last executing test programs: 3m21.640557983s ago: executing program 0 (id=130): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x5) ioctl$TCSETS(r0, 0x5402, &(0x7f00000004c0)={0x8, 0xa0, 0x5, 0xdcca, 0x6, "00ecffffffffffffff00010000000000001b00"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000040)='veth0_to_bridge\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x5, 0x3, 0x800, 0x5d92, 0x9, 0x1ce, 0x7fef, 0x2}, 0x0, &(0x7f0000000380)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='map_files\x00') getdents64(r4, &(0x7f0000000400)=""/42, 0x2a) getdents64(r4, &(0x7f0000000440)=""/75, 0x4b) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0xfffff000) socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) 3m19.700599293s ago: executing program 0 (id=137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000000008010800000000000000000a0000030900010073797a3100000000060002400e3a0000050003003a000000b21e968c6caab52137b19f2beea4896449262618d38427bec01f30762f15067bbc40b9a0233c3afa0d0e4fc99f86857aa5108ce9615a570e73b4186dc031af80f9de8d76c3bc3b85ee1a78a29a5e37d89abe08b2506ee3ce29014d66cc98d604839486d56cf39c6caa8117c317a5b5f82653d30c65e03995b3ae924444b305c10e297aab8c458a472608c9d1e21d1d3cda4e4d464e90"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331df"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000400001718d36fa209782f58806aa70e97e5a5000000"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000640)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r6}) 3m18.779590202s ago: executing program 0 (id=143): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x5, [@volatile={0x7, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x54}}, @enum64={0x2, 0x9, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x2}, {0x4, 0x800, 0x4f21d5e7}, {0x6, 0x3, 0xfffffffe}, {0xd, 0x2, 0x8}, {0x8, 0xff, 0x1}, {0xc, 0x1, 0x1ff}, {0x10, 0x1, 0x2}, {0xc, 0xe567, 0x7}, {0xa, 0x5, 0xfff}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x0, 0x6, 0x1}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0xa, 0x4}]}, @func={0x8, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x3e, 0x30, 0x5f]}}, &(0x7f0000000240)=""/4096, 0x101, 0x1000, 0x0, 0x4, 0x10000}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x9, '\x00', 0x0, r0, 0x0, 0x4}, 0x50) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f00000013c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m18.581577897s ago: executing program 0 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)={0x764, 0x0, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x53}}}}, [@NL80211_ATTR_TID_CONFIG={0x170, 0x11d, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x64, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3ff9, 0x4, 0x7ff, 0x8, 0x5, 0x7, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x40}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x66, 0x3, 0x99, 0x8, 0xf, 0xbc, 0xa, 0x7]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0xe, 0x48, 0x48, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x74, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x1}, {0x1, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x8}, {0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x6, 0x7}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x8}, {0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x2}, {0x2, 0x1}, {0x3}, {0x7, 0x2}, {0x5, 0xa}, {0x7, 0xa}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x6, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x3, 0x7}, {0x4}, {0x7, 0x1}, {0x3, 0x2}, {0x6, 0x8}, {0x4, 0x5}, {0x7, 0x1}, {0x3, 0x2}, {0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0x7}, {0x3, 0x8}, {0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x6}, {0x5, 0x7}, {0x6, 0x2}, {}, {0x2, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0x8}, {0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x3}, {0x0, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd283, 0xb, 0x5, 0x90a, 0xa, 0x4, 0x4, 0x1]}}]}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffff5893}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}]}]}, @NL80211_ATTR_TID_CONFIG={0x1e0, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1872}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x43}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x59}]}, {0x160, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x6, 0xffff, 0xd66, 0x5, 0x3, 0x8, 0x3b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xce, 0x1000, 0x0, 0x3, 0xff, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xf, 0x6e47, 0x0, 0x2, 0x3, 0x400, 0x8]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x3, 0x6c, 0x1b, 0x6b, 0x6c, 0x1b, 0x12, 0x18, 0x4, 0x60, 0x30, 0x3, 0x48, 0x5, 0x5, 0x60, 0x6c, 0x1, 0x16, 0x1, 0x6c, 0x18, 0x6, 0x1b, 0x5c, 0xc, 0x6c, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x7}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x6}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x6}, {0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x2}, {0x7}, {0x0, 0x6}, {}, {0x4, 0x7}, {0x5, 0x8}, {0x2, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x38, 0x8, 0xefb, 0xe, 0x7, 0xbb7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x33f, 0x3, 0xff3f, 0x7823, 0x3, 0x656a, 0x967, 0x5]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x0, 0xff, 0x6, 0x8, 0x6d15, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xea87}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3f4, 0x11d, 0x0, 0x1, [{0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x0, 0x65, 0xfff8, 0x0, 0x7ff, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x12, 0x60, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x80, 0x8, 0x3f5, 0x5, 0x4, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2a3, 0x100, 0x81, 0x6, 0xcbee, 0x0, 0x7, 0x3ff]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x2, 0x6, 0x2, 0x0, 0x4, 0x7, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xabc4, 0x0, 0x7, 0x5, 0x6, 0x5, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x89}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x70}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x180, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x7, 0x8, 0x80, 0xf, 0x2, 0x9]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x8}, {0x4, 0x8}, {0x4, 0x2}, {0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1, 0x18, 0x2, 0x7d, 0x3, 0x6, 0x24, 0x4, 0x2, 0x36, 0xc, 0x30, 0x60, 0x9, 0x36, 0xc, 0x3, 0x1]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x780, 0xfff2, 0x5, 0x80, 0x6, 0x6, 0xe]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x5, 0x79bd, 0xe, 0x5, 0x4, 0x65]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x16, 0x0, 0x4, 0x48, 0x3, 0x4, 0x5, 0x9, 0x24, 0x48, 0x1b, 0x36, 0x61, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x12, 0x17, 0x60, 0x2, 0x1b, 0x9, 0x5, 0x12, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa97, 0x5863, 0x1, 0x10, 0x8583, 0x6, 0xd58f]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0xb, 0x2, 0x14, 0x6c, 0x24, 0x5, 0x48, 0x12, 0x18, 0x36, 0x18, 0x12, 0x6c, 0x6, 0x5, 0x16, 0xc, 0x9, 0x6c, 0x48]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x4}, {0x2, 0x7}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x1}, {0x1, 0x2}, {}, {0x0, 0x6}, {0x4}, {0x3, 0x6}, {0x5, 0x1}, {0x4, 0x8}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x7}, {0x7, 0xa}, {0x3, 0xa}, {0x1, 0x6}, {0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {0x3, 0x8}, {0x2}, {0x2, 0x3}, {0x3, 0x9}, {0x2, 0x3}, {0x0, 0x1}, {0x6}, {0x7, 0x2}, {0x3, 0xa}, {0x5, 0x7}, {0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0x8}, {0x6, 0x7}, {0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x2}, {0x2, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x48]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x5, 0x5}, {0x7, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x6, 0x7ff, 0x401, 0x1, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8f40, 0x5, 0xa8, 0x7, 0x6e, 0x7c6, 0x7, 0x8]}}]}, @NL80211_BAND_5GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x63}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x7fff, 0xbd9f, 0xff, 0x1, 0x5, 0xa03]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x5, 0x0, 0x9, 0x5, 0x4, 0x4, 0x556d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0x2, 0x7, 0x3ff, 0x26, 0xd, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x66, 0x1000, 0x8, 0x101, 0x5, 0x8, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x8001, 0x3e, 0x7, 0x3, 0x9, 0x4]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe24, 0xc, 0x7, 0x6, 0x3, 0xe, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffe36}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x91}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x60}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x764}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="0108000000006edbdf251700000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000200050800500020002000000090001"], 0x48}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(0x0, 0x8008, 0x2) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000880), 0x2) socket$inet6(0xa, 0x5, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000a80)='./bus\x00', 0x14927e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mount(0x0, &(0x7f0000000b80)='./proc\x00', &(0x7f0000000bc0)='proc\x00', 0x4000, 0x0) open(&(0x7f0000000c00)='./bus\x00', 0x60142, 0x10) write(r6, &(0x7f0000000c40)='p:s/_ ./file0:0', 0xf) 3m17.719567661s ago: executing program 0 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/d3cold_allowed\x00', 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES8=r0], 0x3fb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2a0280, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x42, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = fanotify_init(0xef0, 0x2) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/141, 0x8d}], 0x1) fanotify_mark(r7, 0x105, 0x40009965, r6, 0x0) syz_clone(0x40000, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200affd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 3m14.18422121s ago: executing program 0 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x10, 0xa00, 0x40800000000000, 0x800000000000003}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0xff84, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2m58.823158282s ago: executing program 32 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8}, {0x10, 0xa00, 0x40800000000000, 0x800000000000003}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0xff84, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 14.344146283s ago: executing program 4 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/tty/ttyS2/rx_trig_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='8\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 13.973189562s ago: executing program 1 (id=609): r0 = syz_open_dev$video(&(0x7f0000000440), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="55f9f144", 0x4}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 13.899993581s ago: executing program 4 (id=610): syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000200000040961b0600000000000001090224000100005000090400050303000000096100000901221800090581034000001510a9e84416264897bd8a"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000008c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000940), 0x0, 0x0) read$msr(r4, &(0x7f0000000980)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x250700, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019a00)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019a40)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f0000019a80)='res', 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 12.822333714s ago: executing program 1 (id=612): syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @multicast1}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0840, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003441eb4023398a716af6b593a0010902240001000040000904ee0202949da000090504020000000000090588"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000580)='0', 0x1, 0x40000, &(0x7f00000005c0)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 9.782254073s ago: executing program 5 (id=618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x82, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x74, 0x0, 0x0, 0xc8, 0x6, 0x0, @initdev={0xac, 0x1e, 0x9, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x18, 0x10, 0x40, 0x0, 0x300, {[@generic={0x3, 0xf, "3a521b784f7bca29ebb4df0503"}, @timestamp={0x8, 0xa, 0x2, 0xe7b0}, @generic={0x4, 0xc, "e7ded66b7ca4e0be8b79"}, @exp_fastopen={0xfe, 0x4}, @generic={0x3, 0x12, "8834cb398aa643ec52d389e8c1e2a20b"}, @generic={0x4, 0x4, "a26f"}, @timestamp={0x8, 0xa, 0x1000004, 0x80}]}}}}}}}, 0x0) 9.394443219s ago: executing program 5 (id=620): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x2b, 0xc, 0x1c20040, 0x0, 0x80, 0xc0000000, 0x1, 0x0, 0x0, 0xdd6e2e3f461ee510}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r7, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x6000, 0x101, r7, r8, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) 9.300835329s ago: executing program 4 (id=621): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracefs_dir/buffer_size_kb\x00', &(0x7f0000000140)='dax\x00', 0x29e4f4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x80) read$FUSE(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x38040, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x80000000}}, './file0\x00'}) fstat(0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) setresuid(r3, 0x0, r6) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="60058100f20c010023f2fd9a615351829793002f7f8244c3d20dd5b268cac4a0d6814437c322a875dbd4be61ddf5ef2d8ffcb8afddcda74f61f1aeffa289cc7b3c37611adfa83aca614a2fffdbb97823e6ebc1a69855814d32f84af191000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.445217547s ago: executing program 5 (id=622): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=0x1, 0x33, 0x0, 0x279, &(0x7f0000000580), 0x0, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000004d80)={0x28, 0x2, 0x0, {0x5, 0x0, 0x8000000000000000}}, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0xeffffffb, 0x80800) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x3, 0xdddd7000, 0x1, r3, 0x8}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x1a3280) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f00000002c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x4, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x2, r3, 0xa}) file_getattr(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x18, 0x1000) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r3, 0xb}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005240)={'ip6gre0\x00', &(0x7f00000051c0)={'syztnl0\x00', 0x0, 0x4, 0xa, 0x7, 0x108, 0x72, @empty, @mcast1, 0x7800, 0x8000, 0x1b57, 0x2}}) newfstatat(0xffffffffffffff9c, &(0x7f00000052c0)='./file0\x00', &(0x7f0000000040), 0x6000) syz_genetlink_get_family_id$wireguard(&(0x7f0000005380), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000440)='status\x00') getpid() socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r5, &(0x7f00000006c0)='3', 0x4e) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) 8.29734292s ago: executing program 1 (id=623): r0 = syz_open_dev$dri(&(0x7f00000005c0), 0x0, 0x402) r1 = socket(0xa, 0x3, 0xff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getrandom(&(0x7f0000000280)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4e0000001900010929bd700080000000021810000000fd000004000008000005000a0101021800168014000300fc00ef341cc48e00000000000000000000000000000600150002000000000005"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x2001}], 0x1, 0x40010002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000200)={0x0}) 5.574255108s ago: executing program 5 (id=629): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000280)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0xfc, {"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", 0xce2}}, 0x1006) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001340)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r3, 0x2, &(0x7f00000013c0)=0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000014c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001500), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x6) unshare(0x8000000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001580)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001800), 0x0, 0x2d, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="0200000000000400"], &(0x7f0000001a80)='syzkaller\x00', 0x5, 0xff7, &(0x7f0000001ac0)=""/4087, 