last executing test programs: 3m47.744433338s ago: executing program 2 (id=1015): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r2, &(0x7f0000001240)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x8000000000001, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={0x440000, 0x24, 0x2}, 0x18) execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000100)='\x8b\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='{:\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='&/\\{+.]\'*\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='#)-$\x00']}, &(0x7f00000004c0)={[&(0x7f0000000300)='})()&]\x00', &(0x7f0000000340)='(\'J},+[\\{{:@-,&\x85\\,-.#\x00', &(0x7f0000000380)='\\-J-%$-Y\x00', &(0x7f00000003c0)='}(^\x00', &(0x7f0000000400)='-!\x00', &(0x7f0000000440)=':\'\x00', &(0x7f0000000480)='\x00']}, 0x1000) 3m46.097451512s ago: executing program 2 (id=1021): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/100}}}}}}, 0x0) 3m45.098506031s ago: executing program 2 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) msgctl$IPC_RMID(0x0, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0) 3m45.031742247s ago: executing program 2 (id=1023): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x109000, 0x115) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x1ff, 0x1}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x6}) r3 = epoll_create(0x1) r4 = epoll_create1(0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x1b}) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000001200)={0x1000, 0x276, &(0x7f00000001c0)="c1acde70a669ac5d074542532fbb7a8dea", &(0x7f0000000200)="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", 0x11, 0x1000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r0, 0x1389c000) r6 = accept4$unix(r2, &(0x7f0000001240)=@abs, &(0x7f00000012c0)=0x6e, 0x80800) fstat(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001640)=0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001680)=0x0) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000001780)='\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0/file0\x00'}) r16 = openat$cgroup_int(r2, &(0x7f0000001880)='net_cls.classid\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r5, {0xffffffffffffffff, 0x0}}, './file0\x00'}) r18 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001940)={r2}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001980)={0x0}, &(0x7f00000019c0)=0xc) statx(r5, &(0x7f0000001a00)='./file0\x00', 0x6000, 0x20, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r6, &(0x7f0000001fc0)=[{{&(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001380)="a4bc96c3b5b25dd96744d9d121811c8dccaeea963f800db3aab399dd0162009417e80229e18a8b227fc73a3f6f8db7db8e84ccec4f967ef6814f1af7023856f9f7070908fe5debb2acea28", 0x4b}, {&(0x7f0000001400)="47fc789df420e09b6c3620065a0e8a9578d07132f25ed2f51bf5c53922ef37c81382f9b77e2d8f49f624df45fc23d9d3789577c709227fa84b92a920aec9e97515ea05e4a76e1f16dc16926a306f4d0672474ce15bb58caffabe58fb21b0a1061f6fe6be7f84c03bbb232520c6692813a857271a22bc6a1494818eede01facfd5292187bd56482942899d7cf81f0bda82df890c286d896b337f587956e16208277bec7d42abf4d60fe5850c123a8a25106304fe14df032e7dd9da4c1", 0xbc}, {&(0x7f00000014c0)="74941b0f67445d8c50b1c8dc054fd063d5a55cca6fb00915d1d00bc61e5ba08c023f0f487f424e6a677a50366aa8819e41796519ddc6fa45c681a85381fd9087c8995a56c1979ade7a5ab05ec161c42bdabe626e1f3eacde67b61b867580cc4e8b452eecc629156e7471e73d10e3c092c662aa95b7786468", 0x78}, {&(0x7f0000001540)}], 0x4, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r5, r11, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r15}}}, @rights={{0x34, 0x1, 0x1, [r1, r16, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r5, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r17}}}, @rights={{0x28, 0x1, 0x1, [r4, r18, 0xffffffffffffffff, r4, r2, r19]}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, 0xee01}}}], 0x138, 0x200008c0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001c80)="5cd06626d627dacda56ab7015f5c097586d8f5c04c14e7434f5c904f32236f8a255cabfbb10410f1be9d7ab96468dc861233091f95f9e32e92ee65b15da3616ea25a2302e79d4d2d6ef46dfb67a0fe4f4cbec7a930db2d6ee6daa10bc517ba29f66a900c1b15ef295aeca780a01c4fd43a6a725a5fcc75de99eadb48462323a55b4a129dfe0431c64408f659eca431fac161cb4efcf7e17f2abfde846d5e69dc593d5a721b49cd5b57faed94c8aebbcef55dea8f7c8fe4a974b690459afd1b5aacd41925b9fbe235cb0e92967204815e3b0ce7008fab9bba545445a10a291866d0d5", 0xe2}, {&(0x7f0000001d80)="4869290bc8df05984a6f9394b802ca180b2662a9c0e2c7bab1380738ea13066b2321fd7c42ada5288782739b9af3444ba354c357d5ed132fd429c1d8951f2b133af8454abde9e73196f9dc2a504aa16c9aff821302caec1728486d3b0e8c77e5ca966cd47f0191375b58c4b6b354344b4a12489769", 0x75}, {&(0x7f0000001e00)="fbcb22b75d0f1d387809d95d2fee549591be9114b66072f7ec0c237a00a8b8360d0cc673466ceaae9f7f44974ef5ec9139f01946c80a16125bf1357797429dc7796a172cb75ab1f4d66fa500b30d3877c22a141f055a1611838011608694d994bb9c360d68df19609a5d3e0b48679959d81408dff821557a7af01bc84e54dafdfd15da14b839d31bf07aba0dd68294c167410856da757e4265f7e1785e1629a88979d2385cb3e95b40814c6b27c1848c52c67241e3495e", 0xb7}, {&(0x7f0000001ec0)="6b6438f64fb86784e17d347383599177ddbb6d9be93fcf7be8d80e9980562b62009388f289c10db24d765ac42ebdbcc9f5180e1a6ef5ecb3322170b330785420e2be63e129a8c23eb5951cda2a5b2617b7b34e6a40dec07052faad1e5b3120bb5836ee7f2078041be4edbfb2127607ddcac1f5ba0d2013941efa7c6602e392ce1133fcff5390f3a893736acb", 0x8c}], 0x4, 0x0, 0x0, 0x4}}], 0x2, 0x40000) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r14, 0x40184152, &(0x7f0000002240)={0x0, &(0x7f0000002200)=[&(0x7f0000002040)="80c23ee6d679f728e791aebd7d7e6f53f1961f59ab413523bea7407f2ff8d63ce00736cbfc70a47aec5bf0f32b439a45b04d91c70fc04fdc66f2ded863576f2f22ec307840e9f602fb6d5c81a8ad72475a09025a6d145779f7ce68543ac6bfed6534032ef54bcb31000ea61358364bbd5db90ec9c0546dc8738e8ad430a046067825dd39e31e73b5fad5d4202df4eb1c34761e549a519d256c0809b12a36d94f89", &(0x7f0000002100)="b0e96f8da1629a15078249e71ad831962a6605151fd6b1b771e0463438611ead758af0cd8be2d1356980cf2d86f44bcc7afea291348e36aee8b75e46c79e163cc6a820c90b664aa509e78014e5119a0395faa2866ef754630ec300d7df220962382427dba6c03d4201aa031d0d6a71de651b10451dd323e7ae96c5385d08a97b4be1b8cd665c6ebae947248d9792fc0c3aa171588724d2b31d3f62a0a0c75e14482021d570408799749a65d70e3c4ccbd67ef43f6a94c63596b18d6b68af837d4a88dca6ced2cc666914da7826"], 0x8}) 3m44.882768166s ago: executing program 2 (id=1024): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00040000000000480002006563622863"], 0x194}, 0x1, 0x0, 0x0, 0x24000}, 0x24040880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x1}, {0x9, 0x2}, {0xb1}, {0xd1, 0x7}, {0x79, 0x7}, {0x7, 0x5}, {0x0, 0x5}, {0x3}, {0x3c}, {0xf, 0x4}], "16d18aa281951c2e"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004010}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300627269"], 0x118}, 0x1, 0x0, 0x0, 0x4040994}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x200181, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x4, 0xc8}}}, 0x6) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 3m44.497213367s ago: executing program 2 (id=1026): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x6164, &(0x7f0000000600)={0x0, 0xec25, 0x400, 0x1, 0x1e2, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4004, @fd_index=0x6, 0xc, 0x0, 0x0, 0x16, 0x0, {0xc}}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x91, 0x0, &(0x7f0000000380)="0cffffdf00000000eba000dee560f101cf2285895d6a572acb44d8adc72b1a6328fc194cb8ebfac412c76b9e20e789084ecc84314883490c4fb56173640e0ba95afbdb23b4d37cb4d4083977230761e10123d3b27807e55e37a13b72a6cc02e811705326e111412a66b0e4ce0ec237e235b41762f8e8f9db8ea3891ae4c72a9a85535fc954cb7861d5e91e7d3bec6c5180c9a69dc1fa14fd3820ed9d59616068fa60e50e643b128aa4110915f05a0a27a6000000006311cf68d229f6963b2457b7c2a4a5a104157a909a52196506d897fad70bd3efe0ac7e6789853eb297bacd864fee5d3ad1c05c61e8029dfc6c518126a595ca561d1c27998768f4443299790cfd8c75f342f9a58423b53f2733ea43c4a763ba68b89963a5522cb575ceb2430889fd352b82cefa9b5a8271b55465b3b658681f8ce4020057c54cd5060b1268bf21134ce484bd4b8e80521cf88a70ac21d63577ff6206ae86c0d44efe102b7d1e8e51264075094b6b07cc4a", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) timer_create(0x5, &(0x7f0000000180)={0x0, 0x22, 0x3, @thr={&(0x7f0000000280)="ee42722d0702ca6905a7476ae8c994c0d2c13e1d191b762ea2e47816c61d9b7851f584c53364740708f3aa9c07e7eee583d238a668285a7c00517279bae2989d31363d60e99c2855723b014da710c29905a3d2960718425cbbb219dea47ddfef6c074cc3a55caa09d782caeaf5a10a5bef4c8ad691be6b35ce9ff42a803baf08496e87b2a05f6b8d6a2eabd200f26ca0e8220eb763668beec955beaa21081f66c06c3fdefa7d54db2fa7ab45c7dece9cac1aee52d457444cd96bfa1af98eaad21df9a1159840010bb91d0c66c07190e51654bc95bfe01b07d19105216fc8ec542255cf0e975cad3ce9b0cf9ed236d15b46119dba32e97541109062d681cc56", &(0x7f0000000040)="e95db0aa2b66a564a068467f776b815ea11b3760fef337d4ebbedfe37d74deb1c48dcc87b48efe20db6b14c6a762e7e1cb6cdda33dca054da93c007172"}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m28.347424963s ago: executing program 32 (id=1026): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffff00000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x6164, &(0x7f0000000600)={0x0, 0xec25, 0x400, 0x1, 0x1e2, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4004, @fd_index=0x6, 0xc, 0x0, 0x0, 0x16, 0x0, {0xc}}) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0x91, 0x0, &(0x7f0000000380)="0cffffdf00000000eba000dee560f101cf2285895d6a572acb44d8adc72b1a6328fc194cb8ebfac412c76b9e20e789084ecc84314883490c4fb56173640e0ba95afbdb23b4d37cb4d4083977230761e10123d3b27807e55e37a13b72a6cc02e811705326e111412a66b0e4ce0ec237e235b41762f8e8f9db8ea3891ae4c72a9a85535fc954cb7861d5e91e7d3bec6c5180c9a69dc1fa14fd3820ed9d59616068fa60e50e643b128aa4110915f05a0a27a6000000006311cf68d229f6963b2457b7c2a4a5a104157a909a52196506d897fad70bd3efe0ac7e6789853eb297bacd864fee5d3ad1c05c61e8029dfc6c518126a595ca561d1c27998768f4443299790cfd8c75f342f9a58423b53f2733ea43c4a763ba68b89963a5522cb575ceb2430889fd352b82cefa9b5a8271b55465b3b658681f8ce4020057c54cd5060b1268bf21134ce484bd4b8e80521cf88a70ac21d63577ff6206ae86c0d44efe102b7d1e8e51264075094b6b07cc4a", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) timer_create(0x5, &(0x7f0000000180)={0x0, 0x22, 0x3, @thr={&(0x7f0000000280)="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", &(0x7f0000000040)="e95db0aa2b66a564a068467f776b815ea11b3760fef337d4ebbedfe37d74deb1c48dcc87b48efe20db6b14c6a762e7e1cb6cdda33dca054da93c007172"}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m36.738120868s ago: executing program 3 (id=1177): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000001a40), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000440)={0x4, @output={0x0, 0x0, {0xffff, 0x4}, 0x7fff, 0x37cc}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/mdstat\x00', 0x0, 0x0) read$usbmon(r7, &(0x7f0000000680)=""/87, 0x57) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m33.737757193s ago: executing program 3 (id=1183): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0011122) openat$kvm(0x0, 0x0, 0x20480, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) 2m32.266604035s ago: executing program 3 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\a78z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 2m31.061306901s ago: executing program 3 (id=1192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x5, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xff, @loopback, 0x9}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000380)={0x200002, 0x200003, 0x7fd, 0x4, 0x7}) mkdir(&(0x7f0000000540)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x3, 0x0, 0x1, 0x2, 0xffff, 0x9}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) 2m30.027552433s ago: executing program 3 (id=1199): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) mlockall(0x6) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x60000, &(0x7f00000003c0)=ANY=[@ANYRESOCT]) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) 2m28.822124612s ago: executing program 3 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) 2m27.970071823s ago: executing program 33 (id=1203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) 12.069460886s ago: executing program 4 (id=1609): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x0, 0x3, 0x7) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r2 = syz_io_uring_setup(0x785d, &(0x7f00000002c0)={0x0, 0x5eda, 0x400, 0x3, 0x227, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x13160, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r7, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd_index=0xa, 0xfff, 0x0, 0x0, 0x6, 0x0, {0x2, r6}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xc, 0x0, 0x5}) io_uring_enter(r2, 0x5f2e, 0x4720, 0x14, 0x0, 0x0) 11.441111414s ago: executing program 5 (id=1610): socket$inet6_sctp(0xa, 0x1, 0x84) socket(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a0000001400078005001500000000000800"], 0x60}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) r5 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000001c0)={0x9, 0x3, 0x1, {0xb, 0xfdfffe40, 0x20000009, 0xf}}) 10.704781333s ago: executing program 0 (id=1613): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d1, 0x800, 0x1, 0x35c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 10.389288626s ago: executing program 0 (id=1615): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6', 0x3) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x4f27, 0x4, 0x10000, 0x4, 0x3, 0x5, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0xb, 0xe66, 0x3, 0x7f, 0x4085, 0xffffffff, 0xfffffff8]}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x1, 0x6}, 0x8, 0x1, 0x1}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) 9.340821256s ago: executing program 6 (id=1617): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000003780)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003740)={&(0x7f00000035c0)={0x54, 0x2, 0x1, 0x1b63fbc09dd2dc1d, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}, @CTA_NAT_DST={0x4}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x8}]}, 0x54}}, 0x40000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40082, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000000)={0x0, 0x8, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x7fffffff, 0xfffffffffffffffd}, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r4, r5, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 9.200841107s ago: executing program 0 (id=1618): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8.626134176s ago: executing program 5 (id=1619): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) mlockall(0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x60000, &(0x7f00000003c0)=ANY=[@ANYRESOCT]) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) 7.947439609s ago: executing program 0 (id=1620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x1b, 0x4, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlockall(0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$hid(r2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0xd, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000029c0)={'gre0\x00', &(0x7f0000002940)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x0, 0x101, {{0x15, 0x4, 0x2, 0x6, 0x54, 0x68, 0x0, 0xe, 0x2f, 0x0, @remote, @empty, {[@end, @end, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x5, 0x2}, {0x1, 0x2}, {0x1, 0xe, "405cc457c07623cec2bc6365"}, {0x5, 0x10, "c56a16a03a1497ef4f688c3d3393"}]}, @end, @timestamp_prespec={0x44, 0x14, 0x1c, 0x3, 0x8, [{@local, 0x3}, {@multicast2, 0xff}]}]}}}}}) sendmmsg$inet(r4, &(0x7f0000003c00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="071c9d82de034134042a21141a20be97a9937a6fd6bfc77687cb2a4d28d07a2a8b528cb4950fdd15b15e3886999eef4fde0a08697ada2cb592c325a50066af732d9e9f277c3f2c454b9c9da4d5cb102c651789c98dc69446d557bac1ef676731aa5ae98add4e6fb02432b43e5ea02702002252293adbb4b4d9ad43bef4c8e6e2b347342ad025d0", 0x87}], 0x1, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="cad122941e44e303b060ac30ab8be79186c58a44be0bb32937309fa75fe9bb0437fd9f1c915e44e96e274a0a0abfc5a3c94fa9e6cf11dc25fd3c57e7aa2584cf3fe3b2985a675c1434c272a331c6c50eb6dba41f3c3f01084c376a7c763cf94842452ef2d44768711173d60315cf0868cb2eeae01dec28ca92ad3875cc896c0d8c19efd4488aaba46b4ecb0ef161d29398d05dcd00beb094ea39055ffe72d9369b97e802478913a5bb9bd72c31374ad4b888cf2f1302d16da5e738cb9b3dc15f030bb91ec577822c4590bac4df024d8378a05357079832cb71aaf625567196e0c5ca1bed57cec91a4ffccc78911ec9", 0xef}], 0x1, &(0x7f0000000580)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@cipso={0x86, 0x20, 0x3, [{0x7, 0x12, "36d5d742f3af45e94b044b76c67c5935"}, {0x5, 0x8, "103907b7a8a2"}]}, @timestamp={0x44, 0x1c, 0x60, 0x0, 0x6, [0x7, 0xdf2, 0x8001, 0x2, 0xb5, 0x7ff]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xa, [0x40, 0x7f, 0x101, 0xfffffff3, 0x1]}, @lsrr={0x83, 0x17, 0xca, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2]}, @end]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @timestamp={0x44, 0x20, 0x16, 0x0, 0x0, [0x8, 0x5c4a, 0x47f, 0x48f, 0x1000, 0x1, 0x6]}, @generic={0x83, 0x4, "4617"}, @rr={0x7, 0x13, 0x1b, [@broadcast, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffff3b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xee}}], 0x110}}, {{&(0x7f0000000500)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)="9eac507cafa560505aa7a5ec2e2de86daf3c383c07d9fbcb33afc113fb50f085e86a78b2e5e09843a8f9f26accbf17e790006ac9be0f6e4784ee548426786d37566757302c05139d6d446f5b987b1b89f9abd46a8495acfe8dfff826ae0efe98df7e2ef4cd41eed73e6dd40be65d96623d3be3977ffdaa17c0c07e5928d0920637678061a1df54bd772a00f5f8331e98cbf345dc5c583f68301b2840be114427ee5688f0eb244d5e023c8f82ba043014ed9c872c", 0xb4}], 0x1, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4e5}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="00dbaa28a461c8f8322a86cad83cba7832641d59b36c0766ecd1c96f7f0e7651572f994daa45f41e678cb4f9b699f47dc1e52a20f1f00bc634af4cee19e217c240115652f069ef8d9b39336d8d9548f1d926ec1a81c04a74c4a297a326f8f8582fdffa5277c5bd37e2377d7e9333a22b98", 0x71}, {&(0x7f00000018c0)="3960269fa76583d467598081ee5b652e02a7247f86446162da87cc1e1ee9", 0x1e}, {&(0x7f0000001900)="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", 0x1000}], 0x4, &(0x7f0000002a00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x88, 0x4, "e310"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast1}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a40)="d6c06eedda0de148d6fdcae0905e1b7dc2c82c53cdf328aab30035fa044755bdfc524be0c9", 0x25}, {&(0x7f0000002a80)="45109427a9a2c6787bad20c7e218ed148e5e81b3b54c6ddedb2c481d614314de24aee5e4682636b84fedd85a0b837b9856f05c69b6eabb36b95e4f6827fd083e7afb1f5365", 0x45}], 0x2, &(0x7f0000002b40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}], 0x60}}, {{&(0x7f0000002bc0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002c00)="f806cab19e082043fcaa17f5f38ac4c235cdec03ef95bd8fae980e1547ae21a500e2841c43953a4896595cba1c1dd925d51af85e10a1987b1a5858d98afb091401d2cda669261f7b46c493d43796724fd901285810df4761c913423a71a8e1930179e081533c827ba887ad5aab9a890a2ec8bff59db0ef8026b026ebb889d3ae1951c3cc11fe713855e0ed4c5dd20c9912d3f08bfd74f18311decacb7be115ff196aa29abd03e53c74dd1e1b5574b3143b1618162dbea7d42cb08afff8c285f66c466c", 