last executing test programs: 4m50.328409439s ago: executing program 4 (id=471): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x4, 0x0, 0x8}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20048000) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x804000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r9 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25", 0x8}], 0x1}, 0x0) 4m48.991109434s ago: executing program 4 (id=474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000440)="e86a93ef04000000571317d53c99014dedeaf914e28094527bf1f2257fc889fac058b63ec09bf14dcfcd3f184d8901000100000000003ab91eb3ffffffffffffff7f51b6f96b8324cb121534c9e6ddfb8526afccfba6d3e2aee9ae3d6d91bbed11d954f1752845532166c5fb8e56cde7f4e05d7041a8d5f605c4ae", 0x7b}, {&(0x7f00000004c0)="48ff6754038592ca6538234a1dff169a5c853bc8592a23722377f4e30b3905c33534b06208e10117af9dc6e8fa056d5abc35341877d7f82ea9d382d4026d46364e77016fd70a798fde05b0427182e955487a9cb1f7b9a8ceaf9d0c7f33bfe3dc6e85aa3f36f728edab1093e21674c6a44e39c8ede537463f03f5d76f301ee4ad1e", 0x81}, {&(0x7f0000000580)="af6d50f98ef684fcb745a59df7e77cfd5abc3c40a6592253bab8c18583f4ab2f7365a726ef7a177e2d6bf67c94d03dbd072d7d6aeedfbbdaf11fef8ab7e8a1cda1d0cfd230a34546d60ae4636044a81c0c6f0d5a5a53fa66852d87baae", 0x5d}, {&(0x7f0000000640)="0982691fd20d7ea000cdf081496cf33b014f0b7b005dc9f8fc7829c2e7c844c0e1eb7968bebf0e337408ded07863ccf7402455d33d396c005fbc37718ad6bdd3c122e8940afa59dce6268593fb33ca7838d9507f223db3af58cc15099878f8b41aacbb834980c01e43c5342f28b211185185420f4207b195753e295e043e3177d29b84c7e79952b8d76c4c24df1464ef1ef2d69e124d339f99e28d8359d070df48ae3b0b5383197aa7", 0xa9}, {&(0x7f0000000700)="9910074e001063989ff0deb1ee5ff00917faddc1ad7afdfea36853c1e97df0d3e7e7e77397f47094d1f8e259c95bab44e1f0d14baafe59e74f137b1d4af7c4357ce41077cdf040fbb60aec855ee4b9f37255c7f55d2e86d3c8cf0982c1740b30", 0x60}], 0x5, 0x1, 0x80000080) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m47.510765272s ago: executing program 4 (id=475): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000e903000000000000000000000400ee710598246d7a7aa981bfc3e79998c0dd5b2f2e443fd7c59dc651dd45981a0f1f639c0fe8970fc7718838f3aa6fff40830b61a14c9d9bbf266656596a50bde426f98748e6ca6ad80a31c2bf7200df65b333", @ANYRES32=0x0, @ANYBLOB="0003000000000000300012800900010069706970000000002000028004001300050005000200000005000a0001000000080002000a01010208000a00", @ANYRES32=r2, @ANYBLOB="2513ebbdb30d3b743507ba5baca552d8c8dd03780bc9ce28e5aa798f2bd6222900cb942c51522120855c86056ceca1fae1783d9a4fe0c53524493ea80ce05f0f5f065d756be6e002d20816d1dbb84e60f016826d556cecbcf9a622810e7522d5325a0e11bad9f6fb5bd3768c84ac8d8ba41b3c38acb0b02174026cfaf9d8e6ace40770"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=@getchain={0x64, 0x66, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x7, 0xfff2}, {0x9, 0xc}, {0xffff, 0xa}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffffa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) io_setup(0x5, 0x0) (async) io_setup(0x4, &(0x7f0000000080)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) (async) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 4m46.729090885s ago: executing program 4 (id=480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x31, 0x0, 0x100000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x11b, 0x0, &(0x7f0000000440)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x28101) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x8000}, 0xe) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="4d64805d3d0b13c9955574c5e3c10a3159573f5afa1d35136b987b432bf8ed82e141e15d", 0x24, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x77, @none, 0x7ff, 0x2}, 0x6) 4m43.830369674s ago: executing program 4 (id=487): openat$nullb(0xffffffffffffff9c, 0x0, 0x200200, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/417], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000500)={0x4, "b50800a5cc599bdefbafde250000000000000000001000", 0xffffffffffffffff}) close_range(r0, r5, 0x0) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(r8, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vcsn(&(0x7f0000000140), 0x8, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x80, 0x4e, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x1a}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x1, 0xb, {0xa, 0x25, 0x25, 0xfffffff7, 0xd, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa9, 0x81, 0x2, {0xa, 0x25, 0x25, 0x3, 0x1, 0x9}}}}}}}}]}}, 0x0) 4m40.938892474s ago: executing program 4 (id=493): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x73, 0x7, {{0x2f, 0x4, 0x1, 0x1, 0xbc, 0x64, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x17, 0xca, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x3e, 0x2, [{0xd, 0x2}, {0x7, 0x5, "24a887"}, {0x2, 0x6, "1a2d88c7"}, {0x6, 0xf, "686610ec64bc41aa226345d1ef"}, {0x2, 0x9, "a0ba24d3a9da8d"}, {0x5, 0xe, "34d7ac1da257d187ef0e91ba"}, {0x6, 0x5, "29833b"}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x1, 0x10, 0x40, 0x2, 0x85ac, 0x1]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x5, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xfffffffe}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010102, 0x9}]}, @noop, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "23ed1d7f110b3370"}]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x3, 0x7f, @vifc_lcl_ifindex=r1, @broadcast}, 0x10) 4m40.521147187s ago: executing program 32 (id=493): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x80, 0x8, 0x73, 0x7, {{0x2f, 0x4, 0x1, 0x1, 0xbc, 0x64, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@lsrr={0x83, 0x17, 0xca, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @cipso={0x86, 0x3e, 0x2, [{0xd, 0x2}, {0x7, 0x5, "24a887"}, {0x2, 0x6, "1a2d88c7"}, {0x6, 0xf, "686610ec64bc41aa226345d1ef"}, {0x2, 0x9, "a0ba24d3a9da8d"}, {0x5, 0xe, "34d7ac1da257d187ef0e91ba"}, {0x6, 0x5, "29833b"}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x5, [0x1, 0x10, 0x40, 0x2, 0x85ac, 0x1]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x5, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0xfffffffe}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010102, 0x9}]}, @noop, @cipso={0x86, 0x10, 0x3, [{0x5, 0xa, "23ed1d7f110b3370"}]}]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x3, 0x7f, @vifc_lcl_ifindex=r1, @broadcast}, 0x10) 1m54.886845156s ago: executing program 0 (id=883): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x1a1003) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffff001, 0x1, 0x2019, 0x5, 0x6, 0x4, 0x2, 0x3}}) chdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsopen(&(0x7f0000000380)='udf\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000217caa7e055fe4a51bf5f273792d000100fffe0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b400000000034000480300001800e000100696d6d6564696174650000001c0002800800004000000000f5ff01800c00028008000340000000030900010073797a3000000000140000001100010000000000000000000000000a559633c1662770653c67f26e53"], 0xd0}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x80000005, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1m54.28735632s ago: executing program 0 (id=885): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(0x0, 0xf, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x101}, 0x10) r3 = socket(0x28, 0x5, 0x0) syz_io_uring_setup(0x4f3, &(0x7f0000000380)={0x0, 0xf8ce, 0x8, 0x2, 0x10000340}, &(0x7f0000000340), &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sendmsg$tipc(r3, 0x0, 0x20040010) 1m48.324099294s ago: executing program 0 (id=893): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0x21, &(0x7f0000000840)={0xffffffffffffffff, 0x300, 0x0}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x2000b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000340)=0x0) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x5a40c000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0, 0x62}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 1m43.858988897s ago: executing program 0 (id=905): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xb90, 0x0, &(0x7f0000000680)="b9ff030060be250d698cbe512490", 0x0, 0xe00, 0x60000000, 0x0, 0xa00, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 1m43.80966223s ago: executing program 0 (id=907): r0 = socket(0x8000000010, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x4e24, @multicast2}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) write(r0, &(0x7f00000008c0)="fc0000001c000704ab5b2509b86803000aab02000000000000000e93210001c0f003058405006b49153312f2ba60100000000081039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d440000405608ec30033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e2c8d594dcc4ebc21077a9ca38ca070914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c8", 0xfc) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400040, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/17, 0x11}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/104, 0x68}], 0x4, &(0x7f0000000280)=""/255, 0xff}, 0x40000000) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x6000004, 0xfffffffffffffee8, 0x0, 0x1, 0x4}) 1m42.677217372s ago: executing program 0 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 1m27.633098612s ago: executing program 33 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x16) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 1m21.182622436s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 1m7.051283991s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 53.499886631s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 41.058228887s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 36.508746097s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 30.349624947s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 27.689557101s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 24.505566725s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 16.130434s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 12.674931273s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 8.726126357s ago: executing program 3 (id=1108): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000000)={[{@upperdir, 0x5c}]}) syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x1a1003) chdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) fsopen(&(0x7f0000000380)='udf\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000217caa7e055fe4a51bf5f273792d000100fffe0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b400000000034000480300001800e000100696d6d6564696174650000001c0002800800004000000000f5ff01800c00028008000340000000030900010073797a3000000000140000001100010000000000000000000000000a559633c1662770653c67f26e53"], 0xd0}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') sendfile(r3, r3, &(0x7f0000000240)=0x3, 0x8f) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x80000005, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe}, 0x1c) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 7.936696471s ago: executing program 2 (id=1110): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x892e, 0xf}}}}}, 0x28}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x8, 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.724834627s ago: executing program 3 (id=1112): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xa) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x00 \x00\x00', @ANYRES32, @ANYBLOB="e7b39f2ac7c22d23c60352141112d3346db2cbcb3bcd2da4f75cedeff8736dace2366125b66d593e7bd8f70c7099f2e2201a0a328855c2e66d3fc6a286959a4034687f8cdeeef7522cd0baa95be72cbe870e6a02faa25cfdcdae81e25d56f4fa609e88114559c33e6c52de79b180671dfc3cde856d5caa", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x40, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r7, 0x5, 0x4b, &(0x7f0000000400)=""/232, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=ANY=[@ANYBLOB="28000000240007012bbd7000ffdbdf2503740000080001800400de800c0004"], 0x28}}, 0x48010) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000200)='./bus/file0\x00', 0x0) 7.259439999s ago: executing program 5 (id=494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x6000000, 0x851}, 0x10) 6.189145587s ago: executing program 3 (id=1114): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = fanotify_init(0x200, 0x400) read$FUSE(r2, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 4.047240949s ago: executing program 2 (id=1116): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0x21, &(0x7f0000000840)={0xffffffffffffffff, 0x300, 0x0}, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x10000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x2000b, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dac02\x00', [0x1004, 0x5, 0x2003, 0xe, 0x2, 0xcc7, 0xfff, 0x80000001, 0x4, 0x3ff, 0x7f, 0x15fe, 0x5, 0x5, 0x3, 0x3, 0xe, 0x0, 0x2, 0x28f, 0x80000089, 0x4, 0x6, 0x3, 0xffffeadc, 0x3, 0x401001c, 0x5, 0x4, 0x8000000, 0x2000005]}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x5a40c000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x4000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0, 0x62}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) 4.046987563s ago: executing program 3 (id=1117): bpf$PROG_LOAD(0x5, &(0x7f0000003500)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sched_cls=0x37}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x3, 0x6, 0x6, 0x8, 0x80, 0x7}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r2, &(0x7f00000000c0)={0x11, 0x7, 0x2, {{0x4, '[}%-'}, 0x9}}, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r7, 0x100000000) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB=' '], 0x16) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) 3.093799155s ago: executing program 1 (id=1118): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x82, 0x1, 0x100}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x840) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d0427bd7000fedbdf2501a17ba3bf006906", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3.016077122s ago: executing program 3 (id=1119): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x1a1003) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, {0xfffff001, 0x1, 0x2019, 0x5, 0x6, 0x4, 0x2, 0x3}}) chdir(&(0x7f0000000280)='./file0\x00') fsopen(&(0x7f0000000380)='udf\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000217caa7e055fe4a51bf5f273792d000100fffe0900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000100000008000b400000000034000480300001800e000100696d6d6564696174650000001c0002800800004000000000f5ff01800c00028008000340000000030900010073797a3000000000140000001100010000000000000000000000000a559633c1662770653c67f26e53"], 0xd0}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') sendfile(r4, r4, &(0x7f0000000240)=0x3, 0x8f) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 2.507101189s ago: executing program 1 (id=1120): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r0, 0x0, 0x2, 0xffd3}}, 0x20) 2.500644223s ago: executing program 3 (id=1121): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000500)={0x0, 0xaee2, 0x0, 0x6, 0xbfdbfdf8}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, 0x0, 0x1) io_uring_enter(r1, 0x3d51, 0xe475, 0x67, 0x0, 0xc) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x100) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)=r2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000100)={0xfffffffffffffffc, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x0, r7}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r5, &(0x7f00000002c0)=""/151, 0x97) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) r8 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000010904000001020d0000052406000105240000000d24090100000000500000000006241a00000a090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_disconnect(r8) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) 2.432865799s ago: executing program 1 (id=1122): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001140), 0x103080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000001180)={0x690, 0x258, 0x0, 0x2000, 0xb7, 0x8, 0x20, 0x1, {0x8, 