last executing test programs: 22.798532534s ago: executing program 0 (id=308): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000a80)={0x1, 0x0, [{0x9000, 0x0, 0x0}]}) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@svm={0x6, 0x1, 0x1080, {0x41000}, {"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"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x0) 18.766389262s ago: executing program 0 (id=317): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x2) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x480f0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000400"/20, @ANYRESHEX=r1, @ANYRES32, @ANYRES32, @ANYRES64=r4, @ANYRES8=r2], 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRES64=r2], 0x2a0}, 0x1, 0x0, 0x0, 0x24000804}, 0x24000040) 17.947802092s ago: executing program 0 (id=319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c000780080077144ebb0000080005000000000008000500000003e3"], 0xd0}}, 0x571f68543cec8180) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa6, 0xac, 0x43, 0x40, 0x1c9e, 0x9603, 0xf30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0xfa, 0xb9, 0xb}}]}}]}}, 0x0) openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) 16.598593588s ago: executing program 0 (id=330): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000580)={0x237, 0x7d, 0x2, {{0x500, 0xf6, 0x0, 0x5000000, {0x0, 0x0, 0x8}, 0x41400000, 0x0, 0xe5e0, 0x5, 0x1b, '\x04nodev{evoo~\x05E\xc6\x00\x05\b\x007\xd9:\x8b\x92\x00\x00\x00', 0x33, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x37, '\xcf\xc3m\a\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e^\x98\x9c\xd5\xefMQ\xf6\r\xa7X,J\x05\xc8\xf8(\xf6\x8d\xc1wM]\xe2\xe8 \x86#\x81\xf6hm\xd1\xbb\x8f\xd7\x00\x00\x00', 0x3e, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c<;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0w\xdct\x00\x00\x00\x00\x00\x00\x00\x00\a\xec!\xca\xbf\xf2\x0f\x9c\x00\x89\xf9\x06\x00\x00\x00\x00\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x13r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) write$binfmt_format(r3, &(0x7f0000000140)='1\x00', 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x420}) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454ce, 0x300) capget(&(0x7f0000000440)={0x20071026, r4}, &(0x7f0000000480)={0x1, 0x6, 0x40, 0x1ff, 0x5, 0x2}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, 0x0) 15.686328136s ago: executing program 0 (id=333): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c908b78c856a05e43bbedc523138c6cdaa615d04187794605d52"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) 12.442756963s ago: executing program 3 (id=340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c000780080077144ebb0000080005000000000008000500000003e3"], 0xd0}}, 0x571f68543cec8180) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0xa6, 0xac, 0x43, 0x40, 0x1c9e, 0x9603, 0xf30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x70a1c7e174e5b518, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbc, 0xfa, 0xb9, 0xb}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64], 0xfc) 10.714753237s ago: executing program 3 (id=347): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x11bc, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x118c, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x258, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x90, 0x11, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf28, 0x6, [@m_pedit={0xef4, 0x4, 0x0, 0x0, {{0xa}, {0xec8, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x5c, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1000, 0x0, 0x2, 0x2, 0x6}, 0x2, 0x4, [{0x9, 0x6, 0x0, 0x401, 0x401, 0x8000}, {0x8000, 0x6, 0x800, 0x8, 0x0, 0x5}, {0x5, 0x5, 0xea49, 0xf093, 0x200, 0x4}]}, [{0x80000000, 0x1, 0xe, 0x3, 0x2d9, 0x100}, {0x3da, 0x3, 0x0, 0x3, 0x6, 0x1}, {0x8, 0x50f9, 0x1, 0x7e9, 0xfffffffa, 0x4}, {0x9, 0x80000001, 0x4, 0x3, 0x6, 0xd1}, {0xf15, 0x8, 0x7fdb84d6, 0x4, 0x2, 0x3}, {0x9, 0x2, 0x995, 0x9, 0x2fe8, 0xbe}, {0x3, 0x1d, 0x76e, 0x1, 0x2, 0x3}, {0xffff, 0x6, 0x0, 0xb, 0x7fff, 0x7ff}, {0x2, 0x4, 0xc04, 0x3ff}, {0x4, 0x401, 0x1, 0x3c, 0x9}, {0xfffffff7, 0x9, 0x4b37, 0x5, 0x2, 0x784}, {0x4, 0x400, 0x6, 0x24, 0x7, 0xc}, {0xc39, 0x9, 0x94c, 0x4, 0xfffffff8, 0x9}, {0x9, 0x4, 0x91d, 0x2eb, 0xb, 0xff}, {0x5c, 0x8, 0x0, 0x6e46, 0x200, 0x8}, {0xe59b, 0xfff, 0x8, 0xd, 0x1, 0x100}, {0x3, 0xc, 0x401, 0x79, 0x7, 0xffff687e}, {0x9, 0x9, 0xaa, 0x1, 0x3, 0x2}, {0x1, 0xf2, 0xff, 0x1, 0x0, 0x5}, {0x6f7bbc65, 0x6, 0x1000, 0x4, 0x8, 0x6}, {0x0, 0xfffffffc, 0x2a, 0x400, 0x7, 0x1}, {0x3, 0xa26, 0x64, 0x9, 0x9, 0xf}, {0xa976, 0x2ab, 0x8, 0x5, 0x5, 0x8}, {0x8, 0x1, 0x2c000, 0x3, 0x3, 0xa56f}, {0x8, 0xcdd, 0xc223, 0x4, 0x10, 0x8000}, {0x1, 0xc171, 0x1, 0x536, 0x800, 0x1}, {0xffffffff, 0x8, 0x0, 0x7, 0x3, 0xb}, {0x6, 0x0, 0x2, 0xffffff0f, 0x8, 0x2}, {0x9, 0x80000000, 0x9, 0x81, 0x5, 0x10000}, {0xfff, 0x75b7, 0x5, 0x6, 0xffffff5f, 0x4}, {0x5, 0x2, 0x4, 0xa, 0x0, 0x3b}, {0x0, 0x9, 0x9, 0x10, 0x0, 0x1d}, {0x6, 0xb, 0x3, 0x5, 0xfffffffc, 0x9}, {0x5, 0xfffffffc, 0x464e, 0x10, 0x3, 0x401}, {0x7ff, 0x80000000, 0x1000, 0x5, 0x64a, 0x5}, {0x6, 0x6, 0x4, 0x3d3a, 0xffffffff, 0xa}, {0xbcb93609, 0x4, 0x752b, 0xfffffbff, 0x5, 0x31e}, {0x6, 0x8, 0x6, 0xd131, 0x0, 0x1ff}, {0x5, 0x200, 0x7fffffff, 0x9, 0x401, 0xfffffffa}, {0x3, 0x45e0, 0x4d6, 0xf, 0x5, 0x5}, {0x3, 0x6, 0x9, 0x0, 0x40, 0x2}, {0x9, 0xe, 0xac, 0x4, 0x200, 0x4}, {0x6, 0x4ae25296, 0x7fff, 0x8, 0x2, 0x3}, {0x6, 0x4, 0xb7a5, 0x401, 0x0, 0x7}, {0x0, 0xfffffffd, 0x3, 0x4d, 0x4, 0x8}, {0x6, 0xe38c, 0x200, 0xfffffffd, 0x1}, {0x4, 0x86, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7, 0x0, 0x6, 0x7, 0x4, 0x2}, {0x6, 0x7, 0x8001, 0xc, 0x9, 0x10}, {0x3, 0x1, 0x6, 0x0, 0xf61b, 0x3413}, {0xa5, 0x6, 0xc3, 0xea, 0x5, 0x3}, {0xfffffff7, 0x9, 0x3, 0x4, 0x0, 0x8}, {0x80, 0x800, 0x3b, 0x6, 0x8, 0x6}, {0x2, 0x7, 0x80, 0x3, 0xfffffdc6, 0xc}, {0x5, 0x1, 0x3, 0x2, 0x100, 0x3}, {0xfffffc00, 0x112f, 0x2, 0xfa000000, 0xfffffffd, 0x8}, {0x1, 0x18d21c25, 0xc6, 0x2fc, 0x80, 0xe}, {0x3, 0x1, 0x3, 0x6386, 0x0, 0xff}, {0x1ff, 0x55c1, 0x0, 0x2, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x3, 0x0, 0x3}, {0x63d7, 0x1, 0xcaa, 0x3, 0x7, 0x8}, {0x4, 0x6, 0x1fc0a445, 0xe3e, 0x7, 0x20}, {0x519, 0xe9, 0x5, 0x81, 0x7, 0x3}, {0x9, 0x0, 0x3, 0x5e, 0x5, 0x3}, {0x3793, 0x4, 0x4, 0x8, 0x3, 0x4}, {0x35c6, 0x7, 0x3, 0x4, 0x3, 0x8}, {0x6, 0x9, 0x2, 0xe, 0x1340, 0xc726}, {0xe98, 0x93e, 0x5, 0x9, 0x7, 0xe}, {0x4, 0xa878, 0x1, 0x8, 0x5, 0x1}, {0xfff, 0x4, 0x1, 0x3, 0x4, 0xfffffff8}, {0xfffffffb, 0x80, 0x75, 0x9, 0x9, 0x6}, {0x0, 0xffffffff, 0x3, 0x0, 0x9f, 0xe}, {0xb613, 0x7, 0x8001, 0xd625, 0x0, 0x4}, {0xfffffff9, 0x10000, 0x1, 0xe2, 0x10, 0x9}, {0x7f, 0x7, 0x2, 0x6, 0x1, 0x5}, {0x7fffffff, 0x9, 0x9, 0x72, 0x6, 0x401}, {0x1, 0x8000, 0xa0a, 0x400, 0xfffffff9, 0xc11e}, {0x9, 0x2, 0x40000, 0x101, 0x10000, 0x5}, {0xfffffff8, 0x81, 0x80c1, 0xffff25a7, 0x9, 0x10}, {0x7fff, 0x2, 0x3, 0x9, 0x101, 0x9}, {0xfffffbff, 0x5, 0x6, 0x1, 0x7, 0x6}, {0x5, 0x6, 0x7, 0x3, 0x0, 0xa6c}, {0x200, 0x4, 0x3, 0x10, 0x3, 0xfffffff8}, {0x8, 0x6, 0xedd5, 0x0, 0x10, 0x80000000}, {0x80, 0x9, 0x3, 0x9, 0x3ec1, 0x8}, {0x3, 0x8000, 0x6, 0x101, 0x7d3}, {0x1, 0xfffffffd, 0x2, 0x3, 0x7, 0x2}, {0x10000, 0x8000, 0x5, 0x3, 0x7194, 0x8}, {0x6, 0x3, 0x764fd9bf, 0x66d6, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x101, 0x9, 0x1}, {0x0, 0x41, 0x1f2, 0x100, 0x1, 0x8}, {0x100, 0x6, 0x6, 0x9, 0xfffffffc, 0x8}, {0x9, 0x1, 0x7, 0x4, 0x2000000, 0x2}, {0xb4, 0xfffffffb, 0x13, 0x8, 0x61, 0x94}, {0x0, 0x6, 0x7ff, 0xffffffff, 0x635, 