0xc3}, {&(0x7f0000002d00)="df2b5490e88561b5fbfa524e82d692cdb29c15f2da1ac4c8bd12f90125da80a37503822e56fb525be7a0e4e870bb9530f0900b3018ee43e319d27e21c7c0d904d7b68a50108cecaeaf03bd5ba310c9d40cd8d6a95aee5206dca55a17888f620014a24f12123c6f58daef1513a2dba10f132b057b6bd68956072c209295b96c0471ed5c1e43acd068ac28193d1b5c000756a92e6fd5d49da1d235", 0x9a}, {&(0x7f0000002dc0)="f3eb3f1033b7802b1e2ccd9921efc6d1a1f7760b45370bec19e7679584147f5c8a97a04bd9d26b7062b3e0ccfc88092fadb1d66988d890f5843bac3b99d645665650d42148292af1e8c3da74854c1d511b5e223d71cf012da366a4f3c0feec7030ecf8a54bdc51864a6de59d92d7b41d6ab2272b3d47d253b0b1b483ee23fd01820b8dd2faf1d3ee2c66a491fd013e46356fa74c17c9faaa041b19", 0x9b}, {&(0x7f0000002e80)="f876cf3c48e53cfeea0c453660445de65c4676a5bd6cfeec439ffd6547ba337e55b1936d338af6930d63b93ebb2ed9ad999184aeb5667dacac78e5047143df0cf8a24076d7383391e54d666fd782a090ef4ececf4f9b7cdca5df086dd12ca42ee3eeb965214a53544565c95f61630802f4e08b89a9cebecbc69672cc4d73990474e3143632bfa29e93c60936c1", 0x8d}, {&(0x7f0000002f40)="0cde6d2c301c65312b44fa5dbcf5cdcf56af98d4d151af4d6c642c1aaefc149aff9d77359736ea5c6c656391a46d76fe2c9ea558e19de6f87d5bd93defae2189bee10de1db79cbfc033c3fd44193b6e49b802e68245f801e341fb083be4e95c11388fef7fc10e4d9bb9e6a0e7ba4ab67a4d8033954e4c1f4e816ff79cf2d7915a50ea48ee41c11ed88ea0407bb57b0a453458c1085e9c18ed5c801b36041", 0x9e}], 0x5}}, {{&(0x7f0000003080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003400)=[{&(0x7f00000030c0)="ce27dad373122723b8e8ab03a8cb40eb1227c87db3377167684364a9d3904a89aa00c258af27d2a70526ccec32ccb71cd5ea00d1f4b88e71f921fcae34b7d03b06bd1f8b83428c9d4b1ed1dd0205caa73d88ada64f84244a5ec51d0a6a4f5f3eeeadfd34c64b719d1d788375d815630ae40e0beab2b09f2a7a801f224101ceede303f136f389b646cbed6b878a91312ac65c3ccfce951c6326d5f2e5964340d374c2a0e54978ad2cb54c376c65f01fa13d1cbf13483205d2ad381013b95b5dbe5725db2869d8d318453a0fcba462448200f0c8b9bf372676c5b3c2228b7ca36c902c6585d6fb9d3330f96374d357eaa54d2e64c1bdf7b33cc23093", 0xfb}, {&(0x7f00000031c0)="b6364f6409828437d1341bc173d89a8ecc13f8d0662009e3b9743b82e35507c4e47eeb9f203e4df07f56a3662d70ee09f08ee6905d08ce55e53fa5f2696ce99713714f533fb16561ec18688d2e60687273ff15b456b01031f8f21bf8cb4ac207770e8649804fe7c65b5c7defaa6a71d927e1df7e9c4c03969a", 0x79}, {&(0x7f0000003240)="1d637d45e790af13f1faa417d1ea7ecec684eca06331f5e6f8d2c27c32850496b301fa57dfa4c4cad01fe404c8db06c568b8eecd04cc3e12cf7f5275a8c991e7787c67c2ad156f0c726fab1d045681faa57440d40959d3f224789f9f700902a1a7742e3507b1f9ff1d675e1818c45cbe311efbc96c518d19eb4792b7d616ff2cfca0b3a8997e5b31c9e5f0261c13bce065b292093804cc117891817b33e218f47d1242a80a70bf60743f2442379e352f6af955819312f801452ee2dbd49b6890ef1875f6c5473f8be4a294dfdace0134c7326d9cf8557ed1556bf6c681bcb852fb5687ea6e4227f087cac23755b0dbc7fc731503f38a354ec7", 0xf9}, {&(0x7f0000003340)="2dc3a0e1997efabb62d2e2a1d74c73d63e9f34e6e54f2f3462bc7bafe5e5b23389ca0b7a7dfa3cbddb69ee15717b154e1a7ea3d674b607c5fe1c2d717120a4094f26a123cfd2084d0cf27a3b4795cac412c641145c5092cb", 0x58}, {&(0x7f00000033c0)="7af7251f4b487ed7a11de6760ec1ec5dc428180156e53bf66d2932066060cd0e36cfeb", 0x23}], 0x5}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003480)}, {&(0x7f00000034c0)="9ce0142eff34c040e38c6337996191d34ad69a1b451218f5f8c94cccf41e0ef0c88f29a739e26a5493791c27bf2174862b0a61871a34764bb9fd52f8", 0x3c}, {&(0x7f0000003500)="f8ed243f5e871b297f0f0495cc04c26f5f9b1376a44ca29a481c9dfe94164dac23d348ba8753d9a2c8fa9c7d2c2a96e553fd66128d1190ad7cac9032be1c0438fa82de29568d152406afd12ace528888eb4a496240a9a6a15815e4929e52cfe743a6b210ba614a479f4bf2583adbe66cb0bcf11e45", 0x75}, {&(0x7f0000003580)="0d4135766f2136bd7fd38566adc158e60065cc154c8d40ac302feb7116884a2c64d22cbf5f78da95795c7ca615749c3df035c64d9d250986d93fb7d35597eb9534dbead1aa6f2389e6042498df56b3f0c5568203020791956609daf3e3ad51a9680a7473dbb301243ee8b9e30d8af0301c4b7ac3f14134f217499b824e1fd981da5d961ac49cee577b37250a7eee794c8e1016bc83164ebfe24a7a3d2aa519d300960f31916cb86b09def74540", 0xad}], 0x4, &(0x7f0000003680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x48}}, {{&(0x7f0000003700)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000003a00)=[{&(0x7f0000003740)="b87285cb0d7bdf6f8470f1f9a2186119e6c87f4d3289d447e33e867b27171959d0c06ce098248365265710c95b0444539062d0daf2e3e1a60f88b903bd1dfc72e2363ab00909d32ee248b014c405aeafcb88fc0e02128d4963fb206a040613a5afa80ff836d72b8bfb27cfc7bb4141cb9761c662432ecc45d1ac39afb27fc1456077e9880231960afffabd3febf8a5d3d410dfa15883163a797716bc2f", 0x9d}, {&(0x7f0000003800)="2b45ccf1d00c34da32aa3b789b231be0d7b743b404a75fab67212f6715540344f6a34eb749465bd96aebf4c8cdaa655f4a788a5cc25ea93c5e655ab68cf946cbf2fd8cb5e078138a53a232c080a8a5728255991f73514693158429e84fc73a511cb2f36afa2544e2bc43818ce26cda12932e6a72f04dd9668baef001fe37e466dc56281b61a92d21e97d87a21825ab2fa77ce33f2853acd63ec91f0b66d9316fea75b6ce410571f236bd056593efdc19771a30bd8e335f6043074f60e5eed4003753734657655237ef0454364f97a566", 0xd0}, {&(0x7f0000003900)="b5aa46928dd542c61bb9137b1cb204128354627492c77fb97be529eee27c1df6bc0d68df5862e6fa220c0145331480400f8dca9a9e84a6dce8e8efab01aac1bf296d7622a977709a713ee9c040ea5e91826bd7fcf796fc560b52e7fe73677f8a53dce225b18d5bb14b4bd1ac6cf1e0de9337b542568e08ce642affd4facc163c756fc3869d7b83bf7e3a449ae6a7756de3baf69f666c975e867e6a8bd740742e2b8f04a3335b08d291a29ff0f1605310b5ed2d777e805eaf861030c9501f475f0612a6eab75eb134e37a978af3d9fe600bde8286c6ab939fca1ef7d46fdb29647a8b098d3e280aa2204753", 0xeb}], 0x3, &(0x7f0000003a40)=[@ip_retopts={{0x78, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x62, [@broadcast, @multicast2, @loopback, @local, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}, @rr={0x7, 0x17, 0xe0, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x27, 0x93, [@local, @local, @empty, @broadcast, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xaa}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x7b, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x10, 0x53, 0x0, 0x8, [0xd, 0x0, 0x1]}, @noop, @rr={0x7, 0x2b, 0xf, [@rand_addr=0x64010101, @rand_addr=0x64010100, @loopback, @loopback, @local, @broadcast, @broadcast, @private=0xa010102, @loopback, @broadcast]}, @generic={0x86, 0xd, "9b4ad47bef915849f122cf"}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "21c3f66ed68b11d52e93c035ff2a"}]}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0xc, [@multicast1]}, @noop]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4c, 0x32, 0x3, 0x3, [{@loopback, 0x4}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@rand_addr=0x64010100, 0x9}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x40}, 0xf}, {@loopback, 0x4}, {@empty, 0xfffffff9}, {@broadcast, 0x100}]}, @timestamp={0x44, 0x10, 0xd5, 0x0, 0x6, [0x7fff, 0x81, 0x6]}]}}}], 0x1b8}}], 0x9, 0x40) 7.846585098s ago: executing program 4 (id=1621): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 7.498019841s ago: executing program 1 (id=1622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @pic={0x40, 0x4, 0x60, 0xc2, 0x7, 0x1, 0x5, 0x2, 0x60, 0x54, 0x0, 0x4, 0xf7, 0x4, 0x7, 0x64}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800007218000000020000000000000000000004000000000000000000000001000000000000"], 0x0, 0x32, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x2000000, [{0xa6f, 0x3}, {0x6, 0x4}]}, 0x14, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.426565305s ago: executing program 4 (id=1623): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r4, 0x401, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xc2, 0x54, 0x8, 0x112a, 0x5, 0xbe68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x97, 0xde, 0xbe}}]}}]}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$UI_SET_PHYS(r8, 0x4008556c, &(0x7f00000002c0)='syz0\x00') sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6.077526342s ago: executing program 1 (id=1624): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5.974052966s ago: executing program 5 (id=1625): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d1, 0x800, 0x1, 0x35c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 5.693009343s ago: executing program 6 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xc}, {0x0, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x4000) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) socket(0xa, 0x3, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r7, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r8, 0x4b4c, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.492106283s ago: executing program 1 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 5.379626259s ago: executing program 5 (id=1628): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) io_uring_setup(0x0, 0x0) r2 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, 0x0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x6aba, 0x4) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x121a02, 0x0) 4.708731404s ago: executing program 5 (id=1629): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r0 = socket(0x25, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000003c0)={'hsr0\x00', 0x2}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=r0], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_ep_write(r1, 0x8d, 0x15, &(0x7f0000000340)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async) socket(0x25, 0x80801, 0x1) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000003c0)={'hsr0\x00', 0x2}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=r0], 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_usb_ep_write(r1, 0x8d, 0x15, &(0x7f0000000340)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b") (async) 4.566179738s ago: executing program 6 (id=1630): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61123c00000000006113500000000000bf200000000000001500000008ffffffbd03010000000000cf00000000000000691600ffff800000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.291421448s ago: executing program 1 (id=1631): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) 4.265727222s ago: executing program 6 (id=1632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x8, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x952c, 0x4800000000000, 0x0, 0x9, 0x97b]}, &(0x7f0000000240)=0x78) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) write$FUSE_STATX(r3, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) nanosleep(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000000000000820200000000000002000000000000001806000000004850d2e700000000000074080000000000001322000000000000130a0000000000000008000000000000ff0380000000000000000000000000000d030000000000000100000000000000e60b000000000000ff00000000000000"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.250932972s ago: executing program 1 (id=1633): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4040814) r3 = socket$inet6(0xa, 0x3, 0x3e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4040040) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=0x0, @ANYBLOB="20001d802dfd008005000c000000000006000500000000000000060000000000302b1e083297f9ab81b885159bfa5a25cce5d3eb83e32e1d508ec6b900b981297633abdec80130239ec214309abf7d298aab8614d6372fc0812c69468b92f9abd88f3ba28f3c48b75ab348bc67dc6e37af9ab892c235b73dfdd5a9baebdb55b37095520a188b6677cc3010f6bc6f665ed9a10fb0377c6f210b8e446f1900d47f8e944dbbea7c94028c65398452b30df8633b54e1b3ca2959bfc92fa568218efd9d1634fe79aed8adaf37c4dc3d1124a3e80dde51d4eb93d6756f228b5208f370973f10be47d37ed0e69f3920b59e6394af50ec86870709ea1250e80c1b2555df78faaa521826cadd1a359fbb511826fc4574b2ec2507714b327211cc9e54bf148ebe32baeb59bd7026dd6c"], 0x3c}}, 0x0) 3.23059669s ago: executing program 4 (id=1634): process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) mlockall(0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c) mount$tmpfs(0x0, 0x0, &(0x7f0000000180), 0x60000, &(0x7f00000003c0)=ANY=[@ANYRESOCT]) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) 2.657511893s ago: executing program 0 (id=1635): bind$alg(0xffffffffffffffff, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x30008005}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="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", 0xfe}, {&(0x7f0000000100)="3ec236553ce81af87e0280f350d4b76c6dee07af8dd5e58bdf7b8ebdf7dc8d5ee6d1db8fe107139af607691a35735e5a699891466e9f65544e89622321225d91d169cc65274f45961625e43b299f3d426e51de16a8ec8d39b9bf7ed6cf2ae4938f6f6993106d32a2582d0ca701026f19ed17307fcd65a3b44d8b8f9dd39bca8dad1b15e069f8b42fa94ee72743c4337b0e223716f3d87e3537686dee864aab90dac1039dc244972954b0ef0c4fa888bc41a8731e86b8", 0xb6}, {&(0x7f00000003c0)="5bac11e7615255bd4f40b1903594b1ef4e98847722d6058d1e5bccc14dd72638ae79e6d21e0c8df7ba6fb4e2eb04898206a91ef253640fcb8a412af4736fcdd7db675acb621226ee7d9add5f22d57ec16e7f5bbceac33402ff381d8aca482e0f90b31382ec35caca7369bc56f54e498aa3292a744774afcbd63de0c7000c5e5b048b6e4b87e741e724", 0x89}, {&(0x7f0000000200)="d56f472a8210fd10324b8e3d27cf9ce48a1692a64b0c23a828c362690cdb47786ab6360c170f1d650e4796f151511b4f28700cfca0fd6ecd30c149e025b055c8048fa5784521006bddbefe42b5c23bb9cba16a8b55", 0x55}, {&(0x7f0000000600)="69f73ce54522e1103c844fd7938eba61d71bcbce9fef9f90facaaa5b56a2e0d2c4fbf17e5f3a480413d67e6eabf337f19e039a36600108d18b4fdb128ab4e7519b087292ac4a6947a2b27a91d3d2c40d6fcb3bd534ef34d225f735d2a6c70af15bd37f4e573af817334f37e02b839e4eef8f6c43bcc3901fdfede5fcca2244c794f195937ae7", 0x86}, {&(0x7f0000000a00)="642799cbfa8afd2c7d22c921089400"/25, 0x19}], 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1f8, 0x10}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="b8acd37ac614af7e72b923302a84cf45ec7863ac4314a9a289a286dbae6a967462097ad38789778586c42e09023b7badbd8c3fdf158fa368e87ba0356f112b2bfe598d4ba347c46fa24688bd7b23f085cb4a5052ce53b9ab5c1f6073", 0x5c}], 0x1}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000740)="2ed2ad2d225f4e07b4e3ede5", 0xc}, {&(0x7f0000000a40)="1706c25b9dcc2a135f4a6966712c85143aef35269fda154ea24fd228eea4466fe0fa12d05f05c3fce2ee1e2e14ef36cddffddcd4feb40880fc6d046bd0157608c3707d8a24c3c91b5ff8a71f354331fef736272e43f98b9ae6cd76862dd129322b1a871d2b246dc1da5a4529ddbf76e4ebe3e2fe7e08b7f761cd6d307ad9f8d6651a7d1bd26d227d1322237c816212fb975980b6de550dfd0e094ec0b8837a71f0042304e7d09e699bd4c00778ed85264866ec11a02e84c8b9977346546ab722", 0xc0}], 0x2, &(0x7f0000004c40), 0x0, 0x40004045}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)="4bc68b688489e1c5ff267afb8c421a40b0d0b51cc3a49b4ac8b677128bb0641049c2deee2357dabf96614077b34e4bcea580b383a5ce9fbbcb02d7d208a2cd7429ba266c7fd33fb0c6b5814c3478061411b44acb145e305646f1dd8e13d7a45d033bba767d56dcb2a185aa339f1a58232cc2f8c9000d24a60c5fde60fa2bb7864bfa72464b6e9abb686a44d4c61e21aa16e49a06111f1e7d967378e4c2973c5bd6636a01414f4ec030ec1f0c6a117f75d7fa97f806c0556925bb", 0xba}, {&(0x7f0000000c00)="489582ccf1defbb215cda2c28b8d56d4099e0bab19205451cc792c7699dee2afa5be8d172103fa583ccbc9507b46ae6bacef294b35c4b5123d7fb1c77a8abe5f83e1180ffce89658009c6a789e199cf80e6ea3fffad101097241979a01b43aa65d03a685c556c85b9cf9a0acbca4775bed887c0824adc8905d12d33de9d63494ba0f3331779c59e2bcc74509cd83448d02150018b4bab040c798f345e814e7bc5d5460f1fbe7be8bfce577acdf26312623acb31db7a8e3ba3eb0815346adc536834e9637d84c62d0f1bdcedcbd13f53a8c7af49c050bc7a7f9f9265e0c7b", 0xde}], 0x2, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x48, 0x117, 0x2, 0x2d, "686fd8653502847024aee9ff8da9ff1fc4b66901f151f00613ff9130c505632f079b950a3ab5faa90959bc5c97"}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x110, 0x117, 0x2, 0xf8, "04d12cc46e6aa0fbbf9e7efbdddecbf10aa2adfeabb679a99dc8c564d8b021ff887345f312adc088ca48f47ee8de956c4fc5eb09b166388342adab3992450a1462a4d2150d10b1afa22aff2b568aa4bb4af61f00bfee0db5532a785122df8e932efd51b1eb3c38e6bc39b99e644de19f53767a52a10f4cae177194f76acef19da587eaef5318c435849ec9c9f3ece14405a1866792908332e68134dc6f0b2e6a311c6b2018019b9bb5bc61c6a31d3f3a218c981ac0e4a029d69d0430a618ab622646ad2d24f2b1e28a34f576fca6cc3b95fe47e393bd60138251f417eb5bf2316fad89d0b3901b970700a3aec2728a9ae6a9bfdcdf59afe6"}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x1b8, 0x20008014}], 0x5, 0x40810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000d40)=""/165, 0xa5}], 0x1, &(0x7f0000001480)=[{&(0x7f0000000e00)=""/152, 0x98}, {&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000001200)=""/237, 0xed}, {&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001400)=""/86, 0x56}], 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r4 = io_uring_setup(0x2495, 0x0) syz_io_uring_setup(0xe5, &(0x7f0000000640)={0x0, 0xec25, 0x4, 0x4, 0xc0000333, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x5b6d, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 2.013306503s ago: executing program 4 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = gettid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000180)={0x2000, 0x0, 0x20000001}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1}, 0x6}], 0x1, 0x100, 0x0) 1.626796215s ago: executing program 5 (id=1637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @pic={0x40, 0x4, 0x60, 0xc2, 0x7, 0x1, 0x5, 0x2, 0x60, 0x54, 0x0, 0x4, 0xf7, 0x4, 0x7, 0x64}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800007218000000020000000000000000000004000000000000000000000001000000000000"], 0x0, 0x32, 0x0, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x2000000, [{0xa6f, 0x3}, {0x6, 0x4}]}, 0x14, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x24000010}, 0xc000) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.562554104s ago: executing program 6 (id=1638): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@delnexthop={0x58, 0x69, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x48801}, 0x4044410) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) setsockopt$ax25_int(r10, 0x101, 0x2, &(0x7f00000028c0)=0xdbff, 0x4) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000003c000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000001140000001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x521281, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000010", @ANYRES16=r6, @ANYBLOB="020027bd7000fcdbdf255c00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900000000007500000008006b00f000000008006b005a00000008006b005a000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0xe26b45d49475f20e) 1.490341146s ago: executing program 0 (id=1639): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$can_j1939(r5, &(0x7f0000000300)={&(0x7f00000002c0)={0x1d, r4, 0x4, {0x2, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2404c040}, 0x4000080) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000680)=@newtaction={0xd8, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xc4, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x100, 0x6, 0x2, 0x7, 0x400}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xd8}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40048c4, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0xa, 0x1}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) copy_file_range(r8, 0x0, r9, 0x0, 0x7, 0x0) 1.38667402s ago: executing program 1 (id=1640): fstatfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() read(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume_offset', 0x149e82, 0x1) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.102500725s ago: executing program 6 (id=1641): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x100}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) read$char_usb(r6, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r6, &(0x7f0000000100)=""/67, 0x43) syz_usb_disconnect(r0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) inotify_init() epoll_create1(0x0) 0s ago: executing program 4 (id=1642): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T6005] usb 2-1: device descriptor read/8, error -71 [ 464.013678][ T30] audit: type=1400 audit(1757240931.974:2855): avc: denied { bind } for pid=10834 comm="syz.5.