last executing test programs: 16.259677812s ago: executing program 1 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='p:s/p ./', 0x8) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003020000000203e1afacc0e7e62de44748011039f2a63d6f3c29d73edf8df7389507a6de82cf4361962ced9544ea4b9aba3065d429d805bb352606d6815c1c102a07b65e9b0ee5273b80b5ec5bb4933813eee6494f400acd9c6bb0714320ddcbeffd34fb0911628c28e566549c5b9afe89ea1a288d190f9037f091e0ec290a8c4dff74b0981236f73e290403f52e87b896d9879519ebd47f277ef8ada2aa7c472d9925e214f0615ec6d91d9ec8af3dd64dfe157c"], 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200010b2bbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800011001000000"], 0x20}}, 0x4040) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000800)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000840)={r6, 0xb}, 0x8) sendmmsg$sock(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) writev(r4, &(0x7f0000000980)=[{&(0x7f0000000180)="12", 0x1}], 0x1) shutdown(r4, 0x1) syz_usb_control_io$uac2(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3]}, 0x0) 14.727708409s ago: executing program 0 (id=87): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x119c, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x80003, 0xce}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_getres(0xfffffffffffffffb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat(r2, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000020001"], 0x4d0a00) r4 = epoll_create(0xea3) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000140)) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r5, 0x0, 0x8010002b) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000380)={0xb0000001}) 13.690978033s ago: executing program 3 (id=90): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0xd958000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = inotify_init() readv(r2, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/58, 0x3a}, {&(0x7f00000005c0)=""/184, 0xb8}, {0x0}], 0x4) close(0x3) r3 = open(0x0, 0xa0000, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mq_notify(0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000140)) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x3e) shmctl$IPC_RMID(0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket(0x1d, 0x6, 0x0) 12.799115396s ago: executing program 1 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x400c8c9}, 0x4008094) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 12.223177699s ago: executing program 0 (id=93): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}, {0xfff8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r9, 0x25, 0x4, @val=@target_btf_id=0xffffffffffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) 12.057400432s ago: executing program 1 (id=95): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="f9", 0x1) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 10.866773661s ago: executing program 1 (id=96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = io_uring_setup(0x7, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000004100010029bd70000400000001000001800c00108005000b80eb00000008000200", @ANYRES32=r4, @ANYRESHEX=r6], 0x30}, 0x1, 0x0, 0x0, 0x400c8c9}, 0x4008094) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 10.606911759s ago: executing program 0 (id=97): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) 10.436910994s ago: executing program 3 (id=98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = io_uring_setup(0x7, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000004100010029bd70000400000001000001800c00108005000b80eb00000008000200", @ANYRES32=r4, @ANYRESHEX=r6], 0x30}, 0x1, 0x0, 0x0, 0x400c8c9}, 0x4008094) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 9.108912168s ago: executing program 0 (id=101): socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40052}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40400) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d013}) recvmsg(r7, &(0x7f0000000680)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/29, 0x1d}], 0x4, &(0x7f0000000600)=""/113, 0x71}, 0x10140) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x18}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8d0) 8.297114245s ago: executing program 1 (id=102): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02"], 0x0) socket(0xb, 0x4, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="020052487f00000100"/128, 0x80) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="020030397f00000100"/96, 0x60) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) 8.186811471s ago: executing program 0 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xd) write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0xff2e) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_usb_connect(0x2, 0x58, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/events/xhci-hcd/xhci_portsc_writel/format\x00', 0x0, 0x0) read(r4, &(0x7f0000000500)=""/1024, 0x400) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000080)={0x9, 0xf7, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 8.135420757s ago: executing program 4 (id=104): socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40052}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40400) sendmsg$NFT_MSG_GETSETELEM(r6, 0x0, 0x8000) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d013}) recvmsg(r7, &(0x7f0000000680)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/29, 0x1d}], 0x4, &(0x7f0000000600)=""/113, 0x71}, 0x10140) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x18}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8d0) 8.097641847s ago: executing program 3 (id=105): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) getdents64(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3f00cd2e, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0x10, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x40, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x4, 0x6, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x3a21, 0xac8, 0xbf, 0x4002, 0x1ff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x7, 0x1c, 0x120000, 0x5, 0x2, 0x5, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x7, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x80, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 6.978967014s ago: executing program 3 (id=106): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) getdents64(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3f00cd2e, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0x10, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x40, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x4, 0x6, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x3a21, 0xac8, 0xbf, 0x4002, 0x1ff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x7, 0x1c, 0x120000, 0x5, 0x2, 0x5, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x7, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x80, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 6.901726173s ago: executing program 4 (id=108): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x48c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r4, 0x5) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000001234567890abcdef00100100000e000000000000000000003fe9aa3b9e944c54c048dd12e1fa3db233f7d59a06ebc300133242b8035e2738452087c95aad83e7c1b9bb298da60f4fad2c3e195c486c4f5aa6f9757b40e2dcd2b9d676b8bcfe40a5afc4f95217a3d335cb42887d54f1c1085490962f79deb9ba056a560c533c95090cbd5288825342903d851662a647c6f119302f80f7ce7f265e7772518d7501368ff2163e6e3543ae345f41db668a74937fafa56f0112929b"], 0x28}, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde1"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000014010000010000001234567890abcde21000"/40], 0x28}, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234567890abcde3"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x15, 0x110, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000500)='A', 0x1000) 5.565428257s ago: executing program 2 (id=110): socket$inet(0x2, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x1, 0x3, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) getrusage(0x0, &(0x7f0000000340)) syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20000000) 4.243755474s ago: executing program 3 (id=111): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x3, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x3, 0x7, 0x3, 0x100, 0xffffffffffffffff, 0x741, '\x00', r0, r1, 0x5, 0x4, 0x3}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000000)={0x4}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000001d40)=[{0x0, 0x0, &(0x7f00000010c0)=[{0x0}, {&(0x7f00000011c0)="6ab7a33b48e5aa37b6910261d69dec68d0f9ed780b0e1e49101bf92adf5cdd8c52cfdc68f8214376f29e5b5c43e9766830950f470fdbbf68ebd986500053c8ddec667d774b58916f169c9f9692500dc7214eeb4f6f695cb293cf3f08275776a29a92f2583ce71d22c2", 0x69}], 0x2, 0x0, 0x0, 0x4810}], 0x1, 0x40d4) recvmsg(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 4.121451265s ago: executing program 0 (id=112): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e22010203010902240001020000000904ae0002c39c2a0009059e02"], 0x0) socket(0xb, 0x4, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="020052487f00000100"/128, 0x80) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="020030397f00000100"/96, 0x60) close(r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) 4.111870347s ago: executing program 1 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='file drivers/md/raid5.c +p', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000280)='md0', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0xb37f5d35394a2689) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0) read(r7, &(0x7f0000000100)=""/4096, 0x1000) bind$phonet(r4, &(0x7f0000001100)={0x23, 0xc, 0x0, 0x5}, 0x10) write(r6, &(0x7f0000000300), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000400)='4096', 0x4) 4.006098544s ago: executing program 4 (id=114): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,', 0x4a) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r2, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=n', 0x7d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000001680)=0x2, 0x4) shutdown(r3, 0x1) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2008c058) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) getresuid(0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000300)={0x4, 