0x5e}, {0x9, 0x1, 0xf, 0x5, 0x4aed91b3, 0xfffffffd}, {0x7ff, 0x2, 0xf8, 0x8, 0xacbc, 0x2}, {0xff, 0x3, 0x1, 0x48000000, 0xa9, 0xcfa6}, {0x4, 0x10000, 0x297, 0x8, 0xf0000000, 0xca}, {0x4, 0x1, 0x7, 0x4, 0x3, 0x7c}, {0xe146, 0x6, 0x5, 0x81, 0xec72}, {0x3, 0x80000000, 0x2, 0x2, 0x8, 0x4}, {0x56, 0x4, 0x80000001, 0x1ca, 0xa8, 0x10000}, {0x8001, 0x7, 0x6, 0xfffffffe, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x5, 0xbc, 0xd951}, {0x40, 0x6, 0x1, 0xfffff3e1, 0x895c, 0x1000}, {0xe, 0x8, 0x400, 0x5, 0x2c00}, {0x1, 0x7fff, 0x95, 0x7, 0x38a}, {0x62686865, 0x5e1, 0x6, 0x0, 0xd309, 0x7}, {0x7a, 0x3, 0x101, 0x3, 0x6, 0x1000}, {0x0, 0x0, 0x6, 0x7, 0x5, 0x4}, {0x1, 0x4, 0x800, 0x9e28, 0x2, 0xffff0000}, {0x7, 0x9, 0x0, 0x6, 0x5, 0x7fff}, {0x7, 0xb, 0x44a42eb6, 0xffffff0d, 0xfffffffc, 0x1}, {0xffff, 0xfffffbff, 0x5, 0x6, 0x5, 0x10100000}, {0x7, 0x8, 0x4, 0xf0e, 0xffff, 0x8}, {0xffffffff, 0x7, 0x2, 0x7, 0x8, 0x8327}, {0x9, 0x4, 0x6, 0x6, 0x3bc, 0x5950ccd}, {0x9, 0x4, 0x9, 0x2, 0x0, 0xdc4}, {0x5, 0x9, 0x6, 0x7, 0x9, 0x2}, {0x1f25, 0xb, 0xffff1d0c, 0x7, 0x2f, 0x1c0000}, {0x80, 0x9, 0xf, 0x9}, {0xe2c, 0x8000, 0x7, 0x2, 0x4, 0x1}, {0x5, 0xccb8, 0x5, 0xb, 0x5, 0x8}, {0x5, 0x4e7, 0x8, 0x6, 0x2, 0x9}, {0x100, 0x3, 0xffffffff, 0x0, 0x5}, {0x6, 0x7, 0x80, 0x6, 0x5, 0x4}, {0x6, 0x8, 0x0, 0x101, 0x2, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x62222125a2c20c84}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6c295710423417d6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0xa}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0xa508f9b45da4e087}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {}, {0x481deeb6fe26e12c, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x11bc}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 10.268181168s ago: executing program 4 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000200), 0x0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r3], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) io_uring_setup(0xdf0, &(0x7f0000000080)={0x0, 0xd72e, 0x400, 0x3, 0x4f, 0x0, r5}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="00052bbd700001000000010000ae"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20002001) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2508000000440003800800030003000000080003000b00000008000300165d0000080003000000000008000100001000000800030000000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x90) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2c, 0x1000000}, 0x14}, 0x1, 0xff07, 0x0, 0xc000}, 0x2000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="cf0400fbdbdf251300000008100300000000", @ANYRES32=r11, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40080c3}, 0x24000000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) 9.011863223s ago: executing program 1 (id=350): pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002bbd70000e0010"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r6) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) 8.418712256s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b00000000000800290041010000bf94536a2fbafff10f3e091ebd5ee018b3900433aae8bc5626bf63d991000000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x36be6fca, 0x8081) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@remote, @rand_addr=' \x01\x00', @empty, 0x7, 0xc6, 0x9, 0x400, 0x80004, 0x1000040}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="e80000003f00070100000000fddbdf25027c0000d100378013000300717472283414d6bba919736d34290000080008"], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 8.086711346s ago: executing program 2 (id=352): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x800000007, 0x2) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x8001, 0x41414770, 0x2, @stepwise={0x5, 0x5, 0xfff, 0x100, 0x9, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf25"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000140)='X', 0x1, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000900)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r4, 0xc2f, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0xffffffff) 7.909210428s ago: executing program 1 (id=353): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x881) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x0, 0x4}, 'port0\x00', 0xa2, 0x11cfa, 0x2, 0xf2, 0x8e, 0x0, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 7.865433159s ago: executing program 2 (id=354): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x99, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500003000000000030390781200183f2500000000000000002f00007f0000017f000001c481f1338f689e33f4f49ea06350bf18650311b8fd335f6bf9511df71276515aeeef1d32275ad1d4dba75d4b1cc20e71fb24f54be9da58636ec90ff79c2f653a87e1329a5596d526756386a69d00"/144], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000001c40)=""/4111, &(0x7f0000001180)=0x100f) 7.82683185s ago: executing program 4 (id=355): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 7.823597497s ago: executing program 1 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) io_uring_setup(0x481e, &(0x7f00000000c0)={0x0, 0x7428, 0x20, 0x3, 0x184}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="020afc030700000028bd7000fedb800005001a000000"], 0x38}}, 0x40408c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x8000}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TDX_INIT_VM(r1, 0xc008aeba, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000000200)={0x50030000, 0x4000, [0x8, 0x3, 0x6598, 0xcc62, 0x1a, 0x2], [0x879d, 0x3ff, 0x8, 0x800, 0x3], [0x7, 0x7, 0xfffffffffffffff7, 0x1, 0xfffffffffffffff9, 0x101]}}) mmap(&(0x7f0000fe0000/0x4000)=nil, 0x4000, 0x1000003, 0x12, r7, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 7.356868192s ago: executing program 4 (id=357): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x110, 0xc}], 0x10}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100006900000400048008007a8004000b800800020001000000a00008801c000780080077144ebb0000080005000000000008000500000003e3"], 0xd0}}, 0x571f68543cec8180) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e11", @ANYRES64], 0xfc) 5.952772951s ago: executing program 2 (id=358): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) 5.057412737s ago: executing program 3 (id=359): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x81, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f0000472000/0x2000)=nil, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, &(0x7f0000000180)}, 0x811) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x8, 0x3, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7fffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xffffffff}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x1ff}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x441d0}, 0x8840) 4.472092473s ago: executing program 2 (id=360): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1200, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11d0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x258, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x90, 0x11, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf6c, 0x6, [@m_pedit={0xf38, 0x4, 0x0, 0x0, {{0xa}, {0xf0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1000, 0x0, 0x2, 0x2, 0x6}, 0x2, 0x4, [{0x9, 0x6, 0x0, 0x401, 0x401, 0x8000}, {0x8000, 0x6, 0x800, 0x8, 0x0, 0x5}, {0x5, 0x5, 0xea49, 0xf093, 0x200, 0x4}, {0xc0000, 0x1, 0x8, 0x6, 0xdc, 0xd4bb}]}, [{0x80000000, 0x1, 0xe, 0x3, 0x2d9, 0x100}, {0x3da, 0x3, 0x0, 0x3, 