0x8001}, {0x9, 0x4}, {0x6, 0x0, 0x1f000000}, {0x8000, 0x2}, 0x0, 0x10, 0x7, 0xffffffff, 0x0, 0x6, 0xf3f4, 0x6, 0x6, 0x0, 0x5, 0x1, 0x19, 0x2, 0x2}) 2.258507241s ago: executing program 1 (id=1123): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x892e, 0xf}}}}}, 0x28}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x8, 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 962.824062ms ago: executing program 2 (id=1124): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x800000000000000) 843.575908ms ago: executing program 2 (id=1125): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0xc19) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f00000000c0)={0x1}) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 663.879696ms ago: executing program 2 (id=1126): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88), 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x13) waitid(0x0, 0x0, &(0x7f0000000200), 0x8, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) 150.499981ms ago: executing program 2 (id=1127): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x28, r4, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x892e, 0xf}}}}}, 0x28}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x8, 0xfffffffffffffffe, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 128.042809ms ago: executing program 1 (id=1128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb8}}, 0x0) 50.98786ms ago: executing program 1 (id=1129): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x0, 0xdd, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0xff000000, 0xff, 'gre0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x1c}, 0x0, 0xb8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x2, 0x4, 0x7, 0xe], 0x4, 0x4}, {0x2, [0x6, 0x0, 0x3, 0x7, 0x6, 0x5], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x3bd, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'wp512-generic\x00'}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000001c0)={&(0x7f00000002c0)=[{0x0, 0x8208, 0x0, 0x0}], 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 0s ago: executing program 6 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unlinkat(r5, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1aa) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f00000002c0)={0x348, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x8000000000000000, 0x2, 0x3, {0x4, 0xffffffff, 0x6, 0x8, 0x800, 0x5179aa7f, 0x50c80, 0xa15, 0xe, 0x4000, 0x2, r2, r4, 0xfffffffc, 0x5}}, {0x2, 0x4f6c782b, 0x6, 0x7, ')%-@\\.'}}, {{0x2, 0x0, 0x1000, 0x0, 0x7fff, 0xfff, {0x6, 0x20a9, 0x7ff, 0x7, 0x9, 0x9284, 0x2, 0x4, 0x0, 0xc000, 0x7, r3, r4, 0x7, 0x5}}, {0x5, 0x3, 0x9, 0xca46, '\'-\\{R-{\'@'}}, {{0x3, 0x3, 0xfff, 0x0, 0x9, 0x6, {0x5, 0x8000, 0xfffffffffffffffb, 0x7, 0x0, 0xc, 0x6, 0xfffffffc, 0xffffffff, 0x1000, 0x3a, r2, r4, 0xfffffff0, 0x8001}}, {0x0, 0x5, 0xa, 0x10000, '/dev/cuse\x00'}}, {{0x3, 0x2, 0xfffffffffffffffb, 0x7fffffff, 0x8000, 0x3, {0x0, 0x4, 0xfff, 0x3, 0x3, 0x9, 0x0, 0x4, 0x1000, 0x1000, 0x8, r3, r10, 0x9a0, 0xe}}, {0x5, 0x401, 0x1, 0x9, '!'}}, {{0x4, 0x2, 0x2, 0x8000000000000001, 0x10, 0x8d64, {0x5, 0x3ff, 0x5, 0x63, 0x0, 0x0, 0x7fffffff, 0x9, 0x7fffffff, 0xc000, 0x4, r3, 0x0, 0x8}}, {0x5, 0x1, 0xa, 0x4, '/dev/cuse\x00'}}]}, 0x348) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r11, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) kernel console output (not intermixed with test programs): T9037] 9p: Bad value for 'rfdno' [ 313.504030][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 313.756005][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 313.794048][ T9041] usb usb7: usbfs: process 9041 (syz.3.717) did not claim interface 0 before use [ 313.839547][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 313.885500][ T9050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.892841][ T9050] IPv6: NLM_F_CREATE should be set when creating new route [ 313.900797][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 313.923472][ T5815] Bluetooth: hci1: command tx timeout [ 313.960464][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 313.994974][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 314.026118][ T9] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 314.046614][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.075106][ T9] usb 3-1: Product: syz [ 314.079373][ T9] usb 3-1: Manufacturer: syz [ 314.123162][ T9] usb 3-1: SerialNumber: syz [ 314.158907][ T8931] net_ratelimit: 11 callbacks suppressed [ 314.158928][ T8931] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 314.192124][ T9] usb 3-1: config 0 descriptor?? [ 314.241559][ T9] iguanair 3-1:0.0: failed to submit urb: -90 [ 314.248008][ T8931] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 314.295009][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.718'. [ 314.343320][ T9] iguanair 3-1:0.0: probe with driver iguanair failed with error -90 [ 314.465203][ T9042] overlay: Unknown parameter 'func' [ 314.468613][ T8931] wireguard: wg0: Could not create IPv4 socket [ 314.534036][ T8931] wireguard: wg1: Could not create IPv4 socket [ 314.564792][ T8931] wireguard: wg2: Could not create IPv4 socket [ 314.665397][ T906] usb 3-1: USB disconnect, device number 39 [ 315.045230][ T29] audit: type=1400 audit(1773882944.883:468): avc: denied { read write } for pid=9078 comm="syz.3.721" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 315.203633][ T29] audit: type=1400 audit(1773882944.883:469): avc: denied { open } for pid=9078 comm="syz.3.721" path="/164/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 316.403822][ T9098] overlayfs: empty lowerdir [ 317.553720][ T9110] loop5: detected capacity change from 0 to 7 [ 317.712781][ T9110] Dev loop5: unable to read RDB block 7 [ 317.755392][ T9110] loop5: AHDI p1 p2 p3 [ 317.841870][ T9110] loop5: partition table partially beyond EOD, truncated [ 317.873187][ T5846] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 317.920057][ T9110] loop5: p1 start 1601398130 is beyond EOD, truncated [ 317.924351][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.939441][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.948753][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.959038][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.979205][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.064776][ T5846] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 318.083462][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.088980][ T9110] loop5: p2 start 1702059890 is beyond EOD, [ 318.095390][ T5846] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 318.103515][ T9117] Failed to initialize the IGMP autojoin socket (err -2) [ 318.110913][ T5846] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 318.145946][ T9110] truncated [ 318.207696][ T5846] usb 1-1: Manufacturer: syz [ 318.243820][ T9093] syz.2.724 (9093) used greatest stack depth: 19344 bytes left [ 318.317347][ T5846] usb 1-1: config 0 descriptor?? [ 318.400621][ T5846] igorplugusb 1-1:0.0: incorrect number of endpoints [ 318.723328][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.729739][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.263201][ T5846] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 319.590602][ T5846] usb 3-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 319.689456][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 319.741092][ T5846] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 319.820843][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.905665][ T42] usb 1-1: USB disconnect, device number 26 [ 319.912012][ T5846] usb 3-1: Product: syz [ 319.946919][ T5846] usb 3-1: Manufacturer: syz [ 319.976884][ T5846] usb 3-1: SerialNumber: syz [ 320.037726][ T5846] usb 3-1: config 0 descriptor?? [ 320.093203][ T5820] Bluetooth: hci1: command tx timeout [ 320.102865][ T5846] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 320.114377][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 320.123075][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 320.142737][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 320.156231][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 320.174392][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 320.182071][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 320.247432][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 320.279751][ T5846] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 320.359961][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 320.763655][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 320.773338][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 320.793709][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 320.810184][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 320.846286][ T5846] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 320.900370][ T5846] usb 3-1: USB disconnect, device number 40 [ 321.263798][ T5846] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 321.346793][ T5846] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 321.423393][ T5846] keyspan 3-1:0.0: device disconnected [ 321.675713][ T29] audit: type=1400 audit(1773882951.533:470): avc: denied { remount } for pid=9162 comm="syz.1.734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 321.697427][ T5820] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 322.798006][ T5820] Bluetooth: hci1: command tx timeout [ 322.798617][ T29] audit: type=1400 audit(1773882951.973:471): avc: denied { ioctl } for pid=9165 comm="syz.0.737" path="socket:[23878]" dev="sockfs" ino=23878 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.851076][ T9160] program syz.2.735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.864090][ T9160] netlink: 60 bytes leftover after parsing attributes in process `syz.2.735'. [ 322.918096][ T9163] option changes via remount are deprecated (pid=9162 comm=syz.1.734) [ 324.421723][ T9190] overlayfs: empty lowerdir [ 324.634258][ T9117] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 324.763847][ T9117] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 324.883651][ T5820] Bluetooth: hci1: command tx timeout [ 325.037171][ T9117] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 325.473304][ T5881] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 325.864514][ T5881] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.893189][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.914303][ T5881] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.933486][ T5881] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 325.941686][ T5881] usb 3-1: Manufacturer: syz [ 325.956812][ T5881] usb 3-1: config 0 descriptor?? [ 325.965995][ T5881] igorplugusb 3-1:0.0: incorrect number of endpoints [ 326.963378][ T5820] Bluetooth: hci1: command tx timeout [ 327.127485][ T9237] FAULT_INJECTION: forcing a failure. [ 327.127485][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 327.860379][ T9242] netlink: 'syz.3.747': attribute type 4 has an invalid length. [ 328.342195][ T9237] CPU: 0 UID: 0 PID: 9237 Comm: syz.0.746 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.342232][ T9237] Tainted: [L]=SOFTLOCKUP [ 328.342239][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.342249][ T9237] Call Trace: [ 328.342257][ T9237] [ 328.342265][ T9237] dump_stack_lvl+0x100/0x190 [ 328.342311][ T9237] should_fail_ex.cold+0x5/0xa [ 328.342357][ T9237] should_failslab+0xc2/0x120 [ 328.342378][ T9237] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 328.342406][ T9237] ? ovl_do_parse_layer+0x30/0x12b0 [ 328.342434][ T9237] ? kasan_quarantine_put+0x104/0x240 [ 328.342460][ T9237] ? lockdep_hardirqs_on+0x78/0x100 [ 328.342492][ T9237] kstrdup+0x51/0xe0 [ 328.342521][ T9237] ovl_do_parse_layer+0x30/0x12b0 [ 328.342552][ T9237] ovl_parse_param+0x11f7/0x15a0 [ 328.342578][ T9237] ? selinux_fs_context_parse_param+0xd8/0x130 [ 328.342607][ T9237] ? __pfx_ovl_parse_param+0x10/0x10 [ 328.342635][ T9237] ? static_key_count+0x5a/0x70 [ 328.342659][ T9237] ? __pfx_ovl_parse_param+0x10/0x10 [ 328.342681][ T9237] vfs_parse_fs_param+0x200/0x3b0 [ 328.342707][ T9237] vfs_parse_fs_qstr+0x138/0x1c0 [ 328.342729][ T9237] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 328.342758][ T9237] ? ovl_next_opt+0x143/0x1c0 [ 328.342781][ T9237] ? __pfx_ovl_next_opt+0x10/0x10 [ 328.342803][ T9237] vfs_parse_monolithic_sep+0x195/0x210 [ 328.342828][ T9237] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 328.342852][ T9237] ? alloc_fs_context+0x65a/0xf40 [ 328.342878][ T9237] path_mount+0x77f/0x23d0 [ 328.342905][ T9237] ? __pfx_path_mount+0x10/0x10 [ 328.342925][ T9237] ? lockdep_hardirqs_on+0x78/0x100 [ 328.342945][ T9237] ? putname+0xb1/0x110 [ 328.342962][ T9237] ? kmem_cache_free+0x124/0x6a0 [ 328.342986][ T9237] ? __x64_sys_mount+0x293/0x310 [ 328.343004][ T9237] __x64_sys_mount+0x293/0x310 [ 328.343024][ T9237] ? __pfx___x64_sys_mount+0x10/0x10 [ 328.343058][ T9237] do_syscall_64+0x106/0xf80 [ 328.343081][ T9237] ? clear_bhb_loop+0x40/0x90 [ 328.343102][ T9237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.343121][ T9237] RIP: 0033:0x7f1be999c799 [ 328.343137][ T9237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.343153][ T9237] RSP: 002b:00007f1bea80c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 328.343172][ T9237] RAX: ffffffffffffffda RBX: 00007f1be9c15fa0 RCX: 00007f1be999c799 [ 328.343183][ T9237] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 328.343193][ T9237] RBP: 00007f1bea80c090 R08: 0000200000000180 R09: 0000000000000000 [ 328.343203][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.343213][ T9237] R13: 00007f1be9c16038 R14: 00007f1be9c15fa0 R15: 00007ffec67c2128 [ 328.343236][ T9237] [ 328.731634][ T9117] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 329.105214][ T9117] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 329.235757][ T9117] wireguard: wg0: Could not create IPv4 socket [ 329.272143][ T9117] wireguard: wg1: Could not create IPv4 socket [ 329.348548][ T9117] wireguard: wg2: Could not create IPv4 socket [ 329.567678][ T9260] SELinux: failed to load policy [ 330.011912][ T5846] usb 3-1: USB disconnect, device number 41 [ 330.500302][ T9273] veth4: entered allmulticast mode [ 332.858102][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.985348][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.152321][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.178393][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.197728][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.216675][ T9325] Failed to initialize the IGMP autojoin socket (err -2) [ 333.739275][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.851215][ T9311] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 334.709738][ T9339] netlink: 'syz.1.758': attribute type 4 has an invalid length. [ 335.344085][ T5815] Bluetooth: hci1: command tx timeout [ 335.564979][ T9350] netlink: 14 bytes leftover after parsing attributes in process `syz.2.762'. [ 336.474826][ T9350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.592163][ T9350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.667067][ T9350] bond0 (unregistering): Released all slaves [ 336.719449][ T9359] syz.3.763: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 336.763848][ T9359] CPU: 1 UID: 0 PID: 9359 Comm: syz.3.