0x40f00, 0xc, '\x00', r7, @fallback=0x1f, r1, 0x8, &(0x7f0000002ac0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x7, &(0x7f0000002b00), &(0x7f0000000080)=[{0x5, 0x3, 0xe, 0xa}, {0x1, 0x2, 0x3, 0x1}, {0x3, 0x23, 0xd, 0x6}, {0x1, 0x3, 0x400000b, 0x2}, {0x5, 0x4, 0x6, 0xc}, {0x3, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x10, 0x6}], 0x10, 0x5}, 0x94) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000002bc0)={'rti800\x00', [0x140, 0xc1, 0x4, 0x0, 0xfffffffd, 0x1, 0x8002, 0x1000, 0x1004, 0xc72d, 0x6, 0xfffbfffb, 0x1, 0x8, 0x10001, 0x80000000, 0xfc, 0xed, 0x6, 0x7, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x9, 0xae, 0x0, 0x9, 0x80, 0x4]}) ptrace$getregs(0xb, r3, 0x0, &(0x7f0000002c80)=""/4096) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000002c80)) socket$nl_route(0x10, 0x3, 0x0) 5.502150569s ago: executing program 1 (id=630): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') execveat$binfmt(r1, r2, 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000840)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x1148, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f3, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1118, 0x2, [@TCA_FLOWER_ACT={0x1114, 0x3, [@m_mirred={0x1110, 0x1, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x81, 0x10000000, 0x8, 0xcd91}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x1, 0x8, 0x35}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1ff, 0x6, 0x2, 0x1000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x10001, 0x20000000, 0x2, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xad, 0xd4a, 0x4, 0xfffffffe, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x2, 0x5, 0x7d4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x340000, 0xcfc, 0x0, 0x3, 0x8}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1148}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x10, 0xfffffff1, 0x8, 0x6324, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000001140)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000001200)=ANY=[@ANYBLOB="7472616eb68f630626f1733d756e69782c66fdff7569643d66313261376437372d356638392d006166362d396336652d620c660c313400372c00"]) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 4.628211762s ago: executing program 5 (id=631): syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a0401010000090401000001022000090401010101022000102401010001010000000203000000000624020102100705010540"], 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000200000040961b0600000000000001090224000100005000090400050303000000096100000901221800090581034000001510a9e84416264897bd8a"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000008c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000900)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000000980)=""/102392, 0x18ff8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x250700, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sequencer(0xffffffffffffff9c, 0x0, 0x88b02, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000019a00)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000019a40)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r5, &(0x7f0000019a80)='res', 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1"], 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 4.351131999s ago: executing program 4 (id=632): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000001b980)={0xbf0, 0x7, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = inotify_init() r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r2) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, 0x0, 0x84) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002900)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f000002da40)={0x7, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f000002da80)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f000002dac0)=0x7) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f000002db00), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f000002db40)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f000002db80)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r7, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x0, 0x0, 0x30, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x40}, 0x28) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000002d840)=ANY=[@ANYBLOB="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"], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/78, 0x4e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/140, 0x8c}, {&(0x7f0000001640)=""/35, 0x23}, {&(0x7f0000001680)=""/178, 0xb2}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/173, 0xad}, {&(0x7f0000002800)=""/76, 0x4c}], 0x8}, 0xe}], 0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x100fe10) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', &(0x7f0000000240)='ufs\x00', 0x0, &(0x7f0000000280)='ufstype=sunx86\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) 4.316656549s ago: executing program 3 (id=633): syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @multicast1}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0840, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x8000}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000580)='0', 0x1, 0x40000, &(0x7f00000005c0)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 4.314263283s ago: executing program 1 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x30, 0xffffffffffffffff, 0x1000000) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000040), 0x10) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xffffffff}, 0x8) close(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.901705366s ago: executing program 4 (id=637): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000"], 0x12c}, 0x1, 0x0, 0x0, 0x4048885}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x0, 0x4000000) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9848, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket(0x39, 0x5, 0x7) gettid() timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x10010, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f1401002abd7000000000000c00450072646d615f06000000000000001f7549cd94e8991063242dfd5b690e5247a48505e4f8cd1cfa18aaf317b6db118f5d4a7e"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x4, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000900)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) syz_80211_inject_frame(&(0x7f0000000940), &(0x7f0000000980)=ANY=[@ANYBLOB="30340800080211000001ffffff05ffff505050505050030484adca0001002d1a2000046f000000000000000500060005000000000402000000"], 0x3a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 3.88985016s ago: executing program 1 (id=638): socket$inet6_mptcp(0xa, 0x1, 0x106) unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget(0x2, 0x47a5f2ebe3f1275b) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/rnbd-client/ctl/map_device\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000540)={0x1000000, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000580)='8', 0x1, 0x10000000005971}]) msgsnd(r1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009805}, 0x40010) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0xae00) 3.630316539s ago: executing program 2 (id=639): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000100)=0x2, 0x4) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x28, r4, 0xe6e964277ae08d57, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x8, 0xfffffffffffffe8f, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.628960077s ago: executing program 3 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (fail_nth: 1) 2.922451647s ago: executing program 3 (id=641): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800fff, 0x200, 0x6, 0x8001}, 0x10) write(r0, &(0x7f0000000080)="2400003f1a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) 2.74022903s ago: executing program 3 (id=642): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0xf4, 0x0, {0x5, 0x4, 0x0, 0x2e, 0x0, 0x66, 0xa4, 0x3, 0x6c, 0xb, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x2d}}}}}}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x5, 0x0, [{0x978, 0x0, 0x200}, {0x389, 0x0, 0x9}, {0xa25, 0x0, 0x7}, {0x962, 0x0, 0x5}, {0xba5, 0x0, 0x2}]}) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000280)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f00000002c0)) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x39, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x1064, 0x0, 0x8, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x8}, {"168cee"}}}}}}, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r4 = syz_open_dev$video(&(0x7f0000000180), 0x10001, 0x1612c0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000340)={0x1, @output={0x0, 0x1, {0xfffff557, 0x6}, 0xb6, 0x4}}) 2.573258971s ago: executing program 2 (id=643): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c841}, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xf, @bearer=@l2={'ib', 0x3a, 'geneve0\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0xc101) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x240100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004010}, 0x50) r4 = msgget(0x2, 0x80) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000480)=""/80) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000500)='pim6reg1\x00') mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x80010, r2, 0x43c79000) msgsnd(r4, &(0x7f0000000540)={0x1, "0376d13b112cddd4c7388369103ab0e7f00af9369f631a3b079ce531b721aaad92d55e92dfdac1d43dffd378902ac2ae94815c56235e66b292d1d0e90b1692662282cea7d590bd3025bd5db32e1f0eec34369a40cb22be0e64b05c9a2be96d021e89a3b66046d4d4"}, 0x70, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000005c0)={0x1, 0x0, {0xbe, 0xfff, 0x1008, 0x8, 0x1, 0x0, 0x1, 0x2}}) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000640)=""/216, &(0x7f0000000740)=0xd8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r6 = getpid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x7f, 0x200, 0x4, 0x80000001, 0x4, r6}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000840)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4000060) r8 = semget$private(0x0, 0x3, 0x61) semctl$GETZCNT(r8, 0x3, 0xf, &(0x7f0000000a00)=""/18) write$eventfd(r2, &(0x7f0000000a40)=0x7, 0x8) syz_open_dev$video(&(0x7f0000000a80), 0x7, 0x40000) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x529, 0xc}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8001}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48014) getsockname$packet(r2, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000c00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6gre0\x00', r9, 0x29, 0x5e, 0x4, 0x2a4, 0x16, @empty, @private2={0xfc, 0x2, '\x00', 0x8}, 0x8, 0x7800, 0x2, 0x903}}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000d40)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000d80), 0xd45, 0x101800) 2.442046096s ago: executing program 2 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/drivers_autoprobe\x00', 0x481, 0x0) write$tcp_mem(r3, &(0x7f00000003c0)={0x3000000000, 0x20, 0x8001, 0x20, 0x1}, 0x48) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x71}}}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_KEYS={0xb4, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ea9cfb8033a186ce1218d30cee"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d42e6c5ea3eba44553ebef834e"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x24008080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES16], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000007c0)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) 2.371699965s ago: executing program 3 (id=645): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') execveat$binfmt(r1, r2, 0x0, 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000840)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001940)=@newtfilter={0x1148, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f3, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1118, 0x2, [@TCA_FLOWER_ACT={0x1114, 0x3, [@m_mirred={0x1110, 0x1, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x81, 0x10000000, 0x8, 0xcd91}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x9, 0x1, 0x8, 0x35}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x1ff, 0x6, 0x2, 0x1000}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x10001, 0x20000000, 0x2, 0x2}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xad, 0xd4a, 0x4, 0xfffffffe, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x80000001, 0x2, 0x5, 0x7d4}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x340000, 0xcfc, 0x0, 0x3, 0x8}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1148}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x10, 0xfffffff1, 0x8, 0x6324, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000001140)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000001200)=ANY=[@ANYBLOB="7472616eb68f630626f1733d756e69782c66fdff7569643d66313261376437372d356638392d006166362d396336652d620c660c313400372c00"]) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 2.365054583s ago: executing program 2 (id=646): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000040)={0x9, &(0x7f0000000480)=[{0x12, '\x00', @st={0x4, [{0x3, @svalue=0x100}, {0x1, @uvalue=0x4}, {0x0, @uvalue=0x7fffffff}, {0x3, @svalue=0x1000}]}}, {0x36, '\x00', @buffer={"15dc33ce9a54973d8fcc7513cfef7ec6000000002300", 0x20}, 0x74}, {0x2f, '\x00', @data=0x3, 0x2}, {0x5, '\x00', @st={0x4, [{0x1, @uvalue=0xffffffeffffffffa}, {0x3, @svalue=0x7}, {0x3, @svalue=0xb}, {0x2, @uvalue=0x1}]}, 0x6}, {0xd, '\x00', @data=0xf, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x7}, {0x3c, '\x00', @buffer={"d34fa264b0b65af381df51d6407942d5adf700e785a2c999105153b3b3eb7232", 0x20}, 0x40001b}, {0x1c, '\x00', @data=0x7fffffff, 0x5}, {0x14, '\x00', @data=0x7, 0x5}]}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x40000) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000003780)=ANY=[@ANYRES32=r4, @ANYRES32=r9, @ANYBLOB="2f000000202000000400", @ANYRES32], 0x20) listen(0xffffffffffffffff, 0x9) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f00000001c0), &(0x7f00000002c0)=r4}, 0x20) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.372828646s ago: executing program 2 (id=647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019940)=0x40003) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) ptrace$peek(0x4, r1, &(0x7f00000199c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000019a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000019a40)={0x16, 0x13, &(0x7f0000019b00)=@ringbuf={{0x18, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000019bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.252405021s ago: executing program 3 (id=648): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ff075500000900007202005465ac3900"], 0x20}, 0x1, 0x0, 0x0, 0x4000844}, 0x20008810) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) setns(0xc9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=@newlink={0x34, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18488}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x1, 0x84) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000780), 0x68c01, 0x0) write$binfmt_format(r9, &(0x7f00000007c0)='-1\x00', 0x3) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r8) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000000000002004e20e000000200"/138], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r10 = epoll_create1(0x0) r11 = syz_open_dev$media(&(0x7f0000000000), 0x103, 0x108002) ioctl$MEDIA_IOC_REQUEST_ALLOC(r11, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000080)={0x2}) 1.227858266s ago: executing program 5 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="38000000031401000000000000000900020073797a32000000000800410073697700ffff330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) (async) close(0x3) 77.881864ms ago: executing program 2 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000000008010800000000000000000a0000030900010073797a3100000000060002400e3a0000050003003a000000b21e968c6caab52137b19f2beea4896449262618d38427bec01f30762f15067bbc40b9a0233c3afa0d0e4fc99f86857aa5108ce9615a570e73b4186dc031af80f9de8d76c3bc3b85ee1a78a29a5e37d89abe08b2506ee3ce29014d66cc98d604839486d56cf39c6caa8117c317a5b5f82653d30c65e03995b3ae924444b305c10e297aab8c458a472608c9d1e21d1d3cda4e4d464e90"], 0x30}}, 0x4000100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa1d931fc0b864aaaaaaaaaaaa00080045000070000040000001907864010100ac1414aa0b009078032f00004500000000ac1414aa862a00000000000d5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300acec7f855a98c3eb00620bf1ec8c050c3f7d95411a5702e21cfd3ff5880905fa168a2200"/148], 