0x6, 0x1}, {0x8, 0x50f9, 0x1, 0x7e9, 0xfffffffa, 0x4}, {0x9, 0x80000001, 0x4, 0x3, 0x6, 0xd1}, {0xf15, 0x8, 0x7fdb84d6, 0x4, 0x2, 0x3}, {0x9, 0x2, 0x995, 0x9, 0x2fe8, 0xbe}, {0x3, 0x1d, 0x76e, 0x1, 0x2, 0x3}, {0xffff, 0x6, 0x0, 0xb, 0x7fff, 0x7ff}, {0x2, 0x4, 0xc04, 0x3ff}, {0x4, 0x401, 0x1, 0x3c, 0x9}, {0xfffffff7, 0x9, 0x4b37, 0x5, 0x2, 0x784}, {0x4, 0x400, 0x6, 0x24, 0x7, 0xc}, {0xc39, 0x9, 0x94c, 0x4, 0xfffffff8, 0x9}, {0x9, 0x4, 0x91d, 0x2eb, 0xb, 0xff}, {0x5c, 0x8, 0x0, 0x6e46, 0x200, 0x8}, {0xe59b, 0xfff, 0x8, 0xd, 0x1, 0x100}, {0x3, 0xc, 0x401, 0x79, 0x7, 0xffff687e}, {0x9, 0x9, 0xaa, 0x1, 0x3, 0x2}, {0x1, 0xf2, 0xff, 0x1, 0x0, 0x5}, {0x6f7bbc65, 0x6, 0x1000, 0x4, 0x8, 0x6}, {0x0, 0xfffffffc, 0x2a, 0x400, 0x7, 0x1}, {0x3, 0xa26, 0x64, 0x9, 0x9, 0xf}, {0xa976, 0x2ab, 0x8, 0x5, 0x5, 0x8}, {0x8, 0x1, 0x2c000, 0x3, 0x3, 0xa56f}, {0x8, 0xcdd, 0xc223, 0x4, 0x10, 0x8000}, {0x1, 0xc171, 0x1, 0x536, 0x800, 0x1}, {0xffffffff, 0x8, 0x0, 0x7, 0x3, 0xb}, {0x6, 0x0, 0x2, 0xffffff0f, 0x8, 0x2}, {0x9, 0x80000000, 0x9, 0x81, 0x5, 0x10000}, {0xfff, 0x75b7, 0x5, 0x6, 0xffffff5f, 0x4}, {0x5, 0x2, 0x4, 0xa, 0x0, 0x3b}, {0x0, 0x9, 0x9, 0x10, 0x0, 0x1d}, {0x6, 0xb, 0x3, 0x5, 0xfffffffc, 0x9}, {0x5, 0xfffffffc, 0x464e, 0x10, 0x3, 0x401}, {0x7ff, 0x80000000, 0x1000, 0x5, 0x64a, 0x5}, {0x6, 0x6, 0x4, 0x3d3a, 0xffffffff, 0xa}, {0xbcb93609, 0x4, 0x752b, 0xfffffbff, 0x5, 0x31e}, {0x6, 0x8, 0x6, 0xd131, 0x0, 0x1ff}, {0x5, 0x200, 0x7fffffff, 0x9, 0x401, 0xfffffffa}, {0x3, 0x45e0, 0x4d6, 0xf, 0x5, 0x5}, {0x3, 0x6, 0x9, 0x0, 0x40, 0x2}, {0x9, 0xe, 0xac, 0x4, 0x200, 0x4}, {0x6, 0x4ae25296, 0x7fff, 0x8, 0x2, 0x3}, {0x6, 0x4, 0xb7a5, 0x401, 0x0, 0x7}, {0x0, 0xfffffffd, 0x3, 0x4d, 0x4, 0x8}, {0x6, 0xe38c, 0x200, 0xfffffffd, 0x1}, {0x4, 0x86, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7, 0x0, 0x6, 0x7, 0x4, 0x2}, {0x6, 0x7, 0x8001, 0xc, 0x9, 0x10}, {0x3, 0x1, 0x6, 0x0, 0xf61b, 0x3413}, {0xa5, 0x6, 0xc3, 0xea, 0x5, 0x3}, {0xfffffff7, 0x9, 0x3, 0x4, 0x0, 0x8}, {0x80, 0x800, 0x3b, 0x6, 0x8, 0x6}, {0x2, 0x7, 0x80, 0x3, 0xfffffdc6, 0xc}, {0x5, 0x1, 0x3, 0x2, 0x100, 0x3}, {0xfffffc00, 0x112f, 0x2, 0xfa000000, 0xfffffffd, 0x8}, {0x1, 0x18d21c25, 0xc6, 0x2fc, 0x80, 0xe}, {0x3, 0x1, 0x3, 0x6386, 0x0, 0xff}, {0x1ff, 0x55c1, 0x0, 0x2, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x3, 0x0, 0x3}, {0x63d7, 0x1, 0xcaa, 0x3, 0x7, 0x8}, {0x4, 0x6, 0x1fc0a445, 0xe3e, 0x7, 0x20}, {0x519, 0xe9, 0x5, 0x81, 0x7, 0x3}, {0x9, 0x0, 0x3, 0x5e, 0x5, 0x3}, {0x3793, 0x4, 0x4, 0x8, 0x3, 0x4}, {0x35c6, 0x7, 0x3, 0x4, 0x3, 0x8}, {0x6, 0x9, 0x2, 0xe, 0x1340, 0xc726}, {0xe98, 0x93e, 0x5, 0x9, 0x7, 0xe}, {0x4, 0xa878, 0x1, 0x8, 0x5, 0x1}, {0xfff, 0x4, 0x1, 0x3, 0x4, 0xfffffff8}, {0xfffffffb, 0x80, 0x75, 0x9, 0x9, 0x6}, {0x0, 0xffffffff, 0x3, 0x0, 0x9f, 0xe}, {0xb613, 0x7, 0x8001, 0xd625, 0x0, 0x4}, {0xfffffff9, 0x10000, 0x1, 0xe2, 0x10, 0x9}, {0x7f, 0x7, 0x2, 0x6, 0x1, 0x5}, {0x7fffffff, 0x9, 0x9, 0x72, 0x6, 0x401}, {0x1, 0x8000, 0xa0a, 0x400, 0xfffffff9, 0xc11e}, {0x9, 0x2, 0x40000, 0x101, 0x10000, 0x5}, {0xfffffff8, 0x81, 0x80c1, 0xffff25a7, 0x9, 0x10}, {0x7fff, 0x2, 0x3, 0x9, 0x101, 0x9}, {0xfffffbff, 0x5, 0x6, 0x1, 0x7, 0x6}, {0x5, 0x6, 0x7, 0x3, 0x0, 0xa6c}, {0x200, 0x4, 0x3, 0x10, 0x3, 0xfffffff8}, {0x8, 0x6, 0xedd5, 0x0, 0x10, 0x80000000}, {0x80, 0x9, 0x3, 0x9, 0x3ec1, 0x8}, {0x3, 0x8000, 0x6, 0x101, 0x7d3}, {0x1, 0xfffffffd, 0x2, 0x3, 0x7, 0x2}, {0x10000, 0x8000, 0x5, 0x3, 0x7194, 0x8}, {0x6, 0x3, 0x764fd9bf, 0x66d6, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x101, 0x9, 0x1}, {0x0, 0x41, 0x1f2, 0x100, 0x1, 0x8}, {0x100, 0x6, 0x6, 0x9, 0xfffffffc, 0x8}, {0x9, 0x1, 0x7, 0x4, 0x2000000, 0x2}, {0xb4, 0xfffffffb, 0x13, 0x8, 0x61, 0x94}, {0x0, 0x6, 0x7ff, 0xffffffff, 0x635, 0x5e}, {0x9, 0x1, 0xf, 0x5, 0x4aed91b3, 0xfffffffd}, {0x7ff, 0x2, 0xf8, 0x8, 0xacbc, 0x2}, {0xff, 0x3, 0x1, 0x48000000, 0xa9, 0xcfa6}, {0x4, 0x10000, 0x297, 0x8, 0xf0000000, 0xca}, {0x4, 0x1, 0x7, 0x4, 0x3, 0x7c}, {0xe146, 0x6, 0x5, 0x81, 0xec72}, {0x3, 0x80000000, 0x2, 0x2, 0x8, 0x4}, {0x56, 0x4, 0x80000001, 0x1ca, 0xa8, 0x10000}, {0x8001, 0x7, 0x6, 0xfffffffe, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x5, 0xbc, 0xd951}, {0x40, 0x6, 0x1, 0xfffff3e1, 0x895c, 0x1000}, {0xe, 0x8, 0x400, 0x5, 0x2c00}, {0x1, 0x7fff, 0x95, 0x7, 0x38a}, {0x62686865, 0x5e1, 0x6, 0x0, 0xd309, 0x7}, {0x7a, 0x3, 0x101, 0x3, 0x6, 0x1000}, {0x0, 0x0, 0x6, 0x7, 0x5, 0x4}, {0x1, 0x4, 0x800, 0x9e28, 0x2, 0xffff0000}, {0x7, 0x9, 0x0, 0x6, 0x5, 0x7fff}, {0x7, 0xb, 0x44a42eb6, 0xffffff0d, 0xfffffffc, 0x1}, {0xffff, 0xfffffbff, 0x5, 0x6, 0x5, 0x10100000}, {0x7, 0x8, 0x4, 0xf0e, 0xffff, 0x8}, {0xffffffff, 0x7, 0x2, 0x7, 0x8, 0x8327}, {0x9, 0x4, 0x6, 0x6, 0x3bc, 0x5950ccd}, {0x9, 0x4, 0x9, 0x2, 0x0, 0xdc4}, {0x5, 0x9, 0x6, 0x7, 0x9, 0x2}, {0x1f25, 0xb, 0xffff1d0c, 0x7, 0x2f, 0x1c0000}, {0x80, 0x9, 0xf, 0x9}, {0xe2c, 0x8000, 0x7, 0x2, 0x4, 0x1}, {0x5, 0xccb8, 0x5, 0xb, 0x5, 0x8}, {0x5, 0x4e7, 0x8, 0x6, 0x2, 0x9}, {0x100, 0x3, 0xffffffff, 0x0, 0x5}, {0x6, 0x7, 0x80, 0x6, 0x5, 0x4}, {0x6, 0x8, 0x0, 0x101, 0x2, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x62222125a2c20c84}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6c295710423417d6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0xa}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0xa508f9b45da4e087}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {}, {0x481deeb6fe26e12c, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1200}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 4.465763913s ago: executing program 1 (id=361): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff008}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000006b}, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x0, 0x63000000}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}, @IFLA_VF_PORTS={0x4}, @IFLA_MTU={0x8, 0x4, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 4.392030763s ago: executing program 4 (id=362): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x11b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x1188, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x258, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x90, 0x11, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf24, 0x6, [@m_pedit={0xf20, 0x4, 0x0, 0x0, {{0xa}, {0xef4, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x1000, 0x0, 0x2, 0x2, 0x6}, 0x2, 0x4, [{0x9, 0x6, 0x0, 0x401, 0x401, 0x8000}, {0x5, 0x5, 0xea49, 0xf093, 0x200, 0x4}, {0xc0000, 0x1, 0x8, 0x6, 0xdc, 0xd4bb}]}, [{0x80000000, 0x1, 0xe, 0x3, 0x2d9, 0x100}, {0x3da, 0x3, 0x0, 0x3, 0x6, 0x1}, {0x8, 0x50f9, 0x1, 0x7e9, 0xfffffffa, 0x4}, {0x9, 0x80000001, 0x4, 0x3, 0x6, 0xd1}, {0xf15, 0x8, 0x7fdb84d6, 0x4, 0x2, 0x3}, {0x9, 0x2, 0x995, 0x9, 0x2fe8, 0xbe}, {0x3, 0x1d, 0x76e, 0x1, 0x2, 0x3}, {0xffff, 0x6, 0x0, 0xb, 0x7fff, 0x7ff}, {0x2, 0x4, 0xc04, 0x3ff}, {0x4, 0x401, 0x1, 0x3c, 0x9}, {0xfffffff7, 0x9, 0x4b37, 0x5, 0x2, 0x784}, {0x4, 0x400, 0x6, 0x24, 0x7, 0xc}, {0xc39, 0x9, 0x94c, 0x4, 0xfffffff8, 0x9}, {0x9, 0x4, 0x91d, 0x2eb, 0xb, 0xff}, {0x5c, 0x8, 0x0, 0x6e46, 0x200, 0x8}, {0xe59b, 0xfff, 0x8, 0xd, 0x1, 0x100}, {0x3, 0xc, 0x401, 0x79, 0x7, 0xffff687e}, {0x9, 0x9, 0xaa, 0x1, 0x3, 0x2}, {0x1, 0xf2, 0xff, 0x1, 0x0, 0x5}, {0x6f7bbc65, 0x6, 0x1000, 0x4, 0x8, 0x6}, {0x0, 0xfffffffc, 0x2a, 0x400, 0x7, 0x1}, {0x3, 0xa26, 0x64, 0x9, 0x9, 0xf}, {0xa976, 0x2ab, 0x8, 0x5, 0x5, 0x8}, {0x8, 0x1, 0x2c000, 0x3, 0x3, 0xa56f}, {0x8, 0xcdd, 0xc223, 0x4, 0x10, 0x8000}, {0x1, 0xc171, 0x1, 0x536, 0x800, 0x1}, {0xffffffff, 0x8, 0x0, 0x7, 0x3, 0xb}, {0x6, 0x0, 0x2, 0xffffff0f, 