlay not supported [ 425.865277][ T29] audit: type=1400 audit(1772306089.168:1230): avc: denied { name_connect } for pid=11131 comm="syz.3.1340" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 425.892902][T11141] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1342'. [ 426.099064][T11127] kvm: Disabled LAPIC found during irq injection [ 426.106941][T11131] ALSA: mixer_oss: invalid OSS volume '' [ 426.427090][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 427.036499][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 427.071393][ T29] audit: type=1400 audit(1772306090.669:1231): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 428.808507][ T978] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 428.865626][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 429.123332][ T978] usb 5-1: device descriptor read/64, error -71 [ 429.418145][T11215] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1354'. [ 429.427582][ T978] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 429.436088][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 429.598443][ T978] usb 5-1: device descriptor read/64, error -71 [ 429.686299][T11221] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 430.035414][ T29] audit: type=1400 audit(1772306093.756:1232): avc: denied { watch } for pid=11220 comm="syz.0.1355" path="/292/bus/file1" dev="overlay" ino=1611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 430.120011][ T978] usb usb5-port1: attempt power cycle [ 430.928226][T11239] FAULT_INJECTION: forcing a failure. [ 430.928226][T11239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.061032][T11239] CPU: 0 UID: 0 PID: 11239 Comm: syz.4.1359 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.061060][T11239] Tainted: [L]=SOFTLOCKUP [ 431.061066][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.061075][T11239] Call Trace: [ 431.061080][T11239] [ 431.061086][T11239] dump_stack_lvl+0x100/0x190 [ 431.061119][T11239] should_fail_ex.cold+0x5/0xa [ 431.061142][T11239] _copy_from_user+0x2e/0xd0 [ 431.061166][T11239] sctp_setsockopt+0x8cc/0xb370 [ 431.061193][T11239] ? __pfx_sctp_setsockopt+0x10/0x10 [ 431.061215][T11239] ? __fget_files+0x215/0x3d0 [ 431.061236][T11239] ? selinux_socket_setsockopt+0x6a/0x80 [ 431.061263][T11239] ? sock_common_setsockopt+0x2e/0xf0 [ 431.061282][T11239] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.061304][T11239] do_sock_setsockopt+0xf3/0x1d0 [ 431.061326][T11239] __sys_setsockopt+0x195/0x220 [ 431.061358][T11239] __x64_sys_setsockopt+0xbd/0x160 [ 431.061383][T11239] ? do_syscall_64+0x95/0xf80 [ 431.061400][T11239] ? lockdep_hardirqs_on+0x78/0x100 [ 431.061418][T11239] do_syscall_64+0x106/0xf80 [ 431.061434][T11239] ? clear_bhb_loop+0x40/0x90 [ 431.061455][T11239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.061473][T11239] RIP: 0033:0x7f7c1e79c799 [ 431.061487][T11239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.061503][T11239] RSP: 002b:00007f7c1f5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.061521][T11239] RAX: ffffffffffffffda RBX: 00007f7c1ea16090 RCX: 00007f7c1e79c799 [ 431.061532][T11239] RDX: 0000000000000005 RSI: 0000000000000084 RDI: 0000000000000003 [ 431.061542][T11239] RBP: 00007f7c1f5da090 R08: 0000000000000084 R09: 0000000000000000 [ 431.061552][T11239] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 431.061562][T11239] R13: 00007f7c1ea16128 R14: 00007f7c1ea16090 R15: 00007ffdc05b2bd8 [ 431.061586][T11239] [ 431.449930][ T9] hid-generic 0003:0004:FFFFFFFE.000A: unknown main item tag 0x0 [ 431.461925][ T9] hid-generic 0003:0004:FFFFFFFE.000A: unknown main item tag 0x0 [ 431.474974][ T9] hid-generic 0003:0004:FFFFFFFE.000A: unknown main item tag 0x0 [ 431.532427][ T9] hid-generic 0003:0004:FFFFFFFE.000A: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 431.621489][T11190] ALSA: mixer_oss: invalid OSS volume '' [ 431.724307][T11256] veth0_to_team: entered promiscuous mode [ 431.736381][T11256] batadv_slave_1: entered promiscuous mode [ 431.747072][ T29] audit: type=1400 audit(1772306095.551:1233): avc: denied { ioctl } for pid=11252 comm="syz.0.1363" path="socket:[33264]" dev="sockfs" ino=33264 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 431.781133][T11256] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.246019][T11248] fido_id[11248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 432.262563][ T29] audit: type=1400 audit(1772306095.614:1234): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 432.486839][T11259] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1365'. [ 432.524197][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 432.576615][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.596521][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.682972][T11252] batadv_slave_1: left promiscuous mode [ 432.693550][T11252] veth0_to_team: left promiscuous mode [ 432.722994][ T29] audit: type=1400 audit(1772306095.635:1235): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 432.754488][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 432.798869][ T29] audit: type=1400 audit(1772306095.635:1236): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 432.902357][ T29] audit: type=1400 audit(1772306095.635:1237): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 432.959820][ T29] audit: type=1400 audit(1772306095.635:1238): avc: denied { open } for pid=11252 comm="syz.0.1363" path="/293/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.013784][ T29] audit: type=1400 audit(1772306095.635:1239): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.066226][ T29] audit: type=1400 audit(1772306095.635:1240): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.138573][ T29] audit: type=1400 audit(1772306095.635:1241): avc: denied { read } for pid=11252 comm="syz.0.1363" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 433.337688][T11276] sit2: entered allmulticast mode [ 433.487632][T11279] xfrm0 speed is unknown, defaulting to 1000 [ 433.552242][T11279] lo speed is unknown, defaulting to 1000 [ 433.598570][T11279] vxcan1 speed is unknown, defaulting to 1000 [ 436.132694][ T5887] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 437.399417][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 438.058103][T11343] FAULT_INJECTION: forcing a failure. [ 438.058103][T11343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.182438][T11343] CPU: 1 UID: 0 PID: 11343 Comm: syz.0.1388 Tainted: G L syzkaller #0 PREEMPT(full) [ 438.182466][T11343] Tainted: [L]=SOFTLOCKUP [ 438.182473][T11343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.182482][T11343] Call Trace: [ 438.182488][T11343] [ 438.182495][T11343] dump_stack_lvl+0x100/0x190 [ 438.182527][T11343] should_fail_ex.cold+0x5/0xa [ 438.182549][T11343] _copy_from_user+0x2e/0xd0 [ 438.182573][T11343] do_ip_setsockopt+0xb22/0x3310 [ 438.182600][T11343] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 438.182621][T11343] ? smc_setsockopt+0x100/0xa10 [ 438.182650][T11343] ? __pfx___mutex_lock+0x10/0x10 [ 438.182676][T11343] ? get_pid_task+0x106/0x250 [ 438.182707][T11343] ip_setsockopt+0x5a/0xf0 [ 438.182731][T11343] tcp_setsockopt+0xa7/0x100 [ 438.182759][T11343] smc_setsockopt+0x1b6/0xa10 [ 438.182780][T11343] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 438.182805][T11343] ? __pfx_smc_setsockopt+0x10/0x10 [ 438.182826][T11343] ? __fget_files+0x215/0x3d0 [ 438.182845][T11343] ? selinux_socket_setsockopt+0x6a/0x80 [ 438.182877][T11343] ? __pfx_smc_setsockopt+0x10/0x10 [ 438.182901][T11343] do_sock_setsockopt+0xf3/0x1d0 [ 438.182924][T11343] __sys_setsockopt+0x195/0x220 [ 438.182956][T11343] __x64_sys_setsockopt+0xbd/0x160 [ 438.182981][T11343] ? do_syscall_64+0x95/0xf80 [ 438.182996][T11343] ? lockdep_hardirqs_on+0x78/0x100 [ 438.183014][T11343] do_syscall_64+0x106/0xf80 [ 438.183030][T11343] ? clear_bhb_loop+0x40/0x90 [ 438.183051][T11343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.183069][T11343] RIP: 0033:0x7f817b59c799 [ 438.183083][T11343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.183100][T11343] RSP: 002b:00007f817c4e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.183116][T11343] RAX: ffffffffffffffda RBX: 00007f817b815fa0 RCX: 00007f817b59c799 [ 438.183127][T11343] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000003 [ 438.183136][T11343] RBP: 00007f817c4e2090 R08: 0000000000000004 R09: 0000000000000000 [ 438.183146][T11343] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.183156][T11343] R13: 00007f817b816038 R14: 00007f817b815fa0 R15: 00007ffe56d873f8 [ 438.183180][T11343] [ 438.802697][T11370] tipc: Enabled bearer , priority 0 [ 438.809455][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 438.854971][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 438.854985][ T29] audit: type=1400 audit(1772306103.037:1262): avc: granted { setsecparam } for pid=11369 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 438.969602][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.978850][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.108307][ T29] audit: type=1400 audit(1772306103.121:1263): avc: denied { mount } for pid=11363 comm="syz.0.1397" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 439.134886][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.150157][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.165777][T11368] tipc: Disabling bearer [ 439.234277][ T29] audit: type=1400 audit(1772306103.121:1264): avc: denied { mounton } for pid=11363 comm="syz.0.1397" path="/299/file0" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.258699][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 439.293235][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.329406][ T9] usb 5-1: config 0 descriptor?? [ 439.342501][ T29] audit: type=1400 audit(1772306103.132:1265): avc: denied { read } for pid=11363 comm="syz.0.1397" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.379002][ T9] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 439.407358][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 439.438665][ T29] audit: type=1400 audit(1772306103.132:1266): avc: denied { read } for pid=11363 comm="syz.0.1397" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.482302][ T29] audit: type=1400 audit(1772306103.132:1267): avc: denied { open } for pid=11363 comm="syz.0.1397" path="/299/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.579589][ T29] audit: type=1400 audit(1772306103.132:1268): avc: denied { read } for pid=11363 comm="syz.0.1397" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.617295][T11353] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1392'. [ 439.640705][T11353] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.656387][T11353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 439.664081][T11353] IPv6: NLM_F_CREATE should be set when creating new route [ 439.712308][ T29] audit: type=1400 audit(1772306103.132:1269): avc: denied { read } for pid=11363 comm="syz.0.1397" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 439.748515][T11394] FAULT_INJECTION: forcing a failure. [ 439.748515][T11394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.772236][ T5915] usb 5-1: USB disconnect, device number 36 [ 439.796451][T11394] CPU: 0 UID: 0 PID: 11394 Comm: syz.6.1404 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.796480][T11394] Tainted: [L]=SOFTLOCKUP [ 439.796486][T11394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.796497][T11394] Call Trace: [ 439.796503][T11394] [ 439.796509][T11394] dump_stack_lvl+0x100/0x190 [ 439.796542][T11394] should_fail_ex.cold+0x5/0xa [ 439.796565][T11394] _copy_from_user+0x2e/0xd0 [ 439.796589][T11394] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 439.796615][T11394] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 439.796642][T11394] ? tcp_setsockopt+0xae/0x100 [ 439.796673][T11394] smc_setsockopt+0x299/0xa10 [ 439.796694][T11394] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 439.796718][T11394] ? __pfx_smc_setsockopt+0x10/0x10 [ 439.796740][T11394] ? __fget_files+0x215/0x3d0 [ 439.796760][T11394] ? selinux_socket_setsockopt+0x6a/0x80 [ 439.796788][T11394] ? __pfx_smc_setsockopt+0x10/0x10 [ 439.796813][T11394] do_sock_setsockopt+0xf3/0x1d0 [ 439.796836][T11394] __sys_setsockopt+0x195/0x220 [ 439.796868][T11394] __x64_sys_setsockopt+0xbd/0x160 [ 439.796893][T11394] ? do_syscall_64+0x95/0xf80 [ 439.796910][T11394] ? lockdep_hardirqs_on+0x78/0x100 [ 439.796928][T11394] do_syscall_64+0x106/0xf80 [ 439.796944][T11394] ? clear_bhb_loop+0x40/0x90 [ 439.796972][T11394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.796989][T11394] RIP: 0033:0x7f9dad19c799 [ 439.797004][T11394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.797021][T11394] RSP: 002b:00007f9dae023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 439.797038][T11394] RAX: ffffffffffffffda RBX: 00007f9dad415fa0 RCX: 00007f9dad19c799 [ 439.797049][T11394] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000003 [ 439.797059][T11394] RBP: 00007f9dae023090 R08: 0000000000000004 R09: 0000000000000000 [ 439.797069][T11394] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.797079][T11394] R13: 00007f9dad416038 R14: 00007f9dad415fa0 R15: 00007ffc0ab35fb8 [ 439.797103][T11394] [ 439.827839][T10526] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 439.840280][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 440.160549][ T29] audit: type=1400 audit(1772306104.339:1270): avc: denied { nosuid_transition } for pid=11398 comm="syz.6.1406" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 440.162180][T10526] usb 4-1: device descriptor read/64, error -71 [ 440.182283][ T29] audit: type=1400 audit(1772306104.339:1271): avc: denied { transition } for pid=11398 comm="syz.6.1406" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 440.447236][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 440.724616][T10463] IPVS: starting estimator thread 0... [ 440.810938][T11404] IPVS: using max 68 ests per chain, 163200 per kthread [ 440.916614][T10526] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 441.047174][T10526] usb 4-1: device descriptor read/64, error -71 [ 441.523978][T10526] usb usb4-port1: attempt power cycle [ 441.901117][T11429] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 441.918795][T10526] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 441.920142][T11429] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.955450][T10526] usb 4-1: device descriptor read/8, error -71 [ 441.978723][T11429] input: syz1 as /devices/virtual/input/input27 [ 441.999821][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 442.022015][ T5887] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 442.190205][T10526] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 442.213853][T10526] usb 4-1: device descriptor read/8, error -71 [ 442.228516][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 442.235441][ T5887] usb 7-1: unable to get BOS descriptor or descriptor too short [ 442.246149][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 442.269196][ T5887] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 442.293492][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 442.304633][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.341073][ T5887] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 442.346978][T10526] usb usb4-port1: unable to enumerate USB device [ 442.355847][ T9] usb 3-1: Product: syz [ 442.367021][ T9] usb 3-1: Manufacturer: ј [ 442.372481][ T9] usb 3-1: SerialNumber: syz [ 442.378457][ T5887] usb 7-1: New USB device found, idVendor=0bfd, idProduct=011a, bcdDevice=b9.2d [ 442.388121][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.396336][ T5887] usb 7-1: Product: syz [ 442.402900][ T5887] usb 7-1: Manufacturer: syz [ 442.413175][ T5887] usb 7-1: SerialNumber: syz [ 442.655545][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 442.719483][ T9] usb 3-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 442.744395][ T9] usb 3-1: found format II with max.bitrate = 3705, frame size=7 [ 442.760934][ T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 442.952516][ T9] usb 3-1: USB disconnect, device number 41 [ 443.243558][ T5887] usb 7-1: USB disconnect, device number 4 [ 443.297022][T11235] udevd[11235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.714234][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 444.919622][T11457] ALSA: mixer_oss: invalid OSS volume '' [ 445.284831][T11483] loop6: detected capacity change from 0 to 1 [ 445.312290][T11305] Dev loop6: unable to read RDB block 1 [ 445.347913][T11305] loop6: unable to read partition table [ 445.379092][T11305] loop6: partition table beyond EOD, truncated [ 445.406711][T11483] Dev loop6: unable to read RDB block 1 [ 445.412649][T11483] loop6: unable to read partition table [ 445.438949][T11483] loop6: partition table beyond EOD, truncated [ 445.459452][T11483] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 445.876718][ T5887] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 445.894368][T11498] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 445.963137][T11498] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 446.057243][ T5887] usb 7-1: Using ep0 maxpacket: 8 [ 446.102310][ T5887] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 446.116549][ T5887] usb 7-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 446.132139][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.132318][T11498] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1432'. [ 446.151230][ T5887] usb 7-1: Product: syz [ 446.157479][ T5813] Bluetooth: hci2: unexpected event for opcode 0x080c [ 446.166472][ T5887] usb 7-1: Manufacturer: ј [ 446.171027][ T5887] usb 7-1: SerialNumber: syz [ 446.393626][ T5887] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 446.533408][ T5887] usb 7-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 447.069988][ T5887] usb 7-1: found format II with max.bitrate = 3705, frame size=7 [ 447.089728][ T5887] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 448.572006][ T5887] usb 7-1: USB disconnect, device number 5 [ 448.807691][T11238] udevd[11238]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.843845][T11490] ALSA: mixer_oss: invalid OSS volume '' [ 449.162808][T11526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 449.600121][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 449.965019][T11542] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1444'. [ 450.868143][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 451.068833][T11550] ªªªªªª: renamed from vlan0 (while UP) [ 451.286890][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 452.029362][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 