last executing test programs: 4m11.784673523s ago: executing program 3 (id=2108): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x5f96, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001080)={0xc}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x1c, r2, 0x3, 0x70bd29, 0xe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 4m10.517994029s ago: executing program 3 (id=2117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000800000000000000003000000833b0200f0ffffff186700000800000001000000580a000095000000c6f85f00"], &(0x7f0000000540)='GPL\x00', 0x1, 0x10, &(0x7f0000000580)=""/16, 0x41000, 0x21, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x2, 0x7}, 0x10, 0x25b53, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x2, 0x5, 0x7}, {0x2, 0x2, 0x10, 0x6}, {0x4, 0x2, 0x8, 0x6}, {0x4, 0x5, 0xd, 0xa}], 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e00000001300010000000000000000007863686163686132300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006abbe23241b37aff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100"/206], 0xe0}}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m9.443007822s ago: executing program 3 (id=2121): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) 4m7.090036526s ago: executing program 3 (id=2128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000800000000000000003000000833b0200f0ffffff186700000800000001000000580a000095000000c6f85f00"], &(0x7f0000000540)='GPL\x00', 0x1, 0x10, &(0x7f0000000580)=""/16, 0x41000, 0x21, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x2, 0x7}, 0x10, 0x25b53, 0xffffffffffffffff, 0x4, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x2, 0x5, 0x7}, {0x2, 0x2, 0x10, 0x6}, {0x4, 0x2, 0x8, 0x6}, {0x4, 0x5, 0xd, 0xa}], 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_crypto(0x10, 0x3, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 4m6.116175871s ago: executing program 3 (id=2129): pipe(&(0x7f00000001c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0}}], 0x1, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@default_permissions, 0x3a}], [], 0x2f}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b0) lseek(r1, 0xfffffffffffffffe, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fG', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) unshare(0x2c020400) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 4m5.083990656s ago: executing program 3 (id=2132): r0 = userfaultfd(0xc0802) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000811000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000688000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m48.518780298s ago: executing program 32 (id=2132): r0 = userfaultfd(0xc0802) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000811000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000688000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 54.742523592s ago: executing program 1 (id=2814): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x11, 0x0, @empty=0xac1414aa}, "341517c1b7df60c7"}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x8, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @mcast2, 0xc5f}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008011}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 54.211949405s ago: executing program 1 (id=2815): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) futex(&(0x7f0000000140)=0x1, 0x80, 0x1, 0x0, 0x0, 0x1) landlock_restrict_self(r2, 0xe) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000300), 0x8000, 0x11b701) lseek(r4, 0x402, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000180)="000088fb", 0x4, 0x14044b01, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0x1, 0x6, @broadcast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) close_range(r6, r6, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f66, 0x2, 0x0, 0x0, 0xf}, 0x30, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = dup2(r8, r9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000140), 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) landlock_restrict_self(r7, 0xe) ioctl$sock_inet_tcp_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000000080)) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r11) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001bbefa3d8d5fd7bc8dca5d64ea963ae65e9597d2f5adf1cb8171a48b3a21aaf5a5803af4003cd08bff033b712cd25341e1c22090c155810d0fabb988b08930ff024be197801d3a8c0878168dc870cc6912353b18ffb6678f53bf18d467ba66fdbcce2d5fa89295498d59119944389bd3625636c017ae558e951a1ab66d6a6fd2d6678d84e3b0d0886f2058748489e45c9ce493c9a232186708dd7628e28ca1bb73", @ANYRES16=r12, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000004c00088048000080240001000000000000000000000000000000000000000000000000000000000000000000200009801c000080060001002000000008000200640101010500030002000000"], 0x74}, 0x1, 0x0, 0x0, 0x404c844}, 0x20004000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) 52.660979419s ago: executing program 1 (id=2818): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe(&(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e34, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x1002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000280)={@multicast, @random='\x00\x00\x00%\x00', @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x3c, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x6}, @padn]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) 52.473824635s ago: executing program 1 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x13, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffff4f7}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @ldst={0x2, 0x1, 0x0, 0x8, 0x6, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9520}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000740)='syzkaller\x00', 0xc, 0x5e, &(0x7f0000000ac0)=""/94, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x3, 0x8, 0x8, 0xd3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b80)=[{0x2, 0x2, 0xa, 0xa}, {0x4, 0x5, 0x9, 0x2}], 0x10, 0x1}, 0x94) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x139200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'syztnl2\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x8000, 0x20, 0x7, 0x101, {{0x1b, 0x4, 0x0, 0x9, 0x6c, 0x65, 0x0, 0x6, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@ssrr={0x89, 0x27, 0x2f, [@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @multicast1, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @multicast1]}, @rr={0x7, 0x23, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010100, @loopback, @multicast2, @rand_addr=0x64010102, @empty, @local]}, @lsrr={0x83, 0xb, 0xb1, [@broadcast, @empty]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2a, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x1, 0x3, 0x5, 0x9, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0xab0, 0x0, 0x0, 0x0, 0x1, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xd, 0x5, 0x86}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000900)=[r1, r0, r1, r0, r1], &(0x7f0000000940)=[{0x0, 0x1, 0xb, 0xb}, {0x0, 0x3, 0x4, 0x4}, {0x0, 0x4, 0x6, 0x1}, {0x5, 0x1, 0x1, 0x4}, {0x3, 0x1, 0xe, 0x1}, {0x2, 0x3, 0x3, 0xa}, {0x5, 0x1, 0xf, 0x3}, {0x4, 0x4, 0x9, 0xc}, {0x1, 0x1842, 0x1, 0x6}, {0x5, 0x5, 0x6, 0xa}], 0x10, 0x81}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x509) close(0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) 51.631053994s ago: executing program 1 (id=2823): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x3000008, 0x12, r1, 0x0) r2 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r4 = syz_open_pts(r3, 0x200) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000180)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) socket(0x2, 0x80805, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(r7, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000240)) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0xfe}, 0x18) sendmmsg$inet(r0, &(0x7f0000000040), 0x0, 0x0) 48.275397168s ago: executing program 1 (id=2831): mkdirat(0xffffffffffffff9c, 0x0, 0x2c) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x6d, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xcf, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r0, 0x0, 0x25, 0x1c, @val=@target_btf_id=r1}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="1aca75525215f6b4c18baf8f9c4d85c95a40ba736b1b5262bb39a74cbd5328d56824b509c767c17066284be2c9cb1a776a9562cdcc934127b0ce320a42fbabb07b42cd6e7f2907003bb77de85bf4d9e5dd1cf9d39f1539b9e691e74a16999a71cc9eb78fc81579e6095c47f3061b18982fccb700"/130, @ANYRES16=r1, @ANYRES64=r1], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x6, 0x5e, 0xfffffffffffffff5}) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440)) 47.31990898s ago: executing program 33 (id=2831): mkdirat(0xffffffffffffff9c, 0x0, 0x2c) memfd_create(0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x6d, 0x0, 0x0, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xcf, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r0, 0x0, 0x25, 0x1c, @val=@target_btf_id=r1}, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r3, @ANYBLOB="1aca75525215f6b4c18baf8f9c4d85c95a40ba736b1b5262bb39a74cbd5328d56824b509c767c17066284be2c9cb1a776a9562cdcc934127b0ce320a42fbabb07b42cd6e7f2907003bb77de85bf4d9e5dd1cf9d39f1539b9e691e74a16999a71cc9eb78fc81579e6095c47f3061b18982fccb700"/130, @ANYRES16=r1, @ANYRES64=r1], 0x48) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000200)}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@local, 0x2}, @hyper, 0x0, 0x6, 0x5e, 0xfffffffffffffff5}) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)) socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440)) 31.901604858s ago: executing program 6 (id=2832): syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x1}) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0xf0, 0x8080) epoll_create(0xe) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x2b) 20.429017782s ago: executing program 4 (id=2905): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b8920000000109029009020000000009"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x24, 0x48, 0x0, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, r1, 0xfffffffd}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x440088c4) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x6a0540) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0xfc, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffe0}, {0x7, 0xfff3}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x20, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x90, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r5, &(0x7f00000000c0)=0xa7, 0x12) 15.690295788s ago: executing program 6 (id=2832): syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = epoll_create1(0x80000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x1}) prlimit64(r0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0xf0, 0x8080) epoll_create(0xe) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x2b) 10.298737811s ago: executing program 2 (id=2926): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x0, 0xf8, 0x6000000, 0x240, 0x3a8, 0x3a8, 0x240, 0x3a8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'virt_wifi0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0xd2030000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 9.450773058s ago: executing program 4 (id=2927): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x400, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f00000000c0)={0x881, 0x0, 0x0, 0x0, 0x3}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="09010000e47979a2120c46f6efa31d187c85e037c138878ce2b8da59dbade4c53dfa1f78ddb82f5cb84d1bca9655197e7a", @ANYRES16=r3, @ANYBLOB="010027bd70007adbdf25030000000500020000000000180001801400020073797a5f74756e00000000"], 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000000) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0xa04004, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r4 = syz_open_procfs(r0, &(0x7f0000000280)='net/fib_triestat\x00') read$FUSE(r4, &(0x7f0000000bc0)={0x2020}, 0x2054) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9.395138854s ago: executing program 0 (id=2928): r0 = socket(0xa, 0x3, 0xfc) syz_usb_connect(0x2, 0x77, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001236b2510810610005e520102030109021b00016499107009047c66010a656df209e15d8f71a330"], 0x0) sendto$unix(r0, 0x0, 0x0, 0x4008850, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_opts(r3, 0x0, 0xd, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r3, &(0x7f0000004b40)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/202, 0xca}], 0x8, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}, {{&(0x7f0000001980)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/144, 0x90}, {&(0x7f0000001ac0)=""/120, 0x78}], 0x2, &(0x7f0000001b80)=""/97, 0x61}, 0xdc0}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001c00)=""/166, 0xa6}, {&(0x7f0000001fc0)=""/241, 0xf1}, {&(0x7f0000004d40)=""/205, 0xcd}, {&(0x7f0000001ec0)=""/222, 0xde}, {&(0x7f0000001dc0)=""/247, 0xf7}, {&(0x7f00000020c0)=""/36, 0x24}], 0x6}}, {{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000004e40)=""/4107, 0x100b}, {&(0x7f0000003200)=""/168, 0xa8}], 0x2, &(0x7f0000004c80)=""/139, 0x8b}, 0x7}, {{&(0x7f00000033c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003440)=""/37, 0x25}, {&(0x7f0000003480)=""/138, 0x8a}, {&(0x7f0000003540)=""/120, 0x78}, {&(0x7f0000001cc0)=""/134, 0x86}, {&(0x7f0000003680)=""/221, 0xdd}, {&(0x7f0000003780)=""/44, 0x2c}, {&(0x7f00000037c0)=""/223, 0xdf}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/67, 0x43}, {&(0x7f0000004940)=""/37, 0x25}], 0xa, &(0x7f0000004a40)=""/244, 0xf4}, 0x6}], 0x5, 0x40000100, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @time={0x27, 0x9}, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}], 0x38) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.273806765s ago: executing program 4 (id=2931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x1) writev(r3, &(0x7f00000018c0)=[{&(0x7f00000001c0)='-d', 0x2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.034112271s ago: executing program 4 (id=2934): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x24008010) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0x66fa27c3, 0x4) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0xfffffffffffffffe}, 0x1, 0x0, 0x1}, {{@in6=@local, 0x4d6, 0x33}, 0x0, @in6=@loopback, 0x2, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x60) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) 5.943566004s ago: executing program 0 (id=2936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) 5.874816685s ago: executing program 4 (id=2937): openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001840), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001600)={0x1, 0x0, 0x0, &(0x7f00000016c0)=""/66, 0x0, 0xfec00000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000001500)={0x0, r1}) syz_usb_connect$cdc_ncm(0x0, 0x8a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) 5.19139015s ago: executing program 2 (id=2938): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) creat(&(0x7f0000000040)='./file0\x00', 0xecf86c37d5304960) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r1, 0x358, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffc) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = msgget$private(0x0, 0x31) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000031000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 4.767130289s ago: executing program 0 (id=2939): socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0xfffffffd, 0x400004, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x4, 0x7, 0x2]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000240)={r4, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$dri(0x0, 0x8, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 4.445200361s ago: executing program 2 (id=2940): sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="c08a8e74309335eba161edfae90aed4f2186951856578de65be88829e028cdbe54f3a6c0db"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)}, {&(0x7f0000000580)}, {&(0x7f00000006c0)="d11a7ea0f3f7cc194fbd86fcf591543b1a8c4b43b43774d634d1149a27240834f43a99ffbd278f7ea3cfb6740fc12e012d5d0ab3ed7db57bdf1388fc9bdb612758b2b8102f51e31ea0b47135b8fdcb3311b8d2bac94970ec84331d184e985e9ea51ff6299e12635d709617db12bda96912be81b28a5cbe0602a28962fa54df64c99797e9eaba756fb93eaa95a3528df24821ca05ce6477b4268e7137880e13", 0x9f}], 0x3}}], 0x1, 0x200000c4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a", @ANYRES16=r3], 0x0) syz_open_procfs$userns(0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="79b36dbfff00000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9a00fe41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@initdev, @loopback, 