0x8, 0x2}, {0x9, 0x80000000, 0x9, 0x81, 0x5, 0x10000}, {0xfff, 0x75b7, 0x5, 0x6, 0xffffff5f, 0x4}, {0x5, 0x2, 0x4, 0xa, 0x0, 0x3b}, {0x0, 0x9, 0x9, 0x10, 0x0, 0x1d}, {0x6, 0xb, 0x3, 0x5, 0xfffffffc, 0x9}, {0x5, 0xfffffffc, 0x464e, 0x10, 0x3, 0x401}, {0x7ff, 0x80000000, 0x1000, 0x5, 0x64a, 0x5}, {0x6, 0x6, 0x4, 0x3d3a, 0xffffffff, 0xa}, {0xbcb93609, 0x4, 0x752b, 0xfffffbff, 0x5, 0x31e}, {0x6, 0x8, 0x6, 0xd131, 0x0, 0x1ff}, {0x5, 0x200, 0x7fffffff, 0x9, 0x401, 0xfffffffa}, {0x3, 0x45e0, 0x4d6, 0xf, 0x5, 0x5}, {0x3, 0x6, 0x9, 0x0, 0x40, 0x2}, {0x9, 0xe, 0xac, 0x4, 0x200, 0x4}, {0x6, 0x4ae25296, 0x7fff, 0x8, 0x2, 0x3}, {0x6, 0x4, 0xb7a5, 0x401, 0x0, 0x7}, {0x0, 0xfffffffd, 0x3, 0x4d, 0x4, 0x8}, {0x6, 0xe38c, 0x200, 0xfffffffd, 0x1}, {0x4, 0x86, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7, 0x0, 0x6, 0x7, 0x4, 0x2}, {0x6, 0x7, 0x8001, 0xc, 0x9, 0x10}, {0x3, 0x1, 0x6, 0x0, 0xf61b, 0x3413}, {0xa5, 0x6, 0xc3, 0xea, 0x5, 0x3}, {0xfffffff7, 0x9, 0x3, 0x4, 0x0, 0x8}, {0x80, 0x800, 0x3b, 0x6, 0x8, 0x6}, {0x2, 0x7, 0x80, 0x3, 0xfffffdc6, 0xc}, {0x5, 0x1, 0x3, 0x2, 0x100, 0x3}, {0xfffffc00, 0x112f, 0x2, 0xfa000000, 0xfffffffd, 0x8}, {0x1, 0x18d21c25, 0xc6, 0x2fc, 0x80, 0xe}, {0x3, 0x1, 0x3, 0x6386, 0x0, 0xff}, {0x1ff, 0x55c1, 0x0, 0x2, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x3, 0x0, 0x3}, {0x63d7, 0x1, 0xcaa, 0x3, 0x7, 0x8}, {0x4, 0x6, 0x1fc0a445, 0xe3e, 0x7, 0x20}, {0x519, 0xe9, 0x5, 0x81, 0x7, 0x3}, {0x9, 0x0, 0x3, 0x5e, 0x5, 0x3}, {0x3793, 0x4, 0x4, 0x8, 0x3, 0x4}, {0x35c6, 0x7, 0x3, 0x4, 0x3, 0x8}, {0x6, 0x9, 0x2, 0xe, 0x1340, 0xc726}, {0xe98, 0x93e, 0x5, 0x9, 0x7, 0xe}, {0x4, 0xa878, 0x1, 0x8, 0x5, 0x1}, {0xfff, 0x4, 0x1, 0x3, 0x4, 0xfffffff8}, {0xfffffffb, 0x80, 0x75, 0x9, 0x9, 0x6}, {0x0, 0xffffffff, 0x3, 0x0, 0x9f, 0xe}, {0xb613, 0x7, 0x8001, 0xd625, 0x0, 0x4}, {0xfffffff9, 0x10000, 0x1, 0xe2, 0x10, 0x9}, {0x7f, 0x7, 0x2, 0x6, 0x1, 0x5}, {0x7fffffff, 0x9, 0x9, 0x72, 0x6, 0x401}, {0x1, 0x8000, 0xa0a, 0x400, 0xfffffff9, 0xc11e}, {0x9, 0x2, 0x40000, 0x101, 0x10000, 0x5}, {0xfffffff8, 0x81, 0x80c1, 0xffff25a7, 0x9, 0x10}, {0x7fff, 0x2, 0x3, 0x9, 0x101, 0x9}, {0xfffffbff, 0x5, 0x6, 0x1, 0x7, 0x6}, {0x5, 0x6, 0x7, 0x3, 0x0, 0xa6c}, {0x200, 0x4, 0x3, 0x10, 0x3, 0xfffffff8}, {0x8, 0x6, 0xedd5, 0x0, 0x10, 0x80000000}, {0x80, 0x9, 0x3, 0x9, 0x3ec1, 0x8}, {0x3, 0x8000, 0x6, 0x101, 0x7d3}, {0x1, 0xfffffffd, 0x2, 0x3, 0x7, 0x2}, {0x10000, 0x8000, 0x5, 0x3, 0x7194, 0x8}, {0x6, 0x3, 0x764fd9bf, 0x66d6, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x101, 0x9, 0x1}, {0x0, 0x41, 0x1f2, 0x100, 0x1, 0x8}, {0x100, 0x6, 0x6, 0x9, 0xfffffffc, 0x8}, {0x9, 0x1, 0x7, 0x4, 0x2000000, 0x2}, {0xb4, 0xfffffffb, 0x13, 0x8, 0x61, 0x94}, {0x0, 0x6, 0x7ff, 0xffffffff, 0x635, 0x5e}, {0x9, 0x1, 0xf, 0x5, 0x4aed91b3, 0xfffffffd}, {0x7ff, 0x2, 0xf8, 0x8, 0xacbc, 0x2}, {0xff, 0x3, 0x1, 0x48000000, 0xa9, 0xcfa6}, {0x4, 0x10000, 0x297, 0x8, 0xf0000000, 0xca}, {0x4, 0x1, 0x7, 0x4, 0x3, 0x7c}, {0xe146, 0x6, 0x5, 0x81, 0xec72}, {0x3, 0x80000000, 0x2, 0x2, 0x8, 0x4}, {0x56, 0x4, 0x80000001, 0x1ca, 0xa8, 0x10000}, {0x8001, 0x7, 0x6, 0xfffffffe, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x5, 0xbc, 0xd951}, {0x40, 0x6, 0x1, 0xfffff3e1, 0x895c, 0x1000}, {0xe, 0x8, 0x400, 0x5, 0x2c00}, {0x1, 0x7fff, 0x95, 0x7, 0x38a}, {0x62686865, 0x5e1, 0x6, 0x0, 0xd309, 0x7}, {0x7a, 0x3, 0x101, 0x3, 0x6, 0x1000}, {0x0, 0x0, 0x6, 0x7, 0x5, 0x4}, {0x1, 0x4, 0x800, 0x9e28, 0x2, 0xffff0000}, {0x7, 0x9, 0x0, 0x6, 0x5, 0x7fff}, {0x7, 0xb, 0x44a42eb6, 0xffffff0d, 0xfffffffc, 0x1}, {0xffff, 0xfffffbff, 0x5, 0x6, 0x5, 0x10100000}, {0x7, 0x8, 0x4, 0xf0e, 0xffff, 0x8}, {0xffffffff, 0x7, 0x2, 0x7, 0x8, 0x8327}, {0x9, 0x4, 0x6, 0x6, 0x3bc, 0x5950ccd}, {0x9, 0x4, 0x9, 0x2, 0x0, 0xdc4}, {0x5, 0x9, 0x6, 0x7, 0x9, 0x2}, {0x1f25, 0xb, 0xffff1d0c, 0x7, 0x2f, 0x1c0000}, {0x80, 0x9, 0xf, 0x9}, {0xe2c, 0x8000, 0x7, 0x2, 0x4, 0x1}, {0x5, 0xccb8, 0x5, 0xb, 0x5, 0x8}, {0x5, 0x4e7, 0x8, 0x6, 0x2, 0x9}, {0x100, 0x3, 0xffffffff, 0x0, 0x5}, {0x6, 0x7, 0x80, 0x6, 0x5, 0x4}, {0x6, 0x8, 0x0, 0x101, 0x2, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x62222125a2c20c84}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6c295710423417d6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0xa}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0xa508f9b45da4e087}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {}, {0x481deeb6fe26e12c, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x11b8}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 4.018655541s ago: executing program 1 (id=363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x3c2a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffffc, 0x6c}) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000003a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x27]}], 0x1) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10) 3.234365446s ago: executing program 3 (id=364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r0, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x3, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x1200, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x11d0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0x258, 0x6, [@m_sample={0x90, 0x3, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7fffffff, 0x0, 0x9, 0x6}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x76ee3561}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffff229}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x37c5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x100, 0x0, 0xc98, 0x3}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x81}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x90, 0x11, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4684c}, @TCA_MPLS_LABEL={0x8, 0x5, 0x44c42}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x3a, 0x6, "35009eea5728e1ccc62684cd190ad09e3e022f90412955acd3c0dbd581b8004eaa8180600f4a1565ea8151366e61c730a9c078c241e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_gact={0x134, 0x6, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x186}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000, 0x0, 0x0, 0x0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x237f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1c73, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10001, 0x4, 0x8, 0x81, 0xfffffffc}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x2, 0x10000000, 0x7, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x101, 0x10000000, 0x1f, 0xc6f}}]}, {0x75, 0x6, "2ccc6282bc8bac4447822da0d0531178774955f84bab8b87e551656def4084ba2ddad9a23a23028f3236b0f0b7d5e85b61e9ca14cb39f2b5a8d7e31217917e97b71587a9c53555a9bd7c79a550cf0053b56cb8554eb9da1defa7e337a4db48379019a8e0be89e81bee4e0f87c397b82512"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_ACT={0xf6c, 0x6, [@m_pedit={0xf38, 0x4, 0x0, 0x0, {{0xa}, {0xf0c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x88, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x1000, 0x0, 0x2, 0x2, 0x6}, 0x2, 0x4, [{0x9, 0x6, 0x0, 0x401, 0x401, 0x8000}, {0x8000, 0x6, 0x800, 0x8, 0x0, 0x5}, {0x5, 0x5, 0xea49, 0xf093, 0x200, 0x4}, {0xc0000, 0x1, 0x8, 0x6, 0xdc, 0xd4bb}]}, [{0x80000000, 0x1, 0xe, 0x3, 0x2d9, 0x100}, {0x3da, 0x3, 0x0, 0x3, 0x6, 0x1}, {0x8, 0x50f9, 0x1, 0x7e9, 0xfffffffa, 0x4}, {0x9, 0x80000001, 0x4, 0x3, 0x6, 0xd1}, {0xf15, 0x8, 0x7fdb84d6, 0x4, 0x2, 0x3}, {0x9, 0x2, 0x995, 0x9, 0x2fe8, 0xbe}, {0x3, 0x1d, 0x76e, 0x1, 0x2, 0x3}, {0xffff, 0x6, 0x0, 0xb, 0x7fff, 0x7ff}, {0x2, 0x4, 0xc04, 0x3ff}, {0x4, 0x401, 0x1, 0x3c, 