0x1a7, 0x1}) 3.755268379s ago: executing program 2 (id=115): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18) 3.723655249s ago: executing program 4 (id=116): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x112c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10fc, 0x2, [@TCA_TCINDEX_ACT={0x10f8, 0x7, [@m_xt={0x154, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x120, 0x16, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xd1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x27e}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0xffff, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x4, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x2}, {0xf, 0x5, 0x80, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0xa, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x7, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x800005, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x112c}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f800040000000000000ff000000000000000000080008000100000000ff", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.759134234s ago: executing program 2 (id=117): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0x6}, {0xfff8}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000051}, 0x4004000) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='N', 0x1, 0x80, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 2.705804734s ago: executing program 4 (id=118): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r1 = dup(r0) write(r1, &(0x7f0000000000)="f9", 0x1) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 2.53102323s ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='p:s/p ./', 0x8) r3 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0003020000000203e1afacc0e7e62de44748011039f2a63d6f3c29d73edf8df7389507a6de82cf4361962ced9544ea4b9aba3065d429d805bb352606d6815c1c102a07b65e9b0ee5273b80b5ec5bb4933813eee6494f400acd9c6bb0714320ddcbeffd34fb0911628c28e566549c5b9afe89ea1a288d190f9037f091e0ec290a8c4dff74b0981236f73e290403f52e87b896d9879519ebd47f277ef8ada2aa7c472d9925e214f0615ec6d91d9ec8af3dd64dfe157c"], 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200010b2bbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0800011001000000"], 0x20}}, 0x4040) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000000800)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000840)={r6, 0xb}, 0x8) sendmmsg$sock(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) writev(r4, &(0x7f0000000980)=[{&(0x7f0000000180)="12", 0x1}], 0x1) shutdown(r4, 0x1) syz_usb_control_io$uac2(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3]}, 0x0) 1.780789793s ago: executing program 3 (id=120): socket$netlink(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40052}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40400) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, 0x0) recvmsg(r7, &(0x7f0000000680)={&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/29, 0x1d}], 0x4, &(0x7f0000000600)=""/113, 0x71}, 0x10140) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x18}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8d0) 1.734827563s ago: executing program 2 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) io_uring_setup(0x7, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x400c8c9}, 0x4008094) syz_open_dev$tty1(0xc, 0x4, 0x1) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001180)="5500000018007f5f00fe01b2a4a2809302060000fd00f005020500130a0007003500281014000000190005407f0a006d0022de1338d54404009b84136ef75afb83de4411001600c43ab82200000000f2ff00000000", 0x55}], 0x1}, 0x0) 1.141107553s ago: executing program 2 (id=122): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) getdents64(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3f00cd2e, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0x10, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x40, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x4, 0x6, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x3a21, 0xac8, 0xbf, 0x4002, 0x1ff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x7, 0x1c, 0x120000, 0x5, 0x2, 0x5, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x7, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x80, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 0s ago: executing program 2 (id=123): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x7}, 0x8) fsmount(r4, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0xb) getdents64(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x4, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3f00cd2e, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0x10, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x40, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x4, 0x6, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x3a21, 0xac8, 0xbf, 0x4002, 0x1ff, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x7, 0x1c, 0x120000, 0x5, 0x2, 0x5, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x7, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x80, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) kernel console output (not intermixed with test programs): stem_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.868899][ T30] audit: type=1400 audit(1786054298.198:124): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.206509][ T30] audit: type=1400 audit(1786054298.538:125): avc: denied { write } for pid=5544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.292161][ T30] audit: type=1400 audit(1786054298.618:126): avc: denied { write } for pid=5555 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.602431][ T30] audit: type=1400 audit(1786054298.928:127): avc: denied { write } for pid=5558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.717863][ T30] audit: type=1400 audit(1786054299.048:128): avc: denied { write } for pid=5569 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 67.268347][ T30] audit: type=1400 audit(1786054307.598:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.292331][ T30] audit: type=1400 audit(1786054307.618:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.295657][ T5580] cgroup: Unknown subsys name 'net' [ 67.321280][ T30] audit: type=1400 audit(1786054307.648:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.467128][ T5580] cgroup: Unknown subsys name 'cpuset' [ 67.475452][ T5580] cgroup: Unknown subsys name 'rlimit' [ 67.596397][ T30] audit: type=1400 audit(1786054307.928:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.619779][ T30] audit: type=1400 audit(1786054307.928:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.657982][ T30] audit: type=1400 audit(1786054307.928:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.683739][ T30] audit: type=1400 audit(1786054307.928:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.704385][ T30] audit: type=1400 audit(1786054307.948:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.729793][ T30] audit: type=1400 audit(1786054307.948:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 67.733376][ T5583] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 67.762199][ T30] audit: type=1400 audit(1786054308.088:138): avc: denied { relabelto } for pid=5583 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.756067][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.954258][ T5594] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.969905][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.991891][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.999653][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.007204][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.014722][ T5607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.015270][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.026753][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.036051][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.038585][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.043423][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.051078][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.059396][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.066018][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.072761][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.078672][ T5607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.085005][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.093481][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.108550][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.110734][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.117195][ T5607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.124054][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.131120][ T5607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.153884][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.163924][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.512737][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.520550][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.528295][ T5600] bridge_slave_0: entered allmulticast mode [ 72.536368][ T5600] bridge_slave_0: entered promiscuous mode [ 72.566170][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.573327][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.580398][ T5600] bridge_slave_1: entered allmulticast mode [ 72.587401][ T5600] bridge_slave_1: entered promiscuous mode [ 72.631450][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.638642][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.645922][ T5596] bridge_slave_0: entered allmulticast mode [ 72.652981][ T5596] bridge_slave_0: entered promiscuous mode [ 72.688647][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.695978][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.703053][ T5596] bridge_slave_1: entered allmulticast mode [ 72.710000][ T5596] bridge_slave_1: entered promiscuous mode [ 72.735741][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.760581][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.767732][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.776460][ T5593] bridge_slave_0: entered allmulticast mode [ 72.783585][ T5593] bridge_slave_0: entered promiscuous mode [ 72.792138][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.832587][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.839731][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.847439][ T5593] bridge_slave_1: entered allmulticast mode [ 72.854278][ T5593] bridge_slave_1: entered promiscuous mode [ 72.869982][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.903513][ T5600] team0: Port device team_slave_0 added [ 72.910829][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.928102][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.935383][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.942589][ T5603] bridge_slave_0: entered allmulticast mode [ 72.949529][ T5603] bridge_slave_0: entered promiscuous mode [ 72.965455][ T5600] team0: Port device team_slave_1 added [ 72.978501][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.985664][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.992784][ T5592] bridge_slave_0: entered allmulticast mode [ 72.999786][ T5592] bridge_slave_0: entered promiscuous mode [ 73.007446][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.014768][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.021850][ T5592] bridge_slave_1: entered allmulticast mode [ 73.028754][ T5592] bridge_slave_1: entered promiscuous mode [ 73.035530][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.042591][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.049877][ T5603] bridge_slave_1: entered allmulticast mode [ 73.056715][ T5603] bridge_slave_1: entered promiscuous mode [ 73.065610][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.107793][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.133585][ T5596] team0: Port device team_slave_0 added [ 73.164358][ T5607] Bluetooth: hci1: command tx timeout [ 73.164362][ T5608] Bluetooth: hci4: command tx timeout [ 73.164534][ T5608] Bluetooth: hci0: command tx timeout [ 73.170713][ T5598] Bluetooth: hci2: command tx timeout [ 73.183639][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.193505][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.219423][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.232526][ T5596] team0: Port device team_slave_1 added [ 73.240186][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.253366][ T5598] Bluetooth: hci3: command tx timeout [ 73.255489][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.269212][ T5593] team0: Port device team_slave_0 added [ 73.275517][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.282460][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.308365][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.330209][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.355234][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.365512][ T5593] team0: Port device team_slave_1 added [ 73.386879][ T5592] team0: Port device team_slave_0 added [ 73.410950][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.418243][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.444656][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.457311][ T5592] team0: Port device team_slave_1 added [ 73.477942][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.485231][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.511279][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.522641][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.529942][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.555861][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.575337][ T5603] team0: Port device team_slave_0 added [ 73.589105][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.596112][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.622144][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.648142][ T5603] team0: Port device team_slave_1 added [ 73.668643][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.675707][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.701943][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.725811][ T5600] hsr_slave_0: entered promiscuous mode [ 73.731953][ T5600] hsr_slave_1: entered promiscuous mode [ 73.754628][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.761623][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.788159][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.808213][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.815228][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.841297][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.863929][ T5593] hsr_slave_0: entered promiscuous mode [ 73.869986][ T5593] hsr_slave_1: entered promiscuous mode [ 73.876260][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 73.882451][ T5593] Cannot create hsr debugfs directory [ 73.902081][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.909074][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.935049][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.959148][ T5596] hsr_slave_0: entered promiscuous mode [ 73.965372][ T5596] hsr_slave_1: entered promiscuous mode [ 73.971307][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 73.977064][ T5596] Cannot create hsr debugfs directory [ 74.049895][ T5592] hsr_slave_0: entered promiscuous mode [ 74.056219][ T5592] hsr_slave_1: entered promiscuous mode [ 74.062101][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 74.067876][ T5592] Cannot create hsr debugfs directory [ 74.133448][ T5603] hsr_slave_0: entered promiscuous mode [ 74.139530][ T5603] hsr_slave_1: entered promiscuous mode [ 74.145646][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 74.151358][ T5603] Cannot create hsr debugfs directory [ 74.520916][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.536895][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.545299][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.554705][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.562321][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.571392][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.579455][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.588573][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.649934][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.659974][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.670544][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.679929][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.688452][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.697893][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.705968][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.714511][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.780173][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.790493][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.798821][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.810309][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.833662][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.843861][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.851481][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.860316][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.930308][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.940966][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.949237][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.957773][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.976135][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.986033][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.994214][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.002455][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.058552][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.116383][ T5603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.125905][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.134212][ T5603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.142583][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.155283][ T5603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.164555][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.172561][ T5603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.181628][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.191017][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.227553][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.235048][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.244197][ T5598] Bluetooth: hci0: command tx timeout [ 75.244692][ T5608] Bluetooth: hci2: command tx timeout [ 75.249705][ T5607] Bluetooth: hci1: command tx timeout [ 75.249804][ T5607] Bluetooth: hci4: command tx timeout [ 75.264638][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.286505][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.293636][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.325017][ T5607] Bluetooth: hci3: command tx timeout [ 75.338198][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.357851][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.364972][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.395091][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.402151][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.425247][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.480073][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.520853][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 75.520869][ T30] audit: type=1400 audit(1786054315.848:152): avc: denied { sys_module } for pid=5600 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.528111][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.555495][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.584766][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.591855][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.626542][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.642050][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.720778][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.735363][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.762537][ T718] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.769693][ T718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.797582][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.804756][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.827477][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.834622][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.868285][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.875422][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.030228][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.217180][ T5600] veth0_vlan: entered promiscuous mode [ 76.260070][ T5600] veth1_vlan: entered promiscuous mode [ 76.399973][ T5600] veth0_macvtap: entered promiscuous mode [ 76.426423][ T5600] veth1_macvtap: entered promiscuous mode [ 76.497830][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.539363][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.580779][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.635223][ T1141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.873440][ T5593] veth0_vlan: entered promiscuous mode [ 76.884686][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.894724][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.907362][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.916147][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.932809][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.948773][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.965258][ T5593] veth1_vlan: entered promiscuous mode [ 77.021510][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.045547][ T718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.053899][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.084429][ T30] audit: type=1400 audit(1786054317.408:153): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.H2mAs2/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.110878][ T5593] veth0_macvtap: entered promiscuous mode [ 77.120324][ T30] audit: type=1400 audit(1786054317.408:154): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.141066][ T5593] veth1_macvtap: entered promiscuous mode [ 77.184269][ T30] audit: type=1400 audit(1786054317.428:155): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.H2mAs2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.216254][ T30] audit: type=1400 audit(1786054317.438:156): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.230995][ T5592] veth0_vlan: entered promiscuous mode [ 77.241679][ T30] audit: type=1400 audit(1786054317.448:157): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.H2mAs2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.277076][ T30] audit: type=1400 audit(1786054317.458:158): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/root/syzkaller.H2mAs2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.289375][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.317760][ T5600] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.332423][ T5607] Bluetooth: hci0: command tx timeout [ 77.332449][ T5607] Bluetooth: hci2: command tx timeout [ 77.332469][ T5607] Bluetooth: hci1: command tx timeout [ 77.332601][ T30] audit: type=1400 audit(1786054317.498:159): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.332641][ T30] audit: type=1400 audit(1786054317.498:160): avc: denied { mounton } for pid=5600 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.332677][ T30] audit: type=1400 audit(1786054317.508:161): avc: denied { mount } for pid=5600 comm="syz-executor" name="/" dev="gadgetfs" ino=7328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.337556][ T5607] Bluetooth: hci4: command tx timeout [ 77.357040][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.424257][ T5607] Bluetooth: hci3: command tx timeout [ 77.456653][ T5592] veth1_vlan: entered promiscuous mode [ 77.508689][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.555418][ T5792] Zero length message leads to an empty skb [ 77.570723][ T718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.587558][ T5792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5792 comm=syz.0.1 [ 77.620819][ T5592] veth0_macvtap: entered promiscuous mode [ 77.662536][ T5596] veth0_vlan: entered promiscuous mode [ 77.670079][ T5592] veth1_macvtap: entered promiscuous mode [ 77.694557][ T5603] veth0_vlan: entered promiscuous mode [ 77.757613][ T5596] veth1_vlan: entered promiscuous mode [ 77.766348][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.770519][ T5603] veth1_vlan: entered promiscuous mode [ 77.781426][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.788888][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.811543][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.829787][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.859889][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.874325][ T718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882470][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.910352][ T5603] veth0_macvtap: entered promiscuous mode [ 77.937739][ T5596] veth0_macvtap: entered promiscuous mode [ 77.949007][ T5603] veth1_macvtap: entered promiscuous mode [ 77.972483][ T5596] veth1_macvtap: entered promiscuous mode [ 78.005222][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.024108][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.060507][ T5796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5796 comm=syz.1.2 [ 78.068944][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.090767][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.100079][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.132290][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.170086][ T5798] jffs2: notice: (5798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 78.182056][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.194157][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.217954][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.229523][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.243354][ T1141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.252322][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.259784][ T718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.263440][ T1141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.275105][ T718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.281247][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.305646][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.313822][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.349059][ T10] usb 1-1: config 0 descriptor?? [ 78.354343][ T1141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.384588][ T164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.437779][ T718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.478645][ T718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.498176][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.824778][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.898822][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.936474][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.971848][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.171505][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.409326][ T5614] Bluetooth: hci1: command tx timeout [ 79.417211][ T5607] Bluetooth: hci4: command tx timeout [ 79.423236][ T5614] Bluetooth: hci2: command tx timeout [ 79.431132][ T5607] Bluetooth: hci0: command tx timeout [ 79.534850][ T5607] Bluetooth: hci3: command tx timeout [ 79.617816][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 79.636835][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.637091][ T10] usb 1-1: USB disconnect, device number 2 [ 79.737221][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.801225][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.870284][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.931724][ T5810] fido_id[5810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 80.040344][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.532252][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 80.532269][ T30] audit: type=1400 audit(1786054320.468:206): avc: denied { allowed } for pid=5811 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.803359][ T30] audit: type=1400 audit(1786054320.468:207): avc: denied { sqpoll } for pid=5811 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.923828][ T5729] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.955584][ T30] audit: type=1400 audit(1786054320.478:208): avc: denied { create } for pid=5811 comm="syz.1.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.144718][ T30] audit: type=1400 audit(1786054320.588:209): avc: denied { ioctl } for pid=5811 comm="syz.1.8" path="socket:[7943]" dev="sockfs" ino=7943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.260197][ T30] audit: type=1400 audit(1786054320.588:210): avc: denied { getopt } for pid=5811 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.304909][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.316873][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.344816][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.349327][ T122] cfg80211: failed to load regulatory.db [ 81.363430][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 81.384218][ T30] audit: type=1400 audit(1786054321.588:211): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 81.384830][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.429458][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.490784][ T5729] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.529273][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.557666][ T5729] usb 4-1: config 0 descriptor?? [ 81.763278][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.939946][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.958149][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 81.961613][ T30] audit: type=1400 audit(1786054322.288:212): avc: denied { mount } for pid=5836 comm="syz.4.5" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 81.989741][ T5729] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 82.002364][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 82.031358][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.075292][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.086365][ T5729] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.087769][ T30] audit: type=1400 audit(1786054322.418:213): avc: denied { mount } for pid=5836 comm="syz.4.5" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 82.100414][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.169128][ T24] usb 2-1: config 0 descriptor?? [ 82.355645][ T30] audit: type=1400 audit(1786054322.678:214): avc: denied { write } for pid=5819 comm="syz.3.10" name="hiddev0" dev="devtmpfs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.626777][ T24] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 