0x0}, &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000003c0)={'syztnl0\x00', r6, 0x786f, 0x8000, 0x3, 0x9, {{0x4b, 0x4, 0x1, 0x10, 0x12c, 0x64, 0x0, 0x80, 0x2f, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x4c, 0x1b, 0x3, 0x7, [{@rand_addr=0x64010101, 0x5}, {@multicast2, 0x8}, {@local, 0x8}, {@local, 0x7f}, {@remote, 0x9}, {@multicast1, 0x3}, {@empty, 0x800}, {@multicast2, 0x80000000}, {@broadcast, 0x2}]}, @generic={0x44, 0x12, "f01476d8b276fe6dfc5e05c258c30aeb"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x37, 0x3, 0x7, [{@multicast1}, {@multicast2}, {@empty, 0xc86f0a7}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@broadcast, 0xe9}]}, @timestamp_addr={0x44, 0x2c, 0xe, 0x1, 0x7, [{@multicast1, 0x3}, {@empty, 0x7}, {@loopback, 0xc226}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x7f}, {@local, 0x40000e}]}, @end, @timestamp={0x44, 0x20, 0x16, 0x0, 0x1, [0x7, 0x9, 0x3, 0x2, 0x7, 0xb6f, 0x5]}, @timestamp={0x44, 0x20, 0xd9, 0x0, 0x6, [0xee, 0xbbb, 0x401, 0x0, 0x3, 0x8, 0xfbf]}, @ssrr={0x89, 0xb, 0x8c, [@dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="ac14143fffffffff00000000110000000000000000000000010000000500000000000000"], 0x220}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 3.131571086s ago: executing program 0 (id=2947): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x1a, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = fsopen(&(0x7f0000000200)='efivarfs\x00', 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100000000000000) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 3.045686268s ago: executing program 5 (id=2948): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYBLOB="8000260b0a0002000180c200"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000012) 2.699092785s ago: executing program 5 (id=2949): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r7}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x0, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000480)={0xc7, 0x0, 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x10000000000, 0x5d, 0x1000000000000008, 0x42, 0x400000000000004, 0x2, 0x10, 0xb, 0x8000000000000000, 0x3, 0xffffffffffff9867, 0x2, 0x5, 0x4], 0x0, 0x110900}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f027, 0xfffffff9}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2.119401862s ago: executing program 0 (id=2950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x1) writev(r3, &(0x7f00000018c0)=[{&(0x7f00000001c0)='-d', 0x2}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.84245811s ago: executing program 2 (id=2951): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8707, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) r0 = io_uring_setup(0x1bca, &(0x7f0000000040)={0x0, 0x110c89f, 0xc000, 0x9, 0x20002f9}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)=@generic={&(0x7f0000001700)='./file1\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001780), 0x0, 0xfdd, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, 0xad) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000200), 0x4) r3 = socket$inet(0x2, 0x80001, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0x10000, '\x00', @p_u8=&(0x7f0000000140)=0xfe}}) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r7, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x600}]) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0x40, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x55, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x3, 0x3ee, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x2}}}, &(0x7f00000002c0)=0x0) syz_ublk_setup_queues(r4, r8, &(0x7f0000000340)={0x0, 0x91e7, 0x10, 0x2, 0x271, 0x0, r0}, &(0x7f00000003c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed3c, 0x1000, 0x1, 0x1f6, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1fec, 0x100, 0x3, 0x1c6, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6b8, 0x8, 0x2, 0xa5, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b5, 0x10000, 0x1, 0x362}}], 0x4, &(0x7f0000001640)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x3, 0x2ec, 0x0, &(0x7f0000000640)=@buf_max_buf="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"}}, &(0x7f00000016c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.594910373s ago: executing program 5 (id=2952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x3, 0x6, @remote}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x112) openat$procfs(0xffffffffffffff9c, &(0x7f0000004780)='/proc/asound/seq/clients\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r6, 0x720, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000005580)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) 1.081073567s ago: executing program 0 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x6b, &(0x7f00000000c0)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x0, 0x3bc2, 0x11, @loopback, @remote, 0x10, 0x0, 0x5, 0x1}}) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000400)={0x20002005}) waitid(0x0, 0x0, 0x0, 0xe, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffeb) rt_sigtimedwait(&(0x7f0000000340)={[0x100000001]}, &(0x7f0000000380), &(0x7f0000000480), 0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x9, 0x9, 0x1}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 952.033029ms ago: executing program 2 (id=2954): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000340)=[@register_looper], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x40800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c840, 0x201) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f00000003c0), 0x1003) socket$kcm(0x2, 0x200000000000001, 0x106) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x840, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_TENBIT(r2, 0x704, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x4008004) sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) close(0x3) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 531.148965ms ago: executing program 5 (id=2955): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x1, 0x4) write(r2, &(0x7f0000000000)="240000fe11005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 420.426578ms ago: executing program 4 (id=2956): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0xc4, 0xe401) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000340)={0x2, [0xfffffff8, 0x80000001], [{0x1, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x1992, 0x1}, {0xf01d, 0xa, 0x0, 0x0, 0x1}, {0xfff, 0x800009, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x101, 0xfffffff9, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x8, 0x1, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x2, 0x1, 0x1}, {0x2000008, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x0, 0x1}], 0x102}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0xffffffffffffffff, 0x8102) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r2 = socket(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000000300)={0x1, 0x0, 0x1ff, 0x1, 0x401, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x180000000) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x1]}}, 0x40) write$char_usb(r5, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r9, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 277.498557ms ago: executing program 5 (id=2957): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) socket$key(0xf, 0x3, 0x2) syz_open_dev$MSR(&(0x7f0000000180), 0xc, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x9, 0x0, 0x8, 0x200000b4, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x0, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x0, 0x14, 0x6}]}, 0x10}}, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000004c0)={0x3, 0x2, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000280)="02042700ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feff", 0x49, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20008004) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) getpeername$inet(r0, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000440)=@v2={0x3, 0x2, 0x13, 0x3, 0x50, "e76bcc72c1d88071694cd20e0adaf6997c056d40bc4bb8c37f3d98e9f17fa101d83eacc28c0890fbccd15f0ca9f4c42ad6214ba349add98124a171d9754f1a6d351e36d43abe7b9d8d90be4a25e7ef3b"}, 0x59, 0x0) 163.122111ms ago: executing program 2 (id=2958): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0xfffffffffffffff9, 0x6, 0x8, 0x3, 0x0, 0x0, 0x1, 0xfffffe0000000001, 0xfa11, 0xeffffffb}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x7, @loopback, 0x8}, 0x20) listen(r3, 0x8) r7 = memfd_create(0x0, 0x0) ftruncate(r7, 0xdcb) pread64(r7, &(0x7f00000009c0)=""/239, 0xef, 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000044c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2959): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3000004, 0x12, r2, 0x100000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4010004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): or pid=15362 comm="syz.0.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 825.448351][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 825.454455][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 825.499213][ T24] usb 1-1: USB disconnect, device number 19 [ 825.508655][T15367] netlink: 'syz.1.2615': attribute type 12 has an invalid length. [ 825.517842][T15367] netlink: 'syz.1.2615': attribute type 29 has an invalid length. [ 825.620138][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 825.637719][T15367] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 825.718940][T15367] netlink: 'syz.1.2615': attribute type 2 has an invalid length. [ 825.736857][T15370] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 825.747816][ T30] audit: type=1400 audit(2000000177.564:15530): avc: denied { mount } for pid=15379 comm="syz.5.2620" name="/" dev="mqueue" ino=56857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 825.885936][ T30] audit: type=1400 audit(2000000177.693:15531): avc: denied { bind } for pid=15384 comm="syz.5.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 826.442478][ T30] audit: type=1326 audit(2000000178.164:15532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15391 comm="syz.5.2624" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 826.758055][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 826.935494][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 827.212022][ T29] usb 5-1: USB disconnect, device number 69 [ 827.246058][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 827.374638][T15411] usb usb8: usbfs: process 15411 (syz.4.2628) did not claim interface 0 before use [ 827.450493][T15408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.821584][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 827.885702][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 829.001644][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 829.435583][ T29] libceph: connect (1)[c::]:6789 error -101 [ 829.467965][T15393] ceph: No mds server is up or the cluster is laggy [ 830.139758][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 830.643756][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 830.651147][ T29] libceph: connect (1)[c::]:6789 error -101 [ 830.659657][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 830.669557][ T30] kauditd_printk_skb: 868 callbacks suppressed [ 830.669600][ T30] audit: type=1400 audit(2000000182.076:16401): avc: denied { name_bind } for pid=15445 comm="syz.0.2638" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 831.256006][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 831.397096][ T30] audit: type=1400 audit(2000000182.731:16402): avc: denied { egress } for pid=15440 comm="syz.1.2636" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 831.594641][ T30] audit: type=1400 audit(2000000182.731:16403): avc: denied { sendto } for pid=15440 comm="syz.1.2636" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 832.151148][T15455] netlink: 'syz.5.2640': attribute type 4 has an invalid length. [ 832.159094][T15455] __nla_validate_parse: 2 callbacks suppressed [ 832.161511][T15455] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2640'. [ 832.286838][ T30] audit: type=1400 audit(2000000183.608:16404): avc: denied { setopt } for pid=15452 comm="syz.5.2640" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 832.382904][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 833.510507][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 834.615618][T15464] netlink: 'syz.5.2644': attribute type 1 has an invalid length. [ 834.637131][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 834.675642][T15464] netlink: 'syz.5.2644': attribute type 1 has an invalid length. [ 835.078660][T15475] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 835.398098][ T30] audit: type=1400 audit(2000000186.477:16405): avc: denied { ioctl } for pid=15457 comm="syz.2.2641" path="socket:[56256]" dev="sockfs" ino=56256 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 835.714628][ T5725] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 835.742679][ T24] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 835.764278][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 835.764317][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 835.806646][ T30] audit: type=1400 audit(2000000186.846:16406): avc: denied { bind } for pid=15482 comm="syz.5.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 835.829472][ T30] audit: type=1400 audit(2000000186.874:16407): avc: denied { setopt } for pid=15482 comm="syz.5.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 835.902027][ T30] audit: type=1400 audit(2000000186.920:16408): avc: denied { setopt } for pid=15487 comm="syz.0.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.923021][ T30] audit: type=1400 audit(2000000186.920:16409): avc: denied { write } for pid=15487 comm="syz.0.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 835.948434][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.948708][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.963793][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.988252][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 835.998234][ T24] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 836.008660][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.043238][ T24] usb 2-1: config 0 descriptor?? [ 836.055980][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 836.208362][ T5725] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 836.222376][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.313607][ T30] audit: type=1326 audit(2000000187.317:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.341871][ T5725] usb 5-1: config 0 descriptor?? [ 836.356743][ T30] audit: type=1326 audit(2000000187.317:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.383811][ T30] audit: type=1326 audit(2000000187.317:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.412470][ T30] audit: type=1326 audit(2000000187.317:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.419531][ T24] libceph: connect (1)[c::]:6789 error -101 [ 836.443472][ T30] audit: type=1326 audit(2000000187.317:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.473585][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 836.603201][ T30] audit: type=1326 audit(2000000187.317:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.635155][ T30] audit: type=1326 audit(2000000187.317:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.662147][ T30] audit: type=1326 audit(2000000187.317:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.724258][T15504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 836.733573][ T30] audit: type=1326 audit(2000000187.317:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15480 comm="syz.1.2649" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 836.762524][T15504] overlay: Bad value for 'metacopy' [ 836.799072][ T5725] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 836.816147][ T24] libceph: connect (1)[c::]:6789 error -101 [ 836.822286][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 836.891592][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 836.941730][T15496] syzkaller0: entered promiscuous mode [ 836.963016][T15496] syzkaller0: entered allmulticast mode [ 837.165715][T15477] usb 5-1: string descriptor 0 read error: -71 [ 837.165723][T12089] usb 5-1: USB disconnect, device number 70 [ 837.195496][T15512] netlink: 'syz.4.2647': attribute type 1 has an invalid length. [ 837.259986][ T5725] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 837.275770][T15512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 837.331149][T15477] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 837.343614][T15512] : renamed from dummy0 (while UP) [ 837.379728][ T29] libceph: connect (1)[c::]:6789 error -101 [ 837.386070][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 