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.763889][ T9359] Tainted: [L]=SOFTLOCKUP [ 336.763896][ T9359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 336.763908][ T9359] Call Trace: [ 336.763914][ T9359] [ 336.763921][ T9359] dump_stack_lvl+0x100/0x190 [ 336.763955][ T9359] warn_alloc.cold+0x95/0x1c1 [ 336.763979][ T9359] ? __pfx_warn_alloc+0x10/0x10 [ 336.764002][ T9359] ? kasan_save_stack+0x3f/0x50 [ 336.764018][ T9359] ? kasan_save_stack+0x30/0x50 [ 336.764035][ T9359] ? kasan_save_track+0x14/0x30 [ 336.764054][ T9359] ? xskq_create+0xfb/0x1d0 [ 336.764069][ T9359] __vmalloc_node_range_noprof+0x1252/0x1530 [ 336.764088][ T9359] ? xskq_create+0xfb/0x1d0 [ 336.764104][ T9359] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 336.764123][ T9359] ? xskq_create+0xfb/0x1d0 [ 336.764134][ T9359] vmalloc_user_noprof+0x9e/0xe0 [ 336.764147][ T9359] ? xskq_create+0xfb/0x1d0 [ 336.764158][ T9359] xskq_create+0xfb/0x1d0 [ 336.764171][ T9359] xsk_setsockopt+0x743/0xab0 [ 336.764182][ T9359] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.764193][ T9359] ? find_held_lock+0x2b/0x80 [ 336.764210][ T9359] ? __fget_files+0x215/0x3d0 [ 336.764223][ T9359] ? selinux_socket_setsockopt+0x6a/0x80 [ 336.764239][ T9359] ? __pfx_xsk_setsockopt+0x10/0x10 [ 336.764251][ T9359] do_sock_setsockopt+0xf3/0x1d0 [ 336.764275][ T9359] __sys_setsockopt+0x195/0x220 [ 336.764293][ T9359] __x64_sys_setsockopt+0xbd/0x160 [ 336.764305][ T9359] ? do_syscall_64+0x95/0xf80 [ 336.764336][ T9359] ? lockdep_hardirqs_on+0x78/0x100 [ 336.764352][ T9359] do_syscall_64+0x106/0xf80 [ 336.764368][ T9359] ? clear_bhb_loop+0x40/0x90 [ 336.764385][ T9359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.764399][ T9359] RIP: 0033:0x7f346839c799 [ 336.764413][ T9359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.764432][ T9359] RSP: 002b:00007f3469194028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 336.764447][ T9359] RAX: ffffffffffffffda RBX: 00007f3468616090 RCX: 00007f346839c799 [ 336.764456][ T9359] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 336.764464][ T9359] RBP: 00007f3468432c99 R08: 0000000000000004 R09: 0000000000000000 [ 336.764472][ T9359] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 336.764481][ T9359] R13: 00007f3468616128 R14: 00007f3468616090 R15: 00007ffd015b9c38 [ 336.764498][ T9359] [ 336.764596][ T9359] Mem-Info: [ 337.018507][ T9359] active_anon:52793 inactive_anon:0 isolated_anon:0 [ 337.018507][ T9359] active_file:20317 inactive_file:4010 isolated_file:0 [ 337.018507][ T9359] unevictable:768 dirty:231 writeback:0 [ 337.018507][ T9359] slab_reclaimable:10935 slab_unreclaimable:100022 [ 337.018507][ T9359] mapped:44138 shmem:41675 pagetables:1612 [ 337.018507][ T9359] sec_pagetables:0 bounce:0 [ 337.018507][ T9359] kernel_misc_reclaimable:0 [ 337.018507][ T9359] free:1272220 free_pcp:10672 free_cma:0 [ 337.088247][ T9359] Node 0 active_anon:210772kB inactive_anon:0kB active_file:81268kB inactive_file:15908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176552kB dirty:920kB writeback:0kB shmem:164464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12528kB pagetables:6188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 337.156045][ T9359] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 337.264810][ T9359] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.368035][ T5815] Bluetooth: hci1: command tx timeout [ 337.863075][ T9359] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 337.988797][ T29] audit: type=1400 audit(1773882967.823:472): avc: denied { write } for pid=9377 comm="syz.2.767" path="socket:[25313]" dev="sockfs" ino=25313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 337.997594][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.767'. [ 338.047830][ T9359] Node 0 DMA32 free:1128784kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:200980kB inactive_anon:0kB active_file:81268kB inactive_file:15916kB unevictable:1536kB writepending:940kB zspages:0kB present:3129332kB managed:2537152kB mlocked:0kB bounce:0kB free_pcp:53440kB local_pcp:19332kB free_cma:0kB [ 338.104818][ T9359] lowmem_reserve[]: 0 0 1 1 1 [ 338.149487][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.767'. [ 338.193069][ T9359] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1048kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 338.228947][ T9359] lowmem_reserve[]: 0 0 0 0 0 [ 338.310475][ T9359] Node 1 Normal free:3944632kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 338.363262][ T5881] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 338.485071][ T9359] lowmem_reserve[]: 0 0 0 0 0 [ 338.489833][ T9359] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 338.572314][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 338.613968][ T5881] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 338.654424][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 338.672971][ T9359] Node 0 DMA32: 3644*4kB (UME) 1236*8kB (UME) 460*16kB (UM) 319*32kB (UME) 85*64kB (UE) 188*128kB (UME) 215*256kB (UME) 104*512kB (UME) 96*1024kB (UME) 71*2048kB (UME) 173*4096kB (UM) = 1132144kB [ 338.698963][ T5881] usb 2-1: Product: syz [ 338.717908][ T5881] usb 2-1: Manufacturer: syz [ 338.722546][ T5881] usb 2-1: SerialNumber: syz [ 338.754402][ T9325] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 338.761961][ T5881] usb 2-1: config 0 descriptor?? [ 338.788892][ T5881] gspca_main: sq905-2.14.0 probing 2770:9120 [ 338.823264][ T9359] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 338.977158][ T9325] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 339.189678][ T9325] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 339.377797][ T9359] Node 1 Normal: 8*4kB (UM) 9*8kB (UM) 9*16kB (UM) 6*32kB (UM) 13*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3944824kB [ 339.475707][ T5815] Bluetooth: hci1: command tx timeout [ 341.075103][ T5881] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 341.141589][ T5881] sq905 2-1:0.0: probe with driver sq905 failed with error -110 [ 341.346539][ T9359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.415492][ T9359] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.489076][ T9359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 341.523763][ T5815] Bluetooth: hci1: command tx timeout [ 341.570162][ T9359] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 341.671321][ T9359] 54437 total pagecache pages [ 341.753083][ T9359] 0 pages in swap cache [ 341.780569][ T9359] Free swap = 124996kB [ 341.857829][ T9359] Total swap = 124996kB [ 341.895787][ T9359] 2097051 pages RAM [ 341.914140][ T9359] 0 pages HighMem/MovableOnly [ 341.941307][ T9359] 430886 pages reserved [ 341.972827][ T29] audit: type=1400 audit(1773882971.823:473): avc: denied { map } for pid=9413 comm="syz.2.771" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.035332][ T9359] 0 pages cma reserved [ 342.076357][ T29] audit: type=1400 audit(1773882971.823:474): avc: denied { execute } for pid=9413 comm="syz.2.771" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 342.190567][ T29] audit: type=1400 audit(1773882971.963:475): avc: denied { connect } for pid=9413 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 342.566668][ T5881] usb 2-1: USB disconnect, device number 37 [ 342.716866][ T29] audit: type=1400 audit(1773882972.573:476): avc: denied { lock } for pid=9432 comm="syz.3.772" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 343.416226][ T29] audit: type=1400 audit(1773882973.243:477): avc: denied { getopt } for pid=9433 comm="syz.0.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.692508][ T9325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 343.751287][ T29] audit: type=1400 audit(1773882973.603:478): avc: denied { connect } for pid=9446 comm="syz.1.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.751971][ T9448] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 343.964635][ T9325] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 345.110804][ T9325] wireguard: wg0: Could not create IPv4 socket [ 345.186107][ T9325] wireguard: wg1: Could not create IPv4 socket [ 345.285313][ T9325] wireguard: wg2: Could not create IPv4 socket [ 345.414815][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.479837][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.534098][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.606093][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.653459][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.686836][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.703052][ T5923] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 345.830934][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.871304][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.883454][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.888023][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 345.934167][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 345.943050][ T9472] netlink: 84 bytes leftover after parsing attributes in process `syz.1.780'. [ 345.988786][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 346.022423][ T5923] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 346.040241][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.128872][ T5923] usb 2-1: Product: syz [ 346.145463][ T5923] usb 2-1: Manufacturer: syz [ 346.150164][ T5923] usb 2-1: SerialNumber: syz [ 346.178834][ T5923] usb 2-1: config 0 descriptor?? [ 346.200523][ T5923] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 346.231898][ T5923] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 346.607776][ T29] audit: type=1400 audit(1773882976.463:479): avc: denied { ioctl } for pid=9470 comm="syz.1.780" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 346.610027][ T5923] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 346.873087][ T29] audit: type=1400 audit(1773882976.713:480): avc: denied { kexec_image_load } for pid=9493 comm="syz.0.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 346.908934][ T5923] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 346.958016][ T5923] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 346.994870][ T5923] em28xx 2-1:0.0: No AC97 audio processor [ 347.066854][ T9501] overlayfs: empty lowerdir [ 347.597991][ T5923] usb 2-1: USB disconnect, device number 38 [ 347.618366][ T5923] em28xx 2-1:0.0: Disconnecting em28xx [ 347.628159][ T9478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.659847][ T5923] em28xx 2-1:0.0: Freeing device [ 347.723026][ T42] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 349.596274][ T9518] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 349.853859][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 349.878136][ T42] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 349.890338][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.898969][ T42] usb 3-1: Product: syz [ 349.909016][ T42] usb 3-1: Manufacturer: syz [ 349.934796][ T42] usb 3-1: SerialNumber: syz [ 349.993883][ T42] usb 3-1: config 0 descriptor?? [ 350.035041][ T42] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 350.042739][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 350.083204][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.113618][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 350.119410][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.176834][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.193606][ T42] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 350.201726][ T42] usb 3-1: media controller created [ 350.233988][ T9504] dvb-usb: bulk message failed: -22 (7/0) [ 350.239766][ T9504] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 350.249978][ T9504] ttusb2: i2c transfer failed. [ 350.308972][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.369494][ T42] usb 3-1: selecting invalid altsetting 3 [ 350.396165][ T42] ttusb2: set interface to alts=3 failed [ 350.523981][ T42] DVB: Unable to find symbol tda10086_attach() [ 350.546109][ T42] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 350.571806][ T42] dvb-usb: bulk message failed: -22 (4/0) [ 350.585671][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.609616][ T42] dvb-usb: bulk message failed: -22 (5/0) [ 350.633847][ T42] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 350.667271][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 350.708309][ T42] usb 3-1: USB disconnect, device number 42 [ 350.833121][ T42] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 351.574116][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.586766][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.598521][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.606726][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.615367][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.637170][ T9549] Failed to initialize the IGMP autojoin socket (err -2) [ 351.968225][ T9560] overlayfs: empty lowerdir [ 353.467702][ T9581] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 353.665668][ T9570] batadv_slave_0: entered promiscuous mode [ 353.683147][ T5815] Bluetooth: hci1: command tx timeout [ 353.755684][ T9591] overlayfs: empty lowerdir [ 353.785445][ T42] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 354.053363][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 354.076795][ T42] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 354.111986][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.142114][ T42] usb 3-1: Product: syz [ 354.163596][ T42] usb 3-1: Manufacturer: syz [ 354.180208][ T42] usb 3-1: SerialNumber: syz [ 354.714671][ T9597] netlink: 'syz.1.798': attribute type 4 has an invalid length. [ 355.175759][ T42] usb 3-1: config 0 descriptor?? [ 355.210967][ T42] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 355.254451][ T42] usb 3-1: Detected FT-X [ 355.396415][ T42] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 355.464074][ T5867] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 355.644901][ T5867] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 355.653941][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.679972][ T5867] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 355.694514][ T5867] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 355.714713][ T5867] usb 1-1: Manufacturer: syz [ 355.734372][ T5867] usb 1-1: config 0 descriptor?? [ 355.763092][ T5815] Bluetooth: hci1: command tx timeout [ 355.764910][ T5867] igorplugusb 1-1:0.0: incorrect number of endpoints [ 355.913453][ T42] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 356.035066][ T9549] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 356.147294][ T29] audit: type=1400 audit(1773882986.003:481): avc: denied { read } for pid=9568 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.603327][ T29] audit: type=1400 audit(1773882986.073:482): avc: denied { write } for pid=9568 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 356.666372][ T9549] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 356.710409][ T9549] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 357.427995][ T9636] overlayfs: empty lowerdir [ 357.658224][ T906] usb 3-1: USB disconnect, device number 43 [ 357.682070][ T42] usb 1-1: USB disconnect, device number 27 [ 357.724673][ T906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 357.755755][ T906] ftdi_sio 3-1:0.0: device disconnected [ 357.774612][ T9585] batadv_slave_0: left promiscuous mode [ 357.843432][ T5815] Bluetooth: hci1: command tx timeout [ 359.706286][ T29] audit: type=1400 audit(1773882989.563:483): avc: denied { setopt } for pid=9675 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.868654][ T9685] overlayfs: empty lowerdir [ 359.929471][ T5815] Bluetooth: hci1: command tx timeout [ 360.081665][ T5881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 360.253856][ T9690] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.304622][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 360.368408][ T5881] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 360.460805][ T5881] usb 1-1: config 0 has no interface number 0 [ 360.533045][ T5881] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 360.594782][ T5881] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 360.640826][ T5815] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 360.661103][ T5881] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.749682][ T5881] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 360.782334][ T9699] overlayfs: empty lowerdir [ 361.149755][ T5881] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.194505][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.209891][ T9549] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 361.237863][ T5881] usb 1-1: config 0 descriptor?? [ 361.267522][ T5881] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 