0x9}, {0xfffffff7, 0x9, 0x4b37, 0x5, 0x2, 0x784}, {0x4, 0x400, 0x6, 0x24, 0x7, 0xc}, {0xc39, 0x9, 0x94c, 0x4, 0xfffffff8, 0x9}, {0x9, 0x4, 0x91d, 0x2eb, 0xb, 0xff}, {0x5c, 0x8, 0x0, 0x6e46, 0x200, 0x8}, {0xe59b, 0xfff, 0x8, 0xd, 0x1, 0x100}, {0x3, 0xc, 0x401, 0x79, 0x7, 0xffff687e}, {0x9, 0x9, 0xaa, 0x1, 0x3, 0x2}, {0x1, 0xf2, 0xff, 0x1, 0x0, 0x5}, {0x6f7bbc65, 0x6, 0x1000, 0x4, 0x8, 0x6}, {0x0, 0xfffffffc, 0x2a, 0x400, 0x7, 0x1}, {0x3, 0xa26, 0x64, 0x9, 0x9, 0xf}, {0xa976, 0x2ab, 0x8, 0x5, 0x5, 0x8}, {0x8, 0x1, 0x2c000, 0x3, 0x3, 0xa56f}, {0x8, 0xcdd, 0xc223, 0x4, 0x10, 0x8000}, {0x1, 0xc171, 0x1, 0x536, 0x800, 0x1}, {0xffffffff, 0x8, 0x0, 0x7, 0x3, 0xb}, {0x6, 0x0, 0x2, 0xffffff0f, 0x8, 0x2}, {0x9, 0x80000000, 0x9, 0x81, 0x5, 0x10000}, {0xfff, 0x75b7, 0x5, 0x6, 0xffffff5f, 0x4}, {0x5, 0x2, 0x4, 0xa, 0x0, 0x3b}, {0x0, 0x9, 0x9, 0x10, 0x0, 0x1d}, {0x6, 0xb, 0x3, 0x5, 0xfffffffc, 0x9}, {0x5, 0xfffffffc, 0x464e, 0x10, 0x3, 0x401}, {0x7ff, 0x80000000, 0x1000, 0x5, 0x64a, 0x5}, {0x6, 0x6, 0x4, 0x3d3a, 0xffffffff, 0xa}, {0xbcb93609, 0x4, 0x752b, 0xfffffbff, 0x5, 0x31e}, {0x6, 0x8, 0x6, 0xd131, 0x0, 0x1ff}, {0x5, 0x200, 0x7fffffff, 0x9, 0x401, 0xfffffffa}, {0x3, 0x45e0, 0x4d6, 0xf, 0x5, 0x5}, {0x3, 0x6, 0x9, 0x0, 0x40, 0x2}, {0x9, 0xe, 0xac, 0x4, 0x200, 0x4}, {0x6, 0x4ae25296, 0x7fff, 0x8, 0x2, 0x3}, {0x6, 0x4, 0xb7a5, 0x401, 0x0, 0x7}, {0x0, 0xfffffffd, 0x3, 0x4d, 0x4, 0x8}, {0x6, 0xe38c, 0x200, 0xfffffffd, 0x1}, {0x4, 0x86, 0x1000, 0x9, 0xfffffffa, 0x9}, {0x7, 0x0, 0x6, 0x7, 0x4, 0x2}, {0x6, 0x7, 0x8001, 0xc, 0x9, 0x10}, {0x3, 0x1, 0x6, 0x0, 0xf61b, 0x3413}, {0xa5, 0x6, 0xc3, 0xea, 0x5, 0x3}, {0xfffffff7, 0x9, 0x3, 0x4, 0x0, 0x8}, {0x80, 0x800, 0x3b, 0x6, 0x8, 0x6}, {0x2, 0x7, 0x80, 0x3, 0xfffffdc6, 0xc}, {0x5, 0x1, 0x3, 0x2, 0x100, 0x3}, {0xfffffc00, 0x112f, 0x2, 0xfa000000, 0xfffffffd, 0x8}, {0x1, 0x18d21c25, 0xc6, 0x2fc, 0x80, 0xe}, {0x3, 0x1, 0x3, 0x6386, 0x0, 0xff}, {0x1ff, 0x55c1, 0x0, 0x2, 0x0, 0x1}, {0x3, 0x6, 0x6, 0x3, 0x0, 0x3}, {0x63d7, 0x1, 0xcaa, 0x3, 0x7, 0x8}, {0x4, 0x6, 0x1fc0a445, 0xe3e, 0x7, 0x20}, {0x519, 0xe9, 0x5, 0x81, 0x7, 0x3}, {0x9, 0x0, 0x3, 0x5e, 0x5, 0x3}, {0x3793, 0x4, 0x4, 0x8, 0x3, 0x4}, {0x35c6, 0x7, 0x3, 0x4, 0x3, 0x8}, {0x6, 0x9, 0x2, 0xe, 0x1340, 0xc726}, {0xe98, 0x93e, 0x5, 0x9, 0x7, 0xe}, {0x4, 0xa878, 0x1, 0x8, 0x5, 0x1}, {0xfff, 0x4, 0x1, 0x3, 0x4, 0xfffffff8}, {0xfffffffb, 0x80, 0x75, 0x9, 0x9, 0x6}, {0x0, 0xffffffff, 0x3, 0x0, 0x9f, 0xe}, {0xb613, 0x7, 0x8001, 0xd625, 0x0, 0x4}, {0xfffffff9, 0x10000, 0x1, 0xe2, 0x10, 0x9}, {0x7f, 0x7, 0x2, 0x6, 0x1, 0x5}, {0x7fffffff, 0x9, 0x9, 0x72, 0x6, 0x401}, {0x1, 0x8000, 0xa0a, 0x400, 0xfffffff9, 0xc11e}, {0x9, 0x2, 0x40000, 0x101, 0x10000, 0x5}, {0xfffffff8, 0x81, 0x80c1, 0xffff25a7, 0x9, 0x10}, {0x7fff, 0x2, 0x3, 0x9, 0x101, 0x9}, {0xfffffbff, 0x5, 0x6, 0x1, 0x7, 0x6}, {0x5, 0x6, 0x7, 0x3, 0x0, 0xa6c}, {0x200, 0x4, 0x3, 0x10, 0x3, 0xfffffff8}, {0x8, 0x6, 0xedd5, 0x0, 0x10, 0x80000000}, {0x80, 0x9, 0x3, 0x9, 0x3ec1, 0x8}, {0x3, 0x8000, 0x6, 0x101, 0x7d3}, {0x1, 0xfffffffd, 0x2, 0x3, 0x7, 0x2}, {0x10000, 0x8000, 0x5, 0x3, 0x7194, 0x8}, {0x6, 0x3, 0x764fd9bf, 0x66d6, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x101, 0x9, 0x1}, {0x0, 0x41, 0x1f2, 0x100, 0x1, 0x8}, {0x100, 0x6, 0x6, 0x9, 0xfffffffc, 0x8}, {0x9, 0x1, 0x7, 0x4, 0x2000000, 0x2}, {0xb4, 0xfffffffb, 0x13, 0x8, 0x61, 0x94}, {0x0, 0x6, 0x7ff, 0xffffffff, 0x635, 0x5e}, {0x9, 0x1, 0xf, 0x5, 0x4aed91b3, 0xfffffffd}, {0x7ff, 0x2, 0xf8, 0x8, 0xacbc, 0x2}, {0xff, 0x3, 0x1, 0x48000000, 0xa9, 0xcfa6}, {0x4, 0x10000, 0x297, 0x8, 0xf0000000, 0xca}, {0x4, 0x1, 0x7, 0x4, 0x3, 0x7c}, {0xe146, 0x6, 0x5, 0x81, 0xec72}, {0x3, 0x80000000, 0x2, 0x2, 0x8, 0x4}, {0x56, 0x4, 0x80000001, 0x1ca, 0xa8, 0x10000}, {0x8001, 0x7, 0x6, 0xfffffffe, 0x3ff, 0xffff}, {0x5, 0x4, 0x3, 0x5, 0xbc, 0xd951}, {0x40, 0x6, 0x1, 0xfffff3e1, 0x895c, 0x1000}, {0xe, 0x8, 0x400, 0x5, 0x2c00}, {0x1, 0x7fff, 0x95, 0x7, 0x38a}, {0x62686865, 0x5e1, 0x6, 0x0, 0xd309, 0x7}, {0x7a, 0x3, 0x101, 0x3, 0x6, 0x1000}, {0x0, 0x0, 0x6, 0x7, 0x5, 0x4}, {0x1, 0x4, 0x800, 0x9e28, 0x2, 0xffff0000}, {0x7, 0x9, 0x0, 0x6, 0x5, 0x7fff}, {0x7, 0xb, 0x44a42eb6, 0xffffff0d, 0xfffffffc, 0x1}, {0xffff, 0xfffffbff, 0x5, 0x6, 0x5, 0x10100000}, {0x7, 0x8, 0x4, 0xf0e, 0xffff, 0x8}, {0xffffffff, 0x7, 0x2, 0x7, 0x8, 0x8327}, {0x9, 0x4, 0x6, 0x6, 0x3bc, 0x5950ccd}, {0x9, 0x4, 0x9, 0x2, 0x0, 0xdc4}, {0x5, 0x9, 0x6, 0x7, 0x9, 0x2}, {0x1f25, 0xb, 0xffff1d0c, 0x7, 0x2f, 0x1c0000}, {0x80, 0x9, 0xf, 0x9}, {0xe2c, 0x8000, 0x7, 0x2, 0x4, 0x1}, {0x5, 0xccb8, 0x5, 0xb, 0x5, 0x8}, {0x5, 0x4e7, 0x8, 0x6, 0x2, 0x9}, {0x100, 0x3, 0xffffffff, 0x0, 0x5}, {0x6, 0x7, 0x80, 0x6, 0x5, 0x4}, {0x6, 0x8, 0x0, 0x101, 0x2, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x62222125a2c20c84}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x6c295710423417d6}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0xa}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0xa508f9b45da4e087}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {}, {0x481deeb6fe26e12c, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x30, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0x1200}}, 0x0) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) 3.111994819s ago: executing program 4 (id=365): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xe}) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9, 0xac}}}, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000002c0)={0x3}) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000140)={0x6, 0x0, [{0x400000b2, 0x0, 0x3}, {0x2cb, 0x0, 0xfffffffffffffff7}, {0x40c, 0x0, 0x6}, {0x3a3, 0x0, 0xb}, {0x3aa, 0x0, 0x7}, {0xa68, 0x0, 0x670cb252}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x7482, &(0x7f0000000200)) syz_emit_vhci(&(0x7f00000004c0)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{0x45, 0x5}, {0x6, 0xc9, 0xc9, 0x4}}}, 0x8) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) 2.691083062s ago: executing program 1 (id=366): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000005f00)={0x0, 0x0, &(0x7f0000005ec0)={&(0x7f0000005e40)=ANY=[@ANYBLOB="1400ff29", @ANYRES16=r0, @ANYBLOB="010026bd7000fddbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x67446698, 0x0, 0x4, 0x4, 0x4, "07c2f1eefde239853496af51f173f96ae04bff957eb03e6db25e33042399350500243aee81de23176dfbb0cab443bb6de9ab74ffd5d497426169ee861f8a6280dcf6083df69b8f284cd65de3bf811f8b7ddc37c819e8459d4a7d628a973714906db66265d8da06ab68e747e44ef24c6aa5503cd75a5f06c2fc8cffaa30bb45c25feaab3b457cf0172e738794fb6b46f0a544bd547e1e5129ad6730dd46eb"}, 0xae) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000080)='P') 2.463123838s ago: executing program 0 (id=367): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xc, 0x0, 0x10, 0xffff85e5, 'syz1\x00'}, 0x0, [0x400, 0x2, 0x7ffc, 0x5, 0xd, 0x100000000, 0x0, 0x45, 0x7, 0x7, 0x3, 0x8007f, 0x1, 0x200, 0x8000000, 0x0, 0x8, 0x1, 0x2000000000000001, 0x1, 0x0, 0x0, 0x5, 0x3, 0x100000001, 0x40, 0x2, 0xff, 0x4, 0x4, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x3, 0x20, 0xee4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x2000008, 0xfffffffe, 0x0, 0x6, 0xfffffdfffffffffe, 0x7, 0x80000000, 0x7, 0x0, 0x0, 0x80000001, 0x20000000000, 0x0, 0x0, 0x0, 0x5, 0x9, 0xb4f, 0xffffffff, 0x9, 0xfffffffc, 0x1, 0x0, 0xffffffd, 0xd87, 0x0, 0x0, 0x1, 0x80, 0x400000, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4b7, 0x1000e9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x20bb, 0x200000, 0x3, 0x0, 0xfffffffb, 0x7, 0x7ffffffd, 0x4, 0x0, 0x2, 0x1, 0x400003, 0x3, 0x0, 0xfffffffd, 0x5, 0x3, 0x6, 