837.423920][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.446123][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.464901][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 837.488705][ T5725] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 837.509046][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.526615][ T5725] usb 3-1: config 0 descriptor?? [ 837.817287][ T5725] usbhid 3-1:0.0: can't add hid device: -71 [ 837.824094][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 837.834062][ T5725] usb 3-1: USB disconnect, device number 75 [ 837.921012][ T29] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 838.018989][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 838.083615][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 838.088961][T15522] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 838.322209][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 838.335079][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 838.349532][ T29] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 838.359340][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.370795][ T29] usb 1-1: config 0 descriptor?? [ 838.580388][T15528] FAULT_INJECTION: forcing a failure. [ 838.580388][T15528] name failslab, interval 1, probability 0, space 0, times 0 [ 838.593344][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.2.2661 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.593370][T15528] Tainted: [L]=SOFTLOCKUP [ 838.593376][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 838.593386][T15528] Call Trace: [ 838.593392][T15528] [ 838.593399][T15528] dump_stack_lvl+0x100/0x190 [ 838.593425][T15528] should_fail_ex.cold+0x5/0xa [ 838.593446][T15528] should_failslab+0xc2/0x120 [ 838.593466][T15528] kmem_cache_alloc_noprof+0x91/0x6a0 [ 838.593481][T15528] ? __pfx_map_id_range_down+0x10/0x10 [ 838.593493][T15528] ? security_inode_alloc+0x3b/0x2c0 [ 838.593509][T15528] security_inode_alloc+0x3b/0x2c0 [ 838.593525][T15528] inode_init_always_gfp+0xc77/0xfb0 [ 838.593547][T15528] alloc_inode+0x8e/0x250 [ 838.593568][T15528] sock_alloc+0x44/0x280 [ 838.593588][T15528] do_accept+0xf9/0x530 [ 838.593611][T15528] ? do_raw_spin_lock+0x128/0x260 [ 838.593631][T15528] ? __pfx_do_accept+0x10/0x10 [ 838.593655][T15528] __sys_accept4+0x108/0x200 [ 838.593670][T15528] ? __pfx___sys_accept4+0x10/0x10 [ 838.593686][T15528] ? __pfx_ksys_write+0x10/0x10 [ 838.593708][T15528] __x64_sys_accept4+0x96/0x100 [ 838.593731][T15528] ? lockdep_hardirqs_on+0x78/0x100 [ 838.593754][T15528] do_syscall_64+0x115/0x870 [ 838.593776][T15528] ? clear_bhb_loop+0x40/0x90 [ 838.593789][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.593801][T15528] RIP: 0033:0x7f211239de59 [ 838.593811][T15528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.593822][T15528] RSP: 002b:00007f211330e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 838.593833][T15528] RAX: ffffffffffffffda RBX: 00007f2112625fa0 RCX: 00007f211239de59 [ 838.593840][T15528] RDX: 00002000000001c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 838.593852][T15528] RBP: 00007f211330e090 R08: 0000000000000000 R09: 0000000000000000 [ 838.593862][T15528] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 838.593872][T15528] R13: 00007f2112626038 R14: 00007f2112625fa0 R15: 00007ffde9b75ce8 [ 838.593893][T15528] [ 838.821368][T15481] ceph: No mds server is up or the cluster is laggy [ 838.900901][ T9661] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 838.964844][T15515] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.973910][T15515] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.145587][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 839.488121][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 839.495011][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 839.512009][ T29] usb 1-1: USB disconnect, device number 20 [ 839.563934][ T9661] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 839.573754][ T9661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.586676][T15515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 839.594518][ T9661] usb 5-1: Product: syz [ 839.598770][ T9661] usb 5-1: Manufacturer: syz [ 839.603671][ T9661] usb 5-1: SerialNumber: syz [ 839.616689][T15515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 839.626116][ T9661] usb 5-1: config 0 descriptor?? [ 839.634819][ T9661] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 071 [ 840.081235][ T9661] (null): failure reading functionality [ 840.272773][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 840.448937][T15524] hpfs: Bad magic ... probably not HPFS [ 841.399983][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 841.661960][T11850] Bluetooth: hci3: command 0x0405 tx timeout [ 841.748919][ T30] kauditd_printk_skb: 927 callbacks suppressed [ 841.748949][ T30] audit: type=1400 audit(2000000192.336:17344): avc: denied { create } for pid=15554 comm="syz.5.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 841.778095][ T9661] i2c i2c-1: failure reading functionality [ 841.799523][ T9661] i2c i2c-1: connected i2c-tiny-usb device [ 841.831731][ T9661] usb 5-1: USB disconnect, device number 71 [ 842.075735][T15560] xt_cgroup: path and classid specified [ 842.344522][T15565] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 842.527069][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 842.586851][ T30] audit: type=1400 audit(2000000193.102:17345): avc: denied { write } for pid=15561 comm="syz.5.2669" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 843.656042][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 844.478989][T10119] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.499804][T10119] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.529367][T10119] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.538485][T10119] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.597239][ T1221] usb 2-1: USB disconnect, device number 44 [ 844.648812][ T30] audit: type=1400 audit(2000000195.003:17346): avc: denied { create } for pid=15585 comm="syz.0.2676" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.726796][T15589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 844.763393][T15589] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2676'. [ 844.781423][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 844.803107][ T30] audit: type=1400 audit(2000000195.141:17347): avc: denied { write } for pid=15585 comm="syz.0.2676" name="file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.857066][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 844.895214][ T30] audit: type=1400 audit(2000000195.141:17348): avc: denied { open } for pid=15585 comm="syz.0.2676" path="/55/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 844.952973][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 844.986939][T15587] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2676'. [ 845.000613][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 845.020993][ T30] audit: type=1400 audit(2000000195.344:17349): avc: denied { ioctl } for pid=15594 comm="syz.5.2678" path="socket:[57555]" dev="sockfs" ino=57555 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 845.246496][T15590] block device autoloading is deprecated and will be removed. [ 845.349998][ T30] audit: type=1400 audit(2000000195.649:17350): avc: denied { unlink } for pid=14034 comm="syz-executor" name="file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 845.446983][ T30] audit: type=1400 audit(2000000195.741:17351): avc: denied { bind } for pid=15600 comm="syz.0.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 845.908344][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 846.591319][ T30] audit: type=1800 audit(2000000196.747:17352): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2680" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 846.919445][T15609] FAULT_INJECTION: forcing a failure. [ 846.919445][T15609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.934031][T15609] CPU: 0 UID: 0 PID: 15609 Comm: syz.0.2681 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.934063][T15609] Tainted: [L]=SOFTLOCKUP [ 846.934070][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 846.934081][T15609] Call Trace: [ 846.934087][T15609] [ 846.934095][T15609] dump_stack_lvl+0x100/0x190 [ 846.934123][T15609] should_fail_ex.cold+0x5/0xa [ 846.934146][T15609] _copy_from_iter+0x1f4/0x1690 [ 846.934171][T15609] ? __asan_memset+0x23/0x50 [ 846.934200][T15609] ? __pfx__copy_from_iter+0x10/0x10 [ 846.934221][T15609] ? __pfx___alloc_skb+0x10/0x10 [ 846.934259][T15609] netlink_sendmsg+0x808/0xda0 [ 846.934290][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.934313][T15609] ? __might_fault+0xc0/0x140 [ 846.934352][T15609] ____sys_sendmsg+0xa4d/0xbe0 [ 846.934372][T15609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 846.934399][T15609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.934433][T15609] ___sys_sendmsg+0x190/0x1e0 [ 846.934466][T15609] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.934488][T15609] ? __lock_acquire+0x49f/0x1a40 [ 846.934509][T15609] ? get_pid_task+0x106/0x250 [ 846.934563][T15609] __sys_sendmsg+0x160/0x210 [ 846.934583][T15609] ? __pfx___sys_sendmsg+0x10/0x10 [ 846.934614][T15609] do_syscall_64+0x115/0x870 [ 846.934640][T15609] ? clear_bhb_loop+0x40/0x90 [ 846.934663][T15609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.934682][T15609] RIP: 0033:0x7f967519de59 [ 846.934700][T15609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.934718][T15609] RSP: 002b:00007f967608a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.934736][T15609] RAX: ffffffffffffffda RBX: 00007f9675425fa0 RCX: 00007f967519de59 [ 846.934748][T15609] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 846.934759][T15609] RBP: 00007f967608a090 R08: 0000000000000000 R09: 0000000000000000 [ 846.934771][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.934781][T15609] R13: 00007f9675426038 R14: 00007f9675425fa0 R15: 00007fff76cc6ee8 [ 846.934807][T15609] [ 847.148590][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 847.469227][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 848.249806][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 848.359206][ T30] audit: type=1400 audit(2000000198.408:17353): avc: denied { watch watch_reads } for pid=15616 comm="syz.4.2684" path="/510" dev="tmpfs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 848.456803][ T30] audit: type=1400 audit(2000000198.463:17354): avc: denied { watch_sb } for pid=15616 comm="syz.4.2684" path="/510" dev="tmpfs" ino=2679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 848.456882][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2685'. [ 848.515911][ T30] audit: type=1400 audit(2000000198.565:17355): avc: denied { ioctl } for pid=15622 comm="syz.1.2686" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 848.561103][ T30] audit: type=1400 audit(2000000198.565:17356): avc: denied { bind } for pid=15622 comm="syz.1.2686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 848.593629][ T30] audit: type=1400 audit(2000000198.574:17357): avc: denied { node_bind } for pid=15622 comm="syz.1.2686" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 848.619977][ T30] audit: type=1400 audit(2000000198.611:17358): avc: denied { listen } for pid=15618 comm="syz.2.2685" laddr=::ac14:14aa lport=33276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 848.679200][ T30] audit: type=1400 audit(2000000198.611:17359): avc: denied { accept } for pid=15618 comm="syz.2.2685" laddr=::ac14:14aa lport=33276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 848.796848][T15634] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 848.845571][T12089] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 848.884233][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 848.894016][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 848.911231][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 849.048082][T12089] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.127226][T12089] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 849.157726][T12089] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 849.184345][T12089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.201865][ T30] audit: type=1400 audit(2000000199.201:17360): avc: denied { create } for pid=15638 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 849.243885][T12089] usb 1-1: config 0 descriptor?? [ 849.303191][ T30] audit: type=1400 audit(2000000199.293:17361): avc: denied { read append } for pid=15636 comm="syz.4.2692" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 849.376729][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 849.496901][ T30] audit: type=1400 audit(2000000199.293:17362): avc: denied { open } for pid=15636 comm="syz.4.2692" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 849.561662][T15645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 849.569027][T15645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 849.575345][T15645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 849.581309][T15645] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 849.587278][T15645] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 849.613675][T15645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 849.620781][T15645] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 849.634632][T15645] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 849.645526][T12089] libceph: connect (1)[c::]:6789 error -101 [ 849.654604][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 849.681545][T12089] libceph: connect (1)[c::]:6789 error -101 [ 849.693531][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 849.972274][T15657] syzkaller0: entered promiscuous mode [ 849.984163][T12089] libceph: connect (1)[c::]:6789 error -101 [ 849.990761][T15657] syzkaller0: entered allmulticast mode [ 849.991194][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 850.503928][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 850.547418][T12089] libceph: connect (1)[c::]:6789 error -101 [ 850.554222][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 850.708819][T15678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15678 comm=syz.5.2699 [ 850.771474][T15678] netdevsim netdevsim5 ªªªªª»: renamed from netdevsim0 (while UP) [ 850.862733][T15680] fuse: Bad value for 'fd' [ 851.630743][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 851.804421][T11850] Bluetooth: hci3: command 0x0405 tx timeout [ 851.804441][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 851.804475][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 851.810541][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 851.816912][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 851.826637][T15627] ceph: No mds server is up or the cluster is laggy [ 852.057681][T15689] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 852.099770][T15689] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 852.137000][T15689] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 852.220488][T15694] FAULT_INJECTION: forcing a failure. [ 852.220488][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 852.273971][T15694] CPU: 0 UID: 0 PID: 15694 Comm: syz.5.2704 Tainted: G L syzkaller #0 PREEMPT(full) [ 852.273991][T15694] Tainted: [L]=SOFTLOCKUP [ 852.273995][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 852.274001][T15694] Call Trace: [ 852.274006][T15694] [ 852.274010][T15694] dump_stack_lvl+0x100/0x190 [ 852.274028][T15694] should_fail_ex.cold+0x5/0xa [ 852.274042][T15694] should_failslab+0xc2/0x120 [ 852.274056][T15694] __kvmalloc_node_noprof+0x116/0x970 [ 852.274068][T15694] ? seq_read_iter+0x819/0x1270 [ 852.274087][T15694] seq_read_iter+0x819/0x1270 [ 852.274109][T15694] seq_read+0x344/0x4d0 [ 852.274124][T15694] ? __pfx_seq_read+0x10/0x10 [ 852.274140][T15694] ? lock_acquire+0x1b9/0x370 [ 852.274158][T15694] ? avc_policy_seqno+0x9/0x20 [ 852.274169][T15694] ? selinux_file_permission+0x8f/0x6d0 [ 852.274187][T15694] ? rw_verify_area+0xce/0x6d0 [ 852.274200][T15694] ? __pfx_seq_read+0x10/0x10 [ 852.274216][T15694] vfs_read+0x1e4/0xb40 [ 852.274233][T15694] ? __pfx_vfs_read+0x10/0x10 [ 852.274247][T15694] ? __fget_files+0x215/0x3d0 [ 852.274269][T15694] ? __fget_files+0x21f/0x3d0 [ 852.274299][T15694] ksys_read+0x12a/0x250 [ 852.274321][T15694] ? __pfx_ksys_read+0x10/0x10 [ 852.274353][T15694] do_syscall_64+0x115/0x870 [ 852.274382][T15694] ? clear_bhb_loop+0x40/0x90 [ 852.274399][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.274411][T15694] RIP: 0033:0x7fbdb059de59 [ 852.274421][T15694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.274432][T15694] RSP: 002b:00007fbdb145a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 852.274443][T15694] RAX: ffffffffffffffda RBX: 00007fbdb0826180 RCX: 00007fbdb059de59 [ 852.274451][T15694] RDX: 0000000000002020 RSI: 0000200000005380 RDI: 0000000000000003 [ 852.274457][T15694] RBP: 00007fbdb145a090 R08: 0000000000000000 R09: 0000000000000000 [ 852.274463][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.274469][T15694] R13: 00007fbdb0826218 R14: 00007fbdb0826180 R15: 00007ffda91ae988 [ 852.274483][T15694] [ 852.508310][T15643] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 852.765818][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 852.998008][T15689] Process accounting resumed [ 853.820113][ T5711] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 853.861255][ T30] kauditd_printk_skb: 1313 callbacks suppressed [ 853.861272][ T30] audit: type=1400 audit(2000000203.501:18676): avc: denied { ioctl } for pid=15716 comm="syz.4.2709" path="socket:[58774]" dev="sockfs" ino=58774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 853.893166][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 854.058336][T11850] Bluetooth: hci3: command 0x0405 tx timeout [ 854.064638][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 854.089372][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 854.096499][ T5711] usb 2-1: unable to get BOS descriptor or descriptor too short [ 854.184270][ T5711] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1415, setting to 1024 [ 854.269927][ T5711] usb 2-1: config 1 interface 0 has no altsetting 0 [ 854.537422][ T5711] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 854.556864][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.586218][ T5711] usb 2-1: Product: syz [ 854.595842][ T5711] usb 2-1: Manufacturer: syz [ 854.616098][ T5711] usb 2-1: SerialNumber: syz [ 854.650875][T15712] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 854.758616][ T4927] Bluetooth: hci0: command 0x0c1a tx timeout [ 854.871917][ T30] audit: type=1400 audit(2000000204.433:18677): avc: denied { read } for pid=15728 comm="syz.4.