361.280283][ T9549] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 361.335565][ T9549] wireguard: wg0: Could not create IPv4 socket [ 361.358410][ T9549] wireguard: wg1: Could not create IPv4 socket [ 361.373797][ T5846] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 361.394787][ T9549] wireguard: wg2: Could not create IPv4 socket [ 361.449560][ T29] audit: type=1400 audit(1773882991.303:484): avc: denied { ioctl } for pid=9704 comm="syz.1.817" path="socket:[26893]" dev="sockfs" ino=26893 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 361.618861][ T5846] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.651755][ T5881] usb 1-1: USB disconnect, device number 28 [ 361.657947][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 362.100471][ T5846] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 362.137022][ T29] audit: type=1400 audit(1773882991.593:485): avc: denied { ioctl } for pid=9704 comm="syz.1.817" path="/dev/sg0" dev="devtmpfs" ino=819 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.167374][ T5846] usb 4-1: can't read configurations, error -71 [ 362.245480][ T29] audit: type=1400 audit(1773882991.993:486): avc: denied { bind } for pid=9682 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 362.398361][ T29] audit: type=1400 audit(1773882992.253:487): avc: denied { create } for pid=9715 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 362.937459][ T9726] __nla_validate_parse: 58 callbacks suppressed [ 362.937479][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 362.969606][ T9726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.820'. [ 363.134909][ T29] audit: type=1400 audit(1773882992.903:488): avc: denied { getopt } for pid=9724 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 363.284380][ T5881] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 365.377609][ T9797] overlayfs: empty lowerdir [ 365.445287][ T9799] 9p: Bad value for 'rfdno' [ 365.660789][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.671578][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.718755][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.728382][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.740425][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 365.773160][ T906] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 365.889035][ T9801] Failed to initialize the IGMP autojoin socket (err -2) [ 365.956160][ T906] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 365.989537][ T906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.050025][ T906] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 366.073892][ T906] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 366.082014][ T906] usb 4-1: Manufacturer: syz [ 366.109255][ T906] usb 4-1: config 0 descriptor?? [ 366.126273][ T906] igorplugusb 4-1:0.0: incorrect number of endpoints [ 366.235559][ T9815] netlink: 'syz.1.830': attribute type 6 has an invalid length. [ 366.327070][ T5881] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 366.545477][ T5881] usb 3-1: device descriptor read/64, error -71 [ 366.813027][ T5881] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 366.917779][ T5846] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 366.956927][ T5881] usb 3-1: device descriptor read/64, error -71 [ 367.073656][ T5881] usb usb3-port1: attempt power cycle [ 367.097059][ T5846] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 367.115562][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.178039][ T5846] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 367.224837][ T5846] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 367.258348][ T5846] usb 1-1: Manufacturer: syz [ 367.305728][ T5846] usb 1-1: config 0 descriptor?? [ 367.328407][ T5846] igorplugusb 1-1:0.0: incorrect number of endpoints [ 367.385806][ T9801] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 367.443306][ T5881] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 367.448381][ T9801] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 367.494894][ T5881] usb 3-1: device descriptor read/8, error -71 [ 367.557522][ T9801] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 367.764866][ T5881] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 367.838549][ T9841] overlayfs: empty lowerdir [ 367.883878][ T5815] Bluetooth: hci1: command tx timeout [ 367.926349][ T906] usb 4-1: USB disconnect, device number 24 [ 367.926525][ T5881] usb 3-1: device descriptor read/8, error -71 [ 368.133321][ T5881] usb usb3-port1: unable to enumerate USB device [ 369.032691][ T9868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.837'. [ 369.188300][ T5881] usb 1-1: USB disconnect, device number 29 [ 369.388791][ T9801] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 369.561768][ T9801] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 369.580920][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 369.943173][ T5815] Bluetooth: hci1: command tx timeout [ 369.975978][ T9801] wireguard: wg0: Could not create IPv4 socket [ 369.985999][ T9801] wireguard: wg1: Could not create IPv4 socket [ 370.020497][ T9801] wireguard: wg2: Could not create IPv4 socket [ 370.143716][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 370.296156][ T9] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 370.324209][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 370.332451][ T9] usb 3-1: Product: syz [ 370.430329][ T9] usb 3-1: Manufacturer: syz [ 370.448047][ T9] usb 3-1: SerialNumber: syz [ 370.481165][ T9] usb 3-1: config 0 descriptor?? [ 370.810165][ T29] audit: type=1400 audit(1773883000.423:489): avc: denied { create } for pid=9899 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.323583][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 371.444952][ T9908] overlayfs: empty lowerdir [ 371.719752][ T29] audit: type=1400 audit(1773883001.573:490): avc: denied { write } for pid=9899 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 371.902138][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 371.922592][ T9] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 372.228007][ T9] usb 3-1: USB disconnect, device number 48 [ 373.029510][ T9920] overlayfs: empty lowerdir [ 373.883097][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 374.066203][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.091681][ T29] audit: type=1326 audit(1773883003.943:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9935 comm="syz.1.854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bad9c799 code=0x0 [ 374.192487][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.204137][ T5846] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 374.428819][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 374.448716][ T5846] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 374.449355][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 374.482366][ T9] usb 4-1: Manufacturer: syz [ 374.486733][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.499128][ T9] usb 4-1: config 0 descriptor?? [ 374.521168][ T9] igorplugusb 4-1:0.0: incorrect number of endpoints [ 374.541829][ T5846] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 374.581865][ T5846] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 374.610134][ T5846] usb 3-1: Manufacturer: syz [ 374.634674][ T5846] usb 3-1: config 0 descriptor?? [ 374.662788][ T5846] igorplugusb 3-1:0.0: incorrect number of endpoints [ 376.774722][ T9954] loop2: detected capacity change from 0 to 7 [ 376.816619][ T9] usb 3-1: USB disconnect, device number 49 [ 376.905286][ T6078] loop2: [ 376.908309][ T6078] loop2: partition table partially beyond EOD, truncated [ 376.964498][ T9954] loop2: [ 376.973737][ T9954] loop2: partition table partially beyond EOD, truncated [ 377.025392][ T42] usb 4-1: USB disconnect, device number 25 [ 377.034019][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.048593][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.059961][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.095616][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.113994][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.162100][ T9963] Failed to initialize the IGMP autojoin socket (err -2) [ 377.889619][ T9979] overlayfs: empty lowerdir [ 379.101096][ T9991] overlayfs: empty lowerdir [ 380.067511][ T9996] netlink: 'syz.0.867': attribute type 4 has an invalid length. [ 380.441821][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.448289][ T5820] Bluetooth: hci1: command tx timeout [ 380.455658][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.221482][ T29] audit: type=1400 audit(1773883011.073:492): avc: denied { mount } for pid=10011 comm="syz.2.873" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 381.290009][ T5846] kernel write not supported for file /snd/seq (pid: 5846 comm: kworker/1:4) [ 381.381348][T10021] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 381.497442][T10010] Failed to initialize the IGMP autojoin socket (err -2) [ 382.115176][ T9963] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 382.134142][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 382.178613][ T9963] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 382.235354][ T9963] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 382.314611][T10035] overlayfs: empty lowerdir [ 382.369223][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 382.378772][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.514325][ T5820] Bluetooth: hci1: command tx timeout [ 382.529372][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 382.608381][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 382.662121][ T9] usb 1-1: Manufacturer: syz [ 382.738443][ T9] usb 1-1: config 0 descriptor?? [ 382.810635][T10041] overlayfs: empty lowerdir [ 382.863569][ T9] igorplugusb 1-1:0.0: incorrect number of endpoints [ 383.174369][ T42] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 383.373643][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 383.413845][ T42] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 383.459071][ T42] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 383.500991][ T42] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 383.551914][ T42] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 383.588117][ T42] usb 4-1: config 250 has no interface number 0 [ 383.611360][ T42] usb 4-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 383.672715][ T42] usb 4-1: config 250 interface 228 has no altsetting 0 [ 383.713982][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 383.759108][ T42] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 383.802748][ T42] usb 4-1: Product: syz [ 383.828015][ T42] usb 4-1: SerialNumber: syz [ 383.892525][ T42] hub 4-1:250.228: bad descriptor, ignoring hub [ 383.920535][ T42] hub 4-1:250.228: probe with driver hub failed with error -5 [ 384.148178][ T29] audit: type=1400 audit(1773883013.963:493): avc: denied { watch } for pid=10054 comm="syz.2.881" path="/194/bus" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 384.574808][T10063] lo speed is unknown, defaulting to 1000 [ 384.584604][T10063] lo speed is unknown, defaulting to 1000 [ 384.606525][T10063] lo speed is unknown, defaulting to 1000 [ 384.637695][T10063] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 384.663054][T10063] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 384.831084][ T5820] Bluetooth: hci1: command tx timeout [ 384.833209][T10063] lo speed is unknown, defaulting to 1000 [ 384.844034][T10063] lo speed is unknown, defaulting to 1000 [ 384.850538][T10063] lo speed is unknown, defaulting to 1000 [ 384.857191][T10063] lo speed is unknown, defaulting to 1000 [ 385.206348][ T29] audit: type=1326 audit(1773883015.063:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.2.882" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f682279c799 code=0x0 [ 385.281727][ T42] usb 1-1: USB disconnect, device number 30 [ 385.699072][T10074] overlayfs: empty lowerdir [ 386.614091][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 386.950368][ T5820] Bluetooth: hci1: command tx timeout [ 386.982594][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 387.126673][ T9963] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 387.721405][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 388.239362][ T9963] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 388.347133][ T9963] wireguard: wg0: Could not create IPv4 socket [ 388.408346][ T9963] wireguard: wg1: Could not create IPv4 socket [ 388.415239][ T9] usb 4-1: USB disconnect, device number 26 [ 388.454265][T10084] ceph: No mds server is up or the cluster is laggy [ 388.499480][ T9963] wireguard: wg2: Could not create IPv4 socket [ 389.572502][T10113] overlayfs: empty lowerdir [ 389.813208][ T906] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 389.975151][ T906] usb 3-1: Using ep0 maxpacket: 8 [ 390.097974][ T906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.524995][ T906] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 390.534690][ T906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.546032][ T906] usb 3-1: config 0 descriptor?? [ 390.818715][ T906] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 391.371271][ T42] usb 3-1: USB disconnect, device number 50 [ 392.228902][T10160] overlayfs: empty lowerdir [ 392.438552][ T906] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 392.543521][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.564851][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.578160][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.588243][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.596098][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.641185][T10163] Failed to initialize the IGMP autojoin socket (err -2) [ 392.679559][ T906] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 392.727588][ T906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.815864][ T906] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.830050][ T906] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.870662][ T906] usb 1-1: Manufacturer: syz [ 394.077788][ T906] usb 1-1: config 0 descriptor?? [ 394.099929][ T906] igorplugusb 1-1:0.0: incorrect number of endpoints [ 394.553095][ T906] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 394.693166][ T5815] Bluetooth: hci1: command tx timeout [ 394.847421][T10193] overlayfs: empty lowerdir [ 394.894547][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 394.992855][ T906] usb 2-1: config 0 has no interfaces? [ 395.000097][ T906] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 395.034009][ T906] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 395.042097][ T906] usb 2-1: Manufacturer: syz [ 395.150801][ T906] usb 2-1: config 0 descriptor?? [ 395.214914][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 395.246653][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 395.286499][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.312515][ T9] usb 3-1: Product: syz [ 395.337355][ T9] usb 3-1: Manufacturer: syz [ 395.348991][ T9] usb 3-1: SerialNumber: syz [ 395.388657][ T9] usb 3-1: config 0 descriptor?? [ 395.451335][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 395.486964][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 395.564103][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 395.664416][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 395.709666][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 395.782774][T10182] dvb-usb: bulk message failed: -22 (7/0) [ 395.793646][T10182] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 395.830801][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 395.843895][T10182] ttusb2: i2c transfer failed. [ 395.910316][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 396.025588][ T9] usb 3-1: media controller created [ 396.144505][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.239876][ T9] usb 3-1: selecting invalid altsetting 3 [ 396.257545][ T9] ttusb2: set interface to alts=3 failed [ 396.258366][ T5881] usb 2-1: USB disconnect, device number 39 [ 396.425871][ T9] DVB: Unable to find symbol tda10086_attach() [ 396.426197][ T42] usb 1-1: USB disconnect, device number 31 [ 396.432105][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 396.449465][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 396.456880][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 396.546637][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 396.573200][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 396.627257][T10163] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 396.636084][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 396.653587][ T29] audit: type=1400 audit(1773883026.503:495): avc: denied { mount } for pid=10220 comm="syz.0.907" name="/" dev="autofs" ino=30154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 396.704825][ T29] audit: type=1400 audit(1773883026.543:496): avc: denied { mounton } for pid=10220 comm="syz.0.907" path="/198/file1/file0" dev="autofs" ino=30155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 396.738375][ T5815] Bluetooth: hci1: command tx timeout [ 397.041023][T10163] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 397.057612][ T9] usb 3-1: USB disconnect, device number 51 [ 397.155032][T10163] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 397.214012][T10231] Illegal XDP return value 4294967294 on prog (id 81) dev N/A, expect packet loss! [ 397.490425][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 397.565245][T10227] netlink: 188 bytes leftover after parsing attributes in process `syz.0.907'. [ 397.698116][ T29] audit: type=1400 audit(1773883027.553:497): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 398.053914][ T42] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 398.215205][ T42] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 398.224791][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.271013][ T42] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 398.281574][ T42] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 398.289862][ T42] usb 2-1: Manufacturer: syz [ 398.306848][ T42] usb 2-1: config 0 descriptor?? [ 398.330691][ T42] igorplugusb 2-1:0.0: incorrect number of endpoints [ 398.493687][ T5923] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 398.665189][ T5923] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 398.674931][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.741962][T10163] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 398.781943][ T5923] usb 4-1: config 0 descriptor?? [ 398.794498][T10163] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 398.803472][ T5815] Bluetooth: hci1: command tx timeout [ 398.892217][T10163] wireguard: wg0: Could not create IPv4 socket [ 398.926953][T10163] wireguard: wg1: Could not create IPv4 socket [ 398.967141][T10163] wireguard: wg2: Could not create IPv4 socket [ 399.402193][ T9] usb 2-1: USB disconnect, device number 40 [ 399.853584][ T5923] ath6kl: Failed to submit usb control message: -110 [ 399.860798][ T5923] ath6kl: unable to send the bmi data to the device: -110 [ 399.870415][ T5923] ath6kl: Unable to send get target info: -110 [ 399.894254][ T5923] ath6kl: Failed to init ath6kl core: -110 [ 399.961231][ T5923] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 400.249509][T10299] usb usb7: usbfs: process 10299 (syz.2.914) did not claim interface 0 before use [ 400.543088][ T793] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 400.695704][ T793] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 400.704721][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.717139][ T793] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 400.727529][ T793] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 400.736288][ T793] usb 2-1: Manufacturer: syz [ 400.744603][ T793] usb 2-1: config 0 descriptor?? [ 400.753594][ T793] igorplugusb 2-1:0.0: incorrect number of endpoints [ 401.188403][T10330] FAULT_INJECTION: forcing a failure. [ 401.188403][T10330] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 401.201597][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.2.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 401.201628][T10330] Tainted: [L]=SOFTLOCKUP [ 401.201634][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.201646][T10330] Call Trace: [ 401.201655][T10330] [ 401.201663][T10330] dump_stack_lvl+0x100/0x190 [ 401.201708][T10330] should_fail_ex.cold+0x5/0xa [ 401.201737][T10330] _copy_from_user+0x2e/0xd0 [ 401.201762][T10330] copy_msghdr_from_user+0x9f/0x4f0 [ 401.201796][T10330] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 401.201822][T10330] ? kvm_sched_clock_read+0x11/0x20 [ 401.201852][T10330] ? lock_acquire+0x1cf/0x380 [ 401.201880][T10330] ___sys_sendmsg+0x106/0x1e0 [ 401.201908][T10330] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.201935][T10330] ? sched_clock_cpu+0x6c/0x570 [ 401.201989][T10330] __sys_sendmsg+0x170/0x220 [ 401.202012][T10330] ? __pfx___sys_sendmsg+0x10/0x10 [ 401.202041][T10330] ? rcu_is_watching+0x12/0xc0 [ 401.202091][T10330] do_syscall_64+0x106/0xf80 [ 401.202114][T10330] ? clear_bhb_loop+0x40/0x90 [ 401.202137][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.202156][T10330] RIP: 0033:0x7f682279c799 [ 401.202173][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.202190][T10330] RSP: 002b:00007f68236f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.202209][T10330] RAX: ffffffffffffffda RBX: 00007f6822a16180 RCX: 00007f682279c799 [ 401.202220][T10330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 401.202230][T10330] RBP: 00007f68236f9090 R08: 0000000000000000 R09: 0000000000000000 [ 401.202240][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.202250][T10330] R13: 00007f6822a16218 R14: 00007f6822a16180 R15: 00007ffd218eac08 [ 401.202273][T10330] [ 401.425484][ T793] usb 4-1: USB disconnect, device number 27 [ 401.656596][T10339] wg1: entered promiscuous mode [ 401.661655][T10339] wg1: entered allmulticast mode [ 401.888870][T10344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.918'. [ 401.931758][ T29] audit: type=1400 audit(1773883031.783:498): avc: denied { ioctl } for pid=10341 comm="syz.3.918" path="socket:[30342]" dev="sockfs" ino=30342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 401.972841][ T29] audit: type=1400 audit(1773883031.813:499): avc: denied { bind } for pid=10341 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 401.983121][T10344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.918'. [ 402.313584][ T5923] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 402.447833][ T9] usb 2-1: USB disconnect, device number 41 [ 402.503666][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 402.518018][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.528022][ T5923] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 402.555509][ T5923] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 402.572115][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.580926][ T5923] usb 3-1: Product: syz [ 402.589055][ T5923] usb 3-1: Manufacturer: syz [ 402.594545][ T5923] usb 3-1: SerialNumber: syz [ 402.822529][ T5923] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 402.876207][ T5923] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 402.886607][ T5923] usb 3-1: disable ehci-hcd to run US-144 [ 402.896071][ T5923] usb 3-1: disable ehci-hcd to run US-144 [ 402.906271][ T5923] usb 3-1: disable ehci-hcd to run US-144 [ 402.922716][ T5923] usb 3-1: USB disconnect, device number 52 [ 402.949627][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 404.018265][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.030439][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.040838][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.078678][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.100763][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.175123][T10408] Failed to initialize the IGMP autojoin socket (err -2) [ 405.487038][T10410] netlink: 'syz.3.924': attribute type 4 has an invalid length. [ 405.735038][T10406] netlink: 'syz.3.924': attribute type 4 has an invalid length. [ 405.762320][ T5923] lo speed is unknown, defaulting to 1000 [ 405.796740][ T5923] syz0: Port: 1 Link DOWN [ 405.989521][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.997092][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.164030][ T5815] Bluetooth: hci1: command tx timeout [ 406.438174][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.493788][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.505795][ T42] lo speed is unknown, defaulting to 1000 [ 407.511630][ T42] syz0: Port: 1 Link ACTIVE [ 407.631644][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.678023][ T5815] Bluetooth: hci1: command tx timeout [ 408.697575][ T29] audit: type=1400 audit(1773883038.553:500): avc: denied { read } for pid=10473 comm="syz.2.930" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.705401][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.756089][ T29] audit: type=1400 audit(1773883038.583:501): avc: denied { open } for pid=10473 comm="syz.2.930" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.795275][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.810831][ T29] audit: type=1400 audit(1773883038.583:502): avc: denied { ioctl } for pid=10473 comm="syz.2.930" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 408.955719][ T29] audit: type=1326 audit(1773883038.583:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.044267][ T29] audit: type=1326 audit(1773883038.583:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.075242][ T29] audit: type=1326 audit(1773883038.583:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.099381][ T29] audit: type=1326 audit(1773883038.583:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.124759][ T29] audit: type=1326 audit(1773883038.583:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.150511][ T29] audit: type=1326 audit(1773883038.583:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.177686][ T29] audit: type=1326 audit(1773883038.583:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f682279c799 code=0x7ff00000 [ 409.253828][ T793] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 409.456705][ T793] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 409.486339][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.522851][ T793] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 409.543089][ T5846] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 409.563229][ T793] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 409.584757][ T793] usb 2-1: Manufacturer: syz [ 409.597567][T10408] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 409.614831][T10408] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 409.640923][ T793] usb 2-1: config 0 descriptor?? [ 409.652024][T10408] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 409.664877][ T793] igorplugusb 2-1:0.0: incorrect number of endpoints [ 409.696709][ T5846] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 409.707261][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.718964][ T5846] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.728505][ T5846] usb 3-1: config 1 has no interface number 1 [ 409.735615][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.749227][ T5846] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.765408][ T5846] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.786158][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.794952][ T5846] usb 3-1: Product: syz [ 409.843411][ T5846] usb 3-1: Manufacturer: syz [ 409.848098][ T5846] usb 3-1: SerialNumber: syz [ 410.270988][ T5846] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 410.325967][ T5846] usb 3-1: MIDIStreaming interface descriptor not found [ 410.600680][ T5846] usb 3-1: USB disconnect, device number 53 [ 410.718945][ T8339] udevd[8339]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.743324][ T5815] Bluetooth: hci1: command tx timeout [ 411.004812][T10514] overlayfs: empty lowerdir [ 411.291069][ T9] usb 2-1: USB disconnect, device number 42 [ 411.405697][T10521] overlayfs: empty lowerdir [ 412.222133][T10541] overlayfs: empty lowerdir [ 412.786889][T10408] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 412.803765][ T5815] Bluetooth: hci1: command tx timeout [ 412.860789][T10408] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 413.140031][T10559] overlayfs: empty lowerdir [ 413.198344][T10408] wireguard: wg0: Could not create IPv4 socket [ 413.258161][T10408] wireguard: wg1: Could not create IPv4 socket [ 413.277192][T10408] wireguard: wg2: Could not create IPv4 socket [ 413.489086][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.505119][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.529755][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.538932][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.548522][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.637325][T10564] Failed to initialize the IGMP autojoin socket (err -2) [ 413.911564][T10574] netlink: 96 bytes leftover after parsing attributes in process `syz.3.946'. [ 414.415168][T10586] overlayfs: empty lowerdir [ 415.073625][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.389749][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.424746][ T5881] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 415.443876][ T42] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 415.555732][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.604560][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 415.637018][ T42] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 415.652604][ T5881] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 415.663025][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.685220][ T5820] Bluetooth: hci5: command tx timeout [ 415.695804][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.706900][ T5881] usb 4-1: Product: syz [ 415.713019][ T42] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 415.722098][ T42] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 415.742983][ T5881] usb 4-1: Manufacturer: syz [ 415.747651][ T5881] usb 4-1: SerialNumber: syz [ 415.763072][ T42] usb 3-1: Manufacturer: syz [ 415.770496][ T42] usb 3-1: config 0 descriptor?? [ 415.778937][ T5881] usb 4-1: config 0 descriptor?? [ 415.786752][ T42] igorplugusb 3-1:0.0: incorrect number of endpoints [ 415.798500][ T5881] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 415.804190][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.820645][ T5881] dvb-usb: bulk message failed: -22 (4/0) [ 415.827220][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 415.838398][ T5881] dvb-usb: bulk message failed: -22 (5/0) [ 415.848415][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 415.891437][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.920149][ T5881] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 415.940419][ T5881] usb 4-1: media controller created [ 415.973997][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.002285][T10588] dvb-usb: bulk message failed: -22 (7/0) [ 416.031787][T10588] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 416.045684][ T5881] usb 4-1: selecting invalid altsetting 3 [ 416.051497][ T5881] ttusb2: set interface to alts=3 failed [ 416.083642][T10588] ttusb2: i2c transfer failed. [ 416.230928][ T5881] DVB: Unable to find symbol tda10086_attach() [ 416.258241][ T5881] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 416.567374][ T5881] dvb-usb: bulk message failed: -22 (4/0) [ 416.587797][ T58] bridge_slave_1: left allmulticast mode [ 416.590264][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.610668][ T5881] dvb-usb: bulk message failed: -22 (5/0) [ 416.618754][ T5881] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.634068][ T58] bridge_slave_1: left promiscuous mode [ 416.634871][ T5881] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 416.660838][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.827440][ T5881] usb 4-1: USB disconnect, device number 28 [ 416.838551][ T58] bridge_slave_0: left allmulticast mode [ 416.884162][ T58] bridge_slave_0: left promiscuous mode [ 416.898719][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.016318][ T5881] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 417.177386][ T906] usb 3-1: USB disconnect, device number 54 [ 417.763029][ T5820] Bluetooth: hci5: command tx timeout [ 417.845092][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 417.857096][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 417.871962][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 417.880498][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 417.888661][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 417.898485][ T58] team0: Port device bridge1 removed [ 418.001642][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.171198][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.203347][T10652] overlay: Unknown parameter '/dev/v4l-subdev#' [ 418.346761][ T58] bond0 (unregistering): Released all slaves [ 418.612238][T10641] Failed to initialize the IGMP autojoin socket (err -2) [ 418.750061][ T58] tipc: Left network mode [ 418.790904][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 418.790935][ T29] audit: type=1400 audit(1773883048.633:596): avc: denied { relabelfrom } for pid=10641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 418.828243][ T29] audit: type=1400 audit(1773883048.633:597): avc: denied { relabelto } for pid=10641 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 419.040835][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 419.182057][T10671] netlink: 'syz.3.960': attribute type 2 has an invalid length. [ 419.668654][T10677] overlayfs: empty lowerdir [ 419.858407][ T5815] Bluetooth: hci5: command tx timeout [ 420.458992][ T58] hsr_slave_0: left promiscuous mode [ 420.473858][ T58] hsr_slave_1: left promiscuous mode [ 420.494769][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.502249][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.524535][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.532036][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.545992][ T58] veth1_macvtap: left promiscuous mode [ 420.551597][ T58] veth0_macvtap: left promiscuous mode [ 420.557504][ T58] veth1_vlan: left promiscuous mode [ 420.562819][ T58] veth0_vlan: left promiscuous mode [ 420.790433][ T58] team0 (unregistering): Port device team_slave_1 removed [ 420.807126][ T58] team0 (unregistering): Port device team_slave_0 removed [ 421.015262][T10564] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 421.049245][T10564] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 421.093544][T10564] wireguard: wg0: Could not create IPv4 socket [ 421.102595][T10564] wireguard: wg1: Could not create IPv4 socket [ 421.112528][T10564] wireguard: wg2: Could not create IPv4 socket [ 421.811074][T10736] overlayfs: empty lowerdir [ 422.226496][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.239131][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 422.252739][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 422.284752][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 422.294456][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 422.342720][T10742] Failed to initialize the IGMP autojoin socket (err -2) [ 422.620572][T10754] overlayfs: empty lowerdir [ 422.906817][T10756] overlayfs: empty lowerdir [ 423.327324][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 423.339079][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 423.352867][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 423.364597][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 423.371791][ T29] audit: type=1400 audit(1773883053.223:598): avc: denied { mount } for pid=10750 comm="syz.1.966" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 423.405374][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.616735][ T5820] Bluetooth: hci0: command tx timeout [ 424.627003][ T5881] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 424.837279][ T29] audit: type=1400 audit(1773883054.693:599): avc: denied { read write } for pid=10774 comm="syz.1.972" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 424.863925][ T5881] usb 3-1: device descriptor read/64, error -71 [ 424.889539][ T29] audit: type=1400 audit(1773883054.693:600): avc: denied { open } for pid=10774 comm="syz.1.972" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 424.987401][ T29] audit: type=1400 audit(1773883054.833:601): avc: denied { setopt } for pid=10774 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.133274][ T5881] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 425.266623][T10762] Failed to initialize the IGMP autojoin socket (err -2) [ 425.293777][ T5881] usb 3-1: device descriptor read/64, error -71 [ 425.406761][ T5881] usb usb3-port1: attempt power cycle [ 425.815409][T10742] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 425.882838][T10742] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 425.923133][ T5881] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 425.949366][T10742] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 426.019915][ T5881] usb 3-1: device descriptor read/8, error -71 [ 426.143022][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.161410][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.171240][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.191574][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.213440][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.282670][T10790] Failed to initialize the IGMP autojoin socket (err -2) [ 426.293002][ T5881] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 427.459897][ T5820] Bluetooth: hci0: command tx timeout [ 427.493561][ T5881] usb 3-1: device not accepting address 58, error -71 [ 427.525149][ T5881] usb usb3-port1: unable to enumerate USB device [ 428.459293][T10742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 428.493089][T10742] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 428.761593][T10830] overlayfs: empty lowerdir [ 428.808953][T10742] wireguard: wg0: Could not create IPv4 socket [ 428.818719][T10742] wireguard: wg1: Could not create IPv4 socket [ 428.828373][T10742] wireguard: wg2: Could not create IPv4 socket [ 428.923313][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.938306][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.950842][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.959803][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.972728][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.065714][T10841] overlayfs: empty lowerdir [ 429.357964][T10835] Failed to initialize the IGMP autojoin socket (err -2) [ 429.593044][ T793] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 429.785138][ T793] usb 4-1: Using ep0 maxpacket: 32 [ 429.864366][ T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 430.067652][ T793] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 430.110345][ T793] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 430.131198][ T793] usb 4-1: Product: syz [ 430.142501][ T793] usb 4-1: Manufacturer: syz [ 430.162494][ T793] usb 4-1: SerialNumber: syz [ 430.202420][ T793] usb 4-1: config 0 descriptor?? [ 430.228110][T10842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 430.517017][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 430.859437][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 431.124065][ T5820] Bluetooth: hci1: command tx timeout [ 431.453025][ T793] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 431.614254][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 431.621185][ T793] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 431.630801][ T793] usb 2-1: config 0 has no interface number 0 [ 431.637824][ T793] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.660553][ T793] usb 2-1: config 0 interface 85 has no altsetting 0 [ 431.678396][ T793] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 431.693881][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.713438][ T793] usb 2-1: Product: syz [ 431.722184][ T793] usb 2-1: Manufacturer: syz [ 431.735819][ T793] usb 2-1: SerialNumber: syz [ 431.749359][ T793] usb 2-1: config 0 descriptor?? [ 431.958631][ T793] appletouch 2-1:0.85: Geyser mode initialized. [ 431.977919][ T793] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input18 [ 432.037632][ T5881] usb 4-1: USB disconnect, device number 29 [ 432.176852][ T9] usb 2-1: USB disconnect, device number 43 [ 432.265421][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 432.905819][T10912] overlayfs: empty lowerdir [ 433.253363][ T5820] Bluetooth: hci1: command tx timeout [ 433.511140][ T29] audit: type=1400 audit(1773883063.353:602): avc: granted { setsecparam } for pid=10920 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 433.663931][T10835] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 433.707877][T10835] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 433.746461][T10835] wireguard: wg0: Could not create IPv4 socket [ 433.824596][T10835] wireguard: wg1: Could not create IPv4 socket [ 434.208379][T10835] wireguard: wg2: Could not create IPv4 socket [ 435.625165][T11007] loop8: detected capacity change from 0 to 7 [ 435.639281][T11007] Dev loop8: unable to read RDB block 7 [ 435.653067][T11007] loop8: unable to read partition table [ 435.663982][T11007] loop8: partition table beyond EOD, truncated [ 435.681806][T11007] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 436.521315][T11017] netlink: 'syz.1.1000': attribute type 4 has an invalid length. [ 436.917746][ T5881] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 436.996483][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.009368][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.022008][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.031503][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.039452][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.099924][T11019] Failed to initialize the IGMP autojoin socket (err -2) [ 437.120172][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 437.142240][ T5881] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 437.163156][ T5881] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 437.213625][ T5881] usb 3-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 437.227681][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.256564][ T5881] usb 3-1: Product: syz [ 437.272003][ T5881] usb 3-1: Manufacturer: syz [ 437.285638][ T5881] usb 3-1: SerialNumber: syz [ 437.530134][ T5881] usb 3-1: USB disconnect, device number 59 [ 438.390691][T11019] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 438.452867][T11019] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 438.501484][T11019] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 438.733817][ T42] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 439.079289][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 439.111961][ T42] usb 4-1: config 238 has an invalid interface number: 2 but max is 0 [ 439.121712][ T29] audit: type=1400 audit(1773883068.963:603): avc: denied { ioctl } for pid=11054 comm="syz.2.1004" path="/229/file0/file0" dev="fuse" ino=67 ioctlcmd=0x542e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 439.163578][ T5820] Bluetooth: hci0: command tx timeout [ 439.170789][ T42] usb 4-1: config 238 has no interface number 0 [ 439.177267][ T42] usb 4-1: config 238 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 439.189465][ T42] usb 4-1: config 238 interface 2 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 439.201658][ T42] usb 4-1: config 238 interface 2 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 439.214358][ T42] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.bb [ 439.223749][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.231855][ T42] usb 4-1: Product: syz [ 439.237427][ T42] usb 4-1: Manufacturer: syz [ 439.242147][ T42] usb 4-1: SerialNumber: syz [ 439.433881][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.445985][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.463704][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.575775][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.588646][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.651704][T11071] Failed to initialize the IGMP autojoin socket (err -2) [ 441.203880][ T5820] Bluetooth: hci0: command tx timeout [ 441.372015][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.378926][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.487591][ T42] hso 4-1:238.2: Failed to find INT IN ep [ 441.543041][ T42] usb 4-1: USB disconnect, device number 30 [ 441.727965][ T29] audit: type=1326 audit(1773883071.583:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bad9c799 code=0x0 [ 442.231435][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.255497][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.266198][ T29] audit: type=1326 audit(1773883071.583:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.1010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1bad9c799 code=0x0 [ 442.266485][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.302088][T11019] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 442.318723][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.328838][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.374582][T11019] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 443.173862][T11019] wireguard: wg0: Could not create IPv4 socket [ 443.216803][T11019] wireguard: wg1: Could not create IPv4 socket [ 443.220931][T11117] Failed to initialize the IGMP autojoin socket (err -2) [ 443.503146][ T5820] Bluetooth: hci0: command tx timeout [ 443.547029][T11019] wireguard: wg2: Could not create IPv4 socket [ 443.645213][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'. [ 444.093187][ T29] audit: type=1400 audit(1773883073.933:606): avc: denied { append } for pid=11139 comm="syz.1.1016" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 444.455760][ T29] audit: type=1400 audit(1773883074.073:607): avc: denied { connect } for pid=11139 comm="syz.1.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 445.429295][T11162] wireguard: wg0: Could not create IPv4 socket [ 446.179509][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.202081][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.211878][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.220266][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.228300][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.270359][T11186] Failed to initialize the IGMP autojoin socket (err -2) [ 446.874128][T11198] overlayfs: empty lowerdir [ 448.323226][ T5820] Bluetooth: hci0: command tx timeout [ 448.883693][T11186] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 448.916407][T11186] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 448.956548][T11186] wireguard: wg0: Could not create IPv4 socket [ 448.975586][T11186] wireguard: wg1: Could not create IPv4 socket [ 448.995944][T11186] wireguard: wg2: Could not create IPv4 socket [ 449.398161][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.422595][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.426140][T11267] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 449.434016][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.449749][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.462299][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.469445][T11264] capability: warning: `syz.3.1025' uses 32-bit capabilities (legacy support in use) [ 449.531029][T11269] Failed to initialize the IGMP autojoin socket (err -2) [ 449.709444][T11279] overlayfs: empty lowerdir [ 450.196037][T11285] Failed to initialize the IGMP autojoin socket (err -2) [ 450.249117][T11286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=11286 comm=syz.3.1028 [ 451.523590][ T5815] Bluetooth: hci0: command tx timeout [ 453.604166][ T5815] Bluetooth: hci0: command tx timeout [ 454.274511][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.287176][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.296734][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.306739][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.316361][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.326377][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.336044][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.348384][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.357986][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 454.368028][T11334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1037'. [ 455.397376][T11345] syzkaller0: entered promiscuous mode [ 455.414718][T11345] syzkaller0: entered allmulticast mode [ 455.682988][ T5815] Bluetooth: hci0: command tx timeout [ 455.863395][T11354] loop2: detected capacity change from 0 to 7 [ 455.950227][T11354] Dev loop2: unable to read RDB block 7 [ 455.989123][T11354] loop2: unable to read partition table [ 456.030321][T11354] loop2: partition table beyond EOD, truncated [ 456.075554][T11354] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 456.694955][ T29] audit: type=1400 audit(1773883086.553:608): avc: denied { connect } for pid=11363 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 457.764949][ T5815] Bluetooth: hci0: command tx timeout [ 457.798767][T11269] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 457.818842][T11269] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 457.830121][T11269] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 458.387272][ T5815] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 458.532450][ T29] audit: type=1400 audit(1773883088.383:609): avc: denied { append } for pid=11402 comm="syz.2.1047" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 458.559128][T11420] netlink: 'syz.1.1046': attribute type 30 has an invalid length. [ 458.659434][ T5881] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 458.672203][T11422] netlink: 'syz.1.1046': attribute type 30 has an invalid length. [ 458.696967][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.709644][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.718364][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.727040][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.741120][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.763443][ T29] audit: type=1400 audit(1773883088.483:610): avc: denied { read append } for pid=11402 comm="syz.2.1047" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 458.814853][ T5881] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 458.823353][ T29] audit: type=1400 audit(1773883088.483:611): avc: denied { open } for pid=11402 comm="syz.2.1047" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 458.940436][T11423] Failed to initialize the IGMP autojoin socket (err -2) [ 458.951316][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.975666][ T5881] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 458.985018][T11269] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 458.992649][ T5881] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 459.019969][ T5881] usb 4-1: Manufacturer: syz [ 459.060447][T11269] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 459.101845][ T5881] usb 4-1: config 0 descriptor?? [ 459.118458][ T5881] igorplugusb 4-1:0.0: incorrect number of endpoints [ 459.118843][T11269] wireguard: wg0: Could not create IPv4 socket [ 459.189399][T11269] wireguard: wg1: Could not create IPv4 socket [ 459.267604][T11269] wireguard: wg2: Could not create IPv4 socket [ 460.167692][ T793] usb 4-1: USB disconnect, device number 31 [ 460.847357][T11472] overlayfs: empty lowerdir [ 461.274842][ T29] audit: type=1400 audit(1773883091.123:612): avc: denied { setopt } for pid=11478 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 461.325114][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.343856][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.366810][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.390153][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.400695][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.434045][ T5820] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 461.455273][T11480] Failed to initialize the IGMP autojoin socket (err -2) [ 461.763134][ T5846] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 461.934666][ T5846] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 462.253386][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.295978][ T5846] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 462.314130][ T5846] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 462.323753][ T5846] usb 2-1: Manufacturer: syz [ 462.339854][ T5846] usb 2-1: config 0 descriptor?? [ 462.363380][ T5846] igorplugusb 2-1:0.0: incorrect number of endpoints [ 462.661838][T11514] overlayfs: empty lowerdir [ 463.463402][ T5820] Bluetooth: hci0: command tx timeout [ 463.786484][ T793] usb 2-1: USB disconnect, device number 44 [ 464.191268][T11531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.064808][T11480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 465.086276][T11480] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 465.109501][T11480] wireguard: wg0: Could not create IPv4 socket [ 465.119093][T11480] wireguard: wg1: Could not create IPv4 socket [ 465.129957][T11480] wireguard: wg2: Could not create IPv4 socket [ 466.352268][T11615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.439016][T11622] overlayfs: empty lowerdir [ 467.108411][T11616] ALSA: mixer_oss: invalid OSS volume '' [ 467.500336][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 467.520118][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 467.533269][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 467.547003][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 467.556143][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 467.930341][T11631] Failed to initialize the IGMP autojoin socket (err -2) [ 468.404876][ T29] audit: type=1400 audit(2000000000.400:613): avc: denied { append } for pid=11629 comm="syz.3.1067" name="sg0" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 468.632542][T11641] FAULT_INJECTION: forcing a failure. [ 468.632542][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 468.718461][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.3.1068 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.718496][T11641] Tainted: [L]=SOFTLOCKUP [ 468.718502][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.718512][T11641] Call Trace: [ 468.718519][T11641] [ 468.718526][T11641] dump_stack_lvl+0x100/0x190 [ 468.718566][T11641] should_fail_ex.cold+0x5/0xa [ 468.718591][T11641] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 468.718625][T11641] should_failslab+0xc2/0x120 [ 468.718646][T11641] __kmalloc_noprof+0xe0/0x850 [ 468.718670][T11641] ? lockdep_hardirqs_on+0x78/0x100 [ 468.718703][T11641] genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 468.718736][T11641] genl_family_rcv_msg_doit+0xc7/0x300 [ 468.718765][T11641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 468.718792][T11641] ? genl_get_cmd+0x3ef/0x720 [ 468.718825][T11641] ? __dev_queue_xmit+0x5af/0x4800 [ 468.718842][T11641] ? __radix_tree_lookup+0x217/0x2b0 [ 468.718868][T11641] genl_rcv_msg+0x560/0x800 [ 468.718898][T11641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.718926][T11641] ? __pfx_ethnl_default_doit+0x10/0x10 [ 468.718958][T11641] netlink_rcv_skb+0x159/0x420 [ 468.718983][T11641] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.719011][T11641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.719045][T11641] ? netlink_deliver_tap+0x1ae/0xcc0 [ 468.719072][T11641] genl_rcv+0x28/0x40 [ 468.719096][T11641] netlink_unicast+0x5aa/0x870 [ 468.719130][T11641] ? __pfx_netlink_unicast+0x10/0x10 [ 468.719163][T11641] netlink_sendmsg+0x8b0/0xda0 [ 468.719191][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.719214][T11641] ? PageHuge+0x170/0x180 [ 468.719247][T11641] ____sys_sendmsg+0x9e1/0xb70 [ 468.719294][T11641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.719321][T11641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.719360][T11641] ___sys_sendmsg+0x190/0x1e0 [ 468.719390][T11641] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.719449][T11641] __sys_sendmsg+0x170/0x220 [ 468.719473][T11641] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.719510][T11641] do_syscall_64+0x106/0xf80 [ 468.719531][T11641] ? clear_bhb_loop+0x40/0x90 [ 468.719553][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.719571][T11641] RIP: 0033:0x7f346839c799 [ 468.719586][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.719602][T11641] RSP: 002b:00007f34691b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.719622][T11641] RAX: ffffffffffffffda RBX: 00007f3468615fa0 RCX: 00007f346839c799 [ 468.719634][T11641] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 468.719644][T11641] RBP: 00007f34691b5090 R08: 0000000000000000 R09: 0000000000000000 [ 468.719654][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.719663][T11641] R13: 00007f3468616038 R14: 00007f3468615fa0 R15: 00007ffd015b9c38 [ 468.719687][T11641] [ 469.643935][ T5815] Bluetooth: hci0: command tx timeout [ 469.733052][ T5874] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 469.893664][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 469.910330][ T5874] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 469.924369][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.932482][ T5874] usb 4-1: Product: syz [ 469.937892][ T5874] usb 4-1: Manufacturer: syz [ 469.943269][ T5874] usb 4-1: SerialNumber: syz [ 469.964510][ T5874] usb 4-1: config 0 descriptor?? [ 469.982689][ T5874] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 470.032061][ T5874] dvb-usb: bulk message failed: -22 (4/0) [ 470.048038][ T5874] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 470.089520][ T5874] dvb-usb: bulk message failed: -22 (5/0) [ 470.096555][ T5846] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 470.121663][ T5874] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 470.154804][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 470.184159][ T5874] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 470.257364][ T5874] usb 4-1: media controller created [ 470.280603][T11649] dvb-usb: bulk message failed: -22 (7/0) [ 470.286481][T11649] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 470.297202][T11649] ttusb2: i2c transfer failed. [ 470.313916][ T5846] usb 3-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 470.343888][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.352445][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.376137][ T5846] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 470.415270][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.426496][ T5874] usb 4-1: selecting invalid altsetting 3 [ 470.432290][ T5874] ttusb2: set interface to alts=3 failed [ 470.454119][ T5846] usb 3-1: Product: syz [ 470.458395][ T5846] usb 3-1: Manufacturer: syz [ 470.475730][ T5846] usb 3-1: SerialNumber: syz [ 470.494748][ T5846] usb 3-1: config 0 descriptor?? [ 470.531521][ T5846] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 470.574963][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 470.583352][ T5874] DVB: Unable to find symbol tda10086_attach() [ 470.589537][ T5874] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 470.616562][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 470.646462][ T5874] dvb-usb: bulk message failed: -22 (4/0) [ 470.652266][ T5874] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 470.663702][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 470.671458][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 470.720190][ T5874] dvb-usb: bulk message failed: -22 (5/0) [ 470.730163][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 470.743612][ T5874] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 470.754531][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 470.774432][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 470.808768][ T5874] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 470.825897][ T5846] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 471.138880][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 471.151055][ T5874] usb 4-1: USB disconnect, device number 32 [ 471.176680][T11631] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 471.190078][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 471.216498][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 471.226169][ T5874] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 471.243160][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 471.250992][ T5846] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 471.266328][T11631] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 471.288269][T11631] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 471.297972][ T5846] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 471.397740][ T5867] usb 3-1: USB disconnect, device number 60 [ 471.418766][ T5867] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 471.450296][ T5867] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 471.474956][ T5867] keyspan 3-1:0.0: device disconnected [ 471.713349][ T5815] Bluetooth: hci0: command tx timeout [ 471.973201][ T5874] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 472.039624][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.075542][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.088238][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.103291][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.115249][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.158237][ T5874] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 472.166440][T11699] Failed to initialize the IGMP autojoin socket (err -2) [ 472.173065][ T5874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.186069][ T5874] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 472.197101][ T5874] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 472.205683][ T5874] usb 4-1: Manufacturer: syz [ 472.217728][ T5874] usb 4-1: config 0 descriptor?? [ 472.246249][ T5874] igorplugusb 4-1:0.0: incorrect number of endpoints [ 472.510900][ T5867] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 472.841794][ T5867] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 472.861154][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.928230][ T5867] usb 2-1: config 0 descriptor?? [ 472.983646][ T5867] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 473.161621][T11703] ubi: mtd0 is already attached to ubi0 [ 473.243667][ T5867] usb 2-1: USB disconnect, device number 45 [ 473.489595][T11631] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 473.528407][T11631] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 473.591037][T11631] wireguard: wg0: Could not create IPv4 socket [ 473.599936][ T5867] usb 4-1: USB disconnect, device number 33 [ 473.619688][T11631] wireguard: wg1: Could not create IPv4 socket [ 473.639885][T11631] wireguard: wg2: Could not create IPv4 socket [ 474.252716][T11752] __nla_validate_parse: 14 callbacks suppressed [ 474.252744][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1077'. [ 474.285848][T11752] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1077'. [ 474.691438][T11762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1079'. [ 475.032468][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 475.073327][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 475.085188][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 475.093621][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 475.101350][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 475.171609][T11768] Failed to initialize the IGMP autojoin socket (err -2) [ 475.513648][T11786] overlayfs: empty lowerdir [ 476.127127][T11795] overlayfs: empty lowerdir [ 476.193329][ T5874] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 476.353149][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 476.408187][ T5874] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.420442][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 476.427786][ T5874] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 476.443426][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.478142][ T5874] usb 2-1: config 0 descriptor?? [ 476.949320][ T5874] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 477.123359][ T5820] Bluetooth: hci0: command tx timeout [ 477.342667][ T5874] usb 2-1: USB disconnect, device number 46 [ 477.585311][T11768] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 477.607870][T11768] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 477.627517][T11768] wireguard: wg0: Could not create IPv4 socket [ 477.637296][T11768] wireguard: wg1: Could not create IPv4 socket [ 477.647652][T11768] wireguard: wg2: Could not create IPv4 socket [ 478.535335][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.546901][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 478.556789][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 478.567430][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 478.577350][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 478.623657][T11870] syzkaller0: entered promiscuous mode [ 478.652394][T11870] syzkaller0: entered allmulticast mode [ 478.663445][ T5943] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 478.678353][T11872] Failed to initialize the IGMP autojoin socket (err -2) [ 478.844182][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 478.863664][ T5943] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 478.875527][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.888720][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.900900][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 478.915634][ T5943] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 478.926736][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.944315][ T5943] usb 2-1: config 0 descriptor?? [ 479.458376][ T5943] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0007/input/input19 [ 479.590229][ T5943] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0007/input/input20 [ 479.708942][ T5943] kye 0003:0458:5013.0007: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 480.647736][ T5820] Bluetooth: hci0: command tx timeout [ 480.733879][ T5923] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 480.942265][ T5923] usb 2-1: device descriptor read/64, error -32 [ 481.200822][ T5923] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 481.337343][ T5923] usb 2-1: device descriptor read/64, error -32 [ 481.604282][ T5923] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 481.649401][ T5923] usb 2-1: device descriptor read/8, error -32 [ 481.899342][ T5923] usb 2-1: reset high-speed USB device number 47 using dummy_hcd [ 481.933361][ T5923] usb 2-1: device descriptor read/8, error -32 [ 481.939793][T11866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 482.063692][ T5923] raw-gadget.0 gadget.1: failed to queue suspend event [ 482.075853][ T9] usb 2-1: USB disconnect, device number 47 [ 482.095024][T11866] raw-gadget.0 gadget.1: failed to queue disconnect event [ 482.723971][ T5820] Bluetooth: hci0: command tx timeout [ 484.383350][ T29] audit: type=1326 audit(2000000017.260:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11987 comm="syz.2.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f682279c799 code=0x0 [ 484.663720][ T5923] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 484.820838][ T5820] Bluetooth: hci0: command tx timeout [ 484.844922][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.855790][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.867459][ T5923] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 484.877044][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.897790][ T5923] usb 3-1: config 0 descriptor?? [ 484.919177][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 484.939387][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 484.956276][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 484.988152][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 485.010862][ T5923] usb 3-1: media controller created [ 485.028082][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.080170][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 485.105285][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 485.120061][T11990] dibusb: i2c wr: len=61 is too big! [ 485.120061][T11990] [ 485.313004][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 485.327079][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 485.337447][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 485.772526][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 485.781637][ T5923] dvb-usb: error while querying for an remote control event. [ 485.879044][T11872] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 485.950134][T11872] netdevsim netdevsim5 netdevsim2: renamed from eth15 [ 485.987007][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 486.012582][ T5923] dvb-usb: error while querying for an remote control event. [ 486.034743][T11872] netdevsim netdevsim5 netdevsim3: renamed from eth16 [ 486.214776][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 486.232450][ T5923] dvb-usb: error while querying for an remote control event. [ 486.733324][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 486.959827][ T5820] Bluetooth: hci0: command tx timeout [ 486.983323][ T5923] dvb-usb: error while querying for an remote control event. [ 487.120238][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 487.152377][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 487.163400][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 487.176921][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 487.194497][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 487.214246][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 487.227521][ T5923] dvb-usb: error while querying for an remote control event. [ 487.277963][T12065] Failed to initialize the IGMP autojoin socket (err -2) [ 487.386194][ T5943] usb 3-1: USB disconnect, device number 61 [ 487.406124][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 487.435177][ T5923] dvb-usb: error while querying for an remote control event. [ 487.571466][ T5943] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 487.986045][T12081] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1102'. [ 488.777655][T11872] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 488.799781][T11872] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 488.818874][T11872] wireguard: wg0: Could not create IPv4 socket [ 488.828192][T11872] wireguard: wg1: Could not create IPv4 socket [ 488.837895][T11872] wireguard: wg2: Could not create IPv4 socket [ 489.931997][ T29] audit: type=1400 audit(2000000022.780:615): avc: denied { map } for pid=12097 comm="syz.1.1103" path="/dev/input/event3" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 490.191625][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 490.203715][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 490.212686][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.720975][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.732184][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.092268][T12110] Failed to initialize the IGMP autojoin socket (err -2) [ 492.344224][T12126] overlay: Unknown parameter '/dev/v4l-subdev#' [ 492.691608][T12131] ipip0: entered promiscuous mode [ 492.696730][T12131] ipip0: entered allmulticast mode [ 492.703654][T12131] team0: Device ipip0 is of different type [ 492.710320][ T29] audit: type=1400 audit(2000000025.570:616): avc: denied { bind } for pid=12130 comm="syz.1.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 493.578557][T12143] overlayfs: failed to resolve './file1': -2 [ 493.653579][T12145] netlink: 'syz.3.1112': attribute type 4 has an invalid length. [ 494.025991][ T5820] Bluetooth: hci0: command tx timeout [ 495.470848][T12110] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 495.495608][T12110] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 495.515747][T12110] wireguard: wg0: Could not create IPv4 socket [ 495.525801][T12110] wireguard: wg1: Could not create IPv4 socket [ 495.535771][T12110] wireguard: wg2: Could not create IPv4 socket [ 496.594376][ T29] audit: type=1400 audit(2000000029.470:617): avc: denied { map } for pid=12227 comm="syz.3.1117" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.641753][ T5943] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 496.682189][ T29] audit: type=1400 audit(2000000029.490:618): avc: denied { execute } for pid=12227 comm="syz.3.1117" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.750212][ T5820] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 496.860281][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.878930][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.879102][ T5943] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 496.899140][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.918157][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.925065][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.936634][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.973516][ T5943] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 496.982656][ T5943] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 496.997968][T12238] Failed to initialize the IGMP autojoin socket (err -2) [ 497.009443][ T5943] usb 3-1: Manufacturer: syz [ 497.027491][ T5943] usb 3-1: config 0 descriptor?? [ 497.050236][ T5943] igorplugusb 3-1:0.0: incorrect number of endpoints [ 497.417143][T12249] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1118'. [ 497.960399][ T29] audit: type=1400 audit(2000000030.840:619): avc: denied { ioctl } for pid=12260 comm="syz.3.1121" path="socket:[41216]" dev="sockfs" ino=41216 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.193493][ T5867] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 498.363336][ T5867] usb 4-1: Using ep0 maxpacket: 8 [ 498.575675][ T5867] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 498.584995][ T5867] usb 4-1: config 0 has no interface number 0 [ 498.591355][ T5867] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.602753][ T5867] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 498.705256][ T5867] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.733272][ T5867] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.760707][ T5867] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 498.778382][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.795251][ T5867] usb 4-1: config 0 descriptor?? [ 498.824822][ T5867] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 499.014410][ T29] audit: type=1400 audit(2000000031.900:620): avc: denied { ioctl } for pid=12260 comm="syz.3.1121" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x6439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 499.052591][ T5820] Bluetooth: hci0: command tx timeout [ 499.071467][T12284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.081413][T12284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.384446][ T5943] usb 3-1: USB disconnect, device number 62 [ 501.009671][ T5867] usb 4-1: USB disconnect, device number 34 [ 501.026719][ T5867] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 501.068550][ T5923] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN NOPTI [ 501.080706][ T5923] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 501.089165][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.100097][ T5923] Tainted: [L]=SOFTLOCKUP [ 501.104399][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.114469][ T5923] Workqueue: events l2cap_info_timeout [ 501.119943][ T5923] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 501.123248][ T5820] Bluetooth: hci0: command tx timeout [ 501.125837][ T5923] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 501.125857][ T5923] RSP: 0018:ffffc900045d79f0 EFLAGS: 00010282 [ 501.156843][ T5923] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 501.164807][ T5923] RDX: 0000000000000000 RSI: ffffffff8957c321 RDI: dffffc000000004c [ 501.172755][ T5923] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 501.180704][ T5923] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c321 [ 501.188652][ T5923] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 501.196602][ T5923] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 501.205517][ T5923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.212092][ T5923] CR2: 000055556fd4ea28 CR3: 0000000049825000 CR4: 00000000003526f0 [ 501.220052][ T5923] Call Trace: [ 501.223334][ T5923] [ 501.226249][ T5923] __kasan_check_byte+0x13/0x50 [ 501.231084][ T5923] lock_acquire+0x148/0x380 [ 501.235561][ T5923] ? __pfx___cancel_work+0x10/0x10 [ 501.240649][ T5923] lock_sock_nested+0x41/0xf0 [ 501.245316][ T5923] ? l2cap_sock_ready_cb+0x43/0x1a0 [ 501.250492][ T5923] l2cap_sock_ready_cb+0x43/0x1a0 [ 501.255506][ T5923] l2cap_conn_start+0x123/0xb40 [ 501.260328][ T5923] ? __pfx_l2cap_conn_start+0x10/0x10 [ 501.265671][ T5923] ? __pfx___mutex_lock+0x10/0x10 [ 501.270672][ T5923] ? do_raw_spin_unlock+0x145/0x1e0 [ 501.275853][ T5923] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 501.281642][ T5923] l2cap_info_timeout+0x81/0xa0 [ 501.286469][ T5923] process_one_work+0xa23/0x19a0 [ 501.291383][ T5923] ? __pfx_process_one_work+0x10/0x10 [ 501.296732][ T5923] ? __pfx_l2cap_info_timeout+0x10/0x10 [ 501.302248][ T5923] worker_thread+0x5ef/0xe50 [ 501.306814][ T5923] ? __pfx_worker_thread+0x10/0x10 [ 501.311896][ T5923] ? kthread+0x13a/0x450 [ 501.316114][ T5923] ? __pfx_worker_thread+0x10/0x10 [ 501.321198][ T5923] kthread+0x370/0x450 [ 501.325262][ T5923] ? __pfx_kthread+0x10/0x10 [ 501.329828][ T5923] ret_from_fork+0x754/0xd80 [ 501.334396][ T5923] ? __pfx_ret_from_fork+0x10/0x10 [ 501.339482][ T5923] ? __switch_to+0x7b4/0x1120 [ 501.344147][ T5923] ? __pfx_kthread+0x10/0x10 [ 501.348707][ T5923] ret_from_fork_asm+0x1a/0x30 [ 501.353457][ T5923] [ 501.356448][ T5923] Modules linked in: [ 501.360818][ T5923] ---[ end trace 0000000000000000 ]--- [ 501.397215][ T29] audit: type=1400 audit(2000000034.280:621): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 501.400322][ T5923] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 501.429334][ T5923] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 501.501984][ T29] audit: type=1400 audit(2000000034.280:622): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.544670][ T5923] RSP: 0018:ffffc900045d79f0 EFLAGS: 00010282 [ 501.550799][ T5923] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 501.569181][ T29] audit: type=1400 audit(2000000034.280:623): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.600278][ T29] audit: type=1400 audit(2000000034.280:624): avc: denied { add_name } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.621694][ T29] audit: type=1400 audit(2000000034.280:625): avc: denied { create } for pid=5161 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.640999][ T5923] RDX: 0000000000000000 RSI: ffffffff8957c321 RDI: dffffc000000004c [ 501.650885][ T5923] RBP: 0000000000000260 R08: 0000000000000001 R09: 0000000000000000 [ 501.671249][ T29] audit: type=1400 audit(2000000034.280:626): avc: denied { append open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.700916][ T29] audit: type=1400 audit(2000000034.280:627): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 501.741156][ T5923] R10: 00000000ffffff83 R11: 0000000000000000 R12: ffffffff8957c321 [ 501.752917][ T5923] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 501.761049][ T5923] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 501.813592][ T5923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.820243][ T5923] CR2: 0000200000288030 CR3: 0000000049825000 CR4: 00000000003526f0 [ 501.859676][T12238] netdevsim netdevsim5 netdevsim1: renamed from eth14 [ 501.873214][ T5923] Kernel panic - not syncing: Fatal exception [ 501.879630][ T5923] Kernel Offset: disabled [ 501.883966][ T5923] Rebooting in 86400 seconds..