82.680386][ T24] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.967865][ T30] audit: type=1400 audit(1786054323.288:215): avc: denied { ioctl } for pid=5849 comm="syz.0.14" path="socket:[8966]" dev="sockfs" ino=8966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 83.221691][ T24] usb 2-1: USB disconnect, device number 2 [ 83.312138][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 83.321424][ T5856] openvswitch: netlink: Flow key attr not present in new flow. [ 83.406274][ T5856] netlink: 'syz.0.15': attribute type 7 has an invalid length. [ 83.414011][ T5856] netlink: 'syz.0.15': attribute type 5 has an invalid length. [ 83.421726][ T5856] netlink: 17 bytes leftover after parsing attributes in process `syz.0.15'. [ 86.478521][ T9] usb 4-1: USB disconnect, device number 2 [ 87.362790][ T5884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20'. [ 87.372130][ T5884] openvswitch: netlink: Flow key attr not present in new flow. [ 87.454527][ T5883] netlink: 'syz.0.20': attribute type 7 has an invalid length. [ 87.462211][ T5883] netlink: 'syz.0.20': attribute type 5 has an invalid length. [ 87.469945][ T5883] netlink: 17 bytes leftover after parsing attributes in process `syz.0.20'. [ 87.622971][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 87.622983][ T30] audit: type=1400 audit(1786054327.948:224): avc: denied { mount } for pid=5877 comm="syz.1.21" name="/" dev="rpc_pipefs" ino=8163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 87.751339][ T30] audit: type=1400 audit(1786054328.078:225): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 87.880555][ T30] audit: type=1400 audit(1786054328.208:226): avc: denied { map } for pid=5890 comm="syz.1.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.938854][ T30] audit: type=1400 audit(1786054328.208:227): avc: denied { read write } for pid=5890 comm="syz.1.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.973247][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.033063][ T30] audit: type=1400 audit(1786054328.258:228): avc: denied { create } for pid=5892 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.194863][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.352430][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.564471][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 88.713763][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.899727][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.021947][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.098075][ T30] audit: type=1400 audit(1786054328.268:229): avc: denied { connect } for pid=5892 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.117441][ T30] audit: type=1400 audit(1786054328.538:230): avc: denied { name_bind } for pid=5892 comm="syz.0.25" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 89.139935][ T30] audit: type=1400 audit(1786054328.538:231): avc: denied { node_bind } for pid=5892 comm="syz.0.25" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 89.161985][ T30] audit: type=1400 audit(1786054328.538:232): avc: denied { create } for pid=5892 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.162722][ T24] usb 3-1: config 0 descriptor?? [ 89.402808][ T5898] can: request_module (can-proto-0) failed. [ 89.570588][ T5837] Set syz1 is full, maxelem 65536 reached [ 89.628790][ T30] audit: type=1400 audit(1786054329.948:233): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.689361][ T24] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 89.704820][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.887392][ T5914] input: syz1 as /devices/virtual/input/input5 [ 90.984876][ T24] usb 3-1: USB disconnect, device number 2 [ 91.131519][ T5928] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 91.363190][ T5790] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.968161][ T5790] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 93.137502][ T5790] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 93.148304][ T5790] usb 1-1: config 2 has no interface number 0 [ 93.155445][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 93.155458][ T30] audit: type=1400 audit(1786054333.488:240): avc: denied { read write } for pid=5950 comm="syz.1.36" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.189278][ T5790] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 93.212455][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.249825][ T5790] usb 1-1: Product: syz [ 93.271200][ T5790] usb 1-1: Manufacturer: syz [ 93.307221][ T5790] usb 1-1: SerialNumber: syz [ 93.333931][ T30] audit: type=1400 audit(1786054333.488:241): avc: denied { open } for pid=5950 comm="syz.1.36" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 93.558486][ T30] audit: type=1400 audit(1786054333.858:242): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.193148][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.499704][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0280 instead [ 94.510214][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x2000 instead [ 94.527039][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x0001 instead [ 94.547296][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x4094 instead [ 94.559361][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x0780 instead [ 94.570386][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c4: 0x2000 instead [ 94.580848][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x002c instead [ 94.605371][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c0: 0x002c instead [ 94.653356][ T5790] usb 1-1: probing VID:PID(0424:012C) [ 94.669252][ T981] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 94.678501][ T5790] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 94.691340][ T981] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 94.702811][ T5790] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 94.711043][ T981] usb 4-1: config 2 has no interface number 0 [ 94.723512][ T5790] usb 1-1: USB disconnect, device number 3 [ 94.737826][ T981] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 94.748120][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.759184][ T981] usb 4-1: Product: syz [ 94.774253][ T981] usb 4-1: Manufacturer: syz [ 94.779783][ T981] usb 4-1: SerialNumber: syz [ 94.869940][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c4: 0x003d instead [ 95.068152][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c8: 0xfffe instead [ 95.240843][ T5964] jffs2: Further such events for this erase block will not be printed [ 95.495522][ T5964] jffs2: Empty flash at 0x00000a30 ends at 0x00000a34 [ 95.523121][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 95.692893][ T5964] jffs2: Empty flash at 0x00000c58 ends at 0x00000c5c [ 95.884909][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001080: 0x12c0 instead [ 95.961801][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001084: 0x2000 instead [ 95.989687][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001088: 0x0029 instead [ 96.001465][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4000 instead [ 96.034869][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x8000 instead [ 96.089120][ T30] audit: type=1400 audit(1786054336.418:243): avc: denied { create } for pid=5957 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 96.378775][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0d00 instead [ 96.390867][ T30] audit: type=1400 audit(1786054336.528:244): avc: denied { mount } for pid=5957 comm="syz.3.39" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 96.437085][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.44'. [ 96.466653][ T5999] openvswitch: netlink: Flow key attr not present in new flow. [ 96.485831][ T30] audit: type=1400 audit(1786054336.718:245): avc: denied { search } for pid=5957 comm="syz.3.39" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.536016][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x0376 instead [ 96.579491][ T30] audit: type=1400 audit(1786054336.718:246): avc: denied { search } for pid=5957 comm="syz.3.39" name="dlm" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.654468][ T5997] can: request_module (can-proto-0) failed. [ 96.665095][ T30] audit: type=1400 audit(1786054336.718:247): avc: denied { write search } for pid=5957 comm="syz.3.39" name="dlm" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.670325][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xffff instead [ 96.692991][ T981] usb 4-1: probing VID:PID(0424:012C) [ 96.708266][ T5999] netlink: 'syz.4.44': attribute type 7 has an invalid length. [ 96.715955][ T5964] jffs2: Empty flash at 0x00002018 ends at 0x0000201c [ 96.716019][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000202c: 0x0004 instead [ 96.716060][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0010 instead [ 96.716101][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x0018 instead [ 96.716142][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0024 instead [ 96.716182][ T5964] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0020 instead [ 96.716221][ T5964] jffs2: Further such events for this erase block will not be printed [ 96.786403][ T5999] netlink: 'syz.4.44': attribute type 5 has an invalid length. [ 96.797878][ T5999] netlink: 17 bytes leftover after parsing attributes in process `syz.4.44'. [ 96.808863][ T981] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 96.820146][ T981] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 96.828651][ T30] audit: type=1400 audit(1786054336.728:248): avc: denied { add_name } for pid=5957 comm="syz.3.39" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.861434][ T981] usb 4-1: USB disconnect, device number 3 [ 96.887215][ T30] audit: type=1400 audit(1786054336.728:249): avc: denied { create } for pid=5957 comm="syz.3.39" name="cluster" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 96.941617][ T5964] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 96.954494][ T5964] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 97.314123][ T5790] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.404999][ T6007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6007 comm=syz.4.48 [ 97.549686][ T6010] netlink: 'syz.3.49': attribute type 7 has an invalid length. [ 97.557595][ T6010] netlink: 'syz.3.49': attribute type 5 has an invalid length. [ 97.565586][ T6010] netlink: 17 bytes leftover after