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 855.020587][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 855.029252][T12089] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 855.201429][T12089] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.224721][T12089] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 855.234811][T12089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.251822][T12089] usb 3-1: Product: syz [ 855.269151][T12089] usb 3-1: Manufacturer: syz [ 855.276572][T12089] usb 3-1: SerialNumber: syz [ 855.299889][T12089] usb 3-1: config 0 descriptor?? [ 855.307636][T12089] cytherm 3-1:0.0: Cypress thermometer device now attached [ 855.468849][ T5711] usbhid 2-1:1.0: can't add hid device: -71 [ 855.487190][ T5711] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 855.504995][ T5711] usb 2-1: USB disconnect, device number 45 [ 855.632371][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.701832][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.741784][ T9661] usb 3-1: USB disconnect, device number 76 [ 855.749493][ T9661] cytherm 3-1:0.0: Cypress thermometer now disconnected [ 855.915485][ T30] audit: type=1400 audit(2000000205.402:18678): avc: denied { create } for pid=15733 comm="syz.4.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 856.139739][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 856.314038][ T4927] Bluetooth: hci3: command 0x0405 tx timeout [ 856.319714][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 856.326692][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 856.648588][ T29] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 856.867190][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.878325][ T29] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 856.887554][ T29] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 856.896933][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.907585][ T29] usb 3-1: config 0 descriptor?? [ 856.915647][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 856.922644][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 856.943250][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 856.952479][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 856.959854][ T29] usb 3-1: media controller created [ 856.966493][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 856.982510][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 856.991994][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 857.003178][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 857.021540][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 857.030794][ T30] audit: type=1400 audit(2000000206.426:18679): avc: denied { read } for pid=4962 comm="acpid" name="event4" dev="devtmpfs" ino=3809 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 857.053937][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 857.064562][ T30] audit: type=1400 audit(2000000206.426:18680): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3809 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 857.088665][ T30] audit: type=1400 audit(2000000206.426:18681): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3809 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 857.141028][ T30] audit: type=1400 audit(2000000206.537:18682): avc: denied { write } for pid=15738 comm="syz.2.2716" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 857.223005][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 857.262200][T15743] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 857.268806][T15743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 857.277490][T15743] vhci_hcd vhci_hcd.0: Device attached [ 857.283057][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 857.402375][ T29] dvb-usb: error while querying for an remote control event. [ 857.602518][ T5711] usb 38-1: SetAddress Request (2) to port 0 [ 857.609812][ T5711] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 857.631506][T12089] usb 1-1: USB disconnect, device number 21 [ 858.393619][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 858.589548][ T30] audit: type=1400 audit(2000000207.865:18683): avc: denied { getopt } for pid=15748 comm="syz.0.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 859.153073][ T29] dvb-usb: bulk message failed: -22 (1/0) [ 859.398174][T15744] vhci_hcd: connection reset by peer [ 859.408026][ T29] dvb-usb: error while querying for an remote control event. [ 859.419372][ T5818] vhci_hcd vhci_hcd.2: stop threads [ 859.427617][ T1221] usb 3-1: USB disconnect, device number 77 [ 859.455555][ T5818] vhci_hcd vhci_hcd.2: release socket [ 859.492830][ T5818] vhci_hcd vhci_hcd.2: disconnect device [ 859.521038][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 859.539359][ T1221] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 859.715200][ T30] audit: type=1400 audit(2000000208.908:18684): avc: denied { write } for pid=15765 comm="syz.4.2724" name="event3" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 859.741971][ T30] audit: type=1400 audit(2000000208.908:18685): avc: denied { open } for pid=15765 comm="syz.4.2724" path="/dev/input/event3" dev="devtmpfs" ino=925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 860.555255][ T30] audit: type=1400 audit(2000000209.683:18686): avc: denied { listen } for pid=15770 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 860.579118][ T30] audit: type=1400 audit(2000000209.683:18687): avc: denied { accept } for pid=15770 comm="syz.0.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 860.647805][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 860.919415][ T30] audit: type=1400 audit(2000000210.024:18688): avc: denied { read } for pid=15776 comm="syz.4.2727" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 860.955248][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 860.970758][ T30] audit: type=1400 audit(2000000210.024:18689): avc: denied { ioctl } for pid=15776 comm="syz.4.2727" path="/dev/input/event0" dev="devtmpfs" ino=919 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 861.125570][ T29] usb 1-1: Using ep0 maxpacket: 16 [ 861.149697][ T29] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 861.172147][ T29] usb 1-1: config 0 has no interface number 0 [ 861.182948][T15784] netlink: 'syz.1.2731': attribute type 1 has an invalid length. [ 861.200646][ T29] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 861.229110][ T29] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 861.255265][ T29] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 861.269367][ T30] audit: type=1400 audit(2000000210.347:18690): avc: denied { map } for pid=15787 comm="syz.4.2732" path="socket:[58980]" dev="sockfs" ino=58980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 861.270121][ T29] usb 1-1: Product: syz [ 861.316794][ T29] usb 1-1: SerialNumber: syz [ 861.340523][ T29] usb 1-1: config 0 descriptor?? [ 861.362146][ T29] cm109 1-1:0.8: invalid payload size 40, expected 4 [ 861.389018][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input35 [ 861.775263][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 862.090492][ T9661] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 862.222041][T15797] tipc: Started in network mode [ 862.226942][T15797] tipc: Node identity ac14142f, cluster identity 4711 [ 862.234386][T15797] tipc: Enabling of bearer rejected, failed to enable media [ 862.274964][ T9661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 862.290064][ T9661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 862.302271][ T9661] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 862.315684][ T9661] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 862.326680][ T9661] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.347901][ T9661] usb 2-1: Product: syz [ 862.352354][ T9661] usb 2-1: Manufacturer: syz [ 862.367961][ T9661] usb 2-1: SerialNumber: syz [ 862.377811][ T9661] usb 2-1: config 0 descriptor?? [ 862.573114][ C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 862.580327][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.587766][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.595159][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.602554][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.609763][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.616906][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.624025][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.631171][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.638281][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.645693][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 862.670624][ T29] usb 1-1: USB disconnect, device number 22 [ 862.676620][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 862.720917][ T29] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 862.770530][ T9661] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 862.901969][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 863.264025][ T5711] usb 38-1: device descriptor read/8, error -110 [ 863.351091][ T1221] usb 2-1: USB disconnect, device number 46 [ 863.708773][ T5711] usb usb38-port1: attempt power cycle [ 863.731192][T15814] openvswitch: netlink: Message has 4 unknown bytes. [ 863.752635][T15814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 864.030466][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 864.208255][ T29] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 864.313424][T15830] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 864.365167][ T29] usb 5-1: device descriptor read/64, error -71 [ 864.609203][ T30] audit: type=1400 audit(2000000213.420:18691): avc: denied { create } for pid=15831 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 864.647660][ T30] audit: type=1400 audit(2000000213.448:18692): avc: denied { write } for pid=15831 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 864.668910][ T29] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 864.750378][T15840] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 864.799526][ T5711] usb usb38-port1: unable to enumerate USB device [ 864.852874][ T29] usb 5-1: device descriptor read/64, error -71 [ 865.035321][ T29] usb usb5-port1: attempt power cycle [ 865.156220][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 865.536258][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 865.673731][ T29] usb 5-1: device descriptor read/8, error -71 [ 865.754262][ T30] audit: type=1400 audit(2000000214.481:18693): avc: denied { bind } for pid=15848 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 865.888188][ T30] audit: type=1400 audit(2000000214.601:18694): avc: denied { read } for pid=15848 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 866.283893][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 866.487379][ T30] audit: type=1400 audit(2000000215.155:18695): avc: denied { create } for pid=15848 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 866.531972][ T30] audit: type=1400 audit(2000000215.155:18696): avc: denied { write } for pid=15848 comm="syz.5.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 866.554750][ T29] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 866.609402][ T29] usb 5-1: device descriptor read/8, error -71 [ 866.815385][ T29] usb usb5-port1: unable to enumerate USB device [ 867.241067][ T4927] Bluetooth: hci3: command 0x0405 tx timeout [ 867.411920][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 868.187158][T15881] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 868.538289][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 868.766507][ T5711] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 868.874814][T15891] FAULT_INJECTION: forcing a failure. [ 868.874814][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.922512][T15891] CPU: 1 UID: 0 PID: 15891 Comm: syz.1.2758 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.922541][T15891] Tainted: [L]=SOFTLOCKUP [ 868.922547][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.922556][T15891] Call Trace: [ 868.922562][T15891] [ 868.922569][T15891] dump_stack_lvl+0x100/0x190 [ 868.922597][T15891] should_fail_ex.cold+0x5/0xa [ 868.922619][T15891] _copy_from_user+0x2e/0xd0 [ 868.922640][T15891] copy_msghdr_from_user+0x9f/0x4c0 [ 868.922663][T15891] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 868.922695][T15891] ___sys_sendmsg+0x106/0x1e0 [ 868.922719][T15891] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.922738][T15891] ? __lock_acquire+0x49f/0x1a40 [ 868.922758][T15891] ? get_pid_task+0x106/0x250 [ 868.922805][T15891] __sys_sendmsg+0x160/0x210 [ 868.922825][T15891] ? __pfx___sys_sendmsg+0x10/0x10 [ 868.922855][T15891] do_syscall_64+0x115/0x870 [ 868.922880][T15891] ? clear_bhb_loop+0x40/0x90 [ 868.922901][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.922916][T15891] RIP: 0033:0x7ff4c4d9de59 [ 868.922932][T15891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.922949][T15891] RSP: 002b:00007ff4c5cfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.922966][T15891] RAX: ffffffffffffffda RBX: 00007ff4c5025fa0 RCX: 00007ff4c4d9de59 [ 868.922979][T15891] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 868.922990][T15891] RBP: 00007ff4c5cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 868.923001][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.923012][T15891] R13: 00007ff4c5026038 R14: 00007ff4c5025fa0 R15: 00007ffe4fdbb2a8 [ 868.923035][T15891] [ 869.124345][ T5711] usb 5-1: config 0 has no interfaces? [ 869.126546][ T5711] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 869.126573][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.126593][ T5711] usb 5-1: Product: syz [ 869.126607][ T5711] usb 5-1: Manufacturer: syz [ 869.126623][ T5711] usb 5-1: SerialNumber: syz [ 869.128901][ T5711] usb 5-1: config 0 descriptor?? [ 869.161436][T15897] __nla_validate_parse: 1 callbacks suppressed [ 869.161454][T15897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2759'. [ 869.254567][ T30] audit: type=1326 audit(2000000217.711:18697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.381013][ T30] audit: type=1326 audit(2000000217.711:18698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.412686][ T29] usb 5-1: USB disconnect, device number 76 [ 869.476410][ T30] audit: type=1326 audit(2000000217.711:18699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.503873][ T30] audit: type=1326 audit(2000000217.711:18700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.530768][ T30] audit: type=1326 audit(2000000217.757:18701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.558264][ T30] audit: type=1326 audit(2000000217.757:18702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15901 comm="syz.1.2762" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff4c4d9de59 code=0x7ffc0000 [ 869.665051][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 869.729771][ T5711] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 869.903987][ T5711] usb 2-1: Using ep0 maxpacket: 16 [ 869.917318][ T5711] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 869.929781][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 869.952372][ T5711] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 869.967967][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.979933][T15921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.986579][ T5711] usb 2-1: Product: syz [ 869.991026][ T5711] usb 2-1: Manufacturer: syz [ 869.997709][ T5711] usb 2-1: SerialNumber: syz [ 870.003413][T15921] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.037936][ T5711] usb 2-1: config 0 descriptor?? [ 870.061441][T15921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.141610][ T5711] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 870.202082][T15921] wireguard: wg0: Could not create IPv4 socket [ 870.208940][T15921] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 870.275659][ T5711] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 870.792437][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 871.270925][ T5711] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 871.919988][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 872.152780][ T5711] em28xx 2-1:0.0: Config register raw data: 0xe1 [ 872.362896][ T5711] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 872.375758][T15934] Failed to initialize the IGMP autojoin socket (err -2) [ 872.383504][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 872.383520][ T30] audit: type=1400 audit(2000000219.962:18749): avc: denied { read } for pid=15926 comm="syz.4.2768" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 872.390427][ T5711] em28xx 2-1:0.0: No AC97 audio processor [ 872.540553][T15942] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 872.556422][T15942] Error validating options; rc = [-22] [ 872.649989][ T5711] usb 2-1: USB disconnect, device number 47 [ 872.774409][ T30] audit: type=1400 audit(2000000220.949:18750): avc: denied { setopt } for pid=15941 comm="syz.2.