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 464.165043][T10871] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1256'. [ 464.236511][T10873] program syz.6.1254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.266751][ T5926] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 464.328064][ T6005] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 464.463021][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.471818][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.491702][ T6005] usb 2-1: device descriptor read/8, error -71 [ 464.517604][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 464.550792][T10883] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1257'. [ 464.574712][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 464.592598][ T2151] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 464.594808][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.645369][ T6005] usb usb2-port1: unable to enumerate USB device [ 464.665076][ T5926] usb 1-1: config 0 descriptor?? [ 464.686321][ T5926] usb 1-1: interface 1 not found [ 464.912473][T10860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.980394][ T2151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 465.005598][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 465.014930][ T2151] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 465.015059][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 465.062542][ T2151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.070569][ T2151] usb 7-1: Product: syz [ 465.119541][ T2151] usb 7-1: Manufacturer: syz [ 465.124163][ T2151] usb 7-1: SerialNumber: syz [ 465.140529][ T2151] usb 7-1: config 0 descriptor?? [ 466.877802][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 466.877817][ T30] audit: type=1400 audit(1757240936.034:2914): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 467.190643][ T5927] usb 1-1: USB disconnect, device number 18 [ 467.209367][ T30] audit: type=1400 audit(1757240936.352:2915): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 467.329147][ T30] audit: type=1400 audit(1757240936.455:2916): avc: denied { name_bind } for pid=10910 comm="syz.4.1261" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 467.559672][ T30] audit: type=1400 audit(1757240936.455:2917): avc: denied { node_bind } for pid=10910 comm="syz.4.1261" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 467.741857][ T30] audit: type=1400 audit(1757240936.502:2918): avc: denied { create } for pid=10913 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.791122][ T30] audit: type=1400 audit(1757240936.502:2919): avc: denied { map_read map_write } for pid=10913 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.063287][ T30] audit: type=1400 audit(1757240936.548:2920): avc: denied { mount } for pid=10913 comm="syz.1.1263" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 468.169755][ T30] audit: type=1400 audit(1757240936.567:2921): avc: denied { execmem } for pid=10913 comm="syz.1.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 468.304188][ T30] audit: type=1400 audit(1757240936.614:2922): avc: denied { read write } for pid=10916 comm="syz.5.1264" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.509446][ T30] audit: type=1400 audit(1757240936.614:2923): avc: denied { open } for pid=10916 comm="syz.5.1264" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.860887][T10949] netlink: 'syz.4.1269': attribute type 2 has an invalid length. [ 468.868843][T10949] netlink: 'syz.4.1269': attribute type 11 has an invalid length. [ 468.876674][T10949] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1269'. [ 469.500916][ T5912] usb 7-1: USB disconnect, device number 2 [ 471.029465][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 471.079070][T10979] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1279'. [ 471.295287][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 471.372625][ T9] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 471.414070][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.543938][T10987] netlink: 'syz.4.1281': attribute type 2 has an invalid length. [ 471.551961][T10987] netlink: 'syz.4.1281': attribute type 11 has an invalid length. [ 471.559791][T10987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1281'. [ 471.798707][ T9] usb 7-1: config 0 descriptor?? [ 472.110881][ T5912] usb 7-1: USB disconnect, device number 3 [ 472.432885][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 472.432901][ T30] audit: type=1400 audit(1757240941.235:2965): avc: denied { getopt } for pid=10993 comm="syz.0.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 472.501454][ T30] audit: type=1400 audit(1757240941.291:2966): avc: denied { read } for pid=10993 comm="syz.0.1283" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.526019][ T30] audit: type=1400 audit(1757240941.291:2967): avc: denied { open } for pid=10993 comm="syz.0.1283" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.550134][ T30] audit: type=1400 audit(1757240941.300:2968): avc: denied { ioctl } for pid=10993 comm="syz.0.1283" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 472.731565][ T30] audit: type=1400 audit(1757240941.515:2969): avc: denied { create } for pid=10998 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 473.034304][ T30] audit: type=1400 audit(1757240941.515:2970): avc: denied { write } for pid=10998 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 473.069067][ T30] audit: type=1400 audit(1757240941.805:2971): avc: denied { ioctl } for pid=11005 comm="syz.0.1287" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.098136][ T30] audit: type=1400 audit(1757240941.862:2972): avc: denied { block_suspend } for pid=11005 comm="syz.0.1287" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 473.144663][ T30] audit: type=1400 audit(1757240941.899:2973): avc: denied { write } for pid=11005 comm="syz.0.1287" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 473.275795][ T30] audit: type=1400 audit(1757240942.021:2974): avc: denied { setopt } for pid=11012 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 473.449069][ T5926] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 473.583956][T11026] netlink: 'syz.0.1292': attribute type 2 has an invalid length. [ 473.591738][T11026] netlink: 'syz.0.1292': attribute type 11 has an invalid length. [ 473.599631][T11026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1292'. [ 473.807076][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 473.833087][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 473.863344][ T5926] usb 5-1: config 2 has an invalid interface number: 37 but max is 0 [ 473.881031][ T5926] usb 5-1: config 2 has no interface number 0 [ 473.892667][ T5926] usb 5-1: config 2 interface 37 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 473.923687][ T5926] usb 5-1: config 2 interface 37 altsetting 5 endpoint 0xC has invalid maxpacket 959, setting to 64 [ 473.937189][ T5926] usb 5-1: config 2 interface 37 has no altsetting 0 [ 474.033408][ T5926] usb 5-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=6d.58 [ 474.205167][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.220626][ T5926] usb 5-1: Product: syz [ 474.232255][ T5926] usb 5-1: Manufacturer: syz [ 474.294677][ T5926] usb 5-1: SerialNumber: syz [ 474.341592][ T6005] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 474.416456][ T5912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 474.546789][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.587304][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.647480][ T5926] usb 5-1: USB disconnect, device number 30 [ 474.675657][ T6005] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.688364][ T6005] usb 1-1: config 0 has no interface number 0 [ 474.697992][ T6005] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 474.709270][ T5912] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.731335][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.744739][ T6005] usb 1-1: Product: syz [ 474.751097][ T5912] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 474.760331][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.768483][ T5912] usb 7-1: Product: syz [ 474.773198][ T6005] usb 1-1: Manufacturer: syz [ 474.777941][ T5912] usb 7-1: Manufacturer: syz [ 474.782774][ T6005] usb 1-1: SerialNumber: syz [ 474.787751][ T5912] usb 7-1: SerialNumber: syz [ 474.798439][ T6005] usb 1-1: config 0 descriptor?? [ 474.844621][ T5912] usb 7-1: config 0 descriptor?? [ 475.043336][ T5912] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 475.376861][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 475.418827][ T5860] Bluetooth: hci2: unexpected event 0x20 length: 8 > 7 [ 476.170004][ T6005] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 478.339887][T11076] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1305'. [ 478.348848][T11076] nbd: must specify at least one socket [ 478.386711][ T9] usb 1-1: USB disconnect, device number 19 [ 478.469004][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 478.469020][ T30] audit: type=1400 audit(1757240946.885:2989): avc: denied { mount } for pid=11080 comm="syz.1.1306" name="/" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 478.515556][ T5926] usb 7-1: USB disconnect, device number 4 [ 478.570857][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 478.599064][ T30] audit: type=1400 audit(1757240946.969:2990): avc: denied { read write } for pid=11080 comm="syz.1.1306" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 478.792185][ T30] audit: type=1400 audit(1757240946.969:2991): avc: denied { ioctl open } for pid=11080 comm="syz.1.1306" path="/35/file0" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 478.953021][ T30] audit: type=1800 audit(1757240947.006:2992): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1306" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 478.981068][ T30] audit: type=1400 audit(1757240947.137:2993): avc: denied { unmount } for pid=9928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 479.312834][ T92] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 479.423412][ T30] audit: type=1400 audit(1757240947.362:2994): avc: denied { create } for pid=11087 comm="syz.6.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.443516][ T30] audit: type=1400 audit(1757240947.362:2995): avc: denied { ioctl } for pid=11087 comm="syz.6.1309" path="socket:[30328]" dev="sockfs" ino=30328 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 479.996148][ T30] audit: type=1400 audit(1757240948.101:2996): avc: denied { setattr } for pid=11077 comm="syz.0.1307" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 480.078440][T11101] FAULT_INJECTION: forcing a failure. [ 480.078440][T11101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.091860][T11101] CPU: 1 UID: 0 PID: 11101 Comm: syz.6.1312 Not tainted syzkaller #0 PREEMPT(full) [ 480.091891][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.091902][T11101] Call Trace: [ 480.091907][T11101] [ 480.091914][T11101] dump_stack_lvl+0x16c/0x1f0 [ 480.091943][T11101] should_fail_ex+0x512/0x640 [ 480.091971][T11101] _copy_to_user+0x32/0xd0 [ 480.091999][T11101] simple_read_from_buffer+0xcb/0x170 [ 480.092019][T11101] proc_fail_nth_read+0x197/0x240 [ 480.092042][T11101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.092064][T11101] ? rw_verify_area+0xcf/0x6c0 [ 480.092090][T11101] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.092110][T11101] vfs_read+0x1e4/0xcf0 [ 480.092132][T11101] ? __pfx_vfs_read+0x10/0x10 [ 480.092148][T11101] ? irqentry_exit+0x3b/0x90 [ 480.092169][T11101] ? lockdep_hardirqs_on+0x7c/0x110 [ 480.092205][T11101] ksys_read+0x12a/0x250 [ 480.092221][T11101] ? __pfx_ksys_read+0x10/0x10 [ 480.092246][T11101] do_syscall_64+0xcd/0x4c0 [ 480.092270][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.092288][T11101] RIP: 0033:0x7f448978d5fc [ 480.092301][T11101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 480.092318][T11101] RSP: 002b:00007f44879d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.092334][T11101] RAX: ffffffffffffffda RBX: 00007f44899c6180 RCX: 00007f448978d5fc [ 480.092344][T11101] RDX: 000000000000000f RSI: 00007f44879d50a0 RDI: 0000000000000006 [ 480.092354][T11101] RBP: 00007f44879d5090 R08: 0000000000000000 R09: 0000000000000000 [ 480.092363][T11101] R10: 0000200000412ff8 R11: 0000000000000246 R12: 0000000000000001 [ 480.092373][T11101] R13: 00007f44899c6218 R14: 00007f44899c6180 R15: 00007ffce539d378 [ 480.092397][T11101] [ 480.272335][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 480.324377][ T92] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.566842][ T92] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 480.584889][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.592900][ T92] usb 6-1: Product: syz [ 480.600717][ T92] usb 6-1: Manufacturer: syz [ 480.605329][ T92] usb 6-1: SerialNumber: syz [ 481.033760][ T92] usb 6-1: config 0 descriptor?? [ 481.044760][ T92] kobil_sct 6-1:0.0: required endpoints missing [ 481.724944][ T30] audit: type=1400 audit(1757240948.929:2997): avc: denied { mount } for pid=11119 comm="syz.0.1317" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 481.770418][ T30] audit: type=1400 audit(1757240948.929:2998): avc: denied { search } for pid=11119 comm="syz.0.1317" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 482.112905][T11131] 9pnet_fd: Insufficient options for proto=fd [ 482.329018][ T92] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 482.397598][ T5912] usb 6-1: USB disconnect, device number 4 [ 482.574757][ T92] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.601355][ T92] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.630525][ T92] usb 5-1: config 0 has no interface number 0 [ 482.649051][ T92] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.671874][ T92] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 482.736264][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.032714][T11139] o2cb: This node has not been configured. [ 483.039106][T11139] o2cb: Cluster check failed. Fix errors before retrying. [ 483.047704][T11139] (syz.1.1323,11139,0):user_dlm_register:674 ERROR: status = -22 [ 483.055575][T11139] (syz.1.1323,11139,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 483.125639][ T92] usb 5-1: config 0 descriptor?? [ 483.138624][ T92] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 483.303566][T11145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1322'. [ 483.325834][T11148] 9pnet_fd: Insufficient options for proto=fd [ 483.347905][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1324'. [ 483.425848][T11148] geneve2: left promiscuous mode [ 483.435633][T11148] bridge0: port 3(geneve2) entered disabled state [ 483.605655][T11148] bridge_slave_1: left allmulticast mode [ 483.611841][T11148] bridge_slave_1: left promiscuous mode [ 483.617796][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.998811][T11148] bridge_slave_0: left allmulticast mode [ 484.005954][T11148] bridge_slave_0: left promiscuous mode [ 484.011764][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.134145][ T5912] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 484.340363][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 484.349914][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.363114][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.414825][T11163] smc: net device bond0 applied user defined pnetid SYZ0 [ 484.445606][ T5912] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.454687][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.463208][ T5912] usb 6-1: Product: 烎述퉥䭣䪋䬳⭸⭬ì½â‰‹ëƒµäŸ—휛꩓짶첫﨔崭奼쟺ãˆà¿¥â©ç¦ƒîº¡ìžªâŠìƒê綳墽㊗»疟ê´ã閿㦦⼰æ’á°ïŸãœŠë¿Žàª«èŒ¥ã˜¯é¨¼î¿ƒçŽ©î’¡æ¢‡è¡½êš£ìª‹ç…§ã—Ự覇譽ê£ï™²îš´âµ [ 484.495145][ T5912] usb 6-1: SerialNumber: 킫ෳ肓슪ᭈâ‹ê¨­â™¶î¦†ì¥£à¥Žé¶›Ô¡à¶¢çž‚ê‰î¼‰á•±é±«ãŸ¡îœ“䒷뎺稽霨봲æ·ê¶žçŽºé®‰íž‚皥ã·é¢¤ïœ±î¤£æ”¬ë¬°âœ˜ã¨ƒî…—ëš [ 484.524017][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 484.524034][ T30] audit: type=1400 audit(1757240951.548:3040): avc: denied { mounton } for pid=11164 comm="syz.1.1329" path=2F34322FE91F7189591E9233614B dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 484.555519][ T30] audit: type=1400 audit(1757240951.548:3041): avc: denied { read } for pid=11166 comm="syz.6.1330" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.583216][ T30] audit: type=1400 audit(1757240951.548:3042): avc: denied { open } for pid=11166 comm="syz.6.1330" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.609764][ T30] audit: type=1400 audit(1757240951.548:3043): avc: denied { ioctl } for pid=11166 comm="syz.6.1330" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.639422][ T30] audit: type=1400 audit(1757240951.557:3044): avc: denied { set_context_mgr } for pid=11166 comm="syz.6.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 484.652960][T11171] bridge1: entered allmulticast mode [ 484.674480][ T30] audit: type=1400 audit(1757240951.688:3045): avc: denied { create } for pid=11170 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 484.695308][ T30] audit: type=1400 audit(1757240951.688:3046): avc: denied { setopt } for pid=11170 comm="syz.1.