parsing attributes in process `syz.3.49'. [ 97.799051][ T5790] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 97.822533][ T5790] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 97.842446][ T5790] usb 2-1: config 2 has no interface number 0 [ 97.859381][ T5790] usb 2-1: config 2 interface 174 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.872229][ T5790] usb 2-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.893047][ T5790] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 97.903524][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.912223][ T5790] usb 2-1: Product: syz [ 97.916954][ T5790] usb 2-1: Manufacturer: syz [ 97.934656][ T5790] usb 2-1: SerialNumber: syz [ 98.092952][ T6012] can0: slcan on ttyS3. [ 98.169270][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 98.271470][ T5790] usb 2-1: probing VID:PID(0424:012C) [ 98.277524][ T981] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 98.287528][ T5790] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 98.342635][ T5790] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 98.409455][ T5790] usb 2-1: USB disconnect, device number 3 [ 98.446828][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.457957][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 98.477998][ T981] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 98.490379][ T981] usb 5-1: can't read configurations, error -61 [ 98.529616][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 98.529630][ T30] audit: type=1400 audit(1786054338.858:277): avc: denied { write } for pid=6018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.612231][ T6035] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 98.644066][ T981] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 98.688402][ T30] audit: type=1400 audit(1786054339.008:278): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.764527][ T6042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6042 comm=syz.3.55 [ 98.805576][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 98.815394][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 98.837001][ T981] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 98.873003][ T981] usb 5-1: can't read configurations, error -61 [ 98.907868][ T981] usb usb5-port1: attempt power cycle [ 99.008346][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.056619][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0280 instead [ 99.099330][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x2000 instead [ 99.122157][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x0001 instead [ 99.147904][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x4094 instead [ 99.174318][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 99.195298][ T6059] openvswitch: netlink: Flow key attr not present in new flow. [ 99.232764][ T30] audit: type=1400 audit(1786054339.558:279): avc: denied { create } for pid=6053 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.255477][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x0780 instead [ 99.274715][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c4: 0x2000 instead [ 99.297740][ T30] audit: type=1400 audit(1786054339.608:280): avc: denied { bind } for pid=6053 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.324366][ T6059] netlink: 'syz.3.58': attribute type 7 has an invalid length. [ 99.333688][ T981] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 99.342514][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x002c instead [ 99.366702][ T6059] netlink: 'syz.3.58': attribute type 5 has an invalid length. [ 99.375587][ T6059] netlink: 17 bytes leftover after parsing attributes in process `syz.3.58'. [ 99.392304][ T6063] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 99.395285][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.428066][ T30] audit: type=1400 audit(1786054339.628:281): avc: denied { write } for pid=6043 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.479945][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c0: 0x002c instead [ 99.505844][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 99.529004][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c4: 0x003d instead [ 99.529283][ T30] audit: type=1400 audit(1786054339.648:282): avc: denied { listen } for pid=6053 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.560346][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c8: 0xfffe instead [ 99.572361][ T981] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 99.580354][ T981] usb 5-1: can't read configurations, error -61 [ 99.588690][ T30] audit: type=1400 audit(1786054339.668:283): avc: denied { write } for pid=6053 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.611653][ T6054] jffs2: Further such events for this erase block will not be printed [ 99.620259][ T6054] jffs2: Empty flash at 0x00000a30 ends at 0x00000a34 [ 99.628252][ T6054] jffs2: Empty flash at 0x00000c58 ends at 0x00000c5c [ 99.636102][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001080: 0x12c0 instead [ 99.647442][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001084: 0x2000 instead [ 99.659064][ T30] audit: type=1400 audit(1786054339.988:284): avc: denied { write } for pid=6072 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.682505][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001088: 0x0029 instead [ 99.694921][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4000 instead [ 99.705787][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x8000 instead [ 99.718516][ T981] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 99.727278][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0d00 instead [ 99.738485][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x0376 instead [ 99.752912][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xffff instead [ 99.763793][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.774452][ T6054] jffs2: Empty flash at 0x00002018 ends at 0x0000201c [ 99.781709][ T981] usb 5-1: not running at top speed; connect to a high speed hub [ 99.790642][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000202c: 0x0004 instead [ 99.802550][ T981] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 99.811102][ T981] usb 5-1: can't read configurations, error -61 [ 99.820027][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0010 instead [ 99.833993][ T981] usb usb5-port1: unable to enumerate USB device [ 99.844152][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x0018 instead [ 99.855417][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0024 instead [ 99.866333][ T6054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0020 instead [ 99.877942][ T6054] jffs2: Further such events for this erase block will not be printed [ 100.852357][ T6054] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 101.077746][ T6054] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 101.128555][ T6089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6089 comm=syz.2.63 [ 101.245813][ T6011] can0 (unregistered): slcan off ttyS3. [ 101.703242][ T6100] can: request_module (can-proto-0) failed. [ 101.775535][ T30] audit: type=1400 audit(1786054342.108:285): avc: denied { write } for pid=6086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.241825][ T30] audit: type=1400 audit(1786054342.558:286): avc: denied { setopt } for pid=6104 comm="syz.0.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.264573][ T6105] can: request_module (can-proto-0) failed. [ 104.484784][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 104.484796][ T30] audit: type=1400 audit(1786054344.148:290): avc: denied { connect } for pid=6126 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.573787][ T30] audit: type=1400 audit(1786054344.208:291): avc: denied { shutdown } for pid=6126 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.596153][ T30] audit: type=1400 audit(1786054344.218:292): avc: denied { create } for pid=6126 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.632367][ T30] audit: type=1400 audit(1786054344.958:293): avc: denied { write } for pid=6125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.670429][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0280 instead [ 104.682526][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x2000 instead [ 104.700998][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x0001 instead [ 104.729890][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x4094 instead [ 104.884751][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x0780 instead [ 105.246329][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c4: 0x2000 instead [ 105.275785][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x002c instead [ 105.352627][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c0: 0x002c instead [ 105.418093][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c4: 0x003d instead [ 105.463399][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c8: 0xfffe instead [ 105.533209][ T6132] jffs2: Further such events for this erase block will not be printed [ 105.800452][ T6132] jffs2: Empty flash at 0x00000a30 ends at 0x00000a34 [ 105.844787][ T6132] jffs2: Empty flash at 0x00000c58 ends at 0x00000c5c [ 105.855069][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 105.899789][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001080: 0x12c0 instead [ 105.925167][ T6152] can: request_module (can-proto-0) failed. [ 105.981621][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001084: 0x2000 instead [ 106.012708][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001088: 0x0029 instead [ 106.042734][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4000 instead [ 106.068127][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x8000 instead [ 106.100158][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0d00 instead [ 106.131425][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x0376 instead [ 106.153938][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xffff instead [ 106.197654][ T6132] jffs2: Empty flash at 0x00002018 ends at 0x0000201c [ 106.219009][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000202c: 0x0004 instead [ 106.296131][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0010 instead [ 106.391304][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x0018 instead [ 106.457160][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0024 