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 872.829454][ T29] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 873.046597][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 873.089410][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 873.096333][ T29] usb 1-1: config 0 has no interfaces? [ 873.102103][ T29] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 873.111262][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.122351][ T29] usb 1-1: config 0 descriptor?? [ 873.343012][T15947] sctp: [Deprecated]: syz.1.2774 (pid 15947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.343012][T15947] Use struct sctp_sack_info instead [ 873.357101][ T5703] usb 1-1: USB disconnect, device number 23 [ 873.367378][ T30] audit: type=1400 audit(2000000221.503:18751): avc: denied { getopt } for pid=15946 comm="syz.1.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 873.405418][ T30] audit: type=1400 audit(2000000221.531:18752): avc: denied { write } for pid=15946 comm="syz.1.2774" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 873.600139][T15951] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2776'. [ 873.788064][T15961] nbd: device at index 0 is going down [ 874.173246][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 875.045568][ T5703] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 875.235454][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 875.302317][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 875.435909][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 875.448798][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 875.526449][ T5703] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 875.553790][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.575392][ T5703] usb 1-1: config 0 descriptor?? [ 875.989945][T15943] Set syz1 is full, maxelem 65536 reached [ 876.060919][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.075606][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.090385][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.105488][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.119318][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.133880][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.157837][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.169651][ T5703] waltop 0003:172F:0037.001E: unknown main item tag 0x0 [ 876.403401][T15969] Failed to initialize the IGMP autojoin socket (err -2) [ 876.412685][ T5703] waltop 0003:172F:0037.001E: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.0-1/input0 [ 876.427585][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 876.542984][ T5703] usb 1-1: USB disconnect, device number 24 [ 876.693642][T15990] fido_id[15990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 877.382116][T16002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2789'. [ 877.391258][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 877.510111][ T30] audit: type=1400 audit(2000000225.203:18753): avc: denied { lock } for pid=15998 comm="syz.2.2789" path="socket:[60450]" dev="sockfs" ino=60450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 877.555316][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 878.302624][ T5703] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 878.405713][ T30] audit: type=1326 audit(2000000226.153:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15972 comm="syz.5.2782" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7fc00000 [ 878.456202][ T30] audit: type=1400 audit(2000000226.070:18754): avc: denied { write } for pid=16003 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 878.485618][ T30] audit: type=1400 audit(2000000226.227:18756): avc: denied { bind } for pid=16003 comm="syz.1.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 878.530807][ T5703] usb 5-1: Using ep0 maxpacket: 16 [ 878.557908][ T30] audit: type=1400 audit(2000000226.282:18757): avc: denied { read write } for pid=16003 comm="syz.1.2791" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 878.559214][ T5703] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 878.620288][ T30] audit: type=1400 audit(2000000226.282:18758): avc: denied { open } for pid=16003 comm="syz.1.2791" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 878.627933][ T5703] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.681762][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 878.685924][ T5703] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.691312][ T30] audit: type=1400 audit(2000000226.393:18759): avc: denied { setopt } for pid=16011 comm="syz.2.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 878.707925][ T5703] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 878.759735][ T5703] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 878.782010][ T5703] usb 5-1: config 0 has no interface number 0 [ 878.799597][ T5703] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 878.824811][ T5703] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 878.849068][ T5703] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 878.872198][ T5703] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.904363][ T5703] usb 5-1: config 0 interface 125 has no altsetting 0 [ 878.919984][ T5703] usb 5-1: config 0 interface 125 has no altsetting 2 [ 878.939047][ T5703] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 878.961080][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.980194][ T5703] usb 5-1: Product: syz [ 878.990631][ T5703] usb 5-1: Manufacturer: syz [ 879.002121][ T5703] usb 5-1: SerialNumber: syz [ 879.017911][ T5703] usb 5-1: config 0 descriptor?? [ 879.037079][ T5703] usb 5-1: selecting invalid altsetting 2 [ 879.752895][T16019] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2795'. [ 879.809160][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 879.903925][ T30] audit: type=1400 audit(2000000227.510:18760): avc: denied { associate } for pid=16017 comm="syz.2.2795" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 880.861025][ T5703] usb 5-1: USB disconnect, device number 77 [ 880.936205][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 881.246080][ T30] audit: type=1400 audit(2000000228.774:18761): avc: denied { write } for pid=16029 comm="syz.0.2798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 881.360576][ T30] audit: type=1400 audit(2000000228.884:18762): avc: denied { map } for pid=16029 comm="syz.0.2798" path="socket:[60555]" dev="sockfs" ino=60555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 881.840158][ T30] audit: type=1400 audit(2000000229.309:18763): avc: denied { append } for pid=16038 comm="syz.4.2800" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 882.063410][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 883.190549][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 883.293416][T16055] FAULT_INJECTION: forcing a failure. [ 883.293416][T16055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.306905][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.1.2805 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.306934][T16055] Tainted: [L]=SOFTLOCKUP [ 883.306941][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.306952][T16055] Call Trace: [ 883.306958][T16055] [ 883.306965][T16055] dump_stack_lvl+0x100/0x190 [ 883.306992][T16055] should_fail_ex.cold+0x5/0xa [ 883.307019][T16055] _copy_from_user+0x2e/0xd0 [ 883.307042][T16055] __sys_bpf+0x2f5/0x4e80 [ 883.307076][T16055] ? __pfx___sys_bpf+0x10/0x10 [ 883.307103][T16055] ? finish_task_switch.isra.0+0x3b6/0x10c0 [ 883.307128][T16055] ? kvm_sched_clock_read+0x11/0x20 [ 883.307151][T16055] ? sched_clock+0x38/0x60 [ 883.307172][T16055] ? sched_clock_cpu+0x6c/0x570 [ 883.307191][T16055] ? lock_acquire+0x1b9/0x370 [ 883.307211][T16055] ? __pfx_sched_clock_cpu+0x10/0x10 [ 883.307233][T16055] ? find_held_lock+0x2b/0x80 [ 883.307263][T16055] ? rcu_is_watching+0x12/0xc0 [ 883.307290][T16055] ? trace_sched_exit_tp+0x120/0x160 [ 883.307316][T16055] ? __schedule+0x126e/0x6730 [ 883.307352][T16055] ? __pfx___schedule+0x10/0x10 [ 883.307383][T16055] ? __x64_sys_bpf+0xce/0x140 [ 883.307410][T16055] __x64_sys_bpf+0xce/0x140 [ 883.307438][T16055] ? do_syscall_64+0x90/0x870 [ 883.307464][T16055] do_syscall_64+0x115/0x870 [ 883.307487][T16055] ? clear_bhb_loop+0x40/0x90 [ 883.307509][T16055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.307528][T16055] RIP: 0033:0x7ff4c4d9de59 [ 883.307543][T16055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.307566][T16055] RSP: 002b:00007ff4c5cdc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 883.307584][T16055] RAX: ffffffffffffffda RBX: 00007ff4c5026090 RCX: 00007ff4c4d9de59 [ 883.307596][T16055] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 883.307607][T16055] RBP: 00007ff4c5cdc090 R08: 0000000000000000 R09: 0000000000000000 [ 883.307618][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.307628][T16055] R13: 00007ff4c5026128 R14: 00007ff4c5026090 R15: 00007ffe4fdbb2a8 [ 883.307652][T16055] [ 884.057383][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 884.317892][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 884.447456][ T1221] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 884.791231][T16030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.818739][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 884.837098][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 884.885938][T12089] libceph: connect (1)[c::]:6789 error -101 [ 884.899224][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 884.937790][ T1221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.962078][ T1221] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 884.981222][ T1221] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 885.015907][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.048037][ T1221] usb 3-1: config 0 descriptor?? [ 885.119732][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 885.135948][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 885.195959][T12089] libceph: connect (1)[c::]:6789 error -101 [ 885.202250][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 885.288477][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 885.288493][ T30] audit: type=1326 audit(2000000232.501:18765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.322022][ T30] audit: type=1326 audit(2000000232.501:18766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.380477][T12089] libceph: connect (1)[c::]:6789 error -97 [ 885.389758][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 885.397208][T12089] libceph: connect (1)[c::]:6789 error -97 [ 885.404357][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 885.423362][ T1221] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 885.444660][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 885.462535][ T30] audit: type=1326 audit(2000000232.501:18767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.526205][ T30] audit: type=1326 audit(2000000232.501:18768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.590345][ T1221] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 885.593911][ T30] audit: type=1326 audit(2000000232.501:18769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.599929][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.642122][ T1221] usb 1-1: Product: syz [ 885.646381][ T1221] usb 1-1: Manufacturer: syz [ 885.651440][ T1221] usb 1-1: SerialNumber: syz [ 885.663415][ T1221] usb 1-1: config 0 descriptor?? [ 885.679821][ T1221] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 885.687451][T12089] libceph: connect (1)[c::]:6789 error -97 [ 885.688080][ T30] audit: type=1326 audit(2000000232.501:18770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.696615][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 885.720396][ T5703] libceph: connect (1)[c::]:6789 error -101 [ 885.727042][T16070] ceph: No mds server is up or the cluster is laggy [ 885.731953][T16065] ceph: No mds server is up or the cluster is laggy [ 885.759209][ T5703] libceph: mon0 (1)[c::]:6789 connect error [ 885.767833][T12089] libceph: connect (1)[c::]:6789 error -101 [ 885.779094][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 885.808795][ T30] audit: type=1326 audit(2000000232.501:18771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.856034][ T30] audit: type=1326 audit(2000000232.501:18772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.898353][ T30] audit: type=1326 audit(2000000232.501:18773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 885.931867][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.009063][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.029951][ T30] audit: type=1326 audit(2000000232.501:18774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211239de59 code=0x7ffc0000 [ 886.049825][T16082] netlink: 'syz.0.2810': attribute type 7 has an invalid length. [ 886.272754][ T1221] gspca_stk1135: reg_w 0x2 err -110 [ 886.399863][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.422282][T12089] libceph: connect (1)[c::]:6789 error -97 [ 886.443333][ T1221] gspca_stk1135: Sensor write failed [ 886.453223][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 886.459441][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.467592][ T1221] gspca_stk1135: Sensor write failed [ 886.473016][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.481794][ T1221] gspca_stk1135: Sensor read failed [ 886.488135][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.494526][ T1221] gspca_stk1135: Sensor read failed [ 886.538854][ T1221] gspca_stk1135: Detected sensor type unknown (0x0) [ 886.572058][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 886.673724][T16096] devpts: Bad value for 'max' [ 886.819030][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.897698][T16091] syzkaller0: entered promiscuous mode [ 886.908664][ T1221] gspca_stk1135: Sensor read failed [ 886.921986][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.933836][T16091] syzkaller0: entered allmulticast mode [ 886.934024][ T1221] gspca_stk1135: Sensor read failed [ 886.946450][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.966957][ T1221] gspca_stk1135: Sensor write failed [ 886.991001][ T1221] gspca_stk1135: serial bus timeout: status=0x00 [ 886.999313][ T1221] gspca_stk1135: Sensor write failed [ 887.028174][ T1221] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 887.059399][ T1221] usb 1-1: USB disconnect, device number 25 [ 887.698813][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 887.959257][ T1221] libceph: connect (1)[c::]:6789 error -97 [ 887.975403][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 888.097944][T16059] ceph: No mds server is up or the cluster is laggy [ 888.835421][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 