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x20004040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000400001718d36fa209782f58806aa70e97e5a5000000"], 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x800}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000640)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r6}) 0s ago: executing program 4 (id=651): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x200, 0xb64, 0x4, 0x1}, 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) recvfrom$inet(r4, 0x0, 0x0, 0xc9100120, 0x0, 0x0) readahead(r2, 0x4, 0x9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001540)={0x1, &(0x7f0000001580)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001700)=ANY=[], 0xfe33) r7 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000440)=0x2, 0x4) sendto$inet6(r7, &(0x7f0000000480)='\x00', 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000000500)=""/4090, &(0x7f0000001500)=0xffa) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 215.755360][ T5752] libceph: connect (1)[c::]:6789 error -101 [ 215.755459][ T5752] libceph: mon0 (1)[c::]:6789 connect error [ 215.888835][ T7593] ceph: No mds server is up or the cluster is laggy [ 215.894779][ T31] audit: type=1400 audit(1791658171.123:972): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 217.111695][ T5719] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.289018][ T5719] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.309374][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.309418][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.373682][ T5719] usb 5-1: config 0 descriptor?? [ 217.624572][ T31] audit: type=1400 audit(1791658172.863:973): avc: denied { write } for pid=7613 comm="syz.3.369" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 217.624864][ T31] audit: type=1400 audit(1791658172.863:974): avc: denied { open } for pid=7613 comm="syz.3.369" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 217.626377][ T31] audit: type=1400 audit(1791658172.863:975): avc: denied { ioctl } for pid=7613 comm="syz.3.369" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 217.653349][ T7614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 217.656939][ T7614] batman_adv: batadv0: Adding interface: gretap2 [ 217.656950][ T7614] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.656972][ T7614] batman_adv: batadv0: Interface activated: gretap2 [ 217.703814][ T5719] usbhid 5-1:0.0: can't add hid device: -71 [ 217.703884][ T5719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.705927][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.709122][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.715005][ T5719] usb 5-1: USB disconnect, device number 14 [ 217.779596][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.5.365'. [ 217.791056][ T31] audit: type=1400 audit(1791658173.023:976): avc: denied { bind } for pid=7601 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.791098][ T31] audit: type=1400 audit(1791658173.023:977): avc: denied { getopt } for pid=7601 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.954476][ T7621] fuse: Bad value for 'fd' [ 218.189623][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 218.197756][ T7625] dlm: no local IP address has been set [ 218.197767][ T7625] dlm: cannot start dlm midcomms -107 [ 218.213096][ T5719] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.243898][ T7627] ip_tables: iptables: counters copy to user failed while replacing table [ 218.351298][ T5719] usb 6-1: device descriptor read/64, error -71 [ 218.581823][ T5719] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 218.894600][ T5719] usb 6-1: device descriptor read/64, error -71 [ 219.081895][ T5719] usb usb6-port1: attempt power cycle [ 219.852264][ T5719] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.867726][ T2309] libceph: connect (1)[c::]:6789 error -101 [ 219.867864][ T2309] libceph: mon0 (1)[c::]:6789 connect error [ 219.882367][ T5719] usb 6-1: device descriptor read/8, error -71 [ 219.969472][ T7644] ceph: No mds server is up or the cluster is laggy [ 220.007209][ T7653] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 220.135409][ T5719] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 220.377028][ T5719] usb 6-1: device descriptor read/8, error -71 [ 220.437579][ T7655] vlan2: entered promiscuous mode [ 220.437608][ T7655] bridge0: entered promiscuous mode [ 220.491836][ T5719] usb usb6-port1: unable to enumerate USB device [ 220.768772][ T31] audit: type=1400 audit(1791658176.003:978): avc: denied { mounton } for pid=7656 comm="syz.2.377" path="/77/file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.052669][ T31] audit: type=1400 audit(1791658176.273:979): avc: denied { name_connect } for pid=7658 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 221.052935][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.508136][ T25] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 221.510684][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.510731][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 221.510767][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.717923][ T25] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 221.733168][ T31] audit: type=1804 audit(1791658176.973:980): pid=7674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.383" name="/newroot/89/file0" dev="tmpfs" ino=536 res=1 errno=0 [ 222.005557][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.007096][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.026556][ T7675] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 223.026583][ T7675] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 223.026610][ T7675] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 223.026628][ T7675] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 223.026638][ T7675] page dumped because: unmovable page [ 223.026647][ T7675] page_owner info is not present (never set?) [ 223.246784][ T31] audit: type=1400 audit(1791658178.483:981): avc: denied { ioctl } for pid=7681 comm="syz.3.386" path="socket:[17525]" dev="sockfs" ino=17525 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.251199][ T31] audit: type=1400 audit(1791658178.483:982): avc: denied { ioctl } for pid=7682 comm="syz.2.384" path="socket:[17524]" dev="sockfs" ino=17524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.711675][ T31] audit: type=1400 audit(1791658178.933:983): avc: denied { ioctl } for pid=7689 comm="syz.2.388" path="socket:[16519]" dev="sockfs" ino=16519 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 224.095717][ T4939] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 224.226323][ T25] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 224.245109][ T4939] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 224.245971][ T4939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.246014][ T4939] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.246047][ T4939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.324336][ T4939] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 224.327345][ T25] usb 5-1: USB disconnect, device number 15 [ 225.535002][ T4939] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 225.661964][ T4939] usb 2-1: USB disconnect, device number 21 [ 226.021664][ T31] audit: type=1400 audit(1791658181.223:984): avc: denied { create } for pid=7703 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 226.021710][ T31] audit: type=1400 audit(1791658181.223:985): avc: denied { getopt } for pid=7703 comm="syz.5.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 227.714303][ T7712] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 228.090877][ T31] audit: type=1400 audit(1791658183.323:986): avc: denied { name_bind } for pid=7717 comm="syz.4.398" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 228.431816][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.472259][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 229.474691][ T9] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 229.480653][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 229.480693][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 229.480716][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.480744][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.485072][ T9] usb 5-1: config 0 descriptor?? [ 229.937892][ T9] hid_parser_main: 14 callbacks suppressed [ 229.937915][ T9] nintendo 0003:057E:200E.0003: unknown main item tag 0x3 [ 229.937944][ T9] nintendo 0003:057E:200E.0003: unexpected long global item [ 229.938426][ T9] nintendo 0003:057E:200E.0003: HID parse failed [ 229.977586][ T9] nintendo 0003:057E:200E.0003: probe - fail = -22 [ 229.977677][ T9] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -22 [ 230.144255][ T31] audit: type=1400 audit(1791658185.383:987): avc: denied { write } for pid=7730 comm="syz.2.394" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.144774][ T31] audit: type=1400 audit(1791658185.383:988): avc: denied { read } for pid=7730 comm="syz.2.394" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.147819][ T31] audit: type=1400 audit(1791658185.383:989): avc: denied { block_suspend } for pid=7730 comm="syz.2.394" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.286543][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.394'. [ 230.685295][ T31] audit: type=1400 audit(1791658185.923:990): avc: denied { write } for pid=7736 comm="syz.3.400" name="core" dev="configfs" ino=2883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 230.690594][ T7737] FAULT_INJECTION: forcing a failure. [ 230.690594][ T7737] name failslab, interval 1, probability 0, space 0, times 0 [ 230.690612][ T7737] CPU: 1 UID: 0 PID: 7737 Comm: syz.3.400 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.690627][ T7737] Tainted: [L]=SOFTLOCKUP [ 230.690632][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.690638][ T7737] Call Trace: [ 230.690642][ T7737] [ 230.690648][ T7737] dump_stack_lvl+0x100/0x190 [ 230.690668][ T7737] should_fail_ex.cold+0x5/0xa [ 230.690685][ T7737] should_failslab+0xc2/0x120 [ 230.690702][ T7737] __kmalloc_noprof+0xfc/0x840 [ 230.690717][ T7737] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 230.690735][ T7737] kernfs_fop_write_iter+0x26a/0x5f0 [ 230.690752][ T7737] vfs_write+0x6af/0x1050 [ 230.690766][ T7737] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 230.690782][ T7737] ? __pfx_vfs_write+0x10/0x10 [ 230.690795][ T7737] ? find_held_lock+0x2b/0x80 [ 230.690821][ T7737] ksys_write+0x12a/0x250 [ 230.690835][ T7737] ? __pfx_ksys_write+0x10/0x10 [ 230.690853][ T7737] do_syscall_64+0x123/0x790 [ 230.690873][ T7737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.690884][ T7737] RIP: 0033:0x7f6a6599e1d9 [ 230.690894][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.690904][ T7737] RSP: 002b:00007f6a667c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.690915][ T7737] RAX: ffffffffffffffda RBX: 00007f6a65c25fa0 RCX: 00007f6a6599e1d9 [ 230.690922][ T7737] RDX: 000000000000006a RSI: 00002000000000c0 RDI: 0000000000000006 [ 230.690929][ T7737] RBP: 00007f6a667c8090 R08: 0000000000000000 R09: 0000000000000000 [ 230.690935][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.690941][ T7737] R13: 00007f6a65c26038 R14: 00007f6a65c25fa0 R15: 00007ffe11f96ae8 [ 230.690957][ T7737] [ 230.691022][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0035 [ 230.753069][ T5719] usb 5-1: USB disconnect, device number 16 [ 231.236357][ T7743] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 232.498794][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 233.179762][ T5609] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 233.179779][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.179797][ T5609] Tainted: [L]=SOFTLOCKUP [ 233.179801][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 233.179809][ T5609] Workqueue: hci4 hci_rx_work [ 233.179826][ T5609] Call Trace: [ 233.179830][ T5609] [ 233.179835][ T5609] dump_stack_lvl+0x100/0x190 [ 233.179858][ T5609] sysfs_warn_dup.cold+0x1c/0x28 [ 233.179877][ T5609] sysfs_create_dir_ns+0x24b/0x2b0 [ 233.179889][ T5609] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 233.179900][ T5609] ? find_held_lock+0x2b/0x80 [ 233.179917][ T5609] ? kobject_add_internal+0x25f/0x930 [ 233.179929][ T5609] ? kobject_add_internal+0x25f/0x930 [ 233.179943][ T5609] ? do_raw_spin_unlock+0x145/0x1e0 [ 233.179959][ T5609] kobject_add_internal+0x2c8/0x930 [ 233.179973][ T5609] kobject_add+0x16a/0x1e0 [ 233.179985][ T5609] ? __pfx_kobject_add+0x10/0x10 [ 233.179996][ T5609] ? class_to_subsys+0x10f/0x150 [ 233.180012][ T5609] ? kobject_put+0xb9/0x640 [ 233.180022][ T5609] ? _raw_spin_unlock+0x28/0x50 [ 233.180040][ T5609] device_add+0x294/0x1970 [ 233.180056][ T5609] ? __pfx_dev_set_name+0x10/0x10 [ 233.180070][ T5609] ? __pfx_device_add+0x10/0x10 [ 233.180082][ T5609] ? mgmt_send_event_skb+0x2fb/0x460 [ 233.180100][ T5609] hci_conn_add_sysfs+0x1a3/0x260 [ 233.180116][ T5609] le_conn_complete_evt+0x122f/0x2130 [ 233.180133][ T5609] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 233.180145][ T5609] ? hci_event_packet+0x186/0xcd0 [ 233.180156][ T5609] ? hci_event_packet+0x186/0xcd0 [ 233.180172][ T5609] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 233.180186][ T5609] ? skb_pull_data+0x15f/0x1e0 [ 233.180202][ T5609] hci_le_meta_evt+0x34a/0x5f0 [ 233.180216][ T5609] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 233.180231][ T5609] hci_event_packet+0x51c/0xcd0 [ 233.180244][ T5609] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 233.180258][ T5609] ? __pfx_hci_event_packet+0x10/0x10 [ 233.180273][ T5609] ? lockdep_hardirqs_on+0x7d/0x110 [ 233.180292][ T5609] hci_rx_work+0x451/0xfc0 [ 233.180306][ T5609] process_one_work+0xac7/0x1b10 [ 233.180331][ T5609] ? __pfx_process_one_work+0x10/0x10 [ 233.180356][ T5609] ? lock_acquire+0x1d1/0x380 [ 233.180374][ T5609] ? __pfx_hci_rx_work+0x10/0x10 [ 233.180387][ T5609] worker_thread+0x5ef/0xe50 [ 233.180403][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 233.180414][ T5609] ? kthread+0x13a/0x450 [ 233.180429][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 233.180440][ T5609] kthread+0x373/0x450 [ 233.180456][ T5609] ? __pfx_kthread+0x10/0x10 [ 233.180473][ T5609] ret_from_fork+0x730/0xd60 [ 233.180487][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 233.180500][ T5609] ? __switch_to+0x800/0x10f0 [ 233.180516][ T5609] ? __pfx_kthread+0x10/0x10 [ 233.180533][ T5609] ret_from_fork_asm+0x1a/0x30 [ 233.180553][ T5609] [ 233.181901][ T5609] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 233.181936][ T5609] Bluetooth: hci4: failed to register connection device [ 233.235868][ T31] audit: type=1400 audit(1791658188.463:991): avc: denied { read append } for pid=7762 comm="syz.2.406" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.235904][ T31] audit: type=1400 audit(1791658188.463:992): avc: denied { open } for pid=7762 comm="syz.2.406" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 233.262133][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 233.265043][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 233.265068][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.265106][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.280938][ T9] usb 4-1: config 0 descriptor?? [ 233.530951][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 233.711716][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 233.713134][ T25] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 233.714873][ T25] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 233.720105][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.720177][ T25] usb 6-1: Product: syz [ 233.720250][ T25] usb 6-1: Manufacturer: syz [ 233.720323][ T25] usb 6-1: SerialNumber: syz [ 233.773146][ T7771] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 233.787031][ T25] usb 6-1: config 0 descriptor?? [ 233.957545][ T31] audit: type=1400 audit(1791658189.193:993): avc: denied { mount } for pid=7754 comm="syz.3.404" name="/" dev="hugetlbfs" ino=17723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 234.493823][ T25] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 234.494350][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 234.496129][ T9] input: HID 0b05:19b6 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0B05:19B6.0004/input/input14 [ 234.534825][ T9] asus 0003:0B05:19B6.0004: input,hidraw0: USB HID v0.00 Joystick [HID 0b05:19b6] on usb-dummy_hcd.3-1/input0 [ 234.536409][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.537688][ T25] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 234.537726][ T25] usb 6-1: media controller created [ 234.553702][ T7764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 234.553796][ T7764] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 234.610355][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.645295][ T25] usb 6-1: selecting invalid altsetting 7 [ 234.645314][ T25] cxusb: set interface failed [ 234.645323][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 234.650083][ T7764] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 234.650295][ T7764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.659618][ T7764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 234.688829][ T7764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.688893][ T7764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.703841][ T7764] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 234.703885][ T7764] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 234.731513][ T7764] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 234.744448][ T25] DVB: Unable to find symbol lgdt330x_attach() [ 234.744461][ T25] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 234.750264][ T7755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.776241][ T7755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.841791][ T25] rc_core: IR keymap rc-dvico-portable not found [ 234.841809][ T25] Registered IR keymap rc-empty [ 234.848074][ T25] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 234.851526][ T25] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input15 [ 234.874501][ T31] audit: type=1400 audit(1791658190.103:994): avc: denied { ioctl } for pid=7777 comm="syz.4.409" path="/dev/sg0" dev="devtmpfs" ino=821 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 234.913211][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 234.913229][ T25] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 234.985748][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 235.022033][ T7755] random: crng reseeded on system resumption [ 235.022634][ T31] audit: type=1400 audit(1791658190.263:995): avc: denied { write } for pid=7754 comm="syz.3.404" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 235.025893][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 235.133987][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 235.147998][ T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 235.154674][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.154693][ T9] usb 2-1: Product: syz [ 235.154705][ T9] usb 2-1: Manufacturer: syz [ 235.154717][ T9] usb 2-1: SerialNumber: syz [ 235.159372][ T9] usb 2-1: config 0 descriptor?? [ 235.181140][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 235.241753][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 235.367657][ T1970] dvb-usb: bulk message failed: -22 (1/0) [ 235.414376][ T31] audit: type=1800 audit(1791658190.633:996): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.413" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 235.613223][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 235.683058][ T9] gspca_sunplus: reg_r err -110 [ 235.871265][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 235.930698][ T5720] usb 2-1: USB disconnect, device number 22 [ 235.972131][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 236.057840][ T25] usb 6-1: USB disconnect, device number 7 [ 236.255802][ T25] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 236.314883][ T1970] usb 4-1: USB disconnect, device number 16 [ 236.317507][ T2309] asus 0003:0B05:19B6.0004: Asus failed to set fn lock: -71 [ 236.492885][ T31] audit: type=1400 audit(1791658191.733:997): avc: denied { listen } for pid=7798 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 236.501064][ T31] audit: type=1400 audit(1791658191.733:998): avc: denied { listen } for pid=7805 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 236.669039][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 236.692416][ T31] audit: type=1400 audit(1791658191.923:999): avc: denied { connect } for pid=7805 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.741647][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 236.741687][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 237.876162][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 238.205016][ T31] audit: type=1400 audit(1791658193.443:1000): avc: denied { append } for pid=7820 comm="syz.4.421" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.205260][ T31] audit: type=1400 audit(1791658193.443:1001): avc: denied { open } for pid=7820 comm="syz.4.421" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 238.236415][ T31] audit: type=1400 audit(1791658193.473:1002): avc: denied { setopt } for pid=7820 comm="syz.4.421" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.411092][ T7824] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 238.440859][ T7829] netlink: 72 bytes leftover after parsing attributes in process `syz.3.424'. [ 238.540370][ T31] audit: type=1400 audit(1791658193.773:1003): avc: denied { remount } for pid=7828 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.588566][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.423'. [ 238.591838][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.423'. [ 238.670900][ T7832] ip6erspan0: entered allmulticast mode [ 238.675723][ T31] audit: type=1400 audit(1791658193.883:1004): avc: denied { create } for pid=7825 comm="syz.5.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.675795][ T31] audit: type=1400 audit(1791658193.883:1005): avc: denied { ioctl } for pid=7825 comm="syz.5.423" path="socket:[17815]" dev="sockfs" ino=17815 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.741668][ T5609] Bluetooth: hci4: command 0x0406 tx timeout [ 238.837619][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 238.837651][ T5609] Bluetooth: hci5: command 0x0c1a tx timeout [ 239.364997][ T7834] tmpfs: Bad value for 'mpol' [ 240.437972][ T4189] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.565647][ T4189] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.656183][ T4189] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.662674][ T1970] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 240.726557][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 240.726575][ T31] audit: type=1400 audit(1791658195.953:1007): avc: denied { view } for pid=7853 comm="syz.1.434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 240.760909][ T7854] ip_tables: iptables: counters copy to user failed while replacing table [ 240.801334][ T4189] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.814155][ T1970] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 240.816646][ T1970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.816667][ T1970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 240.816710][ T1970] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.816742][ T1970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.821722][ T5626] Bluetooth: hci4: command 0x0406 tx timeout [ 240.850697][ T1970] hub 3-1:1.0: bad descriptor, ignoring hub [ 240.850715][ T1970] hub 3-1:1.0: probe with driver hub failed with error -5 [ 240.857767][ T1970] cdc_wdm 3-1:1.0: skipping garbage [ 240.857781][ T1970] cdc_wdm 3-1:1.0: skipping garbage [ 240.858017][ T1970] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 240.906367][ T5626] Bluetooth: hci5: command 0x0c1a tx timeout [ 241.007168][ T5609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.010953][ T31] audit: type=1400 audit(1791658196.243:1008): avc: denied { ioctl } for pid=7856 comm="syz-executor" path="socket:[16759]" dev="sockfs" ino=16759 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.011130][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.019170][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.045486][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.060032][ T5609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 241.082622][ T31] audit: type=1400 audit(1791658196.313:1009): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 241.116206][ T31] audit: type=1400 audit(1791658196.353:1010): avc: denied { write } for pid=7848 comm="syz.2.431" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 241.231159][ T31] audit: type=1400 audit(1791658196.463:1011): avc: denied { execute_no_trans } for pid=7848 comm="syz.2.431" path=2F6D656D66643A2D42D54F34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.269023][ T31] audit: type=1400 audit(1791658196.503:1012): avc: denied { shutdown } for pid=7848 comm="syz.2.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.340986][ T4189] bridge_slave_1: left allmulticast mode [ 241.341008][ T4189] bridge_slave_1: left promiscuous mode [ 241.341159][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.375853][ T4189] batman_adv: batadv0: Interface deactivated: gretap2 [ 241.408483][ T4939] libceph: connect (1)[c::]:6789 error -101 [ 241.408632][ T4939] libceph: mon0 (1)[c::]:6789 connect error [ 241.931507][ T7871] fuse: Bad value for 'fd' [ 242.365656][ T5802] libceph: connect (1)[c::]:6789 error -101 [ 242.365812][ T5802] libceph: mon0 (1)[c::]:6789 connect error [ 242.380095][ T4939] usb 3-1: USB disconnect, device number 16 [ 242.392457][ T7864] ceph: No mds server is up or the cluster is laggy [ 242.659777][ T7876] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 242.817419][ T4189] batman_adv: batadv0: Removing interface: gretap2 [ 243.223802][ T5626] Bluetooth: hci1: command tx timeout [ 243.398908][ T4189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.416622][ T4189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.438081][ T4189] bond0 (unregistering): Released all slaves [ 243.469271][ T4189] bond1 (unregistering): Released all slaves [ 243.505395][ T4189] bond2 (unregistering): Released all slaves [ 243.521012][ T4189] bond3 (unregistering): Released all slaves [ 243.604563][ T7887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.931009][ T4189] bond4 (unregistering): Released all slaves [ 244.048387][ T4189] bond5 (unregistering): Released all slaves [ 244.171318][ T4189] bond6 (unregistering): Released all slaves [ 244.299226][ T4189] bond8 (unregistering): Released all slaves [ 244.422116][ T4189] bond9 (unregistering): Released all slaves [ 244.543260][ T4189] bond10 (unregistering): Released all slaves [ 244.566559][ T7878] ip6erspan0: entered allmulticast mode [ 244.855706][ T4189] tipc: Left network mode [ 245.021710][ T5720] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 245.161765][ T5720] usb 5-1: device descriptor read/64, error -71 [ 245.294488][ T31] audit: type=1400 audit(1791658200.493:1013): avc: denied { wake_alarm } for pid=7905 comm="syz.2.443" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.301675][ T5626] Bluetooth: hci1: command tx timeout [ 245.411655][ T5720] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.102584][ T5720] usb 5-1: device descriptor read/64, error -71 [ 246.261643][ T5720] usb usb5-port1: attempt power cycle [ 246.782670][ T31] audit: type=1400 audit(1791658202.023:1014): avc: denied { write } for pid=7896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.841623][ T5720] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 246.861508][ T31] audit: type=1400 audit(1791658202.093:1015): avc: denied { write } for pid=7927 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.884697][ T5720] usb 5-1: device descriptor read/8, error -71 [ 246.886558][ T4189] hsr_slave_0: left promiscuous mode [ 246.888248][ T4189] hsr_slave_1: left promiscuous mode [ 246.889150][ T4189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.889166][ T4189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.889938][ T4189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.891059][ T4189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.946982][ T4189] veth1_macvtap: left promiscuous mode [ 246.947002][ T4189] veth0_macvtap: left promiscuous mode [ 246.947045][ T4189] veth1_vlan: left promiscuous mode [ 246.947075][ T4189] veth0_vlan: left promiscuous mode [ 247.520870][ T7931] fuse: Bad value for 'fd' [ 247.938311][ T5720] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 247.950995][ T5626] Bluetooth: hci1: command tx timeout [ 248.100657][ T5720] usb 5-1: device descriptor read/8, error -71 [ 248.244635][ T5720] usb usb5-port1: unable to enumerate USB device [ 248.704205][ T7934] netlink: 17 bytes leftover after parsing attributes in process `syz.5.448'. [ 249.613771][ T4189] team0 (unregistering): Port device team_slave_1 removed [ 249.630719][ T4189] team0 (unregistering): Port device team_slave_0 removed [ 249.656532][ T31] audit: type=1400 audit(1791658204.893:1016): avc: denied { read write } for pid=7942 comm="syz.4.452" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.656810][ T31] audit: type=1400 audit(1791658204.893:1017): avc: denied { open } for pid=7942 comm="syz.4.452" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 249.771621][ T5720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 249.777008][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 249.777025][ T7943] openvswitch: netlink: Flow actions attr not present in new flow. [ 249.791206][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 249.818107][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 249.931858][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 249.932800][ T5720] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 249.938813][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.938833][ T5720] usb 6-1: Product: syz [ 249.938845][ T5720] usb 6-1: Manufacturer: syz [ 249.938857][ T5720] usb 6-1: SerialNumber: syz [ 249.959388][ T5720] r8152-cfgselector 6-1: Unknown version 0x0000 [ 249.959407][ T5720] r8152-cfgselector 6-1: config 0 descriptor?? [ 249.962650][ T5720] hub 6-1:0.0: bad descriptor, ignoring hub [ 249.962668][ T5720] hub 6-1:0.0: probe with driver hub failed with error -5 [ 250.024487][ T5626] Bluetooth: hci1: command tx timeout [ 250.069486][ T31] audit: type=1400 audit(1791658205.303:1018): avc: denied { connect } for pid=7957 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.095137][ T31] audit: type=1400 audit(1791658205.313:1019): avc: denied { bind } for pid=7957 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.095179][ T31] audit: type=1400 audit(1791658205.313:1020): avc: denied { write } for pid=7957 comm="syz.4.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.125534][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.125575][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.250531][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.451'. [ 250.313723][ T2309] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.341207][ T4189] IPVS: stop unused estimator thread 0... [ 250.468651][ T2309] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 250.498366][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.498489][ T2309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.498517][ T2309] usb 5-1: Product: syz [ 250.498531][ T2309] usb 5-1: Manufacturer: syz [ 250.498544][ T2309] usb 5-1: SerialNumber: syz [ 250.508588][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.508673][ T7856] bridge_slave_0: entered allmulticast mode [ 250.545874][ T7856] bridge_slave_0: entered promiscuous mode [ 250.603323][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.603401][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.603520][ T7856] bridge_slave_1: entered allmulticast mode [ 250.630263][ T7856] bridge_slave_1: entered promiscuous mode [ 250.681110][ T31] audit: type=1400 audit(1791658205.913:1021): avc: denied { write } for pid=7965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.872809][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.875487][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.922955][ T2309] gspca_main: mars-2.14.0 probing 093a:050f [ 250.926857][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.940233][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.949882][ T2309] usb 5-1: USB disconnect, device number 21 [ 251.040890][ T7856] team0: Port device team_slave_0 added [ 251.054931][ T7856] team0: Port device team_slave_1 added [ 251.108345][ T31] audit: type=1400 audit(1791658206.343:1022): avc: denied { write } for pid=7999 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.217469][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.217489][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.217515][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.227176][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.227188][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.227206][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.298257][ T7856] hsr_slave_0: entered promiscuous mode [ 251.298897][ T7856] hsr_slave_1: entered promiscuous mode [ 251.299345][ T7856] debugfs: 'hsr0' already exists in 'hsr' [ 251.299359][ T7856] Cannot create hsr debugfs directory [ 251.443111][ T6735] r8152-cfgselector 6-1: USB disconnect, device number 8 [ 251.819260][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 252.028836][ T8017] wireguard0: entered promiscuous mode [ 252.028887][ T8017] wireguard0: entered allmulticast mode [ 252.893334][ T31] audit: type=1400 audit(1791658208.133:1023): avc: denied { create } for pid=8020 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 252.893374][ T31] audit: type=1400 audit(1791658208.133:1024): avc: denied { create } for pid=8020 comm="syz.4.