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 484.784617][ T30] audit: type=1400 audit(1757240951.791:3047): avc: denied { ioctl } for pid=11173 comm="syz.1.1332" path="socket:[30872]" dev="sockfs" ino=30872 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 484.812916][ T30] audit: type=1400 audit(1757240951.791:3048): avc: denied { create } for pid=11173 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 484.834308][ T30] audit: type=1400 audit(1757240951.791:3049): avc: denied { connect } for pid=11173 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 484.988705][ T2151] usb 5-1: USB disconnect, device number 31 [ 485.013305][ T5912] usb 6-1: 0:2 : does not exist [ 485.052986][ T5912] usb 6-1: USB disconnect, device number 5 [ 485.105547][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.267992][T11184] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 485.294190][T11184] CIFS mount error: No usable UNC path provided in device string! [ 485.294190][T11184] [ 485.304369][T11184] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 486.694510][ T5926] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 487.165954][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 487.260477][ T5926] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 487.341700][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.565824][ T5926] usb 2-1: config 0 has no interface number 0 [ 487.586087][ T5926] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 487.600061][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.613896][ T5926] usb 2-1: Product: syz [ 487.618206][ T5926] usb 2-1: Manufacturer: syz [ 487.625119][ T5926] usb 2-1: SerialNumber: syz [ 487.645569][ T5926] usb 2-1: config 0 descriptor?? [ 487.674205][ T5926] asix 2-1:0.251: probe with driver asix failed with error -22 [ 487.804682][T11130] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.977716][ T5960] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 488.111565][T11188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.132732][T11188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.152954][ T5926] usb 2-1: USB disconnect, device number 28 [ 488.207072][T11130] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.287214][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.314313][ T5960] usb 5-1: config 0 has no interface number 0 [ 488.353713][ T5960] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 488.378402][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.398897][T11130] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.421119][ T5960] usb 5-1: Product: syz [ 488.425396][ T5960] usb 5-1: Manufacturer: syz [ 488.446969][ T5960] usb 5-1: SerialNumber: syz [ 488.463035][ T5960] usb 5-1: config 0 descriptor?? [ 488.766531][T11130] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.945183][ T5860] Bluetooth: Frame is too long (len 64, expected len 16) [ 489.089040][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.099947][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.109293][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.120862][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.128657][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.286370][T11235] ALSA: mixer_oss: invalid OSS volume 'DI' [ 489.601526][ T5960] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 489.631462][ T5866] Bluetooth: hci0: unexpected event 0x20 length: 8 > 7 [ 489.814086][T11238] fuse: Bad value for 'fd' [ 489.899096][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 489.899111][ T30] audit: type=1400 audit(1757240956.580:3108): avc: denied { read } for pid=5519 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 490.161911][ T30] audit: type=1400 audit(1757240956.636:3109): avc: denied { write } for pid=11237 comm="syz.1.1352" name="file2" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 490.245569][ T30] audit: type=1400 audit(1757240956.636:3110): avc: denied { open } for pid=11237 comm="syz.1.1352" path="/49/file2" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 491.370194][ T5866] Bluetooth: hci2: command tx timeout [ 491.468402][ T30] audit: type=1400 audit(1757240956.636:3111): avc: denied { ioctl } for pid=11237 comm="syz.1.1352" path="/49/file2" dev="tmpfs" ino=301 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 491.562376][ T30] audit: type=1400 audit(1757240958.077:3112): avc: denied { module_request } for pid=11229 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 491.831447][ T30] audit: type=1400 audit(1757240958.376:3113): avc: denied { write } for pid=11264 comm="syz.6.1358" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 492.847140][ T30] audit: type=1400 audit(1757240958.442:3114): avc: denied { sys_module } for pid=11254 comm="syz.5.1356" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 492.933814][ T30] audit: type=1400 audit(1757240959.405:3115): avc: denied { setopt } for pid=11254 comm="syz.5.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.395631][ T5960] usb 5-1: USB disconnect, device number 32 [ 493.619481][ T5866] Bluetooth: hci2: command tx timeout [ 493.842902][ T5960] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 493.920226][T11130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.930696][T11130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.940682][T11130] bond0 (unregistering): Released all slaves [ 494.021189][T11130] bond1 (unregistering): Released all slaves [ 494.029019][ T5960] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.037304][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.047810][ T5960] usb 5-1: config 0 has no interface number 0 [ 494.054244][ T5960] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 494.058786][T11229] chnl_net:caif_netlink_parms(): no params data found [ 494.067619][ T5960] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 494.084224][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.104482][ T5960] usb 5-1: config 0 descriptor?? [ 494.131537][ T5960] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 494.258706][ T30] audit: type=1400 audit(1757240960.659:3116): avc: denied { append } for pid=11290 comm="syz.6.1361" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 494.299255][T11291] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 494.342363][ T30] audit: type=1400 audit(1757240960.687:3117): avc: denied { mounton } for pid=11290 comm="syz.6.1361" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 495.883198][ T5866] Bluetooth: hci2: command tx timeout [ 495.915920][T11130] hsr_slave_0: left promiscuous mode [ 495.935131][T11130] hsr_slave_1: left promiscuous mode [ 495.941331][T11318] overlayfs: missing 'lowerdir' [ 495.952149][T11130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.965220][T11130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.001766][T11130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.022239][T11130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.227580][ T5926] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 496.405081][T11130] veth1_macvtap: left promiscuous mode [ 496.410727][T11130] veth0_macvtap: left promiscuous mode [ 496.416338][T11130] veth1_vlan: left promiscuous mode [ 496.433835][T11130] veth0_vlan: left promiscuous mode [ 496.503401][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 496.562342][ T30] audit: type=1400 audit(1757240962.791:3118): avc: denied { create } for pid=11315 comm="syz.5.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.920382][ T5926] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 496.932457][ T5926] usb 2-1: config 0 has no interface number 0 [ 496.941970][ T30] audit: type=1400 audit(1757240962.801:3119): avc: denied { connect } for pid=11315 comm="syz.5.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 496.970469][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 496.981716][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 496.994147][ T5926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 497.014102][ T9] usb 5-1: USB disconnect, device number 33 [ 497.046816][ T5926] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 497.084163][ T5926] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.115033][ T5926] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 497.126531][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.189210][ T5926] usb 2-1: config 0 descriptor?? [ 497.256205][T11130] pim6reg (unregistering): left allmulticast mode [ 497.704557][T11342] Invalid ELF header magic: != ELF [ 497.717152][ T30] audit: type=1400 audit(1757240963.876:3120): avc: denied { module_load } for pid=11330 comm="syz.6.1367" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 497.744368][ T5926] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 497.867663][T11311] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -90 [ 497.879389][ T24] usb 2-1: USB disconnect, device number 29 [ 497.892809][ T24] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 497.987205][ T30] audit: type=1400 audit(1757240964.054:3121): avc: denied { write } for pid=11330 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 498.008657][ T30] audit: type=1400 audit(1757240964.064:3122): avc: denied { write } for pid=11330 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.029526][ T30] audit: type=1400 audit(1757240964.064:3123): avc: denied { name_connect } for pid=11330 comm="syz.6.1367" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 498.070496][ T5866] Bluetooth: hci2: command tx timeout [ 498.135239][ T30] audit: type=1400 audit(1757240964.260:3124): avc: denied { bind } for pid=11330 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.233123][ T30] audit: type=1400 audit(1757240964.260:3125): avc: denied { name_bind } for pid=11330 comm="syz.6.1367" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 498.375272][ T30] audit: type=1400 audit(1757240964.260:3126): avc: denied { node_bind } for pid=11330 comm="syz.6.1367" saddr=fc02::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 498.385502][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 499.094519][T11130] team0 (unregistering): Port device team_slave_1 removed [ 499.321370][T11130] team0 (unregistering): Port device team_slave_0 removed [ 499.489886][ T30] audit: type=1400 audit(1757240965.551:3127): avc: denied { create } for pid=11363 comm="syz.1.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.120936][T11342] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 500.397001][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.404681][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.421018][T11229] bridge_slave_0: entered allmulticast mode [ 500.654703][T11229] bridge_slave_0: entered promiscuous mode [ 500.685045][T11369] netlink: 'syz.4.1375': attribute type 21 has an invalid length. [ 500.705598][T11369] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 500.714789][T11369] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.1375'. [ 501.121551][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 501.306873][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.315115][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.330049][ T24] usb 2-1: config 0 has no interface number 0 [ 501.384677][ T24] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 501.412572][ T24] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 501.426299][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.492957][ T24] usb 2-1: config 0 descriptor?? [ 501.567122][ T24] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 502.203945][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 502.203960][ T30] audit: type=1326 audit(1757240968.086:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.265490][ T30] audit: type=1326 audit(1757240968.114:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.299331][ T30] audit: type=1326 audit(1757240968.114:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.346670][ T30] audit: type=1326 audit(1757240968.114:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.370541][ T30] audit: type=1326 audit(1757240968.114:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.421960][ T30] audit: type=1326 audit(1757240968.114:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.542838][ T30] audit: type=1326 audit(1757240968.114:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.601949][ T30] audit: type=1326 audit(1757240968.133:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.658181][ T30] audit: type=1326 audit(1757240968.133:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 502.685225][ T30] audit: type=1326 audit(1757240968.133:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11390 comm="syz.5.1381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf0d98ebe9 code=0x7ffc0000 [ 503.381659][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.389087][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.396284][T11229] bridge_slave_1: entered allmulticast mode [ 503.403654][T11229] bridge_slave_1: entered promiscuous mode [ 503.478238][T11395] pim6reg: entered allmulticast mode [ 503.530764][T11229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.652120][T11229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.764044][T11229] team0: Port device team_slave_0 added [ 503.790058][T11229] team0: Port device team_slave_1 added [ 504.724548][T11229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.731697][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.761443][T11229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.773836][T11229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.782120][T11229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.813571][T11229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.879468][ T92] usb 2-1: USB disconnect, device number 30 [ 505.044455][T11229] hsr_slave_0: entered promiscuous mode [ 505.476848][T11229] hsr_slave_1: entered promiscuous mode [ 505.483394][T11229] debugfs: 'hsr0' already exists in 'hsr' [ 505.490366][T11229] Cannot create hsr debugfs directory [ 505.636403][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1386'. [ 505.696715][T11420] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1386'. [ 506.304654][T11432] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 506.311165][T11432] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 506.323555][T11432] vhci_hcd vhci_hcd.0: Device attached [ 506.609118][ T5866] Bluetooth: Frame is too long (len 64, expected len 16) [ 506.787831][ T92] usb 36-1: SetAddress Request (2) to port 0 [ 506.793975][ T92] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 506.852013][ T5912] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 506.870632][T11435] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 506.877827][T11434] vhci_hcd: connection closed [ 506.885245][T11130] vhci_hcd: stop threads [ 506.910103][T11130] vhci_hcd: release socket [ 506.935760][T11130] vhci_hcd: disconnect device [ 507.181260][T11229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.211003][T11229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.251308][T11229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.276278][T11229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.577853][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 507.577868][ T30] audit: type=1400 audit(1757240973.109:3157): avc: denied { write } for pid=11453 comm="syz.5.1391" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 508.185132][T11229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.239291][T11229] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.246606][ T5960] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 508.269032][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.276186][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.374214][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.381386][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.433986][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 508.449513][ T5960] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 508.476984][ T5960] usb 2-1: config 0 has no interface number 0 [ 508.483142][ T5960] usb 2-1: config 0 interface 196 has no altsetting 0 [ 508.496706][T11229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 508.507910][T11229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.525656][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 508.535616][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.588651][ T5960] usb 2-1: Product: syz [ 508.636456][ T5960] usb 2-1: Manufacturer: syz [ 508.644270][ T5960] usb 2-1: SerialNumber: syz [ 508.656949][ T5960] usb 2-1: config 0 descriptor?? [ 509.428595][ T30] audit: type=1400 audit(1757240974.231:3158): avc: denied { bind } for pid=11477 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.456820][ T5960] ipheth 2-1:0.196: Unable to find endpoints [ 509.492299][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 509.676327][ T30] audit: type=1400 audit(1757240974.231:3159): avc: denied { write } for pid=11477 comm="syz.5.1393" path="socket:[31266]" dev="sockfs" ino=31266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.704482][ T5960] usb 2-1: USB disconnect, device number 31 [ 509.804686][ T30] audit: type=1400 audit(1757240974.241:3160): avc: denied { sqpoll } for pid=11477 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 509.920465][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.954229][ T24] usb 7-1: config 0 has no interface number 0 [ 509.997551][ T24] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 510.010458][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.051537][ T24] usb 7-1: Product: syz [ 510.055737][ T24] usb 7-1: Manufacturer: syz [ 510.064537][ T30] audit: type=1400 audit(1757240975.419:3161): avc: denied { getopt } for pid=11496 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 510.085008][ T5866] Bluetooth: hci0: unexpected event for opcode 0x200a [ 510.114947][ T24] usb 7-1: SerialNumber: syz [ 510.129608][ T24] usb 7-1: config 0 descriptor?? [ 510.191496][T11229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.318773][T11229] veth0_vlan: entered promiscuous mode [ 510.337090][ T5927] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 510.368334][T11229] veth1_vlan: entered promiscuous mode [ 510.512530][T11229] veth0_macvtap: entered promiscuous mode [ 510.524864][T11229] veth1_macvtap: entered promiscuous mode [ 510.532498][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 510.543903][ T5927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 510.568891][ T5927] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 510.590878][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 510.612989][ T5866] Bluetooth: hci1: unexpected event 0x20 length: 8 > 7 [ 510.616941][T11229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.677575][ T5927] usb 2-1: Product: syz [ 510.711077][ T5927] usb 2-1: Manufacturer: syz [ 510.723047][ T5927] usb 2-1: SerialNumber: syz [ 510.739416][ T5927] usb 2-1: config 0 descriptor?? [ 510.754142][T11504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 510.775667][T11229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.845321][ T3649] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.944758][ T3649] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.970155][ T1164] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.138302][T11495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.334749][ T24] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 511.798225][T11494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.876301][T11494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.975859][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 512.158211][T11490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.273411][ T92] usb 36-1: device descriptor read/8, error -110 [ 512.299713][T11490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.678182][ T30] audit: type=1400 audit(1757240977.823:3162): avc: denied { mounton } for pid=11229 comm="syz-executor" path="/root/syzkaller.eO5L4N/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 512.818081][ T92] usb usb36-port1: attempt power cycle [ 512.978786][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.024275][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.051526][ T30] audit: type=1400 audit(1757240977.823:3163): avc: denied { mount } for pid=11229 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 513.101603][ T5912] usb 7-1: USB disconnect, device number 5 [ 513.169510][ T30] audit: type=1400 audit(1757240977.842:3164): avc: denied { mount } for pid=11229 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 513.225119][ T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 513.259848][ T5926] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 513.389929][ T5899] usb 2-1: USB disconnect, device number 32 [ 513.400678][ T30] audit: type=1400 audit(1757240977.861:3165): avc: denied { mounton } for pid=11229 comm="syz-executor" path="/root/syzkaller.eO5L4N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 513.400724][ T30] audit: type=1400 audit(1757240977.861:3166): avc: denied { mounton } for pid=11229 comm="syz-executor" path="/root/syzkaller.eO5L4N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 