452.391781][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 452.707115][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 452.742027][ T9] usb 7-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 452.780614][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.818255][ T9] usb 7-1: Product: syz [ 452.835600][ T9] usb 7-1: Manufacturer: ј [ 452.996297][ T9] usb 7-1: SerialNumber: syz [ 453.248653][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 453.866727][ T9] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 453.876266][ T9] usb 7-1: 2:1 : unknown format tag 0x1 is detected. processed as MPEG. [ 453.910482][ T9] usb 7-1: found format II with max.bitrate = 3705, frame size=7 [ 453.934313][ T9] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 454.100813][ T9] usb 7-1: USB disconnect, device number 6 [ 454.177231][T11451] udevd[11451]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.400889][T11603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.418716][T11609] netlink: 'syz.4.1460': attribute type 29 has an invalid length. [ 454.434165][T11610] netlink: 'syz.4.1460': attribute type 29 has an invalid length. [ 454.511871][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 454.511888][ T29] audit: type=1400 audit(1772306119.479:1280): avc: denied { write } for pid=11608 comm="syz.4.1460" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 454.560551][ T29] audit: type=1400 audit(1772306119.479:1281): avc: denied { open } for pid=11608 comm="syz.4.1460" path="/306/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 454.715365][ T29] audit: type=1400 audit(1772306119.479:1282): avc: denied { ioctl } for pid=11608 comm="syz.4.1460" path="/306/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 454.836502][ T29] audit: type=1400 audit(1772306119.531:1283): avc: denied { listen } for pid=11613 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.406897][ T29] audit: type=1400 audit(1772306119.531:1284): avc: denied { accept } for pid=11613 comm="syz.6.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 455.546963][T11627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=11627 comm=syz.4.1464 [ 455.573582][T11627] netlink: 'syz.4.1464': attribute type 1 has an invalid length. [ 455.596986][T11627] erspan1: entered allmulticast mode [ 456.929080][ T5813] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 457.033225][ T29] audit: type=1400 audit(1772306122.125:1285): avc: denied { create } for pid=11628 comm="syz.2.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.144972][ T29] audit: type=1400 audit(1772306122.125:1286): avc: denied { module_request } for pid=11628 comm="syz.2.1465" kmod="net-pf-2-proto-14-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 457.293838][ T29] audit: type=1400 audit(1772306122.219:1287): avc: denied { read write } for pid=5804 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.388997][ T29] audit: type=1400 audit(1772306122.219:1288): avc: denied { open } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.563134][ T29] audit: type=1400 audit(1772306122.219:1289): avc: denied { ioctl } for pid=5804 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 457.607090][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 457.775548][T11676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11676 comm=syz.6.1475 [ 457.791878][T11676] random: crng reseeded on system resumption [ 458.900467][T11689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1479'. [ 459.782725][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 459.782737][ T29] audit: type=1400 audit(1772306125.012:1341): avc: denied { read } for pid=11685 comm="syz.4.1478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.859087][ T29] audit: type=1400 audit(1772306125.012:1342): avc: denied { open } for pid=11685 comm="syz.4.1478" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 459.916872][ T29] audit: type=1400 audit(1772306125.012:1343): avc: denied { create } for pid=11685 comm="syz.4.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 459.973962][ T29] audit: type=1400 audit(1772306125.064:1344): avc: denied { ioctl } for pid=11685 comm="syz.4.1478" path="socket:[34737]" dev="sockfs" ino=34737 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 460.002446][ T29] audit: type=1400 audit(1772306125.064:1345): avc: denied { ioctl } for pid=11685 comm="syz.4.1478" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 460.027870][ T29] audit: type=1400 audit(1772306125.222:1346): avc: denied { add_name } for pid=11656 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.050656][ T29] audit: type=1400 audit(1772306125.222:1347): avc: denied { create } for pid=11656 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.083223][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.094776][ T29] audit: type=1400 audit(1772306125.222:1348): avc: denied { write } for pid=11656 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=7145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.140839][T11689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.158519][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.176655][T11701] Invalid ELF header type: 3 != 1 [ 460.260451][ T29] audit: type=1400 audit(1772306125.222:1349): avc: denied { append } for pid=11656 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=7145 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 460.350864][T11689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.387338][T11689] bond0 (unregistering): Released all slaves [ 460.423017][T11691] netlink: 'syz.4.1478': attribute type 32 has an invalid length. [ 460.452657][ T29] audit: type=1400 audit(1772306125.327:1350): avc: denied { read write } for pid=11697 comm="syz.0.1481" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 461.088249][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 461.425379][T11735] overlayfs: failed to resolve './file1': -2 [ 463.602203][ T9] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 464.002347][ T9] usb 5-1: device descriptor read/64, error -71 [ 465.262741][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 465.262759][ T29] audit: type=1400 audit(1772306130.640:1380): avc: denied { create } for pid=11758 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 465.306898][ T9] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 465.359716][T11762] serio: Serial port ttyS3 [ 465.365877][ T29] audit: type=1400 audit(1772306130.850:1381): avc: denied { read write } for pid=11756 comm="syz.2.1492" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.394827][ T29] audit: type=1400 audit(1772306130.850:1382): avc: denied { open } for pid=11756 comm="syz.2.1492" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.446897][ T29] audit: type=1400 audit(1772306130.850:1383): avc: denied { append } for pid=11756 comm="syz.2.1492" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.479854][ T9] usb 5-1: device descriptor read/64, error -71 [ 465.501135][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 465.511406][T11761] loop6: detected capacity change from 0 to 1 [ 465.568603][T11305] Dev loop6: unable to read RDB block 1 [ 465.582961][T11305] loop6: unable to read partition table [ 465.584203][ T9] usb usb5-port1: attempt power cycle [ 465.591136][ T29] audit: type=1400 audit(1772306131.112:1384): avc: denied { create } for pid=11760 comm="syz.3.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 465.621554][T11305] loop6: partition table beyond EOD, truncated [ 465.643784][T11761] Dev loop6: unable to read RDB block 1 [ 465.660738][T11761] loop6: unable to read partition table [ 465.678161][T11761] loop6: partition table beyond EOD, truncated [ 465.684353][T11761] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 465.896753][T10526] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 465.973477][ T9] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 466.002432][ T9] usb 5-1: device descriptor read/8, error -71 [ 466.041185][T10526] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.052336][T10526] usb 7-1: config 0 has no interface number 0 [ 466.073829][T10526] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.120796][T10526] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.149836][T10526] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 466.173322][T10526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.247350][T10526] usb 7-1: config 0 descriptor?? [ 466.248528][T11779] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1499'. [ 466.252443][ T29] audit: type=1400 audit(1772306131.805:1385): avc: denied { write } for pid=11773 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.396391][ T29] audit: type=1400 audit(1772306131.805:1386): avc: denied { nlmsg_write } for pid=11773 comm="syz.4.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 466.401917][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 466.496775][T11782] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 466.659108][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.829136][ T5887] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 466.983360][T11775] [U]  [ 467.455616][ T29] audit: type=1400 audit(1772306133.075:1387): avc: denied { create } for pid=11784 comm="syz.0.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.486785][T10526] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.000B/input/input28 [ 467.498699][ T29] audit: type=1400 audit(1772306133.096:1388): avc: denied { bind } for pid=11784 comm="syz.0.