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 252.900039][ T31] audit: type=1400 audit(1791658208.133:1025): avc: denied { ioctl } for pid=8020 comm="syz.4.457" path="socket:[17267]" dev="sockfs" ino=17267 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 252.901288][ T31] audit: type=1400 audit(1791658208.133:1026): avc: denied { ioctl } for pid=8020 comm="syz.4.457" path="socket:[17267]" dev="sockfs" ino=17267 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 253.602009][ T8030] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 253.684802][ T8035] fuse: Bad value for 'fd' [ 254.206572][ T8038] rnbd_client L607: Mapping device /dev/ram0 on session s0, (access_mode: rw, nr_poll_queues: 0) [ 254.234671][ T8038] rtrs_client L2101: : Failed to resolve address, err: -ENODEV [ 254.235019][ T8038] rtrs_client L2644: : init_conns() failed: err=-ENODEV path=@ip:127.0.0.1 [:0] [ 254.509928][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 254.575424][ T31] audit: type=1400 audit(1791658209.813:1027): avc: denied { write } for pid=8039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.740506][ T31] audit: type=1400 audit(1791658209.973:1028): avc: denied { bind } for pid=8059 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.743772][ T31] audit: type=1400 audit(1791658209.973:1029): avc: denied { read } for pid=8059 comm="syz.2.466" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 254.824053][ T31] audit: type=1400 audit(1791658210.063:1030): avc: denied { write } for pid=8064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.941333][ T31] audit: type=1400 audit(1791658210.173:1031): avc: denied { read } for pid=8059 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.960858][ T7856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.968044][ T31] audit: type=1400 audit(1791658210.183:1032): avc: denied { write } for pid=8059 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.975126][ T7856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.001782][ T7856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.016773][ T7856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 255.020919][ T7856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.044172][ T7856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 255.047127][ T7856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.071831][ T7856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 255.141173][ T8079] serio: Serial port ttyS3 [ 255.319276][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.355003][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.412538][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.412623][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.456451][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.456537][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.531459][ T5720] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 255.582200][ T1970] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 255.711861][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 255.712470][ T5720] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.717165][ T5720] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 255.717189][ T5720] usb 3-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 255.717224][ T5720] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 255.717247][ T5720] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 255.717273][ T5720] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.717306][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.812730][ T8099] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 255.827573][ T1970] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 255.956914][ T1970] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 255.956944][ T1970] usb 6-1: config 0 has no interface number 0 [ 255.957053][ T1970] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.060024][ T1970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.060056][ T1970] usb 6-1: Product: syz [ 256.060117][ T1970] usb 6-1: Manufacturer: syz [ 256.060201][ T1970] usb 6-1: SerialNumber: syz [ 256.150090][ T1970] usb 6-1: config 0 descriptor?? [ 256.429616][ T5720] usbtmc 3-1:16.0: bulk endpoints not found [ 256.462287][ T1970] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 256.592319][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 256.592344][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 257.268296][ T8108] fuse: Bad value for 'fd' [ 258.109680][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.485495][ T7856] veth0_vlan: entered promiscuous mode [ 258.521327][ T7856] veth1_vlan: entered promiscuous mode [ 258.895593][ T1970] usb 3-1: USB disconnect, device number 17 [ 258.915877][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 258.915891][ T31] audit: type=1400 audit(1791658214.153:1039): avc: denied { write } for pid=8124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.976790][ T7856] veth0_macvtap: entered promiscuous mode [ 260.039395][ T7856] veth1_macvtap: entered promiscuous mode [ 260.116259][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.138634][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.212821][ T4072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.212858][ T4072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.212886][ T4072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.212914][ T4072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.261673][ T31] audit: type=1400 audit(1791658215.493:1040): avc: denied { write } for pid=8146 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.268385][ T1970] usb 6-1: USB disconnect, device number 9 [ 260.270458][ T1970] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 261.191650][ T31] audit: type=1400 audit(1791658216.403:1041): avc: denied { connect } for pid=8158 comm="syz.5.477" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 261.280774][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.280793][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.418696][ T4072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.418714][ T4072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.439781][ T31] audit: type=1400 audit(1791658216.673:1042): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/root/syzkaller.WTSApl/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 261.466567][ T31] audit: type=1400 audit(1791658216.693:1043): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/root/syzkaller.WTSApl/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 261.466614][ T31] audit: type=1400 audit(1791658216.693:1044): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/root/syzkaller.WTSApl/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 261.523353][ T31] audit: type=1400 audit(1791658216.763:1045): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 261.523648][ T31] audit: type=1400 audit(1791658216.763:1046): avc: denied { mount } for pid=7856 comm="syz-executor" name="/" dev="gadgetfs" ino=7472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 261.554808][ T31] audit: type=1400 audit(1791658216.773:1047): avc: denied { mount } for pid=7856 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 261.554854][ T31] audit: type=1400 audit(1791658216.773:1048): avc: denied { mounton } for pid=7856 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 262.631623][ T5720] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 262.757267][ T8193] CIFS: Attempting to mount //127.0.0.1/share [ 262.895579][ T5720] usb 6-1: Using ep0 maxpacket: 16 [ 262.898258][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 262.898300][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.481'. [ 263.016555][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 263.042705][ T8196] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 263.046596][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 263.200546][ T8193] CIFS: VFS: cifs_mount failed w/return code = -112 [ 263.204678][ T5720] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 263.207890][ T5720] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 263.207914][ T5720] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.239555][ T5720] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.239575][ T5720] usb 6-1: Product: syz [ 263.239596][ T5720] usb 6-1: Manufacturer: syz [ 263.239608][ T5720] usb 6-1: SerialNumber: syz [ 263.251176][ T5720] usb 6-1: config 0 descriptor?? [ 263.258100][ T5720] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 263.258128][ T5720] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 263.901822][ T6735] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.057711][ T31] kauditd_printk_skb: 103 callbacks suppressed [ 264.057730][ T31] audit: type=1326 audit(1791658219.293:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.058185][ T31] audit: type=1326 audit(1791658219.293:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.058244][ T31] audit: type=1326 audit(1791658219.293:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.058280][ T31] audit: type=1326 audit(1791658219.293:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.058319][ T31] audit: type=1326 audit(1791658219.293:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83279de6b code=0x7ffc0000 [ 264.058384][ T31] audit: type=1326 audit(1791658219.293:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83279de6b code=0x7ffc0000 [ 264.058581][ T31] audit: type=1326 audit(1791658219.293:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.060485][ T5720] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 264.060586][ T31] audit: type=1326 audit(1791658219.293:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.060613][ T31] audit: type=1326 audit(1791658219.293:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.060635][ T31] audit: type=1326 audit(1791658219.293:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8167 comm="syz.5.479" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83279e1d9 code=0x7ffc0000 [ 264.061120][ T5720] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 264.067979][ T6735] usb 4-1: Using ep0 maxpacket: 16 [ 264.148916][ T6735] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.151181][ T6735] usb 4-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 264.151201][ T6735] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 264.152654][ T6735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 264.152674][ T6735] usb 4-1: SerialNumber: syz [ 264.332860][ T5609] Bluetooth: hci4: unexpected event for opcode 0x080f [ 264.430657][ T2309] usb 4-1: USB disconnect, device number 17 [ 264.458849][ T8217] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 264.501763][ T8219] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 264.501802][ T8219] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 264.729215][ T5720] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 264.982106][ T5626] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 265.026795][ T8227] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 265.491765][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 265.533355][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 265.541946][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 265.549344][ T5720] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 266.023622][ T5720] usb 6-1: USB disconnect, device number 10 [ 267.598707][ T8241] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 267.598743][ T8241] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 269.143683][ T31] kauditd_printk_skb: 86 callbacks suppressed [ 269.143700][ T31] audit: type=1400 audit(1791658224.383:1248): avc: denied { setopt } for pid=8242 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.143837][ T31] audit: type=1400 audit(1791658224.383:1249): avc: denied { connect } for pid=8242 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.315840][ T8254] gadgetfs: bound to dummy_udc driver [ 269.562154][ T1970] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 269.562549][ C1] gadgetfs: connected [ 269.563264][ T1970] gadgetfs: disconnected [ 269.591711][ T4939] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 269.712050][ C1] gadgetfs: connected [ 269.713957][ T1970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 269.714721][ T1970] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 269.714818][ T1970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.756434][ T4939] usb 6-1: Using ep0 maxpacket: 16 [ 269.767205][ T4939] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 269.797461][ T4939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.797584][ T4939] usb 6-1: Product: syz [ 269.797661][ T4939] usb 6-1: Manufacturer: syz [ 269.797746][ T4939] usb 6-1: SerialNumber: syz [ 269.811392][ T9] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 269.836240][ T8259] kAFS: unparsable volume name [ 269.862701][ T4939] r8152-cfgselector 6-1: Unknown version 0x0000 [ 269.862723][ T4939] r8152-cfgselector 6-1: config 0 descriptor?? [ 269.865953][ C1] gadgetfs: configuration #1 [ 269.868498][ T4939] hub 6-1:0.0: bad descriptor, ignoring hub [ 269.868521][ T4939] hub 6-1:0.0: probe with driver hub failed with error -5 [ 269.912321][ T8261] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100] [ 269.912339][ T8261] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 269.912352][ T8261] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 269.912362][ T8261] One or more global auth toks could not properly register; rc = [-22] [ 269.916573][ T8261] Error validating options; rc = [-22] [ 269.957276][ T8242] gadgetfs: suspended from state 3 [ 269.957352][ T8242] gadgetfs: disconnected [ 269.965208][ T5720] usb 1-1: USB disconnect, device number 6 [ 269.994646][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.994685][ T9] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 269.996718][ T9] usb 3-1: config 8 has an invalid interface number: 109 but max is 0 [ 269.996740][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 269.996756][ T9] usb 3-1: config 8 has no interface number 0 [ 269.996787][ T9] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 269.996803][ T9] usb 3-1: config 8 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.012871][ T9] usb 3-1: string descriptor 0 read error: -22 [ 270.012957][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.037504][ T9] metro_usb 3-1:8.109: required endpoints missing [ 270.170536][ T8253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.499'. [ 270.199626][ T31] audit: type=1400 audit(1791658225.433:1250): avc: denied { unmount } for pid=7856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 270.237866][ T9] usb 3-1: USB disconnect, device number 18 [ 271.131634][ T1970] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 271.261754][ T1970] usb 4-1: device descriptor read/64, error -71 [ 271.502523][ T1970] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 271.631912][ T9] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 271.691658][ T1970] usb 4-1: device descriptor read/64, error -71 [ 271.801862][ T1970] usb usb4-port1: attempt power cycle [ 272.272214][ T1970] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 272.314513][ T1970] usb 4-1: device descriptor read/8, error -71 [ 272.825426][ T1970] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 272.826285][ T31] audit: type=1400 audit(1791658228.053:1251): avc: denied { create } for pid=8291 comm="syz.1.510" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 272.931614][ T1970] usb 4-1: device descriptor read/8, error -71 [ 272.985673][ T8303] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 273.008993][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.035181][ T8302] netlink: 36 bytes leftover after parsing attributes in process `syz.5.511'. [ 273.050777][ T1970] usb usb4-port1: unable to enumerate USB device [ 273.054839][ T8306] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 273.071022][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.071320][ T8303] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 273.073947][ T8303] bond1: (slave gre1): Error -95 calling set_mac_address [ 273.095307][ T31] audit: type=1400 audit(1791658228.333:1252): avc: denied { unlink } for pid=5606 comm="syz-executor" name="file0" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 273.205684][ T8306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.357177][ T31] audit: type=1400 audit(1791658228.503:1253): avc: denied { sqpoll } for pid=8313 comm="syz.5.