513.402760][ T30] audit: type=1400 audit(1757240977.945:3167): avc: denied { mounton } for pid=11229 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 513.402800][ T30] audit: type=1400 audit(1757240977.982:3168): avc: denied { mounton } for pid=11229 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 513.532337][ T10] usb 1-1: device descriptor read/64, error -71 [ 513.555897][ T92] usb usb36-port1: unable to enumerate USB device [ 513.572801][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 513.573391][T11556] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1403'. [ 513.575878][ T5926] usb 6-1: config 8 has an invalid interface number: 49 but max is 3 [ 513.575902][ T5926] usb 6-1: config 8 has an invalid interface number: 215 but max is 3 [ 513.575920][ T5926] usb 6-1: config 8 has an invalid interface number: 131 but max is 3 [ 513.575934][ T5926] usb 6-1: config 8 has an invalid interface number: 116 but max is 3 [ 513.575950][ T5926] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 513.575963][ T5926] usb 6-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 513.575978][ T5926] usb 6-1: config 8 has no interface number 0 [ 513.576442][ T5926] usb 6-1: config 8 has no interface number 2 [ 513.576459][ T5926] usb 6-1: config 8 has no interface number 3 [ 513.576474][ T5926] usb 6-1: config 8 has no interface number 4 [ 513.576533][ T5926] usb 6-1: config 8 interface 49 altsetting 8 endpoint 0x4 has invalid wMaxPacketSize 0 [ 513.576554][ T5926] usb 6-1: config 8 interface 49 altsetting 8 bulk endpoint 0x4 has invalid maxpacket 0 [ 513.576573][ T5926] usb 6-1: config 8 interface 49 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 513.576593][ T5926] usb 6-1: config 8 interface 49 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 513.576621][ T5926] usb 6-1: config 8 interface 49 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 513.576641][ T5926] usb 6-1: config 8 interface 49 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 513.576662][ T5926] usb 6-1: config 8 interface 49 altsetting 8 endpoint 0xB has invalid maxpacket 943, setting to 64 [ 513.576695][ T5926] usb 6-1: config 8 interface 215 altsetting 1 has an endpoint descriptor with address 0x16, changing to 0x6 [ 513.576719][ T5926] usb 6-1: config 8 interface 215 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 513.576737][ T5926] usb 6-1: config 8 interface 215 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 513.576754][ T5926] usb 6-1: config 8 interface 215 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 513.576781][ T5926] usb 6-1: config 8 interface 215 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 513.576801][ T5926] usb 6-1: config 8 interface 215 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 513.576825][ T5926] usb 6-1: too many endpoints for config 8 interface 131 altsetting 157: 184, using maximum allowed: 30 [ 513.576853][ T5926] usb 6-1: config 8 interface 131 altsetting 157 endpoint 0x1 has invalid maxpacket 1576, setting to 1024 [ 513.576874][ T5926] usb 6-1: config 8 interface 131 altsetting 157 has an invalid descriptor for endpoint zero, skipping [ 513.576893][ T5926] usb 6-1: config 8 interface 131 altsetting 157 endpoint 0x7 has invalid maxpacket 2015, setting to 64 [ 513.576913][ T5926] usb 6-1: config 8 interface 131 altsetting 157 has a duplicate endpoint with address 0x5, skipping [ 513.576929][ T5926] usb 6-1: config 8 interface 131 altsetting 157 has a duplicate endpoint with address 0x2, skipping [ 513.576945][ T5926] usb 6-1: config 8 interface 131 altsetting 157 has 5 endpoint descriptors, different from the interface descriptor's value: 184 [ 513.576978][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 513.576998][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has an endpoint descriptor with address 0x3A, changing to 0xA [ 513.577021][ T5926] usb 6-1: config 8 interface 116 altsetting 4 endpoint 0xA has invalid maxpacket 32949, setting to 1024 [ 513.577046][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 513.577067][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 513.577088][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 513.577107][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 513.577126][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 513.577146][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 513.577165][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 513.577183][ T5926] usb 6-1: config 8 interface 116 altsetting 4 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 513.577215][ T5926] usb 6-1: config 8 interface 1 altsetting 63 has a duplicate endpoint with address 0x1, skipping [ 513.577234][ T5926] usb 6-1: config 8 interface 1 altsetting 63 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 513.577254][ T5926] usb 6-1: config 8 interface 49 has no altsetting 0 [ 513.577270][ T5926] usb 6-1: config 8 interface 215 has no altsetting 0 [ 513.577286][ T5926] usb 6-1: config 8 interface 131 has no altsetting 0 [ 513.577302][ T5926] usb 6-1: config 8 interface 116 has no altsetting 0 [ 513.577317][ T5926] usb 6-1: config 8 interface 1 has no altsetting 0 [ 513.601931][ T5926] usb 6-1: New USB device found, idVendor=13d3, idProduct=3273, bcdDevice=6c.35 [ 514.167539][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.183745][ T5926] usb 6-1: Product: syz [ 514.192337][ T5926] usb 6-1: Manufacturer: syz [ 514.202572][ T5926] usb 6-1: SerialNumber: syz [ 514.314278][ T10] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 514.526557][ T10] usb 1-1: device descriptor read/64, error -71 [ 514.717749][ T10] usb usb1-port1: attempt power cycle [ 514.815083][T11551] sctp: [Deprecated]: syz.6.1401 (pid 11551) Use of int in maxseg socket option. [ 514.815083][T11551] Use struct sctp_assoc_value instead [ 514.856591][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.871444][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.879430][ T30] audit: type=1400 audit(1757240979.937:3169): avc: denied { bind } for pid=11566 comm="syz.1.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 514.987399][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.017550][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.126441][ T10] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 515.145519][ T5926] usb 6-1: USB disconnect, device number 6 [ 515.152126][ T10] usb 1-1: device descriptor read/8, error -71 [ 515.425683][ T10] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 515.461231][ T10] usb 1-1: device descriptor read/8, error -71 [ 515.599991][ T10] usb usb1-port1: unable to enumerate USB device [ 516.026359][ T30] audit: type=1400 audit(1757240980.966:3170): avc: denied { write } for pid=11595 comm="syz.6.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 516.248785][ T5926] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 516.501208][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 516.618198][ T5926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.681873][T11607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1411'. [ 516.691042][ T5926] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 516.719880][ T5926] usb 7-1: config 1 has no interface number 1 [ 516.760338][ T5926] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.867719][ T5926] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.904130][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.921265][ T5926] usb 7-1: Product: syz [ 516.932733][ T5926] usb 7-1: Manufacturer: syz [ 516.942441][ T5926] usb 7-1: SerialNumber: syz [ 517.234016][ T5926] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 517.253470][ T5926] usb 7-1: 2:1 : unsupported format bits 0x80 [ 517.454635][ T5926] usb 7-1: USB disconnect, device number 6 [ 518.699167][T11632] netlink: 'syz.4.1417': attribute type 4 has an invalid length. [ 518.703258][ T30] audit: type=1400 audit(1757240982.406:3171): avc: denied { lock } for pid=11623 comm="syz.6.1415" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 518.741675][T11632] netlink: 'syz.4.1417': attribute type 3 has an invalid length. [ 518.749428][T11632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1417'. [ 519.315150][ T30] audit: type=1400 audit(1757240982.518:3172): avc: denied { read write } for pid=11630 comm="syz.4.1417" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 519.360399][ T30] audit: type=1400 audit(1757240982.518:3173): avc: denied { open } for pid=11630 comm="syz.4.1417" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 519.384697][ T30] audit: type=1400 audit(1757240982.621:3174): avc: denied { ioctl } for pid=11630 comm="syz.4.1417" path="socket:[33047]" dev="sockfs" ino=33047 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 519.471389][ T5926] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 520.902919][ T30] audit: type=1400 audit(1757240984.146:3175): avc: denied { write } for pid=11649 comm="syz.5.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 520.964655][ T30] audit: type=1400 audit(1757240984.146:3176): avc: denied { nlmsg_write } for pid=11649 comm="syz.5.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 521.038167][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 521.044902][ T5926] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 521.053754][ T5926] usb 5-1: config 1 has no interface number 0 [ 521.072967][T11656] netlink: 'syz.1.1420': attribute type 2 has an invalid length. [ 521.080721][T11656] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1420'. [ 521.162093][ T5926] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 521.210821][ T5926] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 521.227769][T11661] netlink: 'syz.1.1423': attribute type 21 has an invalid length. [ 521.283672][ T5926] usb 5-1: config 1 interface 105 has no altsetting 0 [ 521.341270][ T5926] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08 [ 521.350753][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.367289][ T5926] usb 5-1: Product: syz [ 521.380304][ T5926] usb 5-1: Manufacturer: syz [ 521.396570][ T5926] usb 5-1: SerialNumber: syz [ 521.415231][ T5860] Bluetooth: hci5: command 0x0406 tx timeout [ 521.422838][T11632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.430728][T11632] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.660242][T11633] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.667547][T11633] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.851447][ T30] audit: type=1400 audit(1757240985.465:3177): avc: denied { execute } for pid=11669 comm="syz.6.1425" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 521.893418][ T5960] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 521.901936][ T5926] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 521.923980][ T5926] aqc111 5-1:1.105: probe with driver aqc111 failed with error -32 [ 522.085916][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 522.203897][ T5960] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 522.213581][ T5960] usb 2-1: config 8 has no interface number 0 [ 522.220089][ T5960] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 522.232582][ T5960] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 522.242674][ T5960] usb 2-1: config 8 interface 39 has no altsetting 0 [ 522.251725][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 522.310298][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 522.365531][T11677] lo speed is unknown, defaulting to 1000 [ 522.371985][T11677] lo speed is unknown, defaulting to 1000 [ 522.390361][T11677] lo speed is unknown, defaulting to 1000 [ 522.421756][T11677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 522.475527][T11677] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 522.634507][T11677] lo speed is unknown, defaulting to 1000 [ 522.642160][T11677] lo speed is unknown, defaulting to 1000 [ 522.648661][T11677] lo speed is unknown, defaulting to 1000 [ 522.656206][T11677] lo speed is unknown, defaulting to 1000 [ 522.662576][T11677] lo speed is unknown, defaulting to 1000 [ 522.663186][ T30] audit: type=1400 audit(1757240985.933:3178): avc: denied { setopt } for pid=11674 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 522.670476][T11677] lo speed is unknown, defaulting to 1000 [ 522.716634][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.725666][ T5960] usb 2-1: Product: syz [ 522.732050][ T5960] usb 2-1: Manufacturer: syz [ 522.736715][ T5960] usb 2-1: SerialNumber: syz [ 522.755873][ T30] audit: type=1400 audit(1757240986.166:3179): avc: denied { connect } for pid=11674 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 522.962547][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 523.073636][ T92] usb 5-1: USB disconnect, device number 35 [ 523.575061][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.597659][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 523.614538][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.622576][ T24] usb 6-1: Product: syz [ 523.635928][ T24] usb 6-1: Manufacturer: syz [ 523.640562][ T24] usb 6-1: SerialNumber: syz [ 523.658195][ T24] usb 6-1: config 0 descriptor?? [ 523.890882][ T5926] usb 6-1: USB disconnect, device number 7 [ 524.138394][ T30] audit: type=1400 audit(1757240987.598:3180): avc: denied { audit_write } for pid=11695 comm="syz.6.1431" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 524.274548][T11698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1424'. [ 524.343664][ T30] audit: type=1400 audit(1757240987.644:3181): avc: denied { watch watch_reads } for pid=11695 comm="syz.6.1431" path="/proc/130/net/rpc" dev="proc" ino=4026533056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 524.544380][ T30] audit: type=1400 audit(1757240987.981:3182): avc: denied { write } for pid=11702 comm="syz.5.1432" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 524.577720][T11705] devpts: Unknown parameter 'ma©È00000000000000000001' [ 524.592548][ T30] audit: type=1400 audit(1757240987.981:3183): avc: denied { open } for pid=11702 comm="syz.5.1432" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 524.767138][ T30] audit: type=1400 audit(1757240988.009:3184): avc: denied { mount } for pid=11704 comm="syz.6.1433" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 524.798727][ T30] audit: type=1400 audit(1757240988.018:3185): avc: denied { remount } for pid=11704 comm="syz.6.1433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 524.821233][ T30] audit: type=1400 audit(1757240988.140:3186): avc: denied { mounton } for pid=11702 comm="syz.5.1432" path="/newroot/57/cgroup" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 525.441908][ T30] audit: type=1400 audit(1757240988.814:3187): avc: denied { unmount } for pid=10642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 525.627958][ T30] audit: type=1400 audit(1757240988.991:3188): avc: denied { write } for pid=11711 comm="syz.5.1435" name="ip_vs" dev="proc" ino=4026533979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 525.722098][T11712] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1435'. [ 525.752932][T11712] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1435'. [ 525.803511][T11712] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1435'. [ 525.836743][T11712] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 526.148672][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 526.282403][ T5960] ipheth 2-1:8.39: Unable to find endpoints [ 526.326427][ T5960] usb 2-1: USB disconnect, device number 33 [ 526.338143][ T24] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 526.398966][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.463581][ T24] usb 5-1: config 0 descriptor?? [ 526.769546][ T24] kaweth 5-1:0.0: Firmware present in device. [ 526.779597][ T5912] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 526.886226][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 526.928770][ T5960] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 526.950090][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 526.957788][ T24] kaweth 5-1:0.0: Statistics collection: 0 [ 527.283397][ T5912] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 527.292938][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.300989][ T24] kaweth 5-1:0.0: Multicast filter limit: 0 [ 527.306949][ T5912] usb 7-1: Product: syz [ 527.311107][ T5912] usb 7-1: Manufacturer: syz [ 527.326778][ T24] kaweth 5-1:0.0: MTU: 0 [ 527.331613][ T24] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 527.338601][ T5912] usb 7-1: SerialNumber: syz [ 527.362037][ T5912] usb 7-1: config 0 descriptor?? [ 527.383226][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 527.396351][ T5960] usb 2-1: config 2 has an invalid descriptor of length 48, skipping remainder of the config [ 527.407079][ T5960] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.431156][ T5960] usb 2-1: config 2 interface 0 has no altsetting 0 [ 527.483071][ T5960] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 527.506073][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.514325][ T5960] usb 2-1: Product: syz [ 527.527296][ T5960] usb 2-1: Manufacturer: syz [ 527.531950][ T5960] usb 2-1: SerialNumber: syz [ 527.659970][ T24] kaweth 5-1:0.0: Error setting SOFS wait [ 527.671639][ T24] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 527.693567][ T24] usb 5-1: USB disconnect, device number 36 [ 528.173615][ T30] audit: type=1400 audit(1757240991.311:3189): avc: denied { read } for pid=11736 comm="syz.0.1444" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 528.306577][ T5960] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 528.326984][ T5960] usb 2-1: USB disconnect, device number 34 [ 528.355192][T11750] lo speed is unknown, defaulting to 1000 [ 529.056155][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 529.312157][ T5912] gspca_sonixj: reg_w1 err -110 [ 529.318020][ T5912] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 529.473986][T11750] netlink: 'syz.1.1446': attribute type 13 has an invalid length. [ 529.493423][T11750] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 529.529528][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 529.539118][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.561975][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.598958][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.633184][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 529.649160][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.661790][ T10] usb 1-1: config 0 descriptor?? [ 529.751067][ T5960] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 529.870374][T11770] serio: Serial port ptm0 [ 529.948150][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 529.948207][ T30] audit: type=1400 audit(1757240993.042:3192): avc: denied { getopt } for pid=11767 comm="syz.5.