0x6, 0x0, 0x8, 0x6, 0x0, 0x0, 0xe1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7ff]}) epoll_create1(0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_connect_ath9k(0x3, 0xa, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x225, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="400e0103000047"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, 0x0, 0x0, 0x60004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.47935392s ago: executing program 4 (id=368): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x3e, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xffff, 0x8000, 0x4, 0x7, 0x3, 0xf, 0xe95e, 0x200, 0x0, 0xaff5, 0xfffe, 0x3}}, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) r5 = socket(0x2, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet_sctp(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) userfaultfd(0x180803) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @remote}) 304.544345ms ago: executing program 2 (id=369): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$kcm(0x2d, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x100, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_NAT_SRC={0x68, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}]}, @CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0x7, 0x1e0, 0xed00, 0xc, 0x417]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xda}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2e2c1704}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20044080}, 0x48000) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) (async) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000200), 0x4) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000440)) 60.464444ms ago: executing program 3 (id=370): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) 0s ago: executing program 2 (id=371): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000040180)=[{{0x0, 0x0, &(0x7f0000037980)=[{&(0x7f0000037640)="4ea24b73", 0x4}], 0x1, &(0x7f0000037a00)=[{0x10, 0x1, 0x6}], 0x24}}], 0x1, 0x0) kernel console output (not intermixed with test programs): d from eth0 [ 65.748761][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.755288][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.758190][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.762361][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.777968][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.790869][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.801808][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.810073][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.824200][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.833287][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.861002][ T1037] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.868267][ T1037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.903310][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.910362][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.938060][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.950912][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.959735][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.974918][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.984061][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.991559][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.000439][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.015823][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.024196][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.037420][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.060172][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.067286][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.097599][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.104681][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.125208][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.202198][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.229054][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.236109][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.246861][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.265823][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.272934][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.319127][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.351824][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.358942][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.379488][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.405826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.412946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.446827][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.485206][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.492317][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.536769][ T1037] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.544112][ T1037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.554024][ T4929] Bluetooth: hci2: command tx timeout [ 66.559604][ T4929] Bluetooth: hci3: command tx timeout [ 66.565196][ T50] Bluetooth: hci4: command tx timeout [ 66.571055][ T4929] Bluetooth: hci1: command tx timeout [ 66.578772][ T5614] Bluetooth: hci0: command tx timeout [ 66.894878][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.007030][ T5607] veth0_vlan: entered promiscuous mode [ 67.042486][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.079773][ T5607] veth1_vlan: entered promiscuous mode [ 67.188556][ T5607] veth0_macvtap: entered promiscuous mode [ 67.211282][ T5610] veth0_vlan: entered promiscuous mode [ 67.236970][ T5607] veth1_macvtap: entered promiscuous mode [ 67.279215][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.289705][ T5610] veth1_vlan: entered promiscuous mode [ 67.306346][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.326353][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.356481][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.400474][ T302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.412801][ T302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.421671][ T302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.439583][ T302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.469283][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.499891][ T5610] veth0_macvtap: entered promiscuous mode [ 67.530719][ T5610] veth1_macvtap: entered promiscuous mode [ 67.545800][ T5617] veth0_vlan: entered promiscuous mode [ 67.580065][ T5617] veth1_vlan: entered promiscuous mode [ 67.603565][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.627910][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.640041][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.640760][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.670755][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.680614][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.689497][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.702834][ T5608] veth0_vlan: entered promiscuous mode [ 67.715911][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.747409][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.755712][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.756066][ T5617] veth0_macvtap: entered promiscuous mode [ 67.769615][ T5609] veth0_vlan: entered promiscuous mode [ 67.785852][ T5608] veth1_vlan: entered promiscuous mode [ 67.806976][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 67.806987][ T30] audit: type=1400 