888.919972][T16110] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 889.916655][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2825'. [ 889.953122][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 889.953136][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2825'. [ 891.080539][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 892.212373][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 892.658860][T16130] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 892.676385][ T1221] usb 3-1: USB disconnect, device number 78 [ 893.334699][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 894.461709][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 894.486302][ T30] kauditd_printk_skb: 4351 callbacks suppressed [ 894.486327][ T30] audit: type=1326 audit(2000000240.990:23126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.565214][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 894.573182][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 894.590073][ T30] audit: type=1326 audit(2000000240.990:23127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.646258][ T30] audit: type=1326 audit(2000000240.990:23128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.704760][ T30] audit: type=1326 audit(2000000240.990:23129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.736358][ T30] audit: type=1326 audit(2000000240.990:23130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.766883][ T30] audit: type=1326 audit(2000000240.990:23131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.795461][ T30] audit: type=1326 audit(2000000240.990:23132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16170 comm="syz.5.2837" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 894.889808][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 894.903220][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 894.915854][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 894.925356][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 894.932926][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 894.975991][T16179] audit: audit_backlog=65 > audit_backlog_limit=64 [ 894.982591][T16179] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 894.990382][T16179] audit: backlog limit exceeded [ 895.404917][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 895.411072][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 895.588992][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 895.820995][T16191] tipc: Started in network mode [ 895.848900][T16191] tipc: Node identity 0a50abc67213, cluster identity 4711 [ 895.856511][T16191] tipc: Enabled bearer , priority 0 [ 895.958799][T16195] syzkaller0: entered promiscuous mode [ 896.006716][T16195] syzkaller0: entered allmulticast mode [ 896.045349][T16191] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 896.180428][ T1221] libceph: connect (1)[c::]:6789 error -101 [ 896.187650][ T1221] libceph: mon0 (1)[c::]:6789 connect error [ 896.239094][T16179] Failed to initialize the IGMP autojoin socket (err -2) [ 896.268078][T16191] tipc: Resetting bearer [ 896.591873][T16244] input: syz0 as /devices/virtual/input/input36 [ 896.691166][T16188] tipc: Resetting bearer [ 896.716130][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 896.725189][T16188] tipc: Disabling bearer [ 896.829748][T16179] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.854051][T16179] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.881113][T16179] bridge_slave_0: entered allmulticast mode [ 896.900124][T16179] bridge_slave_0: entered promiscuous mode [ 896.916774][T16179] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.925925][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2844'. [ 896.939101][T16179] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.948219][T16179] bridge_slave_1: entered allmulticast mode [ 896.956605][T16179] bridge_slave_1: entered promiscuous mode [ 897.016866][T16260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16260 comm=syz.0.2844 [ 897.063359][T16179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.093665][T16179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.152958][T11850] Bluetooth: hci0: command tx timeout [ 897.234911][T16179] team0: Port device team_slave_0 added [ 897.284288][T16179] team0: Port device team_slave_1 added [ 897.479352][T16179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.633870][T16171] ceph: No mds server is up or the cluster is laggy [ 897.646233][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.762683][T12089] libceph: connect (1)[c::]:6789 error -101 [ 897.821010][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 897.843896][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 897.852715][T16179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.897276][T12089] libceph: connect (1)[c::]:6789 error -101 [ 897.911217][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 898.294329][T16179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.325529][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.404008][T16179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.405844][T16278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=16278 comm=syz.5.2849 [ 898.496955][T16278] fuse: Bad value for 'fd' [ 898.600300][T16285] overlayfs: missing 'workdir' [ 898.628580][T16179] hsr_slave_0: entered promiscuous mode [ 898.656742][T16179] hsr_slave_1: entered promiscuous mode [ 898.669262][T16179] debugfs: 'hsr0' already exists in 'hsr' [ 898.686063][T16179] Cannot create hsr debugfs directory [ 898.885708][T16290] usb usb5: usbfs: process 16290 (syz.2.2854) did not claim interface 0 before use [ 898.943994][T16291] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 898.970167][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 899.415124][T11850] Bluetooth: hci0: command tx timeout [ 899.942721][T12089] libceph: connect (1)[c::]:6789 error -101 [ 899.967101][ T30] kauditd_printk_skb: 1068 callbacks suppressed [ 899.967116][ T30] audit: type=1326 audit(2000000246.047:24201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 900.013314][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 900.097535][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 900.206614][ T30] audit: type=1326 audit(2000000246.047:24202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbdb059dbc2 code=0x7ffc0000 [ 900.330874][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 900.354922][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 900.563191][ T30] audit: type=1326 audit(2000000246.047:24203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbdb059dc57 code=0x7ffc0000 [ 900.617431][ T30] audit: type=1326 audit(2000000246.047:24204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbdb055ab51 code=0x7ffc0000 [ 900.677536][ T30] audit: type=1326 audit(2000000246.047:24205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbdb059ec49 code=0x7ffc0000 [ 900.750175][ T30] audit: type=1326 audit(2000000246.084:24206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbdb055abbb code=0x7ffc0000 [ 900.846582][ T30] audit: type=1326 audit(2000000246.084:24207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 900.918283][ T30] audit: type=1326 audit(2000000246.084:24208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb059de59 code=0x7ffc0000 [ 900.985881][ T30] audit: type=1326 audit(2000000246.084:24209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fbdb055a2ac code=0x7ffc0000 [ 901.071821][T16179] netdevsim netdevsim6 netdevsim0: renamed from eth1 [ 901.077886][ T30] audit: type=1326 audit(2000000246.084:24210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16302 comm="syz.5.2858" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbdb055a30e code=0x7ffc0000 [ 901.109567][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.123155][T16179] netdevsim netdevsim6 netdevsim1: renamed from eth2 [ 901.148856][T12089] libceph: connect (1)[c::]:6789 error -101 [ 901.155764][T12089] libceph: mon0 (1)[c::]:6789 connect error [ 901.156110][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.198236][T16179] netdevsim netdevsim6 netdevsim2: renamed from eth3 [ 901.216303][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.224798][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 901.225895][T16179] netdevsim netdevsim6 netdevsim3: renamed from eth4 [ 901.261123][T16179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 901.419444][ T5725] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 901.581873][ T5725] usb 3-1: Using ep0 maxpacket: 8 [ 901.593893][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.610435][T16179] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.614293][ T5725] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 901.654624][ T5725] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 901.660413][T16231] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.673187][T16231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.680662][T11850] Bluetooth: hci0: command tx timeout [ 901.701434][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 901.728771][T16231] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.732961][ T5725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 901.735921][T16231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.778611][ T5725] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 901.805765][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.861919][ T5725] hub 3-1:1.0: bad descriptor, ignoring hub [ 901.890277][ T5725] hub 3-1:1.0: probe with driver hub failed with error -5 [ 901.919932][ T5725] cdc_wdm 3-1:1.0: skipping garbage [ 901.943242][ T5725] cdc_wdm 3-1:1.0: skipping garbage [ 901.960196][ T5725] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 902.092852][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 902.124809][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 902.267244][ T5725] usb 3-1: USB disconnect, device number 79 [ 902.352168][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 902.636479][T16350] siw: device registration error -23 [ 903.096510][T16303] ceph: No mds server is up or the cluster is laggy [ 903.134328][ T5725] libceph: connect (1)[c::]:6789 error -101 [ 903.385563][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.478867][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 903.574198][ T5725] libceph: mon0 (1)[c::]:6789 connect error [ 903.877802][T16362] binder: 16361:16362 ioctl c0306201 200000000500 returned -14 [ 903.909221][T16362] binder: 16361:16362 ioctl 40109441 2000000003c0 returned -22 [ 903.918793][T11850] Bluetooth: hci0: command tx timeout [ 903.956898][ T5703] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 903.988157][T16362] binder: 16361:16362 ioctl c010640b 200000000240 returned -22 [ 904.015194][T16362] binder: 16361:16362 ioctl c01c64a3 200000000480 returned -22 [ 904.152567][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.168364][ T5703] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 904.185625][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.202763][ T5703] usb 3-1: Product: syz [ 904.213156][ T5703] usb 3-1: Manufacturer: syz [ 904.223731][ T5703] usb 3-1: SerialNumber: syz [ 904.325520][ T5703] usb 3-1: config 0 descriptor?? [ 904.337201][ T5703] cytherm 3-1:0.0: Cypress thermometer device now attached [ 904.561332][ T5703] usb 3-1: USB disconnect, device number 80 [ 904.590563][ T5703] cytherm 3-1:0.0: Cypress thermometer now disconnected [ 904.605934][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 905.025308][T16384] comedi comedi3: das16m1: I/O port conflict (0x500,8) [ 905.045613][T16179] veth0_vlan: entered promiscuous mode [ 905.122230][T16388] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 905.131441][T16388] overlayfs: missing 'lowerdir' [ 905.174167][T16179] veth1_vlan: entered promiscuous mode [ 905.732803][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 906.268521][T16179] veth0_macvtap: entered promiscuous mode [ 906.625808][ T30] kauditd_printk_skb: 941 callbacks suppressed [ 906.625827][ T30] audit: type=1400 audit(2000000251.952:25152): avc: denied { ioctl } for pid=16390 comm="syz.2.2872" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 906.677584][T16179] veth1_macvtap: entered promiscuous mode [ 906.760909][ T30] audit: type=1400 audit(2000000252.312:25153): avc: denied { open } for pid=16393 comm="syz.4.2873" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 906.828328][T16179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.860621][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 906.877752][ T30] audit: type=1400 audit(2000000252.423:25154): avc: denied { write } for pid=16371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 906.944121][T16179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.971000][T16179] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 907.116394][ T30] audit: type=1400 audit(2000000252.644:25155): avc: denied { write } for pid=16404 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.142844][T16230] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.160559][T16230] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.227094][T16179] wireguard: wg0: Could not create IPv4 socket [ 907.234362][T16230] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.247573][T16179] wireguard: wg1: Could not create IPv4 socket [ 907.264987][T16230] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.294301][T16179] wireguard: wg2: Could not create IPv4 socket [ 907.987293][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 908.631828][T12089] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 908.824209][T12089] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.858522][T12089] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 908.902262][T12089] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 908.933216][T12089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.970035][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 908.991983][T12089] usb 1-1: config 0 descriptor?? [ 909.072278][ T30] audit: type=1400 audit(2000000254.452:25156): avc: denied { accept } for pid=16418 comm="syz.2.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 909.123821][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 909.228627][T16428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 909.259419][ T30] audit: type=1326 audit(2000000254.609:25157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967519de59 code=0x7ffc0000 [ 909.371053][T16432] Failed to initialize the IGMP autojoin socket (err -2) [ 909.378250][ T30] audit: type=1326 audit(2000000254.609:25158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967519de59 code=0x7ffc0000 [ 909.405829][ T30] audit: type=1326 audit(2000000254.609:25159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967519de59 code=0x7ffc0000 [ 909.460039][T16434] Failed to initialize the IGMP autojoin socket (err -2) [ 909.461347][ T30] audit: type=1326 audit(2000000254.646:25160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.2877" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f967519de59 code=0x7ffc0000 [ 909.509265][T16445] audit: audit_backlog=65 > audit_backlog_limit=64 [ 909.649450][T16444] syzkaller0: entered promiscuous mode [ 909.660363][T16444] syzkaller0: entered allmulticast mode [ 909.869912][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 909.871579][T16460] autofs: Unknown parameter 'A;rnEš<@Áû«ÔÐ ü1®¢ùLlFCÅÔzÈ÷—WÝÒ' [ 909.892450][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 909.903739][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 909.912273][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 909.920311][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.241951][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 910.333953][T16458] Failed to initialize the IGMP autojoin socket (err -2) [ 910.425496][ T1221] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 910.507101][T16490] Failed to initialize the IGMP autojoin socket (err -2) [ 910.627895][ T1221] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 910.652840][ T1221] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 910.679425][ T1221] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 910.702993][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 910.720446][ T1221] usb 3-1: SerialNumber: syz [ 910.731907][T16458] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.755218][ T1221] hub 3-1:1.0: bad descriptor, ignoring hub [ 910.766233][ T1221] hub 3-1:1.0: probe with driver hub failed with error -5 [ 910.791940][ T1221] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 910.829600][T16412] ceph: No mds server is up or the cluster is laggy [ 911.368712][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 912.159617][T11850] Bluetooth: hci0: command tx timeout [ 912.322241][T11850] Bluetooth: hci4: command 0x1003 tx timeout [ 912.335501][ T4927] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 912.373617][ T30] kauditd_printk_skb: 648 callbacks suppressed [ 912.373632][ T30] audit: type=1400 audit(2000000257.497:25807): avc: denied { write } for pid=16529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.494673][ T30] audit: type=1400 audit(2000000257.608:25808): avc: denied { write } for pid=16545 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 912.496112][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 913.623078][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 913.928170][ T30] audit: type=1400 audit(2000000258.928:25809): avc: denied { write } for pid=16548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.270205][ T30] audit: type=1400 audit(2000000259.241:25810): avc: denied { write } for pid=16564 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.406206][T11850] Bluetooth: hci0: command tx timeout [ 914.457155][ T9661] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 914.633726][ T9661] usb 5-1: Using ep0 maxpacket: 16 [ 914.645802][ T9661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 914.713537][ T9661] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 914.761536][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 914.773291][ T9661] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 914.800217][ T9661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.827958][ T9661] usb 5-1: config 0 descriptor?? [ 914.873493][ T9661] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 914.947407][ T30] audit: type=1400 audit(2000000259.869:25811): avc: denied { write } for pid=16567 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.041505][ T30] audit: type=1400 audit(2000000259.961:25812): avc: denied { write } for pid=16578 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.104699][ T5725] usb 5-1: USB disconnect, device number 78 [ 915.519404][ T30] audit: type=1400 audit(2000000260.395:25813): avc: denied { write } for pid=16581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.623613][ T30] audit: type=1400 audit(2000000260.487:25814): avc: denied { write } for pid=16592 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.877147][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 916.013058][ T30] audit: type=1400 audit(2000000260.856:25815): avc: denied { write } for pid=16595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.123874][ T30] audit: type=1400 audit(2000000260.958:25816): avc: denied { write } for pid=16606 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.324641][ T1221] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 916.679503][T11850] Bluetooth: hci0: command tx timeout [ 917.012367][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 917.268170][ T1221] usb 1-1: USB disconnect, device number 26 [ 917.319628][T16458] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.361903][ T5711] usb 3-1: USB disconnect, device number 81 [ 917.500640][T16458] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.131352][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 918.693941][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 918.693959][ T30] audit: type=1400 audit(2000000263.320:25821): avc: denied { write } for pid=16642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.806724][T16458] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.831329][T16661] Failed to initialize the IGMP autojoin socket (err -2) [ 918.845154][T16666] Failed to initialize the IGMP autojoin socket (err -2) [ 918.925766][ T30] audit: type=1400 audit(2000000263.541:25822): avc: denied { write } for pid=16674 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.955471][T11850] Bluetooth: hci0: command tx timeout [ 919.128249][ T1221] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 919.259289][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 919.302555][ T30] audit: type=1400 audit(2000000263.882:25823): avc: denied { write } for pid=16683 comm="syz.5.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 919.434660][ T1221] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 919.595806][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 919.632661][ T30] audit: type=1400 audit(2000000263.910:25824): avc: denied { setopt } for pid=16679 comm="syz.2.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 919.680001][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 919.711302][ T30] audit: type=1400 audit(2000000264.159:25825): avc: denied { kexec_image_load } for pid=16683 comm="syz.5.2903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 919.747506][ T1221] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 919.761224][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.799312][ T1221] usb 5-1: Product: syz [ 919.819967][ T1221] usb 5-1: Manufacturer: syz [ 919.828951][T16234] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.835727][ T1221] usb 5-1: SerialNumber: syz [ 919.861328][ T1221] usb 5-1: config 0 descriptor?? [ 919.886122][ T1221] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 919.952642][T16218] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.034101][T16234] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.122323][T16234] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.162059][ T1221] usb 5-1: USB disconnect, device number 79 [ 920.181790][T16458] netdevsim netdevsim6 netdevsim0: renamed from eth1 [ 920.249658][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 920.282690][T16458] netdevsim netdevsim6 netdevsim1: renamed from eth2 [ 920.323649][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 920.352156][ T30] audit: type=1400 audit(2000000264.851:25826): avc: denied { write } for pid=16689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.353088][T16458] netdevsim netdevsim6 netdevsim2: renamed from eth3 [ 920.386426][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 920.419811][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 920.435737][T16458] netdevsim netdevsim6 netdevsim3: renamed from eth4 [ 920.478012][T16458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 920.554950][ T30] audit: type=1400 audit(2000000265.045:25827): avc: denied { write } for pid=16703 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.602487][ T9661] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 920.800857][ T9661] usb 3-1: Using ep0 maxpacket: 16 [ 920.820641][ T9661] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 920.849839][ T9661] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.901040][ T9661] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 920.936072][ T9661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.958626][ T9661] usb 3-1: config 0 descriptor?? [ 921.233006][ T1221] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 921.422822][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.463476][T16729] Failed to initialize the IGMP autojoin socket (err -2) [ 921.480951][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.510237][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.512752][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 921.537336][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.568614][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.595488][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.622251][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.665764][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.693094][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.732642][ T9661] hid-picolcd 0003:04D8:C002.001F: unknown main item tag 0x0 [ 921.827497][ T9661] hid-picolcd 0003:04D8:C002.001F: No report with id 0x11 found [ 921.868461][ T9661] usb 3-1: USB disconnect, device number 82 [ 922.083441][T16458] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 922.128317][T16458] wireguard: wg0: Could not create IPv4 socket [ 922.147214][T16458] wireguard: wg1: Could not create IPv4 socket [ 922.167576][T16458] wireguard: wg2: Could not create IPv4 socket [ 922.377732][ T30] audit: type=1400 audit(2000000266.724:25828): avc: denied { write } for pid=16708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.416742][ T1221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.439196][ T1221] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 922.585799][ T1221] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 922.610528][ T30] audit: type=1400 audit(2000000266.946:25829): avc: denied { shutdown } for pid=16738 comm="syz.5.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 922.639928][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 922.709876][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.759182][ T30] audit: type=1400 audit(2000000266.946:25830): avc: denied { read } for pid=16738 comm="syz.5.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 922.827500][ T1221] usb 5-1: config 0 descriptor?? [ 922.919964][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 922.947394][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 923.142494][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 923.158806][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 923.452871][ T9661] libceph: connect (1)[c::]:6789 error -101 [ 923.473387][ T9661] libceph: mon0 (1)[c::]:6789 connect error [ 923.496989][T16758] syzkaller0: entered promiscuous mode [ 923.522384][T16758] syzkaller0: entered allmulticast mode [ 923.766837][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 923.929866][ T5739] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 924.514919][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 924.514933][ T30] audit: type=1326 audit(2000000268.699:26048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 924.802466][ T9661] libceph: connect (1)[c::]:6789 error -101 [ 924.810013][T16773] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2913'. [ 924.820907][T16711] ceph: No mds server is up or the cluster is laggy [ 924.852648][ T9661] libceph: mon0 (1)[c::]:6789 connect error [ 924.860075][ T30] audit: type=1326 audit(2000000268.699:26049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 924.895262][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 924.911643][ T30] audit: type=1326 audit(2000000268.699:26050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 924.944180][ T30] audit: type=1326 audit(2000000268.699:26051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 925.007815][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 925.028669][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 925.199448][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 925.215913][ T30] audit: type=1326 audit(2000000268.699:26052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 925.258188][ T5739] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 925.298103][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.309703][ T5739] usb 3-1: Product: syz [ 925.329495][ T30] audit: type=1326 audit(2000000268.717:26053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 925.365157][ T5739] usb 3-1: Manufacturer: syz [ 925.370137][ T5739] usb 3-1: SerialNumber: syz [ 925.395519][ T30] audit: type=1326 audit(2000000268.967:26054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16710 comm="syz.4.2905" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f542a15e68e code=0x7ffc0000 [ 925.440458][ T5739] usb 3-1: config 0 descriptor?? [ 925.496871][ T30] audit: type=1400 audit(2000000269.105:26055): avc: denied { write } for pid=16756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.524462][ T30] audit: type=1400 audit(2000000269.483:26056): avc: denied { write } for pid=16780 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.777934][ T5739] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 926.021234][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 926.035281][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 926.049010][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.059734][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.081208][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 926.082887][ T5703] usb 3-1: USB disconnect, device number 83 [ 926.102081][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 926.328674][ T30] audit: type=1400 audit(2000000270.369:26057): avc: denied { write } for pid=16790 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.148958][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 928.275325][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 928.362061][T11850] Bluetooth: hci0: command tx timeout [ 929.402722][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 929.496747][T16886] fuse: Bad value for 'fd' [ 929.982417][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 929.982436][ T30] audit: type=1400 audit(2000000273.746:26067): avc: denied { write } for pid=16897 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.469765][ T30] audit: type=1400 audit(2000000274.180:26068): avc: denied { write } for pid=16900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.529904][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 930.556884][ T30] audit: type=1400 audit(2000000274.272:26069): avc: denied { write } for pid=16911 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 930.622867][T11850] Bluetooth: hci0: command tx timeout [ 931.074052][ T30] audit: type=1400 audit(2000000274.752:26070): avc: denied { write } for pid=16914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.171420][ T30] audit: type=1400 audit(2000000274.835:26071): avc: denied { write } for pid=16928 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.656838][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 931.726143][ T1221] usb 5-1: USB disconnect, device number 80 [ 931.796098][ T30] audit: type=1400 audit(2000000275.416:26072): avc: denied { write } for pid=16931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.090186][ T5703] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 932.166843][ T30] audit: type=1400 audit(2000000275.758:26073): avc: denied { write } for pid=16950 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.304599][T16797] Failed to initialize the IGMP autojoin socket (err -2) [ 932.315715][ T5703] usb 1-1: config 100 has an invalid interface number: 124 but max is 0 [ 932.325738][ T5703] usb 1-1: config 100 has no interface number 0 [ 932.345901][ T5703] usb 1-1: config 100 interface 124 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 932.409506][ T5703] usb 1-1: config 100 interface 124 has no altsetting 0 [ 932.434200][ T5703] usb 1-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 932.447420][T16958] FAULT_INJECTION: forcing a failure. [ 932.447420][T16958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.467136][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.480559][T16958] CPU: 0 UID: 0 PID: 16958 Comm: syz.5.2929 Tainted: G L syzkaller #0 PREEMPT(full) [ 932.480589][T16958] Tainted: [L]=SOFTLOCKUP [ 932.480595][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 932.480606][T16958] Call Trace: [ 932.480612][T16958] [ 932.480620][T16958] dump_stack_lvl+0x100/0x190 [ 932.480647][T16958] should_fail_ex.cold+0x5/0xa [ 932.480671][T16958] _copy_to_user+0x32/0xd0 [ 932.480695][T16958] simple_read_from_buffer+0xcb/0x170 [ 932.480725][T16958] proc_fail_nth_read+0x1af/0x230 [ 932.480749][T16958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.480776][T16958] ? rw_verify_area+0xce/0x6d0 [ 932.480797][T16958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 932.480819][T16958] vfs_read+0x1e4/0xb40 [ 932.480847][T16958] ? __pfx_vfs_read+0x10/0x10 [ 932.480870][T16958] ? __fget_files+0x215/0x3d0 [ 932.480900][T16958] ? __fget_files+0x21f/0x3d0 [ 932.480930][T16958] ksys_read+0x12a/0x250 [ 932.480953][T16958] ? __pfx_ksys_read+0x10/0x10 [ 932.480984][T16958] do_syscall_64+0x115/0x870 [ 932.481007][T16958] ? clear_bhb_loop+0x40/0x90 [ 932.481028][T16958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.481045][T16958] RIP: 0033:0x7fbdb055e68e [ 932.481059][T16958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 932.481076][T16958] RSP: 002b:00007fbdb149bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 932.481095][T16958] RAX: ffffffffffffffda RBX: 00007fbdb149c6c0 RCX: 00007fbdb055e68e [ 932.481107][T16958] RDX: 000000000000000f RSI: 00007fbdb149c0a0 RDI: 0000000000000003 [ 932.481118][T16958] RBP: 00007fbdb149c090 R08: 0000000000000000 R09: 0000000000000000 [ 932.481127][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.481144][T16958] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffda91ae988 [ 932.481169][T16958] [ 932.713013][ T5703] usb 1-1: Product: syz [ 932.730616][ T5703] usb 1-1: Manufacturer: syz [ 932.782259][ T5703] usb 1-1: SerialNumber: syz [ 932.783794][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 932.871758][T11850] Bluetooth: hci0: command tx timeout [ 933.627586][T16981] sg_write: data in/out 3/8 bytes for SCSI command 0x69-- guessing data in; [ 933.627586][T16981] program syz.0.2928 not setting count and/or reply_len properly [ 933.911150][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 935.038436][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 935.081650][ T30] audit: type=1400 audit(2000000278.443:26074): avc: denied { write } for pid=16960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.160038][T11850] Bluetooth: hci0: command tx timeout [ 935.252161][ T5703] usb 1-1: USB disconnect, device number 27 [ 935.526562][ T30] audit: type=1400 audit(2000000278.867:26075): avc: denied { write } for pid=16994 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.611592][T16797] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.003998][T16797] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.050956][ T30] audit: type=1400 audit(2000000279.347:26076): avc: denied { create } for pid=16990 comm="syz.5.