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.030507][T11771] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1452'. [ 530.211881][T11771] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 530.220864][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 530.240403][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 530.255962][T11771] 0ªî{X¹¦: entered allmulticast mode [ 530.269147][T11771] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 531.625518][ T5927] usb 7-1: USB disconnect, device number 7 [ 531.703602][ T10] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 531.735885][ T5960] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 531.745366][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.758578][ T5960] usb 5-1: Product: syz [ 531.764257][ T5960] usb 5-1: Manufacturer: syz [ 531.769088][ T5960] usb 5-1: SerialNumber: syz [ 531.777785][ T30] audit: type=1400 audit(1757240994.735:3193): avc: denied { listen } for pid=11765 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.780563][ T5960] usb 5-1: config 0 descriptor?? [ 531.798525][ T10] shield 0003:0955:7214.0016: unknown main item tag 0x0 [ 531.810207][ T10] shield 0003:0955:7214.0016: item fetching failed at offset 3/5 [ 531.900879][ T30] audit: type=1400 audit(1757240994.735:3194): avc: denied { accept } for pid=11765 comm="syz.1.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.930881][ T10] shield 0003:0955:7214.0016: Parse failed [ 531.937717][ T10] shield 0003:0955:7214.0016: probe with driver shield failed with error -22 [ 532.117451][T11780] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1453'. [ 532.203914][T11760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.213026][T11760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.033691][ T5927] usb 1-1: USB disconnect, device number 24 [ 533.264898][ T5912] usb 5-1: USB disconnect, device number 37 [ 534.267578][ T30] audit: type=1400 audit(1757240996.980:3195): avc: denied { connect } for pid=11794 comm="syz.0.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 534.551514][T11802] ptrace attach of "./syz-executor exec"[11229] was attempted by "./syz-executor exec"[11802] [ 534.771465][ T30] audit: type=1400 audit(1757240997.036:3196): avc: denied { map } for pid=11794 comm="syz.0.1457" path="socket:[33375]" dev="sockfs" ino=33375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 535.982097][ T30] audit: type=1400 audit(1757240997.036:3197): avc: denied { read } for pid=11794 comm="syz.0.1457" path="socket:[33375]" dev="sockfs" ino=33375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 536.037239][ T5927] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 536.287068][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 536.308847][ T5927] usb 1-1: not running at top speed; connect to a high speed hub [ 536.379185][ T5927] usb 1-1: config 8 has an invalid interface number: 11 but max is 0 [ 536.476809][ T5927] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 536.553587][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1466'. [ 536.562707][ T30] audit: type=1326 audit(1757240999.215:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 536.710207][ T5927] usb 1-1: config 8 has no interface number 0 [ 536.732426][ T5927] usb 1-1: config 8 interface 11 has no altsetting 0 [ 536.779738][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1466'. [ 536.843158][ T30] audit: type=1326 audit(1757240999.215:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 536.871469][ T30] audit: type=1326 audit(1757240999.215:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 536.895873][ T30] audit: type=1326 audit(1757240999.215:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 536.956482][ T5927] usb 1-1: Dual-Role OTG device on HNP port [ 537.845377][ T5927] usb 1-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 537.888519][ T30] audit: type=1326 audit(1757240999.215:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 537.975888][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.004180][ T5927] usb 1-1: Product: syz [ 538.015924][ T5927] usb 1-1: Manufacturer: syz [ 538.023311][ T5927] usb 1-1: SerialNumber: syz [ 538.100842][ T5927] cdc_wdm 1-1:8.11: skipping garbage [ 538.106228][ T5927] cdc_wdm 1-1:8.11: skipping garbage [ 538.158269][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1467'. [ 538.182235][ T5927] cdc_wdm 1-1:8.11: probe with driver cdc_wdm failed with error -22 [ 538.224993][ T30] audit: type=1326 audit(1757240999.215:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 538.262469][ T5927] usb 1-1: USB disconnect, device number 25 [ 538.320147][ T30] audit: type=1326 audit(1757240999.215:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 538.372906][ T30] audit: type=1326 audit(1757240999.215:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11826 comm="syz.1.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f2f6358ebe9 code=0x7ffc0000 [ 538.425049][ T30] audit: type=1400 audit(1757240999.215:3206): avc: denied { write } for pid=11826 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 538.517357][ T92] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 538.716673][ T92] usb 6-1: Using ep0 maxpacket: 32 [ 538.731150][ T92] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 538.748032][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 538.770991][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 538.782515][T11870] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1474'. [ 538.793892][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 538.815675][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 538.841113][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 538.878250][ T92] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 538.880241][ T24] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 538.912622][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.961184][ T92] usb 6-1: Product: syz [ 538.965376][ T92] usb 6-1: Manufacturer: syz [ 539.062805][ T92] usb 6-1: SerialNumber: syz [ 539.084756][ T92] usb 6-1: config 0 descriptor?? [ 539.658840][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.684879][ T92] input input33: Device does not respond to id packet M [ 539.709063][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.725073][ T92] input input33: Device does not respond to id packet P [ 539.735468][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.741688][ T92] input input33: Device does not respond to id packet B [ 539.757468][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.763631][ T92] input input33: Device does not respond to id packet N [ 539.772529][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.780189][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.786577][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.793087][ T92] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 539.807488][ T92] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 539.857414][ T92] usb 6-1: USB disconnect, device number 8 [ 540.337417][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 540.896604][T11913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.904081][T11913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.915718][T11913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.923253][T11913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.445572][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 542.445590][ T30] audit: type=1400 audit(1757241004.715:3257): avc: denied { ioctl } for pid=11934 comm="syz.4.1488" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 542.506974][ T30] audit: type=1400 audit(1757241004.715:3258): avc: denied { execute } for pid=11934 comm="syz.4.1488" path="/331/cpu.stat" dev="tmpfs" ino=1755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 542.576962][ T30] audit: type=1400 audit(1757241004.715:3259): avc: denied { create } for pid=11934 comm="syz.4.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 542.579459][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1489'. [ 542.814955][ T92] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 542.996342][T11946] tmpfs: Unknown parameter 'j¸NaÜ`ãÛ‰zDA$g£®já1' [ 543.003266][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 543.028842][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 543.036280][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.053203][ T92] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 543.063500][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.334970][ T5899] usb 1-1: device descriptor read/64, error -71 [ 543.345480][ T92] usb 5-1: config 0 descriptor?? [ 543.508849][ T30] audit: type=1400 audit(1757241005.716:3260): avc: denied { nlmsg_write } for pid=11951 comm="syz.6.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 543.586965][ T30] audit: type=1400 audit(1757241005.800:3261): avc: denied { write } for pid=11936 comm="syz.4.1490" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 543.610198][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 543.656043][ T30] audit: type=1400 audit(1757241005.800:3262): avc: denied { ioctl } for pid=11936 comm="syz.4.1490" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 543.740046][ T30] audit: type=1400 audit(1757241005.941:3263): avc: denied { ioctl } for pid=11961 comm="syz.5.1496" path="socket:[33639]" dev="sockfs" ino=33639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.766433][ T5899] usb 1-1: device descriptor read/64, error -71 [ 543.776099][ T30] audit: type=1400 audit(1757241005.941:3264): avc: denied { bind } for pid=11961 comm="syz.5.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 543.813650][ T30] audit: type=1400 audit(1757241005.997:3265): avc: denied { create } for pid=11936 comm="syz.4.1490" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.847091][ T30] audit: type=1400 audit(1757241005.997:3266): avc: denied { mounton } for pid=11936 comm="syz.4.1490" path="/332/file0" dev="tmpfs" ino=1761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 543.874775][ T92] kone 0003:1E7D:2CED.0018: item fetching failed at offset 1/2 [ 543.883012][ T92] kone 0003:1E7D:2CED.0018: parse failed [ 543.889788][ T5899] usb usb1-port1: attempt power cycle [ 543.895451][ T92] kone 0003:1E7D:2CED.0018: probe with driver kone failed with error -22 [ 544.047212][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 544.578896][ T10] usb 6-1: device descriptor read/64, error -71 [ 544.585228][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 544.612904][ T5899] usb 1-1: device descriptor read/8, error -71 [ 544.846163][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 544.921978][ T5899] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 544.942841][ T5899] usb 1-1: device descriptor read/8, error -71 [ 545.060269][ T5899] usb usb1-port1: unable to enumerate USB device [ 545.070646][ T10] usb 6-1: device descriptor read/64, error -71 [ 545.201086][ T10] usb usb6-port1: attempt power cycle [ 546.619190][ T5926] usb 5-1: USB disconnect, device number 38 [ 546.625225][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 546.678531][ T10] usb 6-1: device descriptor read/8, error -71 [ 546.962899][ T5899] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 547.423458][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 547.797058][ T10] usb 6-1: device descriptor read/8, error -71 [ 547.918278][ T10] usb usb6-port1: unable to enumerate USB device [ 547.944149][ T5899] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 547.957237][ T5899] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 548.064633][T12000] fuse: Unknown parameter '000000000000000000080x0000000000000008' [ 548.181713][ T5899] usb 2-1: config 8 has no interface number 0 [ 548.187848][ T5899] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 548.215200][ T5899] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.219331][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 548.219342][ T30] audit: type=1400 audit(1757241010.085:3268): avc: denied { write } for pid=11994 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.299969][ T5899] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 548.320582][ T30] audit: type=1400 audit(1757241010.085:3269): avc: denied { write } for pid=11994 comm="syz.5.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 548.326649][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.428590][ T5899] usb 2-1: Product: syz [ 548.440672][ T5899] usb 2-1: Manufacturer: syz [ 548.448974][ T5899] usb 2-1: SerialNumber: syz [ 548.590265][ T30] audit: type=1400 audit(1757241010.459:3270): avc: denied { read write } for pid=12004 comm="syz.4.1507" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 548.947785][ T30] audit: type=1400 audit(1757241010.459:3271): avc: denied { open } for pid=12004 comm="syz.4.1507" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 549.217445][T12019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 549.326136][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 549.394242][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1511'. [ 549.433166][ T30] audit: type=1400 audit(1757241011.244:3272): avc: denied { read write } for pid=12020 comm="syz.5.1511" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 549.496603][ T30] audit: type=1400 audit(1757241011.244:3273): avc: denied { open } for pid=12020 comm="syz.5.1511" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 550.127158][ T30] audit: type=1400 audit(1757241011.899:3274): avc: denied { setopt } for pid=12029 comm="syz.6.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 550.368769][ T5899] usb 2-1: USB disconnect, device number 35 [ 550.566268][T12035] fuse: Unknown parameter '000000000000000000080x0000000000000008' [ 551.048442][ T30] audit: type=1400 audit(1757241012.769:3275): avc: denied { ioctl } for pid=12038 comm="syz.1.1514" path="socket:[33763]" dev="sockfs" ino=33763 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 551.420666][T12057] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 551.420666][T12057] [ 551.469611][ T30] audit: type=1400 audit(1757241012.848:3276): avc: denied { execute_no_trans } for pid=12043 comm="syz.4.1517" path="/335/file0" dev="tmpfs" ino=1777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.493147][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.762999][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 551.934112][ T30] audit: type=1400 audit(1757241013.119:3277): avc: denied { mount } for pid=12056 comm="syz.6.1518" name="/" dev="hugetlbfs" ino=33781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 551.957139][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.041322][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.074297][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 552.183826][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.117625][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.142030][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.153395][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 553.163696][ T24] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 553.172927][ T24] usb 7-1: config 1 has no interface number 1 [ 553.182514][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 553.195694][ T24] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 553.208409][ T10] usb 5-1: SerialNumber: syz [ 553.224847][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 553.246950][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.258003][ T24] usb 7-1: Product: syz [ 553.268500][ T24] usb 7-1: Manufacturer: syz [ 553.279297][ T24] usb 7-1: SerialNumber: syz [ 553.508543][T12057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.519388][T12057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.577977][ T24] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 553.585256][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 553.585276][ T30] audit: type=1400 audit(1757241015.149:3285): avc: denied { unmount } for pid=10642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 553.611642][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.633850][ T24] usb 7-1: 2:1 : invalid channels 0 [ 553.680095][ T10] usb 5-1: 0:2 : does not exist [ 553.691873][ T24] usb 7-1: USB disconnect, device number 8 [ 553.709129][ T30] audit: type=1400 audit(1757241015.270:3286): avc: denied { bind } for pid=12067 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 553.763358][T12071] lo speed is unknown, defaulting to 1000 [ 553.778056][ T30] audit: type=1400 audit(1757241015.270:3287): avc: denied { node_bind } for pid=12067 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 553.822099][ T10] usb 5-1: USB disconnect, device number 39 [ 553.952682][T10278] udevd[10278]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 554.403754][ T92] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 554.621094][ T92] usb 2-1: Using ep0 maxpacket: 16 [ 554.661391][ T92] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.712276][ T92] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 554.713681][ T30] audit: type=1400 audit(1757241016.196:3288): avc: denied { setattr } for pid=12090 comm="syz.5.1527" name="tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 554.770495][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.793262][ T92] usb 2-1: config 0 descriptor?? [ 555.045591][ T92] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 555.085669][ T30] audit: type=1400 audit(1757241016.552:3289): avc: denied { connect } for pid=12095 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 555.158198][T12103] tipc: Started in network mode [ 555.163239][T12103] tipc: Node identity fffffffa, cluster identity 4711 [ 555.171356][T12103] tipc: Node number set to 4294967290 [ 555.319566][ T92] usb 2-1: USB disconnect, device number 36 [ 556.449843][ T5960] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 556.708260][ T5960] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 556.740396][ T5960] usb 7-1: config 5 has no interface number 0 [ 556.769251][ T5960] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 556.790164][ T5960] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 556.812569][ T5960] usb 7-1: config 5 interface 123 has no altsetting 0 [ 556.821373][ T5960] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 556.832915][ T5960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.850046][ T5960] usb 7-1: Product: syz [ 556.857702][ T5960] usb 7-1: Manufacturer: syz [ 556.872136][ T5960] usb 7-1: SerialNumber: syz [ 556.892749][T12104] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 557.376687][ T30] audit: type=1400 audit(1757241018.610:3290): avc: denied { map } for pid=12119 comm="syz.4.1533" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.437510][ T5960] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 557.495905][ T30] audit: type=1400 audit(1757241018.610:3291): avc: denied { execute } for pid=12119 comm="syz.4.1533" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 557.496927][ T5960] usb 7-1: USB disconnect, device number 9 [ 557.569415][ T30] audit: type=1800 audit(1757241018.769:3292): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1534" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 557.626499][T12134] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=12134 comm=syz.0.1534 [ 557.665920][T12124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.686749][ T30] audit: type=1400 audit(1757241018.956:3293): avc: denied { create } for pid=12119 comm="syz.4.