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 467.565121][ T29] audit: type=1400 audit(1772306133.191:1389): avc: denied { bind } for pid=11784 comm="syz.0.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.604502][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 467.621587][T10526] holtek_kbd 0003:04D9:A055.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 467.644009][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 467.694311][T10526] usb 7-1: USB disconnect, device number 7 [ 467.694382][ T5887] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 467.835431][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.850621][ T5887] usb 4-1: Product: syz [ 468.856728][ T5887] usb 4-1: Manufacturer: syz [ 468.873103][ T5887] usb 4-1: SerialNumber: syz [ 468.885502][T11789] fido_id[11789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 468.905803][ T5887] usb 4-1: config 0 descriptor?? [ 468.954218][T11777] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 468.961559][T11777] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 469.303632][ T5887] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 469.342294][ T5887] usb 4-1: USB disconnect, device number 46 [ 469.777448][T11823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11823 comm=syz.4.1510 [ 469.792039][T11823] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 469.797818][T11823] PKCS7: Only support pkcs7_signedData type [ 469.880170][T11826] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 470.284423][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 470.284437][ T29] audit: type=1400 audit(1772306135.543:1398): avc: denied { read } for pid=11811 comm="syz.4.1510" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 470.467719][T11821] [U]  [ 472.453476][T11851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11851 comm=syz.6.1519 [ 472.467274][ T29] audit: type=1400 audit(1772306138.230:1399): avc: denied { read write } for pid=11847 comm="syz.6.1519" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 473.463804][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1519'. [ 473.545209][ T29] audit: type=1400 audit(1772306138.230:1400): avc: denied { open } for pid=11847 comm="syz.6.1519" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 473.738447][ T29] audit: type=1400 audit(1772306138.241:1401): avc: denied { write } for pid=11847 comm="syz.6.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 473.919849][ T29] audit: type=1400 audit(1772306139.858:1402): avc: denied { name_connect } for pid=11867 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 473.929193][T11863] loop6: detected capacity change from 0 to 1 [ 474.394609][T11863] Dev loop6: unable to read RDB block 1 [ 474.410401][T11863] loop6: unable to read partition table [ 474.425493][ T29] audit: type=1400 audit(1772306139.952:1403): avc: denied { setopt } for pid=11864 comm="syz.0.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 474.523556][T11863] loop6: partition table beyond EOD, truncated [ 474.833015][T11863] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 474.857598][ T5178] Dev loop6: unable to read RDB block 1 [ 474.872601][ T29] audit: type=1400 audit(1772306140.435:1404): avc: denied { listen } for pid=11867 comm="syz.3.1524" lport=54447 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 474.913508][T11879] libceph: resolve '0..' (ret=-3): failed [ 474.921397][ T5178] loop6: unable to read partition table [ 475.010605][ T5178] loop6: partition table beyond EOD, truncated [ 475.486329][ T29] audit: type=1400 audit(1772306140.435:1405): avc: denied { accept } for pid=11867 comm="syz.3.1524" lport=54447 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 475.597289][ T29] audit: type=1400 audit(1772306140.435:1406): avc: denied { setopt } for pid=11867 comm="syz.3.1524" lport=54447 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 475.669016][ T29] audit: type=1400 audit(1772306140.834:1407): avc: denied { getopt } for pid=11881 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 475.712237][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 475.755695][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 475.773925][ T29] audit: type=1400 audit(1772306141.695:1408): avc: denied { create } for pid=11890 comm="syz.3.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 475.812164][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 475.906222][ T29] audit: type=1400 audit(1772306141.695:1409): avc: denied { read write } for pid=11890 comm="syz.3.1528" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 475.930645][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.190566][ T29] audit: type=1400 audit(1772306141.695:1410): avc: denied { open } for pid=11890 comm="syz.3.1528" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 476.225299][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.257178][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 476.284069][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.326828][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.344817][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.372578][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.387762][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.408721][ T29] audit: type=1400 audit(1772306141.737:1411): avc: denied { mounton } for pid=11891 comm="syz.4.1527" path="/323/file0" dev="tmpfs" ino=1751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.421275][ T9] usb 5-1: device descriptor read/64, error -71 [ 476.440747][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.465478][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.489379][T11905] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 476.493583][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.569244][T11906] can0: slcan on ttyS3. [ 476.575570][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.585324][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.611798][ T29] audit: type=1400 audit(1772306142.682:1412): avc: denied { ioctl } for pid=11890 comm="syz.3.1528" path="socket:[36303]" dev="sockfs" ino=36303 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 476.831067][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 476.882247][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.963062][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 476.990662][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 477.002597][ T9] usb 5-1: device descriptor read/64, error -71 [ 477.033118][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.107953][ T9] usb usb5-port1: attempt power cycle [ 477.119422][ T29] audit: type=1400 audit(1772306143.207:1413): avc: denied { watch watch_reads } for pid=11911 comm="syz.2.1531" path="/318" dev="tmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 477.155698][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.181657][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.233717][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.337094][T11904] can0 (unregistered): slcan off ttyS3. [ 477.355741][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.363282][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.384639][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.402986][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.421827][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.430846][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 477.467896][ T9] usb 5-1: device descriptor read/8, error -71 [ 477.479163][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.500728][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.584277][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.616348][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.660583][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.687404][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.708008][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 477.749972][ T9] usb 5-1: device descriptor read/8, error -71 [ 477.765740][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.854413][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 477.861770][ T9] usb usb5-port1: unable to enumerate USB device [ 477.868730][T11895] XFS (nbd4): no-recovery mounts must be read-only. [ 479.063978][ T29] audit: type=1400 audit(1772306145.254:1414): avc: denied { append } for pid=11935 comm="syz.3.1536" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 479.271934][T11946] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 480.970089][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 480.970101][ T29] audit: type=1400 audit(1772306147.207:1417): avc: denied { create } for pid=11951 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 481.031896][ T29] audit: type=1400 audit(1772306147.249:1418): avc: denied { getopt } for pid=11951 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 481.169804][T11966] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 481.288899][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 481.346078][ T29] audit: type=1400 audit(1772306147.449:1419): avc: denied { mount } for pid=11959 comm="syz.0.1543" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 481.494886][ T29] audit: type=1400 audit(1772306147.470:1420): avc: denied { mounton } for pid=11959 comm="syz.0.1543" path="/327/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 481.554953][T11954] loop6: detected capacity change from 0 to 524288000 [ 481.702687][ T29] audit: type=1400 audit(1772306147.491:1421): avc: denied { mount } for pid=11959 comm="syz.0.1543" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 481.860629][ T29] audit: type=1400 audit(1772306147.764:1422): avc: denied { accept } for pid=11951 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 482.517475][ C1] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 482.948780][ T29] audit: type=1400 audit(1772306148.205:1423): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 482.969361][ T29] audit: type=1400 audit(1772306149.339:1424): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 483.120500][T11985] netlink: 'syz.0.1545': attribute type 1 has an invalid length. [ 483.177150][T11985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.263002][T11993] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1547'. [ 483.326996][T11993] netlink: Unknown conntrack attr (0) [ 483.449618][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.477845][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.492943][ T29] audit: type=1400 audit(1772306149.905:1425): avc: denied { accept } for pid=11997 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 483.553876][ T29] audit: type=1400 audit(1772306149.905:1426): avc: denied { setopt } for pid=11997 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 483.720194][T12008] mkiss: ax0: crc mode is auto. [ 484.108124][T12018] can0: slcan on ptm0. [ 484.203006][ T5822] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 484.281978][T11980] can0 (unregistered): slcan off ptm0. [ 484.653895][ T5822] usb 3-1: Using ep0 maxpacket: 8 [ 484.662392][ T5822] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 484.774894][ T5822] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 485.753484][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.765674][ T5822] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 485.777716][ T5822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 485.792393][ T5822] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.808217][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 485.808231][ T29] audit: type=1400 audit(1772306152.320:1428): avc: denied { write } for pid=12028 comm="syz.3.1557" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 485.937369][ T5822] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.947657][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.000629][ T29] audit: type=1400 audit(1772306152.320:1429): avc: denied { open } for pid=12028 comm="syz.3.1557" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 486.027177][T12035] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1558'. [ 486.083803][ T29] audit: type=1400 audit(1772306152.341:1430): avc: denied { ioctl } for pid=12028 comm="syz.3.1557" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 486.165440][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.223902][ T29] audit: type=1400 audit(1772306152.782:1431): avc: denied { mount } for pid=12009 comm="syz.2.1553" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 486.312977][ T29] audit: type=1400 audit(1772306152.793:1432): avc: denied { unmount } for pid=12009 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 486.342054][T12042] xt_ecn: cannot match TCP bits for non-tcp packets [ 486.363175][T12042] overlayfs: missing 'lowerdir' [ 486.521391][ T29] audit: type=1400 audit(1772306152.919:1433): avc: denied { create } for pid=12009 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.640885][T12045] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 486.659663][ T29] audit: type=1400 audit(1772306152.919:1434): avc: denied { bind } for pid=12009 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 486.685492][ T29] audit: type=1400 audit(1772306152.919:1435): avc: denied { create } for pid=12009 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 486.729631][ T5822] usb 3-1: usb_control_msg returned -71 [ 486.745060][ T5822] usbtmc 3-1:16.0: can't read capabilities [ 486.754698][ T29] audit: type=1400 audit(1772306152.919:1436): avc: denied { write } for pid=12009 comm="syz.2.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 486.850102][ T5813] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 486.964124][ T5822] usb 3-1: USB disconnect, device number 42 [ 487.252531][T12056] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 487.556032][ T5813] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 487.736098][ T29] audit: type=1400 audit(1772306154.357:1437): avc: denied { create } for pid=12061 comm="syz.2.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 488.384212][ T978] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 488.477853][T12090] macvlan1: entered promiscuous mode [ 488.508412][T12090] macvlan1: entered allmulticast mode [ 488.584882][T12090] veth1_vlan: entered allmulticast mode [ 488.586448][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 488.610725][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 488.660286][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 488.670172][ T978] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 488.775159][T12095] tmpfs: Bad value for 'mpol' [ 488.797213][ T978] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 488.848272][T12095] input: syz0 as /devices/virtual/input/input29 [ 488.949106][ T978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.161956][ T978] usb 7-1: config 0 descriptor?? [ 489.576219][ T5859] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 490.175149][ T978] hdpvr 7-1:0.0: firmware version 0x0 dated [ 490.202870][ T978] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 490.394432][ T5859] usb 3-1: device descriptor read/64, error -71 [ 490.749197][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 490.749228][ T29] audit: type=1400 audit(2000000000.115:1444): avc: denied { create } for pid=12114 comm="syz.3.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 491.045382][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 491.051403][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 491.069239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 491.085962][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 492.818779][ T29] audit: type=1400 audit(2000000001.616:1445): avc: denied { write } for pid=12121 comm="syz.2.1575" name="route" dev="proc" ino=4026533234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 493.109509][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 493.149630][ T978] hdpvr 7-1:0.0: Could not setup controls [ 493.260274][ T978] hdpvr 7-1:0.0: registering videodev failed [ 493.608635][ T978] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 493.618022][ T29] audit: type=1400 audit(2000000003.107:1446): avc: denied { write } for pid=12132 comm="syz.6.1576" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 493.782076][ T978] usb 7-1: USB disconnect, device number 8 [ 494.309347][T12137] vxcan1: entered promiscuous mode [ 494.330204][ T29] audit: type=1400 audit(2000000003.191:1447): avc: denied { ioctl } for pid=12132 comm="syz.6.1576" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 494.471153][ T29] audit: type=1400 audit(2000000003.936:1448): avc: denied { checkpoint_restore } for pid=12114 comm="syz.3.1573" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 494.593407][ T29] audit: type=1400 audit(2000000004.146:1449): avc: denied { create } for pid=12141 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.811595][ T29] audit: type=1400 audit(2000000004.178:1450): avc: denied { bind } for pid=12141 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.906951][ T29] audit: type=1400 audit(2000000004.188:1451): avc: denied { listen } for pid=12141 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 494.947167][ T29] audit: type=1400 audit(2000000004.188:1452): avc: denied { accept } for pid=12141 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.005947][ T29] audit: type=1400 audit(2000000004.514:1453): avc: denied { read write } for pid=12145 comm="syz.4.1579" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 495.058778][T12150] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20000 [ 495.226829][ T5813] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 497.965042][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 497.965056][ T29] audit: type=1400 audit(2000000007.695:1457): avc: denied { connect } for pid=12167 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 498.082772][ T29] audit: type=1400 audit(2000000007.726:1458): avc: denied { setopt } for pid=12167 comm="syz.2.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.169748][ T5915] kernel read not supported for file /dsp1 (pid: 5915 comm: kworker/1:5) [ 498.888394][T12178] overlayfs: unescaped trailing colons in lowerdir mount option. [ 499.042641][T12181] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 499.058714][T12181] netlink: 'syz.3.1587': attribute type 20 has an invalid length. [ 499.236643][ T29] audit: type=1400 audit(2000000008.744:1459): avc: denied { write } for pid=12175 comm="syz.3.