audit(1778183502.869:152): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.jGK0Rr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.826272][ T5609] veth1_vlan: entered promiscuous mode [ 67.837984][ T30] audit: type=1400 audit(1778183502.869:153): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.853867][ T5617] veth1_macvtap: entered promiscuous mode [ 67.866793][ T30] audit: type=1400 audit(1778183502.869:154): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.jGK0Rr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.882472][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.903213][ T30] audit: type=1400 audit(1778183502.869:155): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.925468][ T30] audit: type=1400 audit(1778183502.879:156): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.jGK0Rr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.953428][ T30] audit: type=1400 audit(1778183502.879:157): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/root/syzkaller.jGK0Rr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.986983][ T30] audit: type=1400 audit(1778183502.879:158): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.999700][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.013916][ T30] audit: type=1400 audit(1778183502.909:159): avc: denied { mounton } for pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.043476][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.058061][ T30] audit: type=1400 audit(1778183502.909:160): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=7035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.081520][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.091477][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.092790][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.104013][ T30] audit: type=1400 audit(1778183502.909:161): avc: denied { mount } for pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.119230][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.145331][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.173677][ T3370] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.188178][ T5608] veth0_macvtap: entered promiscuous mode [ 68.196715][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.207654][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.226445][ T5608] veth1_macvtap: entered promiscuous mode [ 68.306664][ T5609] veth0_macvtap: entered promiscuous mode [ 68.336344][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.357627][ T5609] veth1_macvtap: entered promiscuous mode [ 68.377391][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.394428][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.423146][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.453987][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.483535][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.510842][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.530074][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.539769][ T3370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.548656][ T3370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.567181][ T5802] FAULT_INJECTION: forcing a failure. [ 68.567181][ T5802] name failslab, interval 1, probability 0, space 0, times 1 [ 68.570006][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.580936][ T5802] CPU: 1 UID: 0 PID: 5802 Comm: syz.2.6 Not tainted syzkaller #0 PREEMPT(full) [ 68.580955][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.580963][ T5802] Call Trace: [ 68.580969][ T5802] [ 68.580974][ T5802] dump_stack_lvl+0x100/0x190 [ 68.580996][ T5802] should_fail_ex.cold+0x5/0xa [ 68.581017][ T5802] ? tomoyo_encode2+0xfb/0x3c0 [ 68.581036][ T5802] should_failslab+0xc2/0x120 [ 68.581052][ T5802] __kmalloc_noprof+0xe0/0x850 [ 68.581073][ T5802] ? d_absolute_path+0x136/0x1b0 [ 68.581093][ T5802] tomoyo_encode2+0xfb/0x3c0 [ 68.581116][ T5802] tomoyo_encode+0x29/0x50 [ 68.581134][ T5802] tomoyo_realpath_from_path+0x18c/0x690 [ 68.581159][ T5802] tomoyo_path_number_perm+0x23c/0x580 [ 68.581176][ T5802] ? tomoyo_path_number_perm+0x22e/0x580 [ 68.581195][ T5802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.581233][ T5802] ? find_held_lock+0x2b/0x80 [ 68.581247][ T5802] ? __fget_files+0x215/0x3d0 [ 68.581264][ T5802] ? hook_file_ioctl_common+0x149/0x410 [ 68.581285][ T5802] ? __fget_files+0x215/0x3d0 [ 68.581307][ T5802] ? __fget_files+0x21f/0x3d0 [ 68.581328][ T5802] security_file_ioctl+0xd3/0x230 [ 68.581347][ T5802] __x64_sys_ioctl+0xb7/0x210 [ 68.581365][ T5802] do_syscall_64+0x10b/0xf80 [ 68.581382][ T5802] ? clear_bhb_loop+0x40/0x90 [ 68.581400][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.581415][ T5802] RIP: 0033:0x7f196279cdd9 [ 68.581428][ T5802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.581441][ T5802] RSP: 002b:00007f1963591028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.581455][ T5802] RAX: ffffffffffffffda RBX: 00007f1962a15fa0 RCX: 00007f196279cdd9 [ 68.581464][ T5802] RDX: 0000000000000000 RSI: 00000000405c5503 RDI: 0000000000000005 [ 68.581473][ T5802] RBP: 00007f1963591090 R08: 0000000000000000 R09: 0000000000000000 [ 68.581481][ T5802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.581489][ T5802] R13: 00007f1962a16038 R14: 00007f1962a15fa0 R15: 00007ffd728a0d98 [ 68.581509][ T5802] [ 68.581521][ T5802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.590302][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.642806][ T5614] Bluetooth: hci0: command tx timeout [ 68.695612][ T4929] Bluetooth: hci1: command tx timeout [ 68.701752][ T5619] Bluetooth: hci4: command tx timeout [ 68.705645][ T4929] Bluetooth: hci3: command tx timeout [ 68.709813][ T5619] Bluetooth: hci2: command tx timeout [ 68.856998][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.867371][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.904021][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.914104][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.992924][ T5710] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.006444][ T3370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.007838][ T5810] team0: entered allmulticast mode [ 69.018304][ T3370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.020895][ T5810] team_slave_0: entered allmulticast mode [ 69.033192][ T5810] team_slave_1: entered allmulticast mode [ 69.039226][ T5810] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.048307][ T5810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 69.091897][ T302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.117650][ T302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.139585][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.161436][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.176273][ T5814] ======================================================= [ 69.176273][ T5814] WARNING: The mand mount option has been deprecated and [ 69.176273][ T5814] and is ignored by this kernel. Remove the mand [ 69.176273][ T5814] option from the mount to silence this warning. [ 69.176273][ T5814] ======================================================= [ 69.269117][ T5814] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.286284][ T5814] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 69.386578][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 69.406316][ T5710] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 69.417680][ T5710] usb 3-1: config 0 has no interface number 1 [ 69.431290][ T5710] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 69.443345][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.453831][ T5710] usb 3-1: Product: syz [ 69.468189][ T302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.469406][ T5710] usb 3-1: Manufacturer: syz [ 69.481353][ T5710] usb 3-1: SerialNumber: syz [ 69.493618][ T302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.495938][ T5820] FAULT_INJECTION: forcing a failure. [ 69.495938][ T5820] name failslab, interval 1, probability 0, space 0, times 0 [ 69.520844][ T5710] usb 3-1: config 0 descriptor?? [ 69.575570][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT(full) [ 69.575592][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.575610][ T5820] Call Trace: [ 69.575615][ T5820] [ 69.575622][ T5820] dump_stack_lvl+0x100/0x190 [ 69.575647][ T5820] should_fail_ex.cold+0x5/0xa [ 69.575671][ T5820] should_failslab+0xc2/0x120 [ 69.575691][ T5820] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 69.575717][ T5820] ? __alloc_skb+0x140/0x710 [ 69.575741][ T5820] ? __alloc_skb+0x5b7/0x710 [ 69.575768][ T5820] __alloc_skb+0x140/0x710 [ 69.575793][ T5820] ? __alloc_skb+0x5b7/0x710 [ 69.575815][ T5820] ? __pfx___alloc_skb+0x10/0x10 [ 69.575846][ T5820] netlink_alloc_large_skb+0x69/0x150 [ 69.575871][ T5820] netlink_sendmsg+0x680/0xda0 [ 69.575896][ T5820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.575916][ T5820] ? __might_fault+0x90/0x140 [ 69.575948][ T5820] ____sys_sendmsg+0x9e1/0xb70 [ 69.575968][ T5820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.575992][ T5820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.576022][ T5820] ___sys_sendmsg+0x190/0x1e0 [ 69.576045][ T5820] ? __pfx____sys_sendmsg+0x10/0x10 [ 69.576090][ T5820] __sys_sendmsg+0x170/0x220 [ 69.576107][ T5820] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.576133][ T5820] ? rcu_is_watching+0x12/0xc0 [ 69.576163][ T5820] do_syscall_64+0x10b/0xf80 [ 69.576184][ T5820] ? clear_bhb_loop+0x40/0x90 [ 69.576205][ T5820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.576221][ T5820] RIP: 0033:0x7f445819cdd9 [ 69.576235][ T5820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.576250][ T5820] RSP: 002b:00007f4459135028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.576267][ T5820] RAX: ffffffffffffffda RBX: 00007f4458415fa0 RCX: 00007f445819cdd9 [ 69.576278][ T5820] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 69.576288][ T5820] RBP: 00007f4459135090 R08: 0000000000000000 R09: 0000000000000000 [ 69.576298][ T5820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.576307][ T5820] R13: 00007f4458416038 R14: 00007f4458415fa0 R15: 00007fffb914d678 [ 69.576329][ T5820] [ 69.843730][ T5710] viperboard 3-1:0.61: version 0.00 found at bus 003 address 002 [ 69.896674][ T5710] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 69.947480][ T5710] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 69.966987][ T5827] use of bytesused == 0 is deprecated and will be removed in the future, [ 70.427907][ T5827] use the actual size instead. [ 70.449557][ T5837] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10'. [ 70.453254][ T5710] viperboard 3-1:0.0: version 0.00 found at bus 003 address 002 [ 70.461812][ T5837] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 70.510151][ T5710] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 70.532221][ T5710] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 70.723838][ T4929] Bluetooth: hci0: command tx timeout [ 70.729315][ T50] Bluetooth: hci4: command tx timeout [ 70.734726][ T5619] Bluetooth: hci1: command tx timeout [ 70.741059][ T5614] Bluetooth: hci2: command tx timeout [ 70.917974][ T5614] Bluetooth: hci3: command tx timeout [ 70.927205][ T5854] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'. [ 70.971657][ T5858] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1'. [ 71.900284][ T5620] usb 3-1: USB disconnect, device number 2 [ 72.092205][ T5736] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.112100][ T5710] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 72.172155][ T5794] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.243698][ T5736] usb 1-1: config 0 has no interfaces? [ 72.250790][ T5736] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 72.260103][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.268350][ T5736] usb 1-1: Product: syz [ 72.273349][ T5736] usb 1-1: Manufacturer: syz [ 72.277956][ T5736] usb 1-1: SerialNumber: syz [ 72.282070][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 72.290920][ T5736] usb 1-1: config 0 descriptor?? [ 72.291060][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.314929][ T5710] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 72.327121][ T5710] usb 5-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 72.335541][ T5794] usb 4-1: Using ep0 maxpacket: 16 [ 72.340779][ T5710] usb 5-1: Product: syz [ 72.343525][ T5620] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.344941][ T5710] usb 5-1: Manufacturer: syz [ 72.358225][ T5794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.371775][ T5710] usb 5-1: config 0 descriptor?? [ 72.377745][ T5794] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 72.389391][ T5794] usb 4-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 72.398464][ T5794] usb 4-1: Product: syz [ 72.403193][ T5794] usb 4-1: Manufacturer: syz [ 72.410081][ T5794] usb 4-1: config 0 descriptor?? [ 72.452059][ T5710] rc_core: IR keymap rc-xbox-dvd not found [ 72.457861][ T5710] Registered IR keymap rc-empty [ 72.463785][ T5710] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 72.476655][ T5794] rc_core: IR keymap rc-xbox-dvd not found [ 72.485647][ T5794] Registered IR keymap rc-empty [ 72.491028][ T5794] rc rc1: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 72.501015][ T5710] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 72.502116][ T5620] usb 3-1: Using ep0 maxpacket: 8 [ 72.513581][ T5794] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input8 [ 72.535280][ T5620] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 20, changing to 7 [ 72.559926][ T5620] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice= 0.40 [ 72.569491][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.577688][ T5620] usb 3-1: Product: syz [ 72.582773][ T5620] usb 3-1: Manufacturer: syz [ 72.589464][ T5620] usb 3-1: SerialNumber: syz [ 72.686414][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.204495][ T5620] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 73.596836][ T5620] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 73.663135][ T5620] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 73.671357][ T5620] usb 3-1: USB disconnect, device number 3 [ 73.758471][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 73.914361][ T5620] usb 4-1: USB disconnect, device number 3 [ 73.914385][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 74.088750][ T5886] syz.1.21 uses obsolete (PF_INET,SOCK_PACKET) [ 74.241577][ T5891] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure [ 74.257382][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 74.257524][ T30] audit: type=1400 audit(1778183509.319:215): avc: denied { create } for pid=5889 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.533974][ T5729] usb 5-1: USB disconnect, device number 2 [ 74.534118][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 74.646423][ T5893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=5893 comm=syz.2.22 [ 74.667979][ T30] audit: type=1400