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 558.141226][T12143] bridge3: entered allmulticast mode [ 558.385507][ T30] audit: type=1400 audit(1757241019.639:3294): avc: denied { watch watch_reads } for pid=12146 comm="syz.0.1539" path="/22" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 558.408365][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.803467][T12157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1541'. [ 561.288446][ T5919] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 561.459451][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 561.489236][ T5919] usb 7-1: unable to get BOS descriptor or descriptor too short [ 561.508118][ T5919] usb 7-1: config 11 has an invalid interface number: 56 but max is 0 [ 561.545091][ T5919] usb 7-1: config 11 has no interface number 0 [ 562.485663][ T5919] usb 7-1: config 11 interface 56 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 562.495499][ T5919] usb 7-1: config 11 interface 56 has no altsetting 0 [ 562.515337][ T30] audit: type=1400 audit(1757241022.828:3295): avc: denied { getopt } for pid=12184 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 562.564142][ T5919] usb 7-1: New USB device found, idVendor=0c52, idProduct=a02c, bcdDevice= 0.75 [ 562.682511][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.731685][ T5919] usb 7-1: Product: syz [ 562.736727][ T5919] usb 7-1: Manufacturer: syz [ 562.881139][ T5919] usb 7-1: SerialNumber: syz [ 564.230809][ T30] audit: type=1400 audit(1757241025.008:3296): avc: denied { read } for pid=12198 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 564.451503][ T5919] ftdi_sio 7-1:11.56: FTDI USB Serial Device converter detected [ 564.460207][ T5919] usb 7-1: Detected SIO [ 564.465889][ T5919] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10 [ 564.477164][ T5919] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 564.491221][ T5919] usb 7-1: USB disconnect, device number 10 [ 564.516261][ T5919] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 564.546186][ T5919] ftdi_sio 7-1:11.56: device disconnected [ 565.087896][ T30] audit: type=1400 audit(1757241025.681:3297): avc: denied { cmd } for pid=12205 comm="syz.1.1553" path="socket:[35319]" dev="sockfs" ino=35319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 565.162168][ T30] audit: type=1400 audit(1757241025.737:3298): avc: denied { connect } for pid=12205 comm="syz.1.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 566.315739][ T30] audit: type=1400 audit(1757241027.056:3299): avc: denied { create } for pid=12225 comm="syz.0.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 566.465776][ T5866] Bluetooth: hci2: connection err: -111 [ 568.237302][ T92] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 568.409800][ T92] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 568.438912][ T92] usb 1-1: config 0 has no interface number 0 [ 568.472452][ T92] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.519787][ T92] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.573548][ T30] audit: type=1400 audit(1757241030.087:3300): avc: denied { accept } for pid=12241 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 569.638986][ T92] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.710509][ T92] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 569.830649][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.948326][ T92] usb 1-1: config 0 descriptor?? [ 570.115453][T12257] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 570.124151][T12257] bridge4: entered allmulticast mode [ 570.502912][ T92] usbhid 1-1:0.1: can't add hid device: -71 [ 570.607292][ T30] audit: type=1400 audit(1757241030.985:3301): avc: denied { relabelfrom } for pid=12241 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 570.631967][ T92] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 570.646852][ T92] usb 1-1: USB disconnect, device number 30 [ 570.665924][ T30] audit: type=1400 audit(1757241030.985:3302): avc: denied { relabelto } for pid=12241 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 571.002654][T12266] dummy0: entered promiscuous mode [ 571.009078][T12266] macsec1: entered promiscuous mode [ 571.028408][T12266] dummy0: left promiscuous mode [ 571.626246][ T30] audit: type=1400 audit(1757241031.967:3303): avc: denied { mount } for pid=12271 comm="syz.1.1570" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 573.033160][ T30] audit: type=1400 audit(1757241032.921:3304): avc: denied { listen } for pid=12274 comm="syz.6.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 573.237751][ T30] audit: type=1400 audit(1757241033.520:3305): avc: denied { unmount } for pid=9928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 573.848033][ T30] audit: type=1400 audit(1757241033.829:3306): avc: denied { create } for pid=12283 comm="syz.0.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 575.067401][ T30] audit: type=1400 audit(1757241035.241:3307): avc: denied { read } for pid=5209 comm="acpid" name="event8" dev="devtmpfs" ino=3290 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 575.224653][ T30] audit: type=1400 audit(1757241035.241:3308): avc: denied { open } for pid=5209 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3290 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 575.250366][ T30] audit: type=1400 audit(1757241035.241:3309): avc: denied { ioctl } for pid=5209 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3290 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 575.722733][ T30] audit: type=1400 audit(1757241035.512:3310): avc: denied { ioctl } for pid=12306 comm="syz.1.1579" path="socket:[35482]" dev="sockfs" ino=35482 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 575.864062][T12310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 575.875732][T12310] block device autoloading is deprecated and will be removed. [ 575.893589][T12311] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1578'. [ 576.634633][ T30] audit: type=1400 audit(1757241036.710:3311): avc: denied { rename } for pid=12320 comm="syz.1.1583" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 577.168254][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'. [ 577.206047][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.214088][T12334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.584230][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.592086][T12334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.861127][ T10] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 578.129416][ T10] usb 1-1: unable to get BOS descriptor set [ 578.138609][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 578.378725][ T10] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.420576][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 578.451593][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 578.465214][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.640997][T12357] fuse: Unknown parameter '000000000000000000080x0000000000000008' [ 578.649187][ T10] usb 1-1: Product: syz [ 578.927828][ T5919] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 579.023969][ T10] usb 1-1: SerialNumber: syz [ 579.090654][ T5919] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 579.102355][ T5919] usb 5-1: config 0 has no interface number 0 [ 579.158112][ T5919] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 579.168490][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.178938][ T5919] usb 5-1: Product: syz [ 579.183394][ T5919] usb 5-1: Manufacturer: syz [ 579.469045][ T5919] usb 5-1: SerialNumber: syz [ 579.566257][ T5919] usb 5-1: config 0 descriptor?? [ 579.715043][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 579.723099][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 579.772183][ T30] audit: type=1400 audit(1757241039.637:3312): avc: denied { read write } for pid=9877 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.800169][ T10] usb 1-1: USB disconnect, device number 31 [ 579.880199][ T30] audit: type=1400 audit(1757241039.675:3313): avc: denied { open } for pid=9877 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.915803][ T30] audit: type=1400 audit(1757241039.675:3314): avc: denied { ioctl } for pid=9877 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 580.177411][ T30] audit: type=1400 audit(1757241039.684:3315): avc: denied { accept } for pid=12353 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 580.267965][ T30] audit: type=1400 audit(1757241039.890:3316): avc: denied { read } for pid=12353 comm="syz.4.1593" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 580.309152][ T5855] Bluetooth: hci0: unexpected event 0x20 length: 8 > 7 [ 580.438760][ T30] audit: type=1400 audit(1757241039.890:3317): avc: denied { open } for pid=12353 comm="syz.4.1593" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 580.579550][ T30] audit: type=1400 audit(1757241039.890:3318): avc: denied { create } for pid=12366 comm="syz.5.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.806018][ T5919] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 580.868811][ T30] audit: type=1400 audit(1757241039.890:3319): avc: denied { write } for pid=12366 comm="syz.5.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 580.944937][ T30] audit: type=1400 audit(1757241039.890:3320): avc: denied { prog_load } for pid=12366 comm="syz.5.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 580.966313][ T30] audit: type=1400 audit(1757241039.890:3321): avc: denied { bpf } for pid=12366 comm="syz.5.1596" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 580.989967][ T30] audit: type=1400 audit(1757241039.899:3322): avc: denied { perfmon } for pid=12366 comm="syz.5.1596" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 581.013424][T12385] bridge2: entered allmulticast mode [ 581.192420][ T30] audit: type=1400 audit(1757241039.946:3323): avc: denied { read } for pid=12353 comm="syz.4.1593" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 581.233354][ T30] audit: type=1400 audit(1757241039.946:3324): avc: denied { open } for pid=12353 comm="syz.4.1593" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 581.294610][ T30] audit: type=1400 audit(1757241039.955:3325): avc: denied { ioctl } for pid=12353 comm="syz.4.1593" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 581.568511][ T30] audit: type=1400 audit(1757241040.058:3326): avc: denied { create } for pid=12370 comm="syz.5.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 581.622021][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 582.088005][T12402] lo speed is unknown, defaulting to 1000 [ 582.243878][T12408] bridge2: entered allmulticast mode [ 582.744378][ T5926] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 582.959467][ T5926] usb 2-1: config 0 has no interfaces? [ 582.966638][ T5926] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 583.411511][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.435586][ T5926] usb 2-1: Product: syz [ 583.446086][ T5926] usb 2-1: Manufacturer: syz [ 583.457232][ T5926] usb 2-1: SerialNumber: syz [ 583.512898][ T5926] usb 2-1: config 0 descriptor?? [ 583.696802][ T5919] usb 5-1: USB disconnect, device number 40 [ 584.648088][ T5919] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 584.860004][ T5919] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 585.001763][ T5919] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 585.012082][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.137107][ T5919] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 585.477704][T12423] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 585.484345][T12423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 585.534669][T12423] vhci_hcd vhci_hcd.0: Device attached [ 585.571396][T12438] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 585.578013][T12438] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.593159][T12423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 585.712831][T12441] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 585.719425][T12441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.738217][T12438] vhci_hcd vhci_hcd.0: Device attached [ 585.746614][T12441] vhci_hcd vhci_hcd.0: Device attached [ 586.234001][ T5919] vhci_hcd: vhci_device speed not set [ 586.241706][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 586.241723][ T30] audit: type=1400 audit(1757241045.287:3387): avc: denied { create } for pid=12445 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 586.288966][ T30] audit: type=1400 audit(1757241045.297:3388): avc: denied { append } for pid=12445 comm="syz.0.1615" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 586.318589][ T30] audit: type=1400 audit(1757241045.297:3389): avc: denied { write } for pid=12445 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.340031][ T5919] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 586.361287][T12423] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 586.361401][ T30] audit: type=1400 audit(1757241045.297:3390): avc: denied { nlmsg_write } for pid=12445 comm="syz.0.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 586.367989][T12423] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 586.427859][ T5912] usb 2-1: USB disconnect, device number 37 [ 586.456328][T12423] vhci_hcd vhci_hcd.0: Device attached [ 586.663407][T12438] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(23) [ 586.670035][T12438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 586.696065][ T30] audit: type=1400 audit(1757241046.082:3391): avc: denied { create } for pid=12464 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 586.721394][T12438] vhci_hcd vhci_hcd.0: Device attached [ 586.722674][T12423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.732718][ T30] audit: type=1400 audit(1757241046.120:3392): avc: denied { read write } for pid=12464 comm="syz.6.1617" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 586.860444][T12423] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 586.927076][ T30] audit: type=1400 audit(1757241046.120:3393): avc: denied { open } for pid=12464 comm="syz.6.1617" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 586.952226][ T30] audit: type=1400 audit(1757241046.326:3394): avc: denied { create } for pid=12464 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.972699][ T30] audit: type=1400 audit(1757241046.326:3395): avc: denied { ioctl } for pid=12464 comm="syz.6.1617" path="socket:[36737]" dev="sockfs" ino=36737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 586.997935][ T30] audit: type=1400 audit(1757241046.335:3396): avc: denied { bind } for pid=12464 comm="syz.6.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 587.117608][T12462] vhci_hcd: connection closed [ 587.121055][T12456] vhci_hcd: connection closed [ 587.137421][T12447] vhci_hcd: connection closed [ 587.138901][T12442] vhci_hcd: connection reset by peer [ 587.158306][T11495] vhci_hcd: stop threads [ 587.171781][T12452] vhci_hcd: connection closed [ 587.176660][ T92] usb 5-1: USB disconnect, device number 41 [ 587.208495][T11495] vhci_hcd: release socket [ 587.367372][T11495] vhci_hcd: disconnect device [ 587.514387][T11495] vhci_hcd: stop threads [ 587.532328][T11495] vhci_hcd: release socket [ 587.547991][T11495] vhci_hcd: disconnect device [ 587.671576][T11495] vhci_hcd: stop threads [ 587.676127][T11495] vhci_hcd: release socket [ 587.680853][T11495] vhci_hcd: disconnect device [ 587.716364][T11495] vhci_hcd: stop threads [ 587.726436][T11495] vhci_hcd: release socket [ 587.733246][T11495] vhci_hcd: disconnect device [ 587.744000][T11495] vhci_hcd: stop threads [ 587.749255][T11495] vhci_hcd: release socket [ 587.781024][T11495] vhci_hcd: disconnect device [ 588.032610][T12480] fuse: Unknown parameter '000000000000000000080x0000000000000008' [ 588.261600][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051fecc00: rx timeout, send abort [ 588.273001][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051fecc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.620931][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 589.150776][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 589.158122][ T10] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 589.170351][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.199129][ T10] usb 1-1: config 0 descriptor?? [ 589.220521][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 589.319817][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 589.500832][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 589.529710][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 589.540479][ T24] usb 5-1: config 0 has no interface number 0 [ 589.582044][ T24] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 589.635116][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.656688][ T24] usb 5-1: Product: syz [ 589.668370][ T24] usb 5-1: Manufacturer: syz [ 589.677694][ T24] usb 5-1: SerialNumber: syz [ 589.703226][ T24] usb 5-1: config 0 descriptor?? [ 589.735756][ T24] redrat3 5-1:0.31: Couldn't find all endpoints [ 589.994075][ T10] gspca_vc032x: reg_w err -110 [ 590.084541][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.091507][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.107901][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.125556][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.144727][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.157605][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.196629][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 590.225387][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.234499][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.249599][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.256745][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.266984][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.286501][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.294413][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.367372][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.372742][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.380726][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.386128][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.392133][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.397479][ T10] gspca_vc032x: Unknown sensor... [ 590.412902][ T10] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 590.474488][T12491] bond0: (slave bond_slave_1): Releasing backup interface [ 591.403806][ T5960] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 591.649561][ T5960] usb 6-1: Using ep0 maxpacket: 8 [ 592.048230][ T5919] vhci_hcd: vhci_device speed not set [ 592.048310][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 592.048322][ T30] audit: type=1326 audit(1757241051.077:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.141777][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 592.273841][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.283598][ T5960] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.294178][ T5960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 592.305882][ T5960] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 592.316260][ T5960] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 592.326836][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.339399][ T5960] usb 6-1: config 0 descriptor?? [ 592.381189][T12514] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 592.403518][ T30] audit: type=1326 audit(1757241051.077:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.501148][ T10] usb 5-1: USB disconnect, device number 42 [ 592.529156][ T30] audit: type=1326 audit(1757241051.077:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.611828][ T30] audit: type=1326 audit(1757241051.077:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.656024][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.665821][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.672709][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.681061][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.688158][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.696839][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.703691][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.710698][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.717500][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.724446][ T30] audit: type=1326 audit(1757241051.077:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.749388][ T30] audit: type=1326 audit(1757241051.077:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.774019][ T30] audit: type=1326 audit(1757241051.087:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.797595][ T30] audit: type=1326 audit(1757241051.087:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.823272][ T30] audit: type=1326 audit(1757241051.087:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.847864][ T30] audit: type=1326 audit(1757241051.087:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12520 comm="syz.6.