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 499.486295][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1588'. [ 499.530157][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 499.605291][T11165] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 499.615446][T11165] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 499.625246][ T5915] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 499.671909][T12190] loop6: detected capacity change from 0 to 1 [ 499.679128][T12191] Dev loop6: unable to read RDB block 1 [ 499.696863][ T29] audit: type=1400 audit(2000000009.511:1460): avc: denied { connect } for pid=12184 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 499.717751][T12191] loop6: unable to read partition table [ 499.730930][T12191] loop6: partition table beyond EOD, truncated [ 499.744683][T12190] Dev loop6: unable to read RDB block 1 [ 499.751552][T12190] loop6: unable to read partition table [ 499.757461][T12190] loop6: partition table beyond EOD, truncated [ 499.763812][T12190] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 499.858548][ T29] audit: type=1400 audit(2000000009.679:1461): avc: denied { setopt } for pid=12199 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 499.997102][ T5915] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 499.997922][T12204] input: syz0 as /devices/virtual/input/input30 [ 500.197944][ T29] audit: type=1400 audit(2000000010.036:1462): avc: denied { map } for pid=12207 comm="syz.2.1594" path="/proc/1117/net/mcfilter" dev="proc" ino=4026533240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 500.200278][T12204] netlink: 'syz.4.1593': attribute type 25 has an invalid length. [ 500.301448][ T29] audit: type=1400 audit(2000000010.130:1463): avc: denied { connect } for pid=12207 comm="syz.2.1594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.431635][T12204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1593'. [ 500.501218][ T5915] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 500.522623][ T29] audit: type=1400 audit(2000000010.130:1464): avc: denied { ioctl } for pid=12207 comm="syz.2.1594" path="socket:[36866]" dev="sockfs" ino=36866 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 500.595813][ T29] audit: type=1400 audit(2000000010.193:1465): avc: denied { getopt } for pid=12212 comm="syz.0.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.644982][ T29] audit: type=1400 audit(2000000010.382:1466): avc: denied { read } for pid=12199 comm="syz.4.1593" path="socket:[35724]" dev="sockfs" ino=35724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 500.796549][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 500.872340][T10463] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 501.044025][T10463] usb 3-1: Using ep0 maxpacket: 16 [ 501.049858][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 501.051451][T10463] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 501.112166][T10463] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.200338][T10463] usb 3-1: config 0 descriptor?? [ 501.254836][T10463] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 501.309309][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 501.330213][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 501.338522][ T9] usb 4-1: config 179 has no interface number 0 [ 501.359804][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 501.386833][ T5178] Dev loop6: unable to read RDB block 1 [ 501.392545][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 501.402163][ T5178] loop6: unable to read partition table [ 501.420616][ T5178] loop6: partition table beyond EOD, truncated [ 501.428336][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.439255][T12218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.450366][T12229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1600'. [ 501.459919][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 501.472245][T12218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.492222][T12229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1600'. [ 501.501357][T10463] usb 3-1: Detected FT232B [ 501.507700][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 501.523931][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 501.563322][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.594653][T12223] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 501.686140][T10463] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 501.706390][T10463] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 501.765171][ T5178] Dev loop6: unable to read RDB block 1 [ 501.774113][ T5178] loop6: unable to read partition table [ 501.780371][ T5178] loop6: partition table beyond EOD, truncated [ 501.813760][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input31 [ 502.026403][T10463] usb 4-1: USB disconnect, device number 47 [ 502.026459][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 502.043914][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 502.068379][ T5915] usb 3-1: USB disconnect, device number 45 [ 502.089548][ T5915] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 502.108884][ T5915] ftdi_sio 3-1:0.0: device disconnected [ 502.244034][ T978] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 502.416505][ T978] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 502.424791][ T978] usb 5-1: config 0 has no interface number 0 [ 502.432478][ T978] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 502.441689][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.449709][ T978] usb 5-1: Product: syz [ 502.453933][ T978] usb 5-1: Manufacturer: syz [ 502.458518][ T978] usb 5-1: SerialNumber: syz [ 502.465313][ T978] usb 5-1: config 0 descriptor?? [ 503.137423][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 503.137446][ T29] audit: type=1400 audit(2000000013.122:1468): avc: denied { bind } for pid=12254 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 503.209998][T12262] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1608'. [ 503.238667][ T978] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 503.255418][ T978] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 503.295634][ T978] asix 5-1:0.251: probe with driver asix failed with error -71 [ 503.318119][ T978] usb 5-1: USB disconnect, device number 45 [ 503.543853][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1611'. [ 503.553106][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 503.951291][ T29] audit: type=1400 audit(2000000013.983:1469): avc: denied { setopt } for pid=12282 comm="syz.2.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 504.313548][ T5915] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 504.385902][T12297] kAFS: unable to lookup cell 'ÿ' [ 504.590924][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.613611][ T29] audit: type=1400 audit(2000000014.676:1470): avc: denied { map } for pid=12298 comm="syz.0.1618" path="socket:[37155]" dev="sockfs" ino=37155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 504.649936][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 504.665328][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 504.711975][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 504.736102][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 504.805122][T12307] veth0: entered promiscuous mode [ 505.016413][ T29] audit: type=1400 audit(2000000014.873:1471): avc: denied { ioctl } for pid=12302 comm="syz.3.1619" path="socket:[37942]" dev="sockfs" ino=37942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 505.018169][ T5915] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 505.081198][T12302] veth0: left promiscuous mode [ 505.086330][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 505.097508][ T5915] usb 5-1: Product: syz [ 505.130884][ T5178] Dev loop6: unable to read RDB block 1 [ 505.137853][ T5178] loop6: unable to read partition table [ 505.168240][ T5178] loop6: partition table beyond EOD, truncated [ 505.190099][ T5915] usb 5-1: Manufacturer: syz [ 505.197004][ T5915] usb 5-1: SerialNumber: syz [ 505.259035][ T29] audit: type=1400 audit(2000000015.314:1472): avc: denied { bind } for pid=12309 comm="syz.3.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 505.484015][ T5915] usb 5-1: config 0 descriptor?? [ 505.561323][T12314] pim6reg99999999: entered allmulticast mode [ 505.673335][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 505.673912][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 505.789752][T12290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.179244][ T5915] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 506.197033][ T5915] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 506.222375][T12290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.719084][ T5915] usb 5-1: USB disconnect, device number 46 [ 507.309023][ T29] audit: type=1400 audit(2000000017.498:1473): avc: denied { create } for pid=12325 comm="syz.3.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 507.570879][T12131] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.580989][T12131] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.589544][T12131] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.599350][T12131] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.606882][T12131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 507.625247][ T29] audit: type=1400 audit(2000000017.834:1474): avc: denied { mounton } for pid=12330 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 508.286345][ T29] audit: type=1400 audit(2000000018.348:1475): avc: denied { write } for pid=12335 comm="syz.4.