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 936.148428][ T30] audit: type=1400 audit(2000000279.347:26077): avc: denied { setopt } for pid=16990 comm="syz.5.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 936.170100][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 936.621180][T16797] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.721982][ T30] audit: type=1400 audit(2000000279.965:26078): avc: denied { write } for pid=17003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.292474][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 937.324107][T16797] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.355468][T17029] Failed to initialize the IGMP autojoin socket (err -2) [ 937.373537][ T30] audit: type=1400 audit(2000000280.565:26079): avc: denied { write } for pid=17032 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.479473][T17040] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2943'. [ 937.564050][ T5725] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 937.759242][ T30] audit: type=1400 audit(2000000280.925:26080): avc: denied { listen } for pid=17044 comm="syz.5.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 937.787208][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 937.839943][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 937.859038][ T30] audit: type=1400 audit(2000000280.925:26081): avc: denied { read } for pid=17044 comm="syz.5.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 937.883402][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 937.906145][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 937.929483][ T5725] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 937.938889][T16234] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.950373][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.960636][ T5725] usb 3-1: Product: syz [ 937.976988][ T5725] usb 3-1: Manufacturer: syz [ 937.989983][ T5725] usb 3-1: SerialNumber: syz [ 937.996168][ T30] audit: type=1400 audit(2000000281.137:26082): avc: denied { bind } for pid=17048 comm="syz.5.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 938.035590][ T5725] usb 3-1: config 0 descriptor?? [ 938.061408][ T5725] iguanair 3-1:0.0: failed to get version [ 938.098629][T16234] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.108104][ T5725] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 938.210130][T16234] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.420623][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 938.426724][T16205] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.500643][ T9661] usb 3-1: USB disconnect, device number 84 [ 938.522347][T16797] netdevsim netdevsim6 netdevsim0: renamed from eth1 [ 938.727217][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 938.765045][T16797] netdevsim netdevsim6 netdevsim1: renamed from eth2 [ 938.802201][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 938.844963][ T30] audit: type=1400 audit(2000000281.912:26083): avc: denied { write } for pid=17046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.886959][T16797] netdevsim netdevsim6 netdevsim2: renamed from eth3 [ 938.930364][ T30] audit: type=1400 audit(2000000281.995:26084): avc: denied { create } for pid=17052 comm="syz.0.2947" name="#20" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 938.934343][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.015262][T16797] netdevsim netdevsim6 netdevsim3: renamed from eth4 [ 939.077604][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.546781][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 940.404222][T17108] Bluetooth: MGMT ver 1.23 [ 940.674414][ C0] tipc: Duplicate b0aaaa using eth(aa:20:00:00:00:00) seen on [ 940.689819][T11850] Bluetooth: hci1: Malformed LE Event: 0x0d [ 940.966927][T17121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2956'. [ 941.117203][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 941.117219][ T30] audit: type=1400 audit(2000000284.016:26091): avc: denied { getopt } for pid=17123 comm="syz.5.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 941.313169][ T5711] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1055.596193][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1055.603176][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17136/1:b..l [ 1055.611780][ C1] rcu: (detected by 1, t=10506 jiffies, g=107445, q=612 ncpus=2) [ 1055.619574][ C1] task:syz.5.2959 state:R running task stack:23288 pid:17136 tgid:17134 ppid:13712 task_flags:0x400140 flags:0x00080000 [ 1055.634286][ C1] Call Trace: [ 1055.637587][ C1] [ 1055.640518][ C1] __schedule+0x125c/0x6730 [ 1055.645037][ C1] ? __pfx___schedule+0x10/0x10 [ 1055.649880][ C1] ? find_held_lock+0x2b/0x80 [ 1055.654562][ C1] ? bpf_test_timer_enter+0xf7/0x2b0 [ 1055.659844][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 1055.665211][ C1] preempt_schedule_common+0x42/0xc0 [ 1055.670493][ C1] preempt_schedule_thunk+0x16/0x40 [ 1055.675683][ C1] ? bpf_test_run+0x2a4/0xa40 [ 1055.680350][ C1] __local_bh_enable_ip+0xff/0x120 [ 1055.685459][ C1] bpf_test_run+0x2a9/0xa40 [ 1055.689959][ C1] ? bpf_test_run+0x1c6/0xa40 [ 1055.694632][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 1055.699651][ C1] ? irqentry_exit+0x24d/0xa00 [ 1055.704426][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1055.709624][ C1] ? do_csum+0x1e5/0x380 [ 1055.713881][ C1] bpf_prog_test_run_skb+0x15c4/0x3540 [ 1055.719344][ C1] ? __fget_files+0x211/0x3d0 [ 1055.724051][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1055.729856][ C1] ? fput+0x79/0x100 [ 1055.733746][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1055.739549][ C1] __sys_bpf+0x2a12/0x4e80 [ 1055.743971][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1055.748728][ C1] ? find_held_lock+0x2b/0x80 [ 1055.753402][ C1] ? futex_wake+0x4ea/0x5e0 [ 1055.757912][ C1] ? futex_wait+0x11e/0x370 [ 1055.762415][ C1] ? __pfx_futex_wait+0x10/0x10 [ 1055.767270][ C1] ? find_held_lock+0x2b/0x80 [ 1055.771959][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 1055.776906][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 1055.781853][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1055.787134][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1055.792418][ C1] ? __x64_sys_bpf+0xce/0x140 [ 1055.797091][ C1] __x64_sys_bpf+0xce/0x140 [ 1055.801596][ C1] ? do_syscall_64+0x90/0x870 [ 1055.806270][ C1] do_syscall_64+0x115/0x870 [ 1055.810942][ C1] ? clear_bhb_loop+0x40/0x90 [ 1055.815618][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.821499][ C1] RIP: 0033:0x7fbdb059de59 [ 1055.825911][ C1] RSP: 002b:00007fbdb149c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1055.834314][ C1] RAX: ffffffffffffffda RBX: 00007fbdb0825fa0 RCX: 00007fbdb059de59 [ 1055.842271][ C1] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 1055.850231][ C1] RBP: 00007fbdb0633e6f R08: 0000000000000000 R09: 0000000000000000 [ 1055.858188][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.866151][ C1] R13: 00007fbdb0826038 R14: 00007fbdb0825fa0 R15: 00007ffda91ae988 [ 1055.874123][ C1] [ 1055.877129][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g107445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1055.889523][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=65490 [ 1055.897393][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g107445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1055.908830][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1055.918780][ C1] rcu: RCU grace-period kthread stack dump: [ 1055.924648][ C1] task:rcu_preempt state:I stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1055.936557][ C1] Call Trace: [ 1055.939824][ C1] [ 1055.942747][ C1] __schedule+0x125c/0x6730 [ 1055.947259][ C1] ? __pfx___schedule+0x10/0x10 [ 1055.952102][ C1] ? find_held_lock+0x2b/0x80 [ 1055.956776][ C1] ? schedule+0x225/0x2c0 [ 1055.961102][ C1] schedule+0xdd/0x2c0 [ 1055.965165][ C1] schedule_timeout+0x127/0x280 [ 1055.970011][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1055.975382][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1055.980680][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1055.986484][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1055.991935][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1055.996689][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1056.001965][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1056.006896][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1056.012090][ C1] rcu_gp_kthread+0x179/0x230 [ 1056.016762][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.021948][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1056.027758][ C1] ? __kthread_parkme+0x18c/0x230 [ 1056.032777][ C1] ? kthread+0x13a/0x450 [ 1056.037013][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1056.042217][ C1] kthread+0x370/0x450 [ 1056.046283][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.050872][ C1] ret_from_fork+0x72b/0xd50 [ 1056.055459][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.060563][ C1] ? __switch_to+0x800/0x10f0 [ 1056.065239][ C1] ? __pfx_kthread+0x10/0x10 [ 1056.069827][ C1] ret_from_fork_asm+0x1a/0x30 [ 1056.074599][ C1] [ 1056.077604][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1056.083911][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1056.089106][ C0] NMI backtrace for cpu 0 [ 1056.089121][ C0] CPU: 0 UID: 0 PID: 17138 Comm: kworker/u8:44 Tainted: G L syzkaller #0 PREEMPT(full) [ 1056.089140][ C0] Tainted: [L]=SOFTLOCKUP [ 1056.089145][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.089153][ C0] RIP: 0010:lock_release+0x75/0x310 [ 1056.089171][ C0] Code: 3c 0f 45 85 c0 0f 84 48 01 00 00 65 8b 05 43 00 7e 12 85 c0 0f 85 39 01 00 00 65 4c 8b 25 7b b9 7d 12 41 8b bc 24 9c 0b 00 00 <85> ff 0f 85 21 01 00 00 48 81 3b 80 e9 69 94 0f 84 14 01 00 00 9c [ 1056.089184][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00000046 [ 1056.089196][ C0] RAX: 0000000000000000 RBX: ffffffff8ebe6100 RCX: ffffffff89c6c192 [ 1056.089205][ C0] RDX: 0000000000000000 RSI: ffffffff8c400c00 RDI: 0000000000000000 [ 1056.089214][ C0] RBP: ffffffff89c6bfab R08: 0000000000000001 R09: 0000000000000000 [ 1056.089222][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880321e8000 [ 1056.089231][ C0] R13: 1bc16fb31c68580e R14: ffff88807b8a4c00 R15: ffff88807b8a4c00 [ 1056.089240][ C0] FS: 0000000000000000(0000) GS:ffff888123dee000(0000) knlGS:0000000000000000 [ 1056.089255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.089265][ C0] CR2: 0000001b2d90fff8 CR3: 0000000061df4000 CR4: 00000000003526f0 [ 1056.089274][ C0] Call Trace: [ 1056.089279][ C0] [ 1056.089285][ C0] ? __netif_schedule.part.0+0x40/0x2f0 [ 1056.089303][ C0] advance_sched+0x770/0xd20 [ 1056.089327][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1056.089344][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1056.089364][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1056.089386][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1056.089409][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1056.089430][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1056.089448][ C0] [ 1056.089453][ C0] [ 1056.089458][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1056.089473][ C0] RIP: 0010:stack_depot_save_flags+0x16b/0x9d0 [ 1056.089491][ C0] Code: c1 41 c1 c8 08 45 29 c1 4c 8b 3d 50 0f 4c 16 45 89 c8 44 23 05 3e 0f 4c 16 49 c1 e0 04 4d 01 c7 65 ff 05 f8 e1 10 0f 4d 8b 37 <4d> 39 f7 75 1c e9 af 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 4d [ 1056.089503][ C0] RSP: 0018:ffffc900038ef410 EFLAGS: 00000282 [ 1056.089513][ C0] RAX: 00000000953bf3f0 RBX: 0000000000000001 RCX: 0000000039d05277 [ 1056.089522][ C0] RDX: 0000000000000011 RSI: 000000001dac96c8 RDI: 0000000000000001 [ 1056.089531][ C0] RBP: 0000000000000dc0 R08: 0000000000d6cab0 R09: 00000000090d6cab [ 1056.089540][ C0] R10: 0000000000000200 R11: 000000000000758b R12: ffffc900038ef468 [ 1056.089549][ C0] R13: 0000000000000011 R14: ffff888037b4dcf0 R15: ffff88823bb6cab0 [ 1056.089564][ C0] ? stack_trace_save+0x8e/0xc0 [ 1056.089584][ C0] kasan_save_stack+0x3f/0x50 [ 1056.089598][ C0] ? kasan_save_stack+0x30/0x50 [ 1056.089612][ C0] ? kasan_save_track+0x14/0x30 [ 1056.089624][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1056.089638][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1056.089651][ C0] ? security_file_alloc+0x34/0x2c0 [ 1056.089670][ C0] ? init_file+0x95/0x480 [ 1056.089682][ C0] ? alloc_empty_file+0x79/0x1c0 [ 1056.089696][ C0] ? path_openat+0xe7/0x4280 [ 1056.089720][ C0] ? do_file_open+0x20e/0x430 [ 1056.089731][ C0] ? do_open_execat+0xd1/0x360 [ 1056.089747][ C0] ? open_exec+0x28/0x40 [ 1056.089762][ C0] ? load_elf_binary+0x534/0x51c0 [ 1056.089779][ C0] ? bprm_execve+0x8fb/0x1730 [ 1056.089794][ C0] ? kernel_execve+0x31e/0x3a0 [ 1056.089811][ C0] ? call_usermodehelper_exec_async+0x239/0x4b0 [ 1056.089825][ C0] ? ret_from_fork+0x72b/0xd50 [ 1056.089840][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1056.089869][ C0] kasan_save_track+0x14/0x30 [ 1056.089882][ C0] __kasan_slab_alloc+0x89/0x90 [ 1056.089897][ C0] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1056.089911][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1056.089926][ C0] ? security_file_alloc+0x34/0x2c0 [ 1056.089946][ C0] security_file_alloc+0x34/0x2c0 [ 1056.089964][ C0] init_file+0x95/0x480 [ 1056.089977][ C0] alloc_empty_file+0x79/0x1c0 [ 1056.089992][ C0] path_openat+0xe7/0x4280 [ 1056.090011][ C0] ? stack_trace_save+0x8e/0xc0 [ 1056.090030][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1056.090050][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 1056.090066][ C0] ? __pfx_path_openat+0x10/0x10 [ 1056.090085][ C0] ? kasan_save_stack+0x30/0x50 [ 1056.090097][ C0] ? kasan_save_track+0x14/0x30 [ 1056.090109][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1056.090123][ C0] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1056.090135][ C0] ? do_getname_kernel+0x5d/0x250 [ 1056.090148][ C0] ? open_exec+0x16/0x40 [ 1056.090163][ C0] ? load_elf_binary+0x534/0x51c0 [ 1056.090179][ C0] ? bprm_execve+0x8fb/0x1730 [ 1056.090197][ C0] do_file_open+0x20e/0x430 [ 1056.090210][ C0] ? __pfx_do_file_open+0x10/0x10 [ 1056.090238][ C0] ? rcu_is_watching+0x12/0xc0 [ 1056.090255][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 1056.090271][ C0] do_open_execat+0xd1/0x360 [ 1056.090288][ C0] ? __pfx_do_open_execat+0x10/0x10 [ 1056.090304][ C0] ? do_getname_kernel+0x5d/0x250 [ 1056.090318][ C0] ? __asan_memcpy+0x3c/0x60 [ 1056.090337][ C0] ? do_getname_kernel+0x1be/0x250 [ 1056.090352][ C0] open_exec+0x28/0x40 [ 1056.090368][ C0] load_elf_binary+0x534/0x51c0 [ 1056.090386][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1056.090400][ C0] ? lock_acquire+0x1b9/0x370 [ 1056.090414][ C0] ? find_held_lock+0x2b/0x80 [ 1056.090432][ C0] ? load_misc_binary+0x967/0xd20 [ 1056.090449][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 1056.090465][ C0] ? find_held_lock+0x2b/0x80 [ 1056.090482][ C0] ? bprm_execve+0x8d9/0x1730 [ 1056.090498][ C0] ? bprm_execve+0x8d9/0x1730 [ 1056.090517][ C0] bprm_execve+0x8fb/0x1730 [ 1056.090536][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1056.090554][ C0] ? copy_strings_kernel+0x152/0x190 [ 1056.090572][ C0] kernel_execve+0x31e/0x3a0 [ 1056.090590][ C0] call_usermodehelper_exec_async+0x239/0x4b0 [ 1056.090605][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1056.090622][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1056.090638][ C0] ret_from_fork+0x72b/0xd50 [ 1056.090654][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1056.090671][ C0] ? __switch_to+0x800/0x10f0 [ 1056.090690][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1056.090710][ C0] ret_from_fork_asm+0x1a/0x30 [ 1056.090733][ C0]