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f448978ebe9 code=0x7ffc0000 [ 592.861958][ T5927] usb 1-1: USB disconnect, device number 32 [ 592.874869][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.888766][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.898331][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.905160][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.912074][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.918863][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.926725][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.933762][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.940572][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.949301][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 592.956777][ T5855] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 593.121861][ T5866] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 593.124685][ T5926] usb 6-1: USB disconnect, device number 13 [ 595.029228][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 595.220317][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 595.228631][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 595.245275][ T10] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 595.255461][ T10] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 595.300197][ T10] usb 7-1: Product: syz [ 595.304355][ T10] usb 7-1: Manufacturer: syz [ 595.382413][ T10] usb 7-1: SerialNumber: syz [ 595.412027][ T10] usb 7-1: config 0 descriptor?? [ 595.430696][T12554] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 595.824620][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.833644][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.173785][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051fff800: rx timeout, send abort [ 596.716520][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051fff800: abort rx timeout. Force session deactivation [ 620.022461][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 708.080909][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 708.087873][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12558/1:b..l P12555/1:b..l [ 708.097606][ C0] rcu: (detected by 0, t=10502 jiffies, g=49205, q=738 ncpus=2) [ 708.105305][ C0] task:syz.0.1639 state:R running task stack:26376 pid:12555 tgid:12547 ppid:11229 task_flags:0x400040 flags:0x00004000 [ 708.119352][ C0] Call Trace: [ 708.122626][ C0] [ 708.125553][ C0] __schedule+0x1190/0x5de0 [ 708.130051][ C0] ? find_held_lock+0x2b/0x80 [ 708.134719][ C0] ? map_anon_folio_pmd+0x317/0x660 [ 708.139908][ C0] ? find_held_lock+0x2b/0x80 [ 708.144572][ C0] ? do_huge_pmd_wp_page+0xac0/0x25c0 [ 708.149943][ C0] ? __pfx___schedule+0x10/0x10 [ 708.154792][ C0] ? mark_held_locks+0x49/0x80 [ 708.159560][ C0] preempt_schedule_irq+0x51/0x90 [ 708.164616][ C0] irqentry_exit+0x36/0x90 [ 708.169056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.175029][ C0] RIP: 0010:lock_acquire+0x133/0x350 [ 708.180307][ C0] Code: 00 65 8b 05 97 27 3f 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 d7 e5 3e 12 8b 90 ec 0a 00 00 85 d2 0f 85 8c 00 00 00 9c 8f 04 24 48 c7 c7 69 59 f4 8d e8 70 8a fc 09 45 89 e0 89 e9 44 89 ea 65 [ 708.199901][ C0] RSP: 0000:ffffc900036c7700 EFLAGS: 00000246 [ 708.205952][ C0] RAX: ffff888051210000 RBX: ffffffff8e5c1260 RCX: 0000000000000001 [ 708.213909][ C0] RDX: 0000000000000000 RSI: ffffffff816ae581 RDI: fffffbfff1cb824c [ 708.221864][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 708.229819][ C0] R10: 0000000000000001 R11: 0000000000093927 R12: 0000000000000000 [ 708.237775][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.245741][ C0] ? unwind_next_frame+0xd1/0x20a0 [ 708.250846][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 708.256032][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.262189][ C0] unwind_next_frame+0xd1/0x20a0 [ 708.267121][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 708.272219][ C0] ? __sock_release+0xb0/0x270 [ 708.276990][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.283134][ C0] arch_stack_walk+0x94/0x100 [ 708.287804][ C0] ? __sock_release+0xb0/0x270 [ 708.292559][ C0] stack_trace_save+0x8e/0xc0 [ 708.297224][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 708.302584][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 708.307517][ C0] kasan_save_stack+0x33/0x60 [ 708.312178][ C0] ? kasan_save_stack+0x33/0x60 [ 708.317013][ C0] ? kasan_save_track+0x14/0x30 [ 708.321843][ C0] ? kasan_save_free_info+0x3b/0x60 [ 708.327030][ C0] ? __kasan_slab_free+0x60/0x70 [ 708.331950][ C0] ? kfree+0x2b4/0x4d0 [ 708.336006][ C0] ? skb_free_head+0x114/0x210 [ 708.340753][ C0] ? skb_release_data+0x795/0x9e0 [ 708.345764][ C0] ? sk_skb_reason_drop+0x129/0x1a0 [ 708.350948][ C0] ? unix_release_sock+0x7f4/0x1530 [ 708.356134][ C0] ? unix_release+0x91/0xf0 [ 708.360624][ C0] ? __sock_release+0xb0/0x270 [ 708.365406][ C0] kasan_save_track+0x14/0x30 [ 708.370068][ C0] kasan_save_free_info+0x3b/0x60 [ 708.375082][ C0] __kasan_slab_free+0x60/0x70 [ 708.379830][ C0] kfree+0x2b4/0x4d0 [ 708.383714][ C0] ? skb_free_head+0x114/0x210 [ 708.388467][ C0] skb_free_head+0x114/0x210 [ 708.393047][ C0] skb_release_data+0x795/0x9e0 [ 708.397891][ C0] sk_skb_reason_drop+0x129/0x1a0 [ 708.402913][ C0] unix_release_sock+0x7f4/0x1530 [ 708.407929][ C0] ? __pfx___might_resched+0x10/0x10 [ 708.413208][ C0] ? __pfx_unix_release_sock+0x10/0x10 [ 708.418673][ C0] ? down_write+0x14d/0x200 [ 708.423183][ C0] ? __pfx_down_write+0x10/0x10 [ 708.428031][ C0] unix_release+0x91/0xf0 [ 708.432370][ C0] __sock_release+0xb0/0x270 [ 708.436960][ C0] ? __pfx_sock_close+0x10/0x10 [ 708.441802][ C0] sock_close+0x1c/0x30 [ 708.445953][ C0] __fput+0x402/0xb70 [ 708.449934][ C0] task_work_run+0x150/0x240 [ 708.454514][ C0] ? __pfx_task_work_run+0x10/0x10 [ 708.459610][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 708.465151][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 708.470424][ C0] do_syscall_64+0x3f6/0x4c0 [ 708.475008][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.480884][ C0] RIP: 0033:0x7f8ffef8ebe9 [ 708.485284][ C0] RSP: 002b:00007f8fffd23038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 708.493685][ C0] RAX: 0000000000010106 RBX: 00007f8fff1c6090 RCX: 00007f8ffef8ebe9 [ 708.501645][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 708.509599][ C0] RBP: 00007f8fff011e19 R08: 0000000000000000 R09: 0000000000000000 [ 708.517552][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 708.525508][ C0] R13: 00007f8fff1c6128 R14: 00007f8fff1c6090 R15: 00007ffc11cce118 [ 708.533479][ C0] [ 708.536482][ C0] task:syz.0.1639 state:R running task stack:26168 pid:12558 tgid:12547 ppid:11229 task_flags:0x400140 flags:0x00004002 [ 708.549954][ C0] Call Trace: [ 708.553216][ C0] [ 708.556133][ C0] __schedule+0x1190/0x5de0 [ 708.560640][ C0] ? __pfx___schedule+0x10/0x10 [ 708.565573][ C0] ? mark_held_locks+0x49/0x80 [ 708.570334][ C0] preempt_schedule_irq+0x51/0x90 [ 708.575347][ C0] irqentry_exit+0x36/0x90 [ 708.579749][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 708.585716][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 708.590907][ C0] Code: e6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 a2 13 0f 0f 82 74 02 00 00 8b 35 da d3 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 e6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 708.610499][ C0] RSP: 0018:ffffc9000417eca0 EFLAGS: 00000206 [ 708.616548][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c1260 RCX: 00000000f28deb84 [ 708.624500][ C0] RDX: 0000000000000000 RSI: ffffffff8de2cdb8 RDI: ffffffff8c162d80 [ 708.632453][ C0] RBP: 0000000000000002 R08: 3d5a26fa73f1642f R09: 0000000000000000 [ 708.640405][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 708.648360][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.656328][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 708.661516][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.667662][ C0] unwind_next_frame+0xd1/0x20a0 [ 708.672586][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 708.677771][ C0] ? shmem_get_folio_gfp+0x67f/0x1600 [ 708.683131][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 708.689275][ C0] arch_stack_walk+0x94/0x100 [ 708.693949][ C0] ? shmem_get_folio_gfp+0x67f/0x1600 [ 708.699313][ C0] stack_trace_save+0x8e/0xc0 [ 708.703981][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 708.709345][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 708.714278][ C0] save_stack+0x160/0x1f0 [ 708.718595][ C0] ? __pfx_save_stack+0x10/0x10 [ 708.723427][ C0] ? post_alloc_hook+0x1c0/0x230 [ 708.728354][ C0] ? get_page_from_freelist+0x132b/0x38e0 [ 708.734063][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 708.740112][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 708.745120][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 708.750653][ C0] ? shmem_alloc_folio+0x135/0x160 [ 708.755754][ C0] ? shmem_alloc_and_add_folio+0x499/0xc20 [ 708.761548][ C0] ? shmem_get_folio_gfp+0x67f/0x1600 [ 708.766912][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 708.771845][ C0] __set_page_owner+0x91/0x550 [ 708.776596][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 708.781952][ C0] ? bad_range+0x261/0x4c0 [ 708.786360][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 708.791549][ C0] post_alloc_hook+0x1c0/0x230 [ 708.796309][ C0] get_page_from_freelist+0x132b/0x38e0 [ 708.801849][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 708.807121][ C0] ? rcu_is_watching+0x12/0xc0 [ 708.811877][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 708.817757][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 708.822690][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 708.827621][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.833936][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 708.838946][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 708.844306][ C0] ? find_held_lock+0x2b/0x80 [ 708.848979][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 708.853910][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.859794][ C0] ? policy_nodemask+0xea/0x4e0 [ 708.864633][ C0] alloc_pages_mpol+0x1fb/0x550 [ 708.869474][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 708.874840][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 708.880202][ C0] shmem_alloc_folio+0x135/0x160 [ 708.885130][ C0] shmem_alloc_and_add_folio+0x499/0xc20 [ 708.890760][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 708.896908][ C0] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 708.902788][ C0] shmem_get_folio_gfp+0x67f/0x1600 [ 708.907977][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 708.913601][ C0] shmem_write_begin+0x160/0x300 [ 708.918526][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 708.923972][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 708.930814][ C0] generic_perform_write+0x3c2/0x900 [ 708.936100][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 708.941899][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 708.948134][ C0] shmem_file_write_iter+0x10e/0x140 [ 708.953408][ C0] iter_file_splice_write+0xa24/0x12e0 [ 708.958867][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 708.964767][ C0] ? __pfx_iter_file_splice_write+0x10/0x10 [ 708.970647][ C0] direct_splice_actor+0x18f/0x6c0 [ 708.975747][ C0] splice_direct_to_actor+0x345/0xa30 [ 708.981108][ C0] ? __pfx_direct_splice_actor+0x10/0x10 [ 708.986732][ C0] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 708.992620][ C0] do_splice_direct+0x174/0x240 [ 708.997457][ C0] ? __pfx_do_splice_direct+0x10/0x10 [ 709.002814][ C0] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 709.008707][ C0] ? rw_verify_area+0xcf/0x6c0 [ 709.013468][ C0] do_sendfile+0xb06/0xe50 [ 709.017877][ C0] ? __pfx_do_sendfile+0x10/0x10 [ 709.022800][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 709.027733][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 709.032663][ C0] __x64_sys_sendfile64+0x1d8/0x220 [ 709.037851][ C0] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 709.043568][ C0] do_syscall_64+0xcd/0x4c0 [ 709.048062][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.053940][ C0] RIP: 0033:0x7f8ffef8ebe9 [ 709.058338][ C0] RSP: 002b:00007f8ffcdd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 709.066819][ C0] RAX: ffffffffffffffda RBX: 00007f8fff1c6270 RCX: 00007f8ffef8ebe9 [ 709.074784][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 709.082736][ C0] RBP: 00007f8fff011e19 R08: 0000000000000000 R09: 0000000000000000 [ 709.090689][ C0] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 [ 709.098642][ C0] R13: 00007f8fff1c6308 R14: 00007f8fff1c6270 R15: 00007ffc11cce118 [ 709.106625][ C0] [ 709.109628][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10588 jiffies! g49205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 709.121933][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=28508 [ 709.129800][ C0] rcu: rcu_preempt kthread starved for 10589 jiffies! g49205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 709.141145][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 709.151095][ C0] rcu: RCU grace-period kthread stack dump: [ 709.156960][ C0] task:rcu_preempt state:I stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 709.168950][ C0] Call Trace: [ 709.172214][ C0] [ 709.175142][ C0] __schedule+0x1190/0x5de0 [ 709.179640][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 709.184596][ C0] ? __pfx___schedule+0x10/0x10 [ 709.189464][ C0] ? find_held_lock+0x2b/0x80 [ 709.194141][ C0] ? schedule+0x2d7/0x3a0 [ 709.198471][ C0] schedule+0xe7/0x3a0 [ 709.202535][ C0] schedule_timeout+0x123/0x290 [ 709.207376][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 709.212732][ C0] ? __pfx_process_timeout+0x10/0x10 [ 709.218013][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 709.223809][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 709.229263][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 709.234020][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 709.239398][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.244586][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 709.249504][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 709.254345][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 709.260142][ C0] rcu_gp_kthread+0x270/0x380 [ 709.264805][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 709.269989][ C0] ? rcu_is_watching+0x12/0xc0 [ 709.274743][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.279933][ C0] ? __kthread_parkme+0x19e/0x250 [ 709.284952][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 709.290132][ C0] kthread+0x3c2/0x780 [ 709.294190][ C0] ? __pfx_kthread+0x10/0x10 [ 709.298766][ C0] ? rcu_is_watching+0x12/0xc0 [ 709.303517][ C0] ? __pfx_kthread+0x10/0x10 [ 709.308093][ C0] ret_from_fork+0x5d4/0x6f0 [ 709.312666][ C0] ? __pfx_kthread+0x10/0x10 [ 709.317241][ C0] ret_from_fork_asm+0x1a/0x30 [ 709.322003][ C0] [ 709.325004][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 709.331304][ C0] Sending NMI from CPU 0 to CPUs 1: [ 709.336490][ C1] NMI backtrace for cpu 1 [ 709.336501][ C1] CPU: 1 UID: 0 PID: 1300 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 709.336516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.336524][ C1] RIP: 0010:do_raw_spin_lock+0x1ce/0x2b0 [ 709.336540][ C1] Code: ff df 4c 89 63 10 48 c7 44 05 00 00 00 00 00 48 8b 44 24 60 65 48 2b 05 38 9c 3e 12 0f 85 cb 00 00 00 48 83 c4 68 5b 5d 41 5c <41> 5d 41 5e c3 cc cc cc cc 48 c7 c2 08 62 42 8e 89 44 24 28 48 b9 [ 709.336552][ C1] RSP: 0018:ffffc90004a5f958 EFLAGS: 00000092 [ 709.336563][ C1] RAX: 0000000000000000 RBX: ffffffff9b115ba0 RCX: ffffffff8198133c [ 709.336571][ C1] RDX: 1ffffffff3622b76 RSI: 0000000000000004 RDI: ffffc90004a5f900 [ 709.336580][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: fffff5200094bf20 [ 709.336588][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000001 [ 709.336595][ C1] R13: ffffffff9b115bb0 R14: 0000000000000001 R15: 0000000000000001 [ 709.336603][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 709.336616][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 709.336624][ C1] CR2: 00007f44879d4f98 CR3: 0000000059c90000 CR4: 00000000003526f0 [ 709.336632][ C1] Call Trace: [ 709.336637][ C1] [ 709.336642][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 709.336656][ C1] ? uart_write+0x13b/0xb30 [ 709.336672][ C1] uart_write+0x13b/0xb30 [ 709.336686][ C1] ? __pfx_uart_write_room+0x10/0x10 [ 709.336700][ C1] handle_tx+0x204/0x630 [ 709.336715][ C1] dev_hard_start_xmit+0x94/0x740 [ 709.336731][ C1] __dev_queue_xmit+0xa46/0x4490 [ 709.336745][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.336759][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 709.336774][ C1] ? rcu_is_watching+0x12/0xc0 [ 709.336788][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 709.336801][ C1] ? __schedule+0x11a3/0x5de0 [ 709.336814][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 709.336836][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 709.336850][ C1] ? find_held_lock+0x2b/0x80 [ 709.336864][ C1] ? skb_dequeue+0x126/0x180 [ 709.336881][ C1] ? find_held_lock+0x2b/0x80 [ 709.336896][ C1] ? rcu_is_watching+0x12/0xc0 [ 709.336911][ C1] tx+0xcc/0x190 [ 709.336927][ C1] ? __pfx_tx+0x10/0x10 [ 709.336939][ C1] kthread+0x1e4/0x3e0 [ 709.336951][ C1] ? find_held_lock+0x2b/0x80 [ 709.336965][ C1] ? __pfx_kthread+0x10/0x10 [ 709.336977][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 709.336992][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 709.337006][ C1] ? __kthread_parkme+0x19e/0x250 [ 709.337023][ C1] ? __pfx_kthread+0x10/0x10 [ 709.337034][ C1] kthread+0x3c2/0x780 [ 709.337046][ C1] ? __pfx_kthread+0x10/0x10 [ 709.337058][ C1] ? rcu_is_watching+0x12/0xc0 [ 709.337072][ C1] ? __pfx_kthread+0x10/0x10 [ 709.337084][ C1] ret_from_fork+0x5d4/0x6f0 [ 709.337095][ C1] ? __pfx_kthread+0x10/0x10 [ 709.337107][ C1] ret_from_fork_asm+0x1a/0x30 [ 709.337125][ C1]