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 273.401998][ T8308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.402312][ T8308] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 273.403448][ T8308] bond1: (slave gre1): Error -95 calling set_mac_address [ 273.448462][ T8303] gretap1: entered promiscuous mode [ 273.468601][ T8310] gretap1: entered promiscuous mode [ 273.488601][ T8321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.504184][ T8307] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.507702][ T8307] bond1: (slave bond3): Enslaving as an active interface with a down link [ 273.532925][ T8317] bond1 (unregistering): (slave bond3): Releasing active interface [ 273.537128][ T8317] bond1 (unregistering): Released all slaves [ 273.589277][ T5720] libceph: connect (1)[c::]:6789 error -101 [ 273.589369][ T5720] libceph: mon0 (1)[c::]:6789 connect error [ 273.632346][ T8306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.635738][ T8306] bond1: (slave bond2): Enslaving as an active interface with a down link [ 273.640201][ T8308] bond1 (unregistering): (slave bond2): Releasing active interface [ 273.680661][ T8323] Bluetooth: MGMT ver 1.23 [ 273.687536][ T8324] ceph: No mds server is up or the cluster is laggy [ 273.691042][ T8308] bond1 (unregistering): Released all slaves [ 274.922084][ T31] audit: type=1400 audit(1791658230.163:1254): avc: denied { setopt } for pid=8345 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 275.531657][ T2309] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 275.531766][ T5720] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 275.682231][ T5720] usb 6-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 275.683141][ T2309] usb 5-1: New USB device found, idVendor=6615, idProduct=0012, bcdDevice=b0.9f [ 275.683257][ T5720] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 275.683278][ T5720] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.683291][ T5720] usb 6-1: config 0 interface 0 has no altsetting 0 [ 275.683308][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.684886][ T2309] usb 5-1: config 52 has an invalid interface number: 31 but max is 0 [ 275.684900][ T2309] usb 5-1: config 52 has an invalid interface number: 115 but max is 0 [ 275.684920][ T2309] usb 5-1: config 52 has an invalid interface number: 29 but max is 0 [ 275.684930][ T2309] usb 5-1: config 52 has an invalid interface number: 216 but max is 0 [ 275.684940][ T2309] usb 5-1: config 52 has 4 interfaces, different from the descriptor's value: 1 [ 275.684951][ T2309] usb 5-1: config 52 has no interface number 0 [ 275.684960][ T2309] usb 5-1: config 52 has no interface number 1 [ 275.684968][ T2309] usb 5-1: config 52 has no interface number 2 [ 275.684976][ T2309] usb 5-1: config 52 has no interface number 3 [ 275.685004][ T2309] usb 5-1: config 52 interface 31 altsetting 192 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 275.685018][ T2309] usb 5-1: config 52 interface 31 altsetting 192 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 275.685032][ T2309] usb 5-1: config 52 interface 31 altsetting 192 has 3 endpoint descriptors, different from the interface descriptor's value: 11 [ 275.685046][ T2309] usb 5-1: too many endpoints for config 52 interface 115 altsetting 38: 215, using maximum allowed: 30 [ 275.685062][ T2309] usb 5-1: config 52 interface 115 altsetting 38 has an invalid descriptor for endpoint zero, skipping [ 275.685073][ T2309] usb 5-1: config 52 interface 115 altsetting 38 has a duplicate endpoint with address 0x7, skipping [ 275.685083][ T2309] usb 5-1: config 52 interface 115 altsetting 38 bulk endpoint 0xE has invalid maxpacket 1023 [ 275.685095][ T2309] usb 5-1: config 52 interface 115 altsetting 38 has a duplicate endpoint with address 0x7, skipping [ 275.685105][ T2309] usb 5-1: config 52 interface 115 altsetting 38 has 4 endpoint descriptors, different from the interface descriptor's value: 215 [ 275.685122][ T2309] usb 5-1: config 52 interface 29 altsetting 236 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 275.685134][ T2309] usb 5-1: config 52 interface 29 altsetting 236 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 275.685147][ T2309] usb 5-1: too many endpoints for config 52 interface 216 altsetting 55: 61, using maximum allowed: 30 [ 275.685169][ T2309] usb 5-1: config 52 interface 216 altsetting 55 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 275.685181][ T2309] usb 5-1: config 52 interface 216 altsetting 55 has a duplicate endpoint with address 0x86, skipping [ 275.685192][ T2309] usb 5-1: config 52 interface 216 altsetting 55 has 2 endpoint descriptors, different from the interface descriptor's value: 61 [ 275.685204][ T2309] usb 5-1: config 52 interface 31 has no altsetting 0 [ 275.685213][ T2309] usb 5-1: config 52 interface 115 has no altsetting 0 [ 275.685221][ T2309] usb 5-1: config 52 interface 29 has no altsetting 0 [ 275.685230][ T2309] usb 5-1: config 52 interface 216 has no altsetting 0 [ 275.687060][ T5720] usb 6-1: config 0 descriptor?? [ 275.691652][ T2309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.691671][ T2309] usb 5-1: Product: Х [ 275.691685][ T2309] usb 5-1: Manufacturer: ̋૧嬍㵶㳨훋쁽韝 [ 275.691696][ T2309] usb 5-1: SerialNumber: 䬘咭䊯뗇ꚸ볬笾⟁緰䱄貸̸鱩돶뙁把辟폂詛৭圤窛繌핶 [ 275.748100][ T6735] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 275.916035][ T6735] usb 4-1: Using ep0 maxpacket: 8 [ 275.916820][ T6735] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 275.918002][ T6735] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 275.918022][ T6735] usb 4-1: config 179 has no interface number 0 [ 275.918054][ T6735] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 275.918075][ T6735] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 275.918095][ T6735] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.918134][ T6735] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 275.918151][ T6735] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 275.918185][ T6735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.929396][ T8350] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 275.941340][ T6735] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 275.955359][ T5720] usb 6-1: string descriptor 0 read error: -71 [ 275.956792][ T5720] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 275.975229][ T5720] usb 6-1: USB disconnect, device number 12 [ 276.476967][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 278.381262][ T2309] usb 5-1: USB disconnect, device number 22 [ 278.410950][ T1970] usb 4-1: USB disconnect, device number 22 [ 278.780006][ T8378] key id 000004d2 not found [ 278.805671][ T8378] SET target dimension over the limit! [ 278.812323][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 279.238883][ T31] audit: type=1400 audit(1791658234.473:1255): avc: denied { create } for pid=8368 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.307634][ T31] audit: type=1804 audit(1791658234.543:1256): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.531" name="/newroot/120/file0" dev="tmpfs" ino=717 res=1 errno=0 [ 279.492987][ T8381] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 279.493028][ T8381] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 279.494789][ T8381] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 279.494870][ T8381] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 279.494910][ T8381] page dumped because: unmovable page [ 279.494950][ T8381] page_owner info is not present (never set?) [ 279.507785][ T31] audit: type=1400 audit(1791658234.743:1257): avc: denied { bind } for pid=8368 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.508025][ T31] audit: type=1400 audit(1791658234.743:1258): avc: denied { listen } for pid=8368 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 280.184363][ T8385] input: syz1 as /devices/virtual/input/input16 [ 280.508234][ T31] audit: type=1400 audit(1791658235.393:1259): avc: denied { ioctl } for pid=8382 comm="syz.2.530" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 281.029278][ T8389] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48400 sclass=netlink_xfrm_socket pid=8389 comm=syz.4.532 [ 282.418881][ T8402] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 283.051658][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.538'. [ 283.402238][ T31] audit: type=1400 audit(1791658238.633:1260): avc: denied { mounton } for pid=8407 comm="syz.3.539" path="/9/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 283.492971][ T8412] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 283.492991][ T8412] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 283.493005][ T8412] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 283.493015][ T8412] One or more global auth toks could not properly register; rc = [-22] [ 283.493043][ T8412] Error validating options; rc = [-22] [ 283.494028][ T8412] syz_tun: entered allmulticast mode [ 283.759475][ T6735] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.227277][ T8417] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48400 sclass=netlink_xfrm_socket pid=8417 comm=syz.5.543 [ 284.762232][ T6735] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 284.763111][ T6735] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.763139][ T6735] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 284.763170][ T6735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.811749][ T6735] opticon 4-1:1.0: opticon converter detected [ 284.819216][ T6735] usb 4-1: opticon converter now attached to ttyUSB0 [ 285.022521][ T6735] usb 4-1: USB disconnect, device number 23 [ 285.042688][ T6735] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 285.043149][ T6735] opticon 4-1:1.0: device disconnected [ 286.511219][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.516819][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.528303][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.528652][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.546038][ T8424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.658804][ T8434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.659142][ T8434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.732981][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.733373][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.781627][ T5802] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 286.876416][ T31] audit: type=1804 audit(1791658242.113:1261): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.547" name="/newroot/10/file0" dev="tmpfs" ino=76 res=1 errno=0 [ 286.988487][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.989878][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.050923][ T31] audit: type=1400 audit(1791658242.283:1262): avc: denied { ioctl } for pid=8439 comm="syz.2.548" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.134804][ T31] audit: type=1400 audit(1791658242.373:1263): avc: denied { map } for pid=8439 comm="syz.2.548" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.138977][ T31] audit: type=1400 audit(1791658242.373:1264): avc: denied { execute } for pid=8439 comm="syz.2.548" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 287.180413][ T8443] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 287.332306][ T8444] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 287.332332][ T8444] flags: 0x17ff00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 287.332359][ T8444] raw: 017ff00000002000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 287.332375][ T8444] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 287.332385][ T8444] page dumped because: unmovable page [ 287.332393][ T8444] page_owner info is not present (never set?) [ 288.405630][ T13] IPVS: starting estimator thread 0... [ 288.561686][ T8464] IPVS: using max 73 ests per chain, 175200 per kthread [ 289.011803][ T5802] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 289.163708][ T5802] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 289.169456][ T5802] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 289.169563][ T5802] usb 2-1: config 0 has no interface number 0 [ 289.169698][ T5802] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 289.169732][ T5802] usb 2-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 289.169780][ T5802] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 289.169828][ T5802] usb 2-1: config 0 interface 238 has no altsetting 0 [ 289.246871][ T5802] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 289.246887][ T5802] usb 2-1: Product: syz [ 289.246895][ T5802] usb 2-1: Manufacturer: syz [ 289.246902][ T5802] usb 2-1: SerialNumber: syz [ 289.248388][ T5802] usb 2-1: config 0 descriptor?? [ 289.300406][ T5802] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 289.433222][ T8469] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48400 sclass=netlink_xfrm_socket pid=8469 comm=syz.5.544 [ 289.466418][ T5802] usb 2-1: USB disconnect, device number 24 [ 289.556376][ T31] audit: type=1400 audit(1791658244.793:1265): avc: denied { append } for pid=8477 comm="syz.2.558" name="001" dev="devtmpfs" ino=732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 289.715352][ T31] audit: type=1400 audit(1791658244.953:1266): avc: denied { shutdown } for pid=8477 comm="syz.2.558" lport=55043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 289.805870][ T1970] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 290.092492][ T1970] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 290.112574][ T1970] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.112602][ T1970] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 290.112643][ T1970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.246393][ T1970] opticon 5-1:1.0: opticon converter detected [ 290.328582][ T1970] usb 5-1: opticon converter now attached to ttyUSB0 [ 290.436789][ T5752] usb 5-1: USB disconnect, device number 23 [ 290.465658][ T5752] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 290.466238][ T5752] opticon 5-1:1.0: device disconnected [ 290.791669][ T31] audit: type=1400 audit(1791658245.963:1267): avc: denied { mount } for pid=8490 comm="syz.1.561" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 292.516202][ T8506] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48400 sclass=netlink_xfrm_socket pid=8506 comm=syz.5.564 [ 293.909760][ T31] audit: type=1400 audit(1791658249.143:1268): avc: denied { mount } for pid=8514 comm="syz.3.568" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 293.938282][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.568'. [ 293.955757][ T8512] netlink: 'syz.2.566': attribute type 21 has an invalid length. [ 293.955779][ T8512] netlink: 128 bytes leftover after parsing attributes in process `syz.2.566'. [ 293.971011][ T8512] netlink: 'syz.2.566': attribute type 5 has an invalid length. [ 293.971026][ T8512] netlink: 'syz.2.566': attribute type 6 has an invalid length. [ 293.971036][ T8512] netlink: 3 bytes leftover after parsing attributes in process `syz.2.566'. [ 294.166740][ T8519] wireguard0: entered promiscuous mode [ 294.166755][ T8519] wireguard0: entered allmulticast mode [ 294.171350][ T8522] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 294.211907][ T8522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.302563][ T31] audit: type=1400 audit(1791658249.543:1269): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 294.361818][ T5752] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 294.379878][ T8522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.380030][ T8522] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 294.380388][ T8522] bond1: (slave gre1): Error -95 calling set_mac_address [ 294.597539][ T5752] usb 4-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00 [ 294.600011][ T5752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.600050][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.600075][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.600095][ T5752] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.600130][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.971909][ T5752] usb 4-1: config 0 descriptor?? [ 295.075064][ T8522] 8021q: adding VLAN 0 to HW filter on device bond4 [ 295.077365][ T8522] bond1: (slave bond4): Enslaving as an active interface with a down link [ 295.091851][ T5802] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 295.108962][ T8522] bond1 (unregistering): (slave bond4): Releasing active interface [ 295.122264][ T8522] bond1 (unregistering): Released all slaves [ 295.278740][ T5802] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 295.282632][ T5802] usb 5-1: config 0 has an invalid interface number: 238 but max is 0 [ 295.282656][ T5802] usb 5-1: config 0 has no interface number 0 [ 295.282693][ T5802] usb 5-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 295.282734][ T5802] usb 5-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 295.282756][ T5802] usb 5-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 295.282775][ T5802] usb 5-1: config 0 interface 238 has no altsetting 0 [ 295.293922][ T5802] usb 5-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 295.293961][ T5802] usb 5-1: Product: syz [ 295.293974][ T5802] usb 5-1: Manufacturer: syz [ 295.293986][ T5802] usb 5-1: SerialNumber: syz [ 295.313528][ T5752] usbhid 4-1:0.0: can't add hid device: -71 [ 295.313608][ T5752] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.318030][ T5802] usb 5-1: config 0 descriptor?? [ 295.330043][ T5752] usb 4-1: USB disconnect, device number 24 [ 295.480628][ T5802] ni6501 5-1:0.238: driver 'ni6501' failed to auto-configure device. [ 296.334537][ T8525] syzkaller0: entered promiscuous mode [ 296.334564][ T8525] syzkaller0: entered allmulticast mode [ 296.504965][ T4939] usb 5-1: USB disconnect, device number 24 [ 296.646013][ T31] audit: type=1400 audit(1791658251.883:1270): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 296.781660][ T31] audit: type=1400 audit(1791658252.013:1271): avc: denied { map } for pid=8552 comm="syz.3.575" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.781713][ T31] audit: type=1400 audit(1791658252.013:1272): avc: denied { execute } for pid=8552 comm="syz.3.575" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.959124][ T31] audit: type=1400 audit(1791658252.193:1273): avc: denied { ioctl } for pid=8552 comm="syz.3.575" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 297.134386][ T31] audit: type=1400 audit(1791658252.373:1274): avc: denied { mount } for pid=8557 comm="syz.1.576" name="/" dev="autofs" ino=20611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 297.266790][ T31] audit: type=1400 audit(1791658252.503:1275): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 297.354657][ T31] audit: type=1400 audit(1791658252.593:1276): avc: denied { setopt } for pid=8550 comm="syz.5.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.652429][ T6735] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 298.801608][ T6735] usb 2-1: Using ep0 maxpacket: 16 [ 298.802758][ T6735] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.803852][ T6735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.803879][ T6735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.803979][ T6735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 298.804014][ T6735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.805789][ T6735] usb 2-1: config 0 descriptor?? [ 299.280413][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280458][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280478][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280496][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280516][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280536][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280555][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280572][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280590][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.280608][ T6735] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 299.374707][ T6735] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input17 [ 299.445794][ T6735] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 299.470301][ T8553] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.575'. [ 299.470324][ T8553] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 299.659108][ T8588] wireguard1: entered promiscuous mode [ 299.659131][ T8588] wireguard1: entered allmulticast mode [ 300.325812][ T8595] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 300.325837][ T8595] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 301.374195][ T5802] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 301.566169][ T5802] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 301.639645][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.639769][ T5802] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.639862][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.749415][ T5802] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 301.816324][ T5719] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 301.948103][ T31] audit: type=1400 audit(1791658257.183:1277): avc: denied { read } for pid=8622 comm="syz.2.591" name="transactions" dev="binder" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 301.948147][ T31] audit: type=1400 audit(1791658257.183:1278): avc: denied { open } for pid=8622 comm="syz.2.591" path="/dev/binderfs/binder_logs/transactions" dev="binder" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 302.101127][ T8626] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=48400 sclass=netlink_xfrm_socket pid=8626 comm=syz.3.590 [ 302.202054][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.238546][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.809853][ T8638] ip_tables: iptables: counters copy to user failed while replacing table [ 302.912422][ T5720] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.241615][ T31] audit: type=1400 audit(1791658258.413:1279): avc: denied { map } for pid=8635 comm="syz.5.593" path="socket:[20736]" dev="sockfs" ino=20736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.241681][ T31] audit: type=1400 audit(1791658258.413:1280): avc: denied { read } for pid=8635 comm="syz.5.593" path="socket:[20736]" dev="sockfs" ino=20736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.252076][ T5720] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 303.252921][ T5720] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 303.252940][ T5720] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 303.252973][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.288426][ T5720] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 303.311715][ T5719] usb 2-1: device descriptor read/64, error -71 [ 303.561749][ T5719] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 303.564164][ T5719] usb 2-1: device reset changed ep0 maxpacket size! [ 303.856937][ T5720] gspca_sn9c2028: read1 error -110 [ 303.860795][ T5720] gspca_sn9c2028: read1 error -32 [ 303.862835][ T5720] gspca_sn9c2028: read1 error -32 [ 303.862903][ T5720] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -32 [ 303.899067][ T9] usb 2-1: USB disconnect, device number 25 [ 304.096394][ T5752] usb 3-1: USB disconnect, device number 19 [ 304.197615][ T8646] warning: `syz.3.595' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 304.200376][ T8646] netlink: 'syz.3.595': attribute type 4 has an invalid length. [ 304.200392][ T8646] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 304.200413][ T8646] netlink: 152 bytes leftover after parsing attributes in process `syz.3.595'. [ 304.201893][ T8646] bond0: (slave gre0): refused to change device type [ 304.201911][ T8646] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.406957][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 304.416103][ T8630] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19 [ 304.477493][ T8652] netlink: 5180 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.478001][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.478159][ T8651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.479366][ T31] audit: type=1400 audit(1791658259.703:1281): avc: denied { listen } for pid=8647 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 304.479658][ T31] audit: type=1400 audit(1791658259.713:1282): avc: denied { append } for pid=8647 comm="syz.3.596" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 304.895410][ T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 304.913337][ T9] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 304.913361][ T9] usb 2-1: config 0 has no interface number 0 [ 304.913391][ T9] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 304.913410][ T9] usb 2-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 304.913427][ T9] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 304.913439][ T9] usb 2-1: config 0 interface 238 has no altsetting 0 [ 304.913916][ T5802] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 305.012410][ T9] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 305.012434][ T9] usb 2-1: Product: syz [ 305.012447][ T9] usb 2-1: Manufacturer: syz [ 305.012461][ T9] usb 2-1: SerialNumber: syz [ 305.014630][ T9] usb 2-1: config 0 descriptor?? [ 305.067064][ T5802] usb 5-1: USB disconnect, device number 25 [ 305.123298][ T9] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 305.240501][ T8633] syzkaller0: entered promiscuous mode [ 305.240523][ T8633] syzkaller0: entered allmulticast mode [ 305.305892][ T9] usb 2-1: USB disconnect, device number 26 [ 305.512499][ T8664] FAULT_INJECTION: forcing a failure. [ 305.512499][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.512522][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.4.600 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.512538][ T8664] Tainted: [L]=SOFTLOCKUP [ 305.512543][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.512556][ T8664] Call Trace: [ 305.512561][ T8664] [ 305.512566][ T8664] dump_stack_lvl+0x100/0x190 [ 305.512587][ T8664] should_fail_ex.cold+0x5/0xa [ 305.512604][ T8664] _copy_from_user+0x2e/0xd0 [ 305.512622][ T8664] raw_ioctl_init+0xa8/0x850 [ 305.512638][ T8664] ? __pfx_raw_ioctl_init+0x10/0x10 [ 305.512653][ T8664] ? tomoyo_path_number_perm+0x188/0x580 [ 305.512680][ T8664] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 305.512693][ T8664] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 305.512711][ T8664] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 305.512731][ T8664] raw_ioctl+0x138a/0x2b80 [ 305.512757][ T8664] ? __pfx_raw_ioctl+0x10/0x10 [ 305.512776][ T8664] ? selinux_file_ioctl+0x13b/0x290 [ 305.512791][ T8664] ? selinux_file_ioctl+0xb6/0x290 [ 305.512808][ T8664] ? __pfx_raw_ioctl+0x10/0x10 [ 305.512823][ T8664] __x64_sys_ioctl+0x18e/0x210 [ 305.512837][ T8664] do_syscall_64+0x123/0x790 [ 305.512855][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.512866][ T8664] RIP: 0033:0x7fd33899de6b [ 305.512876][ T8664] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 305.512886][ T8664] RSP: 002b:00007fd3398c4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.512898][ T8664] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd33899de6b [ 305.512905][ T8664] RDX: 00007fd3398c5fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 305.512911][ T8664] RBP: 00007fd3398c5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 305.512918][ T8664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd3398c4fa0 [ 305.512924][ T8664] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 305.512939][ T8664] [ 306.899290][ T12] IPVS: starting estimator thread 0... [ 306.992475][ T8678] IPVS: using max 74 ests per chain, 177600 per kthread [ 307.144198][ T31] audit: type=1400 audit(1791658262.373:1283): avc: denied { write } for pid=8681 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.278386][ T31] audit: type=1400 audit(1791658262.513:1284): avc: denied { bind } for pid=8681 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.280399][ T31] audit: type=1400 audit(1791658262.513:1285): avc: denied { setopt } for pid=8681 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.070812][ T8692] FAULT_INJECTION: forcing a failure. [ 308.070812][ T8692] name failslab, interval 1, probability 0, space 0, times 0 [ 308.070834][ T8692] CPU: 0 UID: 0 PID: 8692 Comm: syz.4.607 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.070850][ T8692] Tainted: [L]=SOFTLOCKUP [ 308.070853][ T8692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.070860][ T8692] Call Trace: [ 308.070865][ T8692] [ 308.070870][ T8692] dump_stack_lvl+0x100/0x190 [ 308.070889][ T8692] should_fail_ex.cold+0x5/0xa [ 308.070906][ T8692] should_failslab+0xc2/0x120 [ 308.070923][ T8692] __kmalloc_cache_noprof+0x91/0x6d0 [ 308.070934][ T8692] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 308.070947][ T8692] ? loopback_open+0x145/0x13d0 [ 308.070966][ T8692] loopback_open+0x145/0x13d0 [ 308.070987][ T8692] snd_pcm_open_substream+0xa76/0x1850 [ 308.071002][ T8692] ? __kasan_kmalloc+0x10/0xb0 [ 308.071017][ T8692] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 308.071032][ T8692] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 308.071044][ T8692] ? snd_pcm_oss_open+0x5c5/0x1380 [ 308.071059][ T8692] snd_pcm_oss_open+0x715/0x1380 [ 308.071076][ T8692] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 308.071091][ T8692] ? __pfx_default_wake_function+0x10/0x10 [ 308.071106][ T8692] ? __lock_acquire+0x5c0/0x1f40 [ 308.071123][ T8692] ? do_raw_spin_lock+0x128/0x260 [ 308.071139][ T8692] ? soundcore_open+0x231/0x5a0 [ 308.071152][ T8692] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 308.071165][ T8692] soundcore_open+0x2e3/0x5a0 [ 308.071177][ T8692] ? __pfx_soundcore_open+0x10/0x10 [ 308.071188][ T8692] chrdev_open+0x234/0x6a0 [ 308.071204][ T8692] ? __pfx_chrdev_open+0x10/0x10 [ 308.071220][ T8692] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 308.071236][ T8692] do_dentry_open+0x6ab/0x14d0 [ 308.071250][ T8692] ? __pfx_chrdev_open+0x10/0x10 [ 308.071268][ T8692] vfs_open+0x82/0x3f0 [ 308.071287][ T8692] path_openat+0x19fa/0x2440 [ 308.071306][ T8692] ? __pfx_path_openat+0x10/0x10 [ 308.071326][ T8692] do_file_open+0x20e/0x430 [ 308.071343][ T8692] ? __pfx_do_file_open+0x10/0x10 [ 308.071370][ T8692] ? _raw_spin_unlock+0x28/0x50 [ 308.071383][ T8692] ? alloc_fd+0x471/0x7a0 [ 308.071404][ T8692] do_sys_openat2+0x10f/0x1e0 [ 308.071414][ T8692] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.071430][ T8692] __x64_sys_openat+0x12d/0x210 [ 308.071441][ T8692] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.071458][ T8692] do_syscall_64+0x123/0x790 [ 308.071475][ T8692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.071486][ T8692] RIP: 0033:0x7fd33899e1d9 [ 308.071496][ T8692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.071507][ T8692] RSP: 002b:00007fd3398c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 308.071518][ T8692] RAX: ffffffffffffffda RBX: 00007fd338c25fa0 RCX: 00007fd33899e1d9 [ 308.071525][ T8692] RDX: 0000000000020400 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 308.071532][ T8692] RBP: 00007fd338a35888 R08: 0000000000000000 R09: 0000000000000000 [ 308.071548][ T8692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.071558][ T8692] R13: 00007fd338c26038 R14: 00007fd338c25fa0 R15: 00007ffe17712eb8 [ 308.071584][ T8692] [ 308.447276][ T8695] kAFS: No cell specified [ 308.817944][ T31] audit: type=1400 audit(1791658264.053:1286): avc: denied { checkpoint_restore } for pid=8681 comm="syz.2.604" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.272466][ T1970] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 309.428588][ T1970] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 309.457691][ T1970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.457976][ T1970] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 309.458183][ T1970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.913453][ T1970] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 309.997125][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.997540][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.333814][ T8708] gretap1: entered promiscuous mode [ 310.369022][ T8717] FAULT_INJECTION: forcing a failure. [ 310.369022][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.369049][ T8717] CPU: 0 UID: 0 PID: 8717 Comm: syz.2.613 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.369065][ T8717] Tainted: [L]=SOFTLOCKUP [ 310.369072][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.369083][ T8717] Call Trace: [ 310.369090][ T8717] [ 310.369098][ T8717] dump_stack_lvl+0x100/0x190 [ 310.369127][ T8717] should_fail_ex.cold+0x5/0xa [ 310.369151][ T8717] _copy_from_user+0x2e/0xd0 [ 310.369170][ T8717] raw_ioctl_init+0xa8/0x850 [ 310.369186][ T8717] ? __pfx_raw_ioctl_init+0x10/0x10 [ 310.369200][ T8717] ? tomoyo_path_number_perm+0x188/0x580 [ 310.369237][ T8717] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 310.369258][ T8717] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 310.369289][ T8717] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 310.369310][ T8717] raw_ioctl+0x138a/0x2b80 [ 310.369328][ T8717] ? __pfx_raw_ioctl+0x10/0x10 [ 310.369343][ T8717] ? selinux_file_ioctl+0x13b/0x290 [ 310.369359][ T8717] ? selinux_file_ioctl+0xb6/0x290 [ 310.369385][ T8717] ? __pfx_raw_ioctl+0x10/0x10 [ 310.369409][ T8717] __x64_sys_ioctl+0x18e/0x210 [ 310.369432][ T8717] do_syscall_64+0x123/0x790 [ 310.369452][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.369464][ T8717] RIP: 0033:0x7f149339de6b [ 310.369473][ T8717] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 310.369484][ T8717] RSP: 002b:00007f1494246f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.369495][ T8717] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f149339de6b [ 310.369503][ T8717] RDX: 00007f1494247fd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 310.369513][ T8717] RBP: 00007f1494247fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 310.369524][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1494246fa0 [ 310.369535][ T8717] R13: 00002000000000c0 R14: 0000000000000003 R15: 0000000000000000 [ 310.369559][ T8717] [ 310.927216][ T8719] ip_tables: iptables: counters copy to user failed while replacing table [ 310.941700][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 311.092586][ T9] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 311.093448][ T9] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 311.093470][ T9] usb 2-1: config 0 has no interface number 0 [ 311.093500][ T9] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 311.093521][ T9] usb 2-1: config 0 interface 238 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 0 [ 311.093547][ T9] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 311.093565][ T9] usb 2-1: config 0 interface 238 has no altsetting 0 [ 311.126876][ T9] usb 2-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 311.126896][ T9] usb 2-1: Product: syz [ 311.126908][ T9] usb 2-1: Manufacturer: syz [ 311.126920][ T9] usb 2-1: SerialNumber: syz [ 311.174672][ T9] usb 2-1: config 0 descriptor?? [ 311.268009][ T9] ni6501 2-1:0.238: driver 'ni6501' failed to auto-configure device. [ 311.526543][ T8706] bond1 (unregistering): Released all slaves [ 311.550796][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.550844][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.671481][ T8709] syzkaller0: entered promiscuous mode [ 311.671501][ T8709] syzkaller0: entered allmulticast mode [ 311.690070][ T4939] usb 2-1: USB disconnect, device number 27 [ 312.370853][ T8710] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input22 [ 312.576183][ T8733] ip_tables: iptables: counters copy to user failed while replacing table [ 312.622183][ T1970] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 312.788941][ T1970] usb 5-1: USB disconnect, device number 26 [ 314.058894][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.624'. [ 314.103012][ T5719] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 314.263944][ T5719] usb 5-1: Using ep0 maxpacket: 8 [ 314.265850][ T5719] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.288624][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.288649][ T5719] usb 5-1: Product: syz [ 314.288662][ T5719] usb 5-1: Manufacturer: syz [ 314.288676][ T5719] usb 5-1: SerialNumber: syz [ 314.321846][ T5719] usb 5-1: config 0 descriptor?? [ 315.436802][ T5719] dvb_usb_rtl28xxu 5-1:0.0: chip type detection failed -110 [ 315.436875][ T5719] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 316.354785][ T8759] FAULT_INJECTION: forcing a failure. [ 316.354785][ T8759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.354820][ T8759] CPU: 1 UID: 0 PID: 8759 Comm: syz.5.622 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.354848][ T8759] Tainted: [L]=SOFTLOCKUP [ 316.354854][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 316.354866][ T8759] Call Trace: [ 316.354873][ T8759] [ 316.354882][ T8759] dump_stack_lvl+0x100/0x190 [ 316.354914][ T8759] should_fail_ex.cold+0x5/0xa [ 316.354942][ T8759] strncpy_from_user+0x3b/0x2d0 [ 316.354975][ T8759] path_setxattrat+0x127/0x3b0 [ 316.355002][ T8759] ? __pfx_path_setxattrat+0x10/0x10 [ 316.355025][ T8759] ? ksys_write+0x190/0x250 [ 316.355049][ T8759] ? ksys_write+0x190/0x250 [ 316.355093][ T8759] ? xfd_validate_state+0x129/0x190 [ 316.355120][ T8759] __x64_sys_setxattr+0xc6/0x140 [ 316.355138][ T8759] ? do_syscall_64+0xae/0x790 [ 316.355164][ T8759] ? lockdep_hardirqs_on+0x7d/0x110 [ 316.355190][ T8759] do_syscall_64+0x123/0x790 [ 316.355220][ T8759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.355240][ T8759] RIP: 0033:0x7fc83279e1d9 [ 316.355256][ T8759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.355275][ T8759] RSP: 002b:00007fc8335fd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 316.355293][ T8759] RAX: ffffffffffffffda RBX: 00007fc832a25fa0 RCX: 00007fc83279e1d9 [ 316.355306][ T8759] RDX: 0000200000000740 RSI: 0000200000000700 RDI: 0000000000000000 [ 316.355318][ T8759] RBP: 00007fc832835888 R08: 0000000000000002 R09: 0000000000000000 [ 316.355330][ T8759] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 316.355345][ T8759] R13: 00007fc832a26038 R14: 00007fc832a25fa0 R15: 00007ffca1baf318 [ 316.355371][ T8759] [ 317.289538][ T8773] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 317.672112][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.627'. [ 317.810849][ T1970] usb 5-1: USB disconnect, device number 27 [ 317.899736][ T31] audit: type=1400 audit(1791658273.133:1287): avc: denied { ioctl } for pid=8779 comm="syz.4.632" path="socket:[21287]" dev="sockfs" ino=21287 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 318.130368][ T31] audit: type=1400 audit(1791658273.353:1288): avc: denied { connect } for pid=8781 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.130495][ T31] audit: type=1400 audit(1791658273.353:1289): avc: denied { setopt } for pid=8781 comm="syz.1.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.171781][ T5719] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 318.181312][ T8785] syzkaller0: entered promiscuous mode [ 318.181330][ T8785] syzkaller0: entered allmulticast mode [ 318.327247][ T8795] netlink: 268 bytes leftover after parsing attributes in process `syz.4.637'. [ 318.342022][ T5719] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 318.344290][ T5719] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.344318][ T5719] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 318.344338][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.368958][ T8793] FAULT_INJECTION: forcing a failure. [ 318.368958][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.368983][ T8793] CPU: 1 UID: 0 PID: 8793 Comm: syz.2.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.369005][ T8793] Tainted: [L]=SOFTLOCKUP [ 318.369011][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.369020][ T8793] Call Trace: [ 318.369025][ T8793] [ 318.369032][ T8793] dump_stack_lvl+0x100/0x190 [ 318.369061][ T8793] should_fail_ex.cold+0x5/0xa [ 318.369084][ T8793] _copy_from_user+0x2e/0xd0 [ 318.369110][ T8793] __sys_bpf+0x2f5/0x4a30 [ 318.369134][ T8793] ? __pfx___sys_bpf+0x10/0x10 [ 318.369150][ T8793] ? find_held_lock+0x2b/0x80 [ 318.369172][ T8793] ? futex_wake+0x4ea/0x5e0 [ 318.369205][ T8793] ? rcu_read_lock_any_held+0x6a/0x90 [ 318.369220][ T8793] ? find_held_lock+0x2b/0x80 [ 318.369242][ T8793] ? ksys_write+0x190/0x250 [ 318.369261][ T8793] ? ksys_write+0x190/0x250 [ 318.369293][ T8793] ? __x64_sys_futex+0x34f/0x4d0 [ 318.369314][ T8793] ? __x64_sys_futex+0x358/0x4d0 [ 318.369339][ T8793] ? xfd_validate_state+0x129/0x190 [ 318.369359][ T8793] ? __x64_sys_bpf+0xce/0x140 [ 318.369375][ T8793] __x64_sys_bpf+0xce/0x140 [ 318.369393][ T8793] ? do_syscall_64+0xae/0x790 [ 318.369416][ T8793] do_syscall_64+0x123/0x790 [ 318.369440][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.369457][ T8793] RIP: 0033:0x7f149339e1d9 [ 318.369470][ T8793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.369484][ T8793] RSP: 002b:00007f1494249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.369506][ T8793] RAX: ffffffffffffffda RBX: 00007f1493625fa0 RCX: 00007f149339e1d9 [ 318.369516][ T8793] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 318.369525][ T8793] RBP: 00007f1493435888 R08: 0000000000000000 R09: 0000000000000000 [ 318.369535][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.369545][ T8793] R13: 00007f1493626038 R14: 00007f1493625fa0 R15: 00007ffffafa1168 [ 318.369567][ T8793] [ 318.418703][ T5719] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 318.573676][ T8778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.573971][ T8778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.916835][ T8803] FAULT_INJECTION: forcing a failure. [ 318.916835][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.916864][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.3.640 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.916888][ T8803] Tainted: [L]=SOFTLOCKUP [ 318.916894][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 318.916903][ T8803] Call Trace: [ 318.916908][ T8803] [ 318.916915][ T8803] dump_stack_lvl+0x100/0x190 [ 318.916944][ T8803] should_fail_ex.cold+0x5/0xa [ 318.916969][ T8803] _copy_from_user+0x2e/0xd0 [ 318.916992][ T8803] copy_msghdr_from_user+0x9f/0x4c0 [ 318.917016][ T8803] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 318.917044][ T8803] ? lock_acquire+0x1d1/0x380 [ 318.917063][ T8803] ? get_pid_task+0x2a/0x250 [ 318.917088][ T8803] ___sys_sendmsg+0x106/0x1e0 [ 318.917111][ T8803] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.917131][ T8803] ? get_pid_task+0x106/0x250 [ 318.917162][ T8803] ? find_held_lock+0x2b/0x80 [ 318.917201][ T8803] __sys_sendmsg+0x160/0x210 [ 318.917218][ T8803] ? __pfx___sys_sendmsg+0x10/0x10 [ 318.917247][ T8803] do_syscall_64+0x123/0x790 [ 318.917274][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.917291][ T8803] RIP: 0033:0x7fafdc79e1d9 [ 318.917306][ T8803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.917322][ T8803] RSP: 002b:00007fafdd735028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.917339][ T8803] RAX: ffffffffffffffda RBX: 00007fafdca25fa0 RCX: 00007fafdc79e1d9 [ 318.917350][ T8803] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000003 [ 318.917360][ T8803] RBP: 00007fafdd735090 R08: 0000000000000000 R09: 0000000000000000 [ 318.917370][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.917381][ T8803] R13: 00007fafdca26038 R14: 00007fafdca25fa0 R15: 00007ffd6c679ed8 [ 318.917404][ T8803] [ 319.265021][ T8801] ip_tables: iptables: counters copy to user failed while replacing table [ 319.279839][ T8797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.319117][ T31] audit: type=1400 audit(1791658274.553:1290): avc: denied { mount } for pid=8805 comm="syz.2.639" name="/" dev="ramfs" ino=21344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 319.419645][ T31] audit: type=1400 audit(1791658274.653:1291): avc: denied { bind } for pid=8805 comm="syz.2.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.465041][ T8778] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24 [ 319.776925][ T31] audit: type=1400 audit(1791658275.013:1292): avc: denied { getopt } for pid=8819 comm="syz.2.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.364605][ T8827] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 322.049695][ T5719] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4) [ 322.224412][ T5719] usb 6-1: USB disconnect, device number 13 [ 322.235048][ T8837] netlink: 40 bytes leftover after parsing attributes in process `syz.5.649'. [ 322.251118][ T5719] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 322.263184][ T5719] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 322.271589][ T5719] CPU: 0 UID: 0 PID: 5719 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.282506][ T5719] Tainted: [L]=SOFTLOCKUP [ 322.286808][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 322.296844][ T5719] Workqueue: usb_hub_wq hub_event [ 322.301858][ T5719] RIP: 0010:klist_put+0x4d/0x1d0 [ 322.306784][ T5719] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc ef 0c [ 322.326371][ T5719] RSP: 0018:ffffc9000432f600 EFLAGS: 00010202 [ 322.332416][ T5719] RAX: dffffc0000000000 RBX: ffff8880583ee480 RCX: ffffc9001cfdd000 [ 322.340367][ T5719] RDX: 000000000000000b RSI: ffffffff8bca6645 RDI: 0000000000000058 [ 322.348316][ T5719] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff244edd4 [ 322.356264][ T5719] R10: ffffffff92276ea3 R11: 0000000000000000 R12: 0000000000000000 [ 322.364213][ T5719] R13: 0000000000000001 R14: ffffffff92276e60 R15: dffffc0000000000 [ 322.372166][ T5719] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 322.381074][ T5719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.387638][ T5719] CR2: 00007fc8335fcff8 CR3: 0000000037028000 CR4: 00000000003526f0 [ 322.395589][ T5719] Call Trace: [ 322.398849][ T5719] [ 322.401760][ T5719] klist_remove+0x14c/0x2e0 [ 322.406243][ T5719] ? __mutex_unlock_slowpath+0x2b1/0x930 [ 322.411860][ T5719] ? __pfx_klist_remove+0x10/0x10 [ 322.416863][ T5719] ? devres_release_all+0x117/0x180 [ 322.422047][ T5719] ? device_links_driver_cleanup+0x2f7/0x3e0 [ 322.428009][ T5719] device_release_driver_internal+0x4fb/0x620 [ 322.434057][ T5719] bus_remove_device+0x2bc/0x560 [ 322.438978][ T5719] ? __pfx_bus_remove_device+0x10/0x10 [ 322.444420][ T5719] ? __pfx_device_remove_attrs+0x10/0x10 [ 322.450039][ T5719] device_del+0x376/0x9b0 [ 322.454372][ T5719] ? __pfx_device_del+0x10/0x10 [ 322.459210][ T5719] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 322.464919][ T5719] ? lock_acquire+0x1d1/0x380 [ 322.469589][ T5719] usb_disable_device+0x367/0x810 [ 322.474596][ T5719] ? mark_held_locks+0x40/0x70 [ 322.479343][ T5719] usb_disconnect+0x2e2/0x9a0 [ 322.484002][ T5719] hub_event+0x1bb1/0x4420 [ 322.488406][ T5719] ? __lock_acquire+0x5c0/0x1f40 [ 322.493328][ T5719] ? __pfx_hub_event+0x10/0x10 [ 322.498072][ T5719] ? print_lock+0x50/0x80 [ 322.502381][ T5719] ? lock_acquire+0x1d1/0x380 [ 322.507040][ T5719] ? process_one_work+0xa2c/0x1b10 [ 322.512138][ T5719] ? process_one_work+0x906/0x1b10 [ 322.517238][ T5719] ? process_one_work+0x906/0x1b10 [ 322.522336][ T5719] process_one_work+0xac7/0x1b10 [ 322.527262][ T5719] ? __pfx_process_one_work+0x10/0x10 [ 322.532618][ T5719] ? lock_acquire+0x1d1/0x380 [ 322.537276][ T5719] ? __pfx_hub_event+0x10/0x10 [ 322.542020][ T5719] worker_thread+0x5ef/0xe50 [ 322.546592][ T5719] ? kthread+0x13a/0x450 [ 322.550817][ T5719] ? __pfx_worker_thread+0x10/0x10 [ 322.555908][ T5719] kthread+0x373/0x450 [ 322.559963][ T5719] ? __pfx_kthread+0x10/0x10 [ 322.564539][ T5719] ret_from_fork+0x730/0xd60 [ 322.569111][ T5719] ? __pfx_ret_from_fork+0x10/0x10 [ 322.574203][ T5719] ? __switch_to+0x800/0x10f0 [ 322.578864][ T5719] ? __pfx_kthread+0x10/0x10 [ 322.583452][ T5719] ret_from_fork_asm+0x1a/0x30 [ 322.588207][ T5719] [ 322.591203][ T5719] Modules linked in: [ 322.596085][ T5719] ---[ end trace 0000000000000000 ]--- [ 322.700596][ T5719] RIP: 0010:klist_put+0x4d/0x1d0 [ 322.700634][ T5719] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 cc ef 0c [ 322.700651][ T5719] RSP: 0018:ffffc9000432f600 EFLAGS: 00010202 [ 322.700668][ T5719] RAX: dffffc0000000000 RBX: ffff8880583ee480 RCX: ffffc9001cfdd000 [ 322.700680][ T5719] RDX: 000000000000000b RSI: ffffffff8bca6645 RDI: 0000000000000058 [ 322.700691][ T5719] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff244edd4 [ 322.700702][ T5719] R10: ffffffff92276ea3 R11: 0000000000000000 R12: 0000000000000000 [ 322.701185][ T5719] R13: 0000000000000001 R14: ffffffff92276e60 R15: dffffc0000000000 [ 322.701199][ T5719] FS: 0000000000000000(0000) GS:ffff888122946000(0000) knlGS:0000000000000000 [ 322.701216][ T5719] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 322.701229][ T5719] CR2: 00007fafdd6f2ff8 CR3: 0000000052bcb000 CR4: 00000000003526f0 [ 322.701243][ T5719] Kernel panic - not syncing: Fatal exception [ 322.801048][ T5719] Kernel Offset: disabled [ 322.805349][ T5719] Rebooting in 86400 seconds..