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.674629][T12330] xfrm0 speed is unknown, defaulting to 1000 [ 508.682763][T12330] lo speed is unknown, defaulting to 1000 [ 508.694637][T12330] vxcan1 speed is unknown, defaulting to 1000 [ 509.746721][T12131] Bluetooth: hci6: command tx timeout [ 509.755245][ T29] audit: type=1400 audit(2000000019.986:1476): avc: denied { execute_no_trans } for pid=12358 comm="syz.0.1631" path="/345/file0" dev="tmpfs" ino=1899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 510.039180][ T29] audit: type=1400 audit(2000000019.986:1477): avc: denied { append } for pid=12358 comm="syz.0.1631" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 510.068877][ T29] audit: type=1400 audit(2000000019.996:1478): avc: denied { remount } for pid=12358 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 510.091535][ T29] audit: type=1400 audit(2000000020.017:1479): avc: denied { sqpoll } for pid=12358 comm="syz.0.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 510.355853][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.439067][T12330] chnl_net:caif_netlink_parms(): no params data found [ 510.446388][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.515157][T12381] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1634'. [ 510.672423][T12390] random: crng reseeded on system resumption [ 510.919401][T12330] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.940720][T12330] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.958095][T12330] bridge_slave_0: entered allmulticast mode [ 510.971621][T12330] bridge_slave_0: entered promiscuous mode [ 510.993576][T12330] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.014384][T12330] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.032497][T12330] bridge_slave_1: entered allmulticast mode [ 511.044709][T12330] bridge_slave_1: entered promiscuous mode [ 511.107589][T12330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.130164][T12330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.193889][T12330] team0: Port device team_slave_0 added [ 511.211328][T12330] team0: Port device team_slave_1 added [ 511.262087][T12330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.288206][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.343343][T12330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.418990][T12330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.437307][T12330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.579175][T12330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.588611][ T5859] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 511.645834][ T5915] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 511.669712][T12330] hsr_slave_0: entered promiscuous mode [ 511.684810][T12330] hsr_slave_1: entered promiscuous mode [ 511.691182][T12330] debugfs: 'hsr0' already exists in 'hsr' [ 511.700301][T12330] Cannot create hsr debugfs directory [ 511.702913][T12131] Bluetooth: hci6: command tx timeout [ 511.769724][ C1] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 511.773431][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 511.799345][ T5859] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 511.801056][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.817278][ T5859] usb 4-1: config 0 has no interface number 0 [ 511.823855][ T5859] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 54367, setting to 64 [ 511.857482][ T5859] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 511.864638][ T5915] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 511.884569][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.892617][ T5859] usb 4-1: Product: syz [ 511.893580][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.902549][ T5859] usb 4-1: Manufacturer: syz [ 511.921764][ T5859] usb 4-1: SerialNumber: syz [ 511.939587][ T5859] usb 4-1: config 0 descriptor?? [ 511.951040][ T5915] usb 5-1: config 0 descriptor?? [ 512.176169][T12401] netlink: 'syz.3.1639': attribute type 11 has an invalid length. [ 512.190608][ T29] audit: type=1400 audit(2000000022.610:1480): avc: denied { write } for pid=12398 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 512.817223][ T29] audit: type=1400 audit(2000000022.610:1481): avc: denied { read } for pid=12398 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 512.952339][ T29] audit: type=1400 audit(2000000023.429:1482): avc: denied { map } for pid=12404 comm="syz.2.1642" path="socket:[37406]" dev="sockfs" ino=37406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 513.056867][ T5822] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 513.081033][ T5822] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 513.117170][ T5822] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 513.143096][ T5822] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 513.309784][ T5822] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 513.339341][ T5822] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 513.445307][ T5822] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 513.460330][ T5822] ip6_tunnel: ip6gre6 xmit: Local address not yet configured! [ 513.471030][T12330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 513.490228][T12330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 513.521760][T12330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 513.545977][T12330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 513.599248][ T5887] ip6_tunnel: ip6gre7 xmit: Local address not yet configured! [ 513.609434][ T30] INFO: task kworker/1:6:5927 blocked for more than 144 seconds. [ 513.633351][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.664857][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.674189][ T29] audit: type=1400 audit(2000000024.185:1483): avc: denied { write } for pid=5790 comm="syz-executor" path="pipe:[4619]" dev="pipefs" ino=4619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 513.702074][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.703918][T12131] Bluetooth: hci6: command tx timeout [ 513.721582][ T30] task:kworker/1:6 state:D stack:20960 pid:5927 tgid:5927 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 513.735125][ T30] Workqueue: usb_hub_wq hub_event [ 513.740246][ T30] Call Trace: [ 513.743919][ T30] [ 513.746901][ T30] __schedule+0xfee/0x60e0 [ 513.755823][ T30] ? __lock_acquire+0x4a5/0x2630 [ 513.761177][ T30] ? __lock_acquire+0x4a5/0x2630 [ 513.766199][ T30] ? __pfx___schedule+0x10/0x10 [ 513.788086][ T30] ? find_held_lock+0x2b/0x80 [ 513.816156][ T30] ? schedule+0x2bf/0x390 [ 513.818872][T12330] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.839818][ T30] schedule+0xdd/0x390 [ 513.853735][ T30] schedule_timeout+0x1b2/0x280 [ 513.865301][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 513.933599][ T30] ? mark_held_locks+0x40/0x70 [ 513.938427][ T30] __wait_for_common+0x2e7/0x4c0 [ 514.013694][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 514.031819][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 514.046417][ T5859] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.047439][ T5915] usb 5-1: USB disconnect, device number 47 [ 514.083195][ T30] ? __pfx_device_del+0x10/0x10 [ 514.093857][ T30] ? kobject_put+0xb9/0x640 [ 514.098412][ T30] i2c_del_adapter+0x62d/0x820 [ 514.103186][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 514.132671][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 514.138290][ T30] ? dvb_usbv2_exit.isra.0+0x3e1/0xb40 [ 514.144750][ T30] ? kfree+0x1f6/0x6b0 [ 514.151434][ T30] ? media_device_unregister+0x446/0x610 [ 514.157094][ T30] dvb_usbv2_exit.isra.0+0x47f/0xb40 [ 514.178538][ T30] dvb_usbv2_probe+0x669/0x970 [ 514.183644][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 514.185558][ T5859] snd-usb-audio 4-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 514.234434][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 514.238000][ T5859] usb 4-1: USB disconnect, device number 48 [ 514.250633][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 514.267201][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.273574][ T30] ? __pm_runtime_set_status+0x13c/0x970 [ 514.286779][ T30] usb_probe_interface+0x303/0x8f0 [ 514.301207][T12219] udevd[12219]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 514.317292][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 514.331654][ T30] really_probe+0x241/0xa60 [ 514.336606][ T30] __driver_probe_device+0x1de/0x400 [ 514.343645][ T30] driver_probe_device+0x4c/0x1b0 [ 514.348696][ T30] __device_attach_driver+0x1ff/0x3e0 [ 514.354771][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 514.361179][ T30] bus_for_each_drv+0x159/0x1e0 [ 514.366350][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.372321][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 514.377866][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.384315][ T30] __device_attach+0x1e4/0x4d0 [ 514.389365][ T30] ? __pfx___device_attach+0x10/0x10 [ 514.394744][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 514.400399][ T30] device_initial_probe+0xaf/0xd0 [ 514.405436][ T30] bus_probe_device+0x64/0x160 [ 514.413146][ T30] device_add+0x11d9/0x1950 [ 514.418528][ T30] ? __pfx_device_add+0x10/0x10 [ 514.423399][ T30] usb_set_configuration+0xd97/0x1c60 [ 514.429284][ T30] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 514.435356][ T30] usb_generic_driver_probe+0xa1/0xe0 [ 514.441086][ T30] usb_probe_device+0xef/0x400 [ 514.445849][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 514.451760][ T30] really_probe+0x241/0xa60 [ 514.456818][ T30] __driver_probe_device+0x1de/0x400 [ 514.462109][ T30] ? usb_driver_applicable+0x1c7/0x220 [ 514.467997][ T30] driver_probe_device+0x4c/0x1b0 [ 514.473027][ T30] __device_attach_driver+0x1ff/0x3e0 [ 514.479322][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 514.486809][ T30] bus_for_each_drv+0x159/0x1e0 [ 514.491683][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 514.522652][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 514.532861][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.538680][ T30] __device_attach+0x1e4/0x4d0 [ 514.549537][ T30] ? __pfx___device_attach+0x10/0x10 [ 514.560202][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 514.565878][ T30] device_initial_probe+0xaf/0xd0 [ 514.570925][ T30] bus_probe_device+0x64/0x160 [ 514.575692][ T30] device_add+0x11d9/0x1950 [ 514.580541][ T30] ? __pfx_device_add+0x10/0x10 [ 514.585403][ T30] usb_new_device.cold+0x685/0x115c [ 514.590700][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 514.595891][ T30] hub_event+0x314d/0x4af0 [ 514.600617][ T30] ? __pfx_hub_event+0x10/0x10 [ 514.605423][ T30] ? debug_object_deactivate+0x2e4/0x3b0 [ 514.611096][ T30] ? rcu_is_watching+0x12/0xc0 [ 514.615852][ T30] process_one_work+0x9d7/0x1920 [ 514.620995][ T30] ? __pfx_process_one_work+0x10/0x10 [ 514.626368][ T30] ? __pfx_hub_event+0x10/0x10 [ 514.631174][ T30] worker_thread+0x5da/0xe40 [ 514.635793][ T30] ? __pfx_worker_thread+0x10/0x10 [ 514.641082][ T30] ? kthread+0x13a/0x450 [ 514.645322][ T30] ? __pfx_worker_thread+0x10/0x10 [ 514.650494][ T30] kthread+0x370/0x450 [ 514.654562][ T30] ? __pfx_kthread+0x10/0x10 [ 514.659283][ T30] ret_from_fork+0x754/0xd80 [ 514.663885][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 514.669084][ T30] ? __switch_to+0x7b4/0x1120 [ 514.673764][ T30] ? __pfx_kthread+0x10/0x10 [ 514.678755][ T30] ret_from_fork_asm+0x1a/0x30 [ 514.683544][ T30] [ 514.754193][ T30] [ 514.754193][ T30] Showing all locks held in the system: [ 514.799069][ T5954] usb 1-1: USB disconnect, device number 17 [ 514.807282][ T30] 2 locks held by kdevtmpfs/26: [ 514.837581][ T5954] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 514.853578][ T30] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 514.874845][ T30] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x60e0 [ 514.883607][ T30] 1 lock held by khungtaskd/30: [ 514.903684][ T30] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 514.979862][ T30] 2 locks held by getty/5568: [ 514.984568][ T30] #0: ffff888033eed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 515.036941][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 515.084700][ T30] 3 locks held by kworker/1:5/5915: [ 515.089929][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 515.110668][ T30] #1: ffffc90002e97d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 515.120699][ T30] #2: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 515.131084][ T30] 5 locks held by kworker/1:6/5927: [ 515.136683][ T30] #0: ffff8880226d6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 515.148001][ T30] #1: ffffc90002e47d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 515.159313][ T30] #2: ffff88802a75d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 515.168488][ T30] #3: ffff888029e6a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 515.177789][ T30] #4: ffff88802c1a2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 515.187119][ T30] 1 lock held by syz.0.48/6121: [ 515.191991][ T30] #0: ffffffff90610228 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 515.201617][ T30] 1 lock held by syz.6.1576/12134: [ 515.206715][ T30] #0: ffff88802a75d198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 515.215759][ T30] 4 locks held by syz-executor/12330: [ 515.221263][ T30] #0: ffff88804f314ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 515.230867][ T30] #1: ffff88804f3140c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 515.240651][ T30] #2: ffffffff908a8228 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 515.250758][ T30] #3: ffff8880341ffaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 515.260396][ T30] 1 lock held by syz.3.1639/12398: [ 515.265567][ T30] #0: ffffffff90610228 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 515.274625][ T30] 1 lock held by syz.2.1642/12404: [ 515.279876][ T30] #0: ffffffff8e7f4ff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 515.289945][ T30] [ 515.352255][ T30] ============================================= [ 515.352255][ T30] [ 515.362644][ T30] NMI backtrace for cpu 1 [ 515.362664][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.362687][ T30] Tainted: [L]=SOFTLOCKUP [ 515.362693][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.362702][ T30] Call Trace: [ 515.362707][ T30] [ 515.362713][ T30] dump_stack_lvl+0x100/0x190 [ 515.362745][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 515.362761][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 515.362788][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 515.362813][ T30] sys_info+0x141/0x190 [ 515.362832][ T30] watchdog+0xd25/0x1050 [ 515.362858][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.362877][ T30] ? __kthread_parkme+0x18c/0x230 [ 515.362899][ T30] ? kthread+0x13a/0x450 [ 515.362911][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.362928][ T30] kthread+0x370/0x450 [ 515.362940][ T30] ? __pfx_kthread+0x10/0x10 [ 515.362954][ T30] ret_from_fork+0x754/0xd80 [ 515.362969][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.362985][ T30] ? __switch_to+0x7b4/0x1120 [ 515.363002][ T30] ? __pfx_kthread+0x10/0x10 [ 515.363016][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.363041][ T30] [ 515.363047][ T30] Sending NMI from CPU 1 to CPUs 0: [ 515.489630][ C0] NMI backtrace for cpu 0 [ 515.489646][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.489664][ C0] Tainted: [L]=SOFTLOCKUP [ 515.489668][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.489675][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 515.489693][ C0] Code: b8 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 dc 1b 00 fb f4 bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 515.489705][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 515.489717][ C0] RAX: 0000000001f41137 RBX: ffffffff8e4975c0 RCX: ffffffff8b8fac75 [ 515.489726][ C0] RDX: 0000000000000000 RSI: ffffffff8de72aee RDI: ffffffff8c1af220 [ 515.489735][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 515.489743][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 515.489752][ C0] R13: 0000000000000000 R14: ffffffff90d97a10 R15: 0000000000000000 [ 515.489761][ C0] FS: 0000000000000000(0000) GS:ffff888124347000(0000) knlGS:0000000000000000 [ 515.489775][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.489784][ C0] CR2: 00007fc82f747e20 CR3: 000000000e598000 CR4: 00000000003526f0 [ 515.489793][ C0] Call Trace: [ 515.489798][ C0] [ 515.489802][ C0] default_idle+0x9/0x10 [ 515.489816][ C0] default_idle_call+0x6c/0xb0 [ 515.489831][ C0] do_idle+0x35b/0x4b0 [ 515.489849][ C0] ? __pfx_do_idle+0x10/0x10 [ 515.489867][ C0] cpu_startup_entry+0x4f/0x60 [ 515.489882][ C0] rest_init+0x251/0x260 [ 515.489897][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 515.489917][ C0] start_kernel+0x47f/0x480 [ 515.489933][ C0] x86_64_start_reservations+0x24/0x30 [ 515.489950][ C0] x86_64_start_kernel+0x12b/0x130 [ 515.489967][ C0] common_startup_64+0x13e/0x148 [ 515.489986][ C0] [ 515.665882][T12131] Bluetooth: hci6: command tx timeout [ 515.806937][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 515.813823][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 515.824499][ T30] Tainted: [L]=SOFTLOCKUP [ 515.828799][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.838826][ T30] Call Trace: [ 515.842077][ T30] [ 515.844986][ T30] dump_stack_lvl+0x100/0x190 [ 515.849669][ T30] vpanic+0x552/0x970 [ 515.853644][ T30] ? __pfx_vpanic+0x10/0x10 [ 515.858119][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 515.864251][ T30] panic+0xd1/0xe0 [ 515.867945][ T30] ? __pfx_panic+0x10/0x10 [ 515.872340][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 515.878468][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 515.884595][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 515.890721][ T30] ? watchdog.cold+0x198/0x1ca [ 515.895472][ T30] ? watchdog+0xd35/0x1050 [ 515.899866][ T30] watchdog.cold+0x1a9/0x1ca [ 515.904435][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.909086][ T30] ? __kthread_parkme+0x18c/0x230 [ 515.914088][ T30] ? kthread+0x13a/0x450 [ 515.918299][ T30] ? __pfx_watchdog+0x10/0x10 [ 515.922951][ T30] kthread+0x370/0x450 [ 515.926990][ T30] ? __pfx_kthread+0x10/0x10 [ 515.931550][ T30] ret_from_fork+0x754/0xd80 [ 515.936110][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 515.941190][ T30] ? __switch_to+0x7b4/0x1120 [ 515.945845][ T30] ? __pfx_kthread+0x10/0x10 [ 515.950411][ T30] ret_from_fork_asm+0x1a/0x30 [ 515.955153][ T30] [ 515.958420][ T30] Kernel Offset: disabled [ 515.962721][ T30] Rebooting in 86400 seconds..