instead [ 106.520191][ T6132] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0020 instead [ 106.630602][ T6132] jffs2: Further such events for this erase block will not be printed [ 106.747061][ T30] audit: type=1400 audit(1786054347.078:294): avc: denied { write } for pid=6143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.028993][ T6132] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 107.089920][ T6132] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 107.315818][ T30] audit: type=1400 audit(1786054347.638:295): avc: denied { write } for pid=6170 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.368616][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0280 instead [ 107.383402][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x2000 instead [ 107.442265][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x0001 instead [ 107.492243][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x4094 instead [ 107.521855][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x0780 instead [ 107.835665][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 107.850809][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c4: 0x2000 instead [ 107.889329][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x002c instead [ 107.921548][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c0: 0x002c instead [ 107.972549][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c4: 0x003d instead [ 108.012672][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c8: 0xfffe instead [ 108.054215][ T6175] jffs2: Further such events for this erase block will not be printed [ 108.080257][ T6175] jffs2: Empty flash at 0x00000a30 ends at 0x00000a34 [ 108.157604][ T6175] jffs2: Empty flash at 0x00000c58 ends at 0x00000c5c [ 108.254075][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001080: 0x12c0 instead [ 108.488815][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001084: 0x2000 instead [ 108.904343][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 108.926658][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001088: 0x0029 instead [ 109.162910][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4000 instead [ 109.192980][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x8000 instead [ 109.223368][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0d00 instead [ 109.238301][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x0376 instead [ 109.250539][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xffff instead [ 109.261477][ T6175] jffs2: Empty flash at 0x00002018 ends at 0x0000201c [ 109.268796][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000202c: 0x0004 instead [ 109.290529][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0010 instead [ 109.334564][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x0018 instead [ 109.345188][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0024 instead [ 109.391628][ T6175] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0020 instead [ 109.408296][ T6175] jffs2: Further such events for this erase block will not be printed [ 109.436948][ T6175] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 109.446476][ T6175] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 109.463181][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.579567][ T6212] syzkaller1: entered promiscuous mode [ 109.585118][ T6212] syzkaller1: entered allmulticast mode [ 109.597040][ T30] audit: type=1400 audit(1786054349.908:296): avc: denied { read } for pid=6211 comm="syz.4.85" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.645741][ T9] usb 4-1: config 2 has an invalid interface number: 174 but max is 0 [ 109.656912][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 109.673143][ T30] audit: type=1400 audit(1786054349.908:297): avc: denied { open } for pid=6211 comm="syz.4.85" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.702307][ T9] usb 4-1: config 2 has no interface number 0 [ 109.712542][ T9] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 109.753511][ T9] usb 4-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 109.764164][ T30] audit: type=1400 audit(1786054349.908:298): avc: denied { create } for pid=6211 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 109.789886][ T9] usb 4-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.820227][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 109.832626][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.931867][ T9] usb 4-1: Product: syz [ 110.938448][ T9] usb 4-1: Manufacturer: syz [ 110.943057][ T9] usb 4-1: SerialNumber: syz [ 111.048675][ T30] audit: type=1400 audit(1786054351.378:299): avc: denied { connect } for pid=6227 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.134034][ T30] audit: type=1400 audit(1786054351.458:300): avc: denied { create } for pid=6226 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.222418][ T30] audit: type=1400 audit(1786054351.548:301): avc: denied { create } for pid=6226 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.284047][ T9] usb 4-1: probing VID:PID(0424:012C) [ 111.294733][ T30] audit: type=1400 audit(1786054351.578:302): avc: denied { connect } for pid=6226 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.304669][ T5690] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.329602][ T9] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 8E [ 111.342829][ T9] usb 4-1: vub300 ignoring EndPoint(0) 8E [ 111.354009][ T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 111.366301][ T30] audit: type=1400 audit(1786054351.578:303): avc: denied { write } for pid=6226 comm="syz.0.87" path="socket:[10110]" dev="sockfs" ino=10110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.401335][ T9] vub300 4-1:2.174: probe with driver vub300 failed with error -22 [ 111.430718][ T9] usb 4-1: USB disconnect, device number 4 [ 111.438374][ T30] audit: type=1400 audit(1786054351.708:304): avc: denied { block_suspend } for pid=6226 comm="syz.0.87" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.493391][ T30] audit: type=1400 audit(1786054351.758:305): avc: denied { write } for pid=6214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.503521][ T5690] usb 3-1: device descriptor read/64, error -71 [ 111.804425][ T5790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.823511][ T5690] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.973390][ T5690] usb 3-1: device descriptor read/64, error -71 [ 111.977546][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 112.005530][ T5790] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.026263][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.086016][ T5690] usb usb3-port1: attempt power cycle [ 112.089869][ T5790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.321662][ T5790] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 112.411073][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.423352][ T5790] usb 2-1: Product: syz [ 112.429465][ T5790] usb 2-1: Manufacturer: syz [ 112.439158][ T5790] usb 2-1: SerialNumber: syz [ 112.475606][ T5690] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.513698][ T5690] usb 3-1: device descriptor read/8, error -71 [ 112.674173][ T5790] usb 2-1: unit 4 not found! [ 112.710382][ T5790] usb 2-1: unit 0 not found! [ 112.767590][ T5690] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.812030][ T6250] can: request_module (can-proto-0) failed. [ 112.825575][ T5690] usb 3-1: device descriptor read/8, error -71 [ 112.926064][ T5790] usb 2-1: USB disconnect, device number 4 [ 112.961998][ T5690] usb usb3-port1: unable to enumerate USB device [ 113.067940][ T6267] scsi_nl_rcv_msg: discarding partial skb [ 113.137518][ T6274] netlink: 'syz.1.92': attribute type 7 has an invalid length. [ 113.145309][ T6274] netlink: 'syz.1.92': attribute type 5 has an invalid length. [ 113.152898][ T6274] netlink: 17 bytes leftover after parsing attributes in process `syz.1.92'. [ 115.244553][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 115.254382][ T6295] openvswitch: netlink: Flow key attr not present in new flow. [ 115.297324][ T6295] netlink: 'syz.1.96': attribute type 7 has an invalid length. [ 115.305168][ T6295] netlink: 'syz.1.96': attribute type 5 has an invalid length. [ 115.312907][ T6295] netlink: 17 bytes leftover after parsing attributes in process `syz.1.96'. [ 116.638315][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 116.647343][ T6305] openvswitch: netlink: Flow key attr not present in new flow. [ 116.702636][ T6305] netlink: 'syz.3.98': attribute type 7 has an invalid length. [ 116.710340][ T6305] netlink: 'syz.3.98': attribute type 5 has an invalid length. [ 116.718002][ T6305] netlink: 17 bytes leftover after parsing attributes in process `syz.3.98'. [ 116.922001][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 116.922023][ T30] audit: type=1400 audit(1786054357.248:314): avc: denied { read } for pid=6299 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.237007][ T30] audit: type=1400 audit(1786054357.248:315): avc: denied { ioctl } for pid=6299 comm="syz.4.99" path="socket:[11310]" dev="sockfs" ino=11310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.663642][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.743469][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.756750][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0280 instead [ 118.767455][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x2000 instead [ 118.778502][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x0001 instead [ 118.789496][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x4094 instead [ 118.800010][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c0: 0x0780 instead [ 118.811326][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c4: 0x2000 instead [ 118.828495][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000000c8: 0x002c instead [ 118.835110][ T29] usb 2-1: config 2 has an invalid interface number: 174 but max is 0 [ 118.858556][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c0: 0x002c instead [ 118.867294][ T29] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 118.869960][ T30] audit: type=1400 audit(1786054359.198:316): avc: denied { create } for pid=6327 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.888217][ T6330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6330 comm=syz.2.107 [ 118.901704][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c4: 0x003d instead [ 118.922742][ T30] audit: type=1400 audit(1786054359.228:317): avc: denied { bind } for pid=6327 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.923348][ T29] usb 2-1: config 2 has no interface number 0 [ 118.953899][ T30] audit: type=1400 audit(1786054359.228:318): avc: denied { setopt } for pid=6327 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 118.963619][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000005c8: 0xfffe instead [ 118.974206][ T30] audit: type=1400 audit(1786054359.228:319): avc: denied { accept } for pid=6327 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.013290][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.025305][ T29] usb 2-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 119.037485][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.057772][ T29] usb 2-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 119.073374][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.087278][ T6328] jffs2: Further such events for this erase block will not be printed [ 119.101284][ T29] usb 2-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 119.112925][ T6328] jffs2: Empty flash at 0x00000a30 ends at 0x00000a34 [ 119.114821][ T30] audit: type=1400 audit(1786054359.438:320): avc: denied { write } for pid=6327 comm="syz.4.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 119.121309][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.140056][ T6328] jffs2: Empty flash at 0x00000c58 ends at 0x00000c5c [ 119.163438][ T29] usb 2-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.196502][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001080: 0x12c0 instead [ 119.198189][ T29] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 119.223222][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001084: 0x2000 instead [ 119.234086][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.234114][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.243353][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.243377][ T29] usb 2-1: Product: syz [ 119.243393][ T29] usb 2-1: Manufacturer: syz [ 119.243408][ T29] usb 2-1: SerialNumber: syz [ 119.277258][ T24] usb 1-1: config 0 descriptor?? [ 119.290401][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001088: 0x0029 instead [ 119.310583][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4000 instead [ 119.420361][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 119.429460][ T6338] openvswitch: netlink: Flow key attr not present in new flow. [ 119.447255][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x8000 instead [ 119.496382][ T6338] netlink: 'syz.2.109': attribute type 7 has an invalid length. [ 119.505074][ T6338] netlink: 'syz.2.109': attribute type 5 has an invalid length. [ 119.513742][ T6338] netlink: 17 bytes leftover after parsing attributes in process `syz.2.109'. [ 119.528307][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0x0d00 instead [ 119.730988][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x0376 instead [ 119.826582][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0xffff instead [ 119.834072][ T24] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 119.905460][ T6328] jffs2: Empty flash at 0x00002018 ends at 0x0000201c [ 119.922511][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 119.951346][ T29] usb 2-1: probing VID:PID(0424:012C) [ 119.976643][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000202c: 0x0004 instead [ 119.989091][ T29] usb 2-1: vub300 testing BULK IN EndPoint(0) 8E [ 120.011950][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002030: 0x0010 instead [ 120.019217][ T29] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 120.084195][ T29] vub300 2-1:2.174: probe with driver vub300 failed with error -22 [ 120.094622][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002034: 0x0018 instead [ 120.137887][ T29] usb 2-1: USB disconnect, device number 5 [ 120.170461][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002038: 0x0024 instead [ 120.245588][ T6328] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x0020 instead [ 120.284266][ T6346] dummy_hcd dummy_hcd.0: remove, state 1 [ 120.300055][ T6328] jffs2: Further such events for this erase block will not be printed [ 120.331582][ T6350] syzkaller0: entered promiscuous mode [ 121.373207][ T6350] syzkaller0: entered allmulticast mode [ 121.393241][ T10] usb 1-1: USB disconnect, device number 4 [ 121.406860][ T6346] usb usb1: USB disconnect, device number 1 [ 121.468377][ T6328] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 121.503154][ T6328] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 121.606993][ T6346] dummy_hcd dummy_hcd.0: stopped [ 121.623163][ T6346] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 121.825477][ T6360] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 123.662626][ T30] audit: type=1400 audit(1786054363.988:321): avc: denied { read } for pid=6376 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.039996][ T6394] netlink: 'syz.2.121': attribute type 7 has an invalid length. [ 124.047946][ T6394] netlink: 'syz.2.121': attribute type 5 has an invalid length. [ 124.056730][ T6394] netlink: 17 bytes leftover after parsing attributes in process `syz.2.121'. [ 125.611047][ T6356] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 125.623138][ T6356] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 125.631542][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(full) [ 125.640722][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 125.650755][ T6356] RIP: 0010:set_link_state+0x27/0xc70 [ 125.656126][ T6356] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 7a f3 3b fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 125.675719][ T6356] RSP: 0018:ffffc90006ec7850 EFLAGS: 00010046 [ 125.681777][ T6356] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ce7043 [ 125.689728][ T6356] RDX: 0000000000000000 RSI: ffffffff87ce6166 RDI: 0000000000000000 [ 125.697677][ T6356] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 125.705625][ T6356] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 125.713577][ T6356] R13: ffff88802aa04000 R14: 0000000000000000 R15: ffff88802aa04c00 [ 125.721529][ T6356] FS: 0000000000000000(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 125.730441][ T6356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.737006][ T6356] CR2: 00007f224b787700 CR3: 000000000e994000 CR4: 00000000003526f0 [ 125.744958][ T6356] Call Trace: [ 125.748215][ T6356] [ 125.751125][ T6356] ? __pfx_dummy_pullup+0x10/0x10 [ 125.756148][ T6356] dummy_pullup+0xf3/0x170 [ 125.760548][ T6356] ? __pfx_dummy_pullup+0x10/0x10 [ 125.765559][ T6356] usb_gadget_disconnect_locked+0x142/0x4e0 [ 125.771437][ T6356] gadget_unbind_driver+0xd8/0x4f0 [ 125.776538][ T6356] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 125.782247][ T6356] device_remove+0xcb/0x180 [ 125.786733][ T6356] device_release_driver_internal+0x44e/0x620 [ 125.792786][ T6356] driver_detach+0xd8/0x1b0 [ 125.797274][ T6356] bus_remove_driver+0x13b/0x2e0 [ 125.802202][ T6356] driver_unregister+0x76/0xb0 [ 125.806949][ T6356] usb_gadget_unregister_driver+0x49/0x70 [ 125.812656][ T6356] raw_release+0x19b/0x260 [ 125.817059][ T6356] ? __pfx_raw_release+0x10/0x10 [ 125.821981][ T6356] __fput+0x3ff/0xb50 [ 125.825948][ T6356] task_work_run+0x150/0x240 [ 125.830521][ T6356] ? __pfx_task_work_run+0x10/0x10 [ 125.835613][ T6356] ? do_raw_spin_unlock+0x145/0x1e0 [ 125.840802][ T6356] do_exit+0x951/0x2ae0 [ 125.844948][ T6356] ? __pfx_do_exit+0x10/0x10 [ 125.849525][ T6356] ? do_raw_spin_lock+0x128/0x260 [ 125.854537][ T6356] ? find_held_lock+0x2b/0x80 [ 125.859201][ T6356] ? get_signal+0x7e0/0x21e0 [ 125.863778][ T6356] do_group_exit+0xd5/0x2a0 [ 125.868276][ T6356] get_signal+0x1ec7/0x21e0 [ 125.872768][ T6356] ? __down_common+0x6c5/0x8b0 [ 125.877517][ T6356] ? __pfx_get_signal+0x10/0x10 [ 125.882353][ T6356] ? down_interruptible+0x66/0xa0 [ 125.887361][ T6356] ? rcu_is_watching+0x12/0xc0 [ 125.892117][ T6356] arch_do_signal_or_restart+0x91/0x7e0 [ 125.897650][ T6356] ? down_interruptible+0x66/0xa0 [ 125.902657][ T6356] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.908796][ T6356] ? __pfx_raw_ioctl+0x10/0x10 [ 125.913549][ T6356] exit_to_user_mode_loop+0x139/0x6f0 [ 125.918912][ T6356] ? rcu_is_watching+0x12/0xc0 [ 125.923665][ T6356] do_syscall_64+0x666/0x870 [ 125.928237][ T6356] ? clear_bhb_loop+0x40/0x90 [ 125.932903][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.938778][ T6356] RIP: 0033:0x7fac3fd9dd6b [ 125.943180][ T6356] Code: Unable to access opcode bytes at 0x7fac3fd9dd41. [ 125.950174][ T6356] RSP: 002b:00007fac40cb6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.958565][ T6356] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007fac3fd9dd6b [ 125.966520][ T6356] RDX: 00007fac40cb7fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 125.974470][ T6356] RBP: 00007fac40cb7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 125.982422][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 125.990372][ T6356] R13: 0000000800000000 R14: 0000000000000005 R15: 00007fac3fe53882 [ 125.998330][ T6356] [ 126.001337][ T6356] Modules linked in: [ 126.005219][ T6356] ---[ end trace 0000000000000000 ]--- [ 126.010653][ T6356] RIP: 0010:set_link_state+0x27/0xc70 [ 126.016017][ T6356] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 7a f3 3b fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 126.035603][ T6356] RSP: 0018:ffffc90006ec7850 EFLAGS: 00010046 [ 126.041650][ T6356] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87ce7043 [ 126.049599][ T6356] RDX: 0000000000000000 RSI: ffffffff87ce6166 RDI: 0000000000000000 [ 126.057548][ T6356] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 126.065499][ T6356] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 126.073449][ T6356] R13: ffff88802aa04000 R14: 0000000000000000 R15: ffff88802aa04c00 [ 126.081400][ T6356] FS: 0000000000000000(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 126.090311][ T6356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.096878][ T6356] CR2: 00007f224b787700 CR3: 000000000e994000 CR4: 00000000003526f0 [ 126.104847][ T6356] Kernel panic - not syncing: Fatal exception [ 126.111088][ T6356] Kernel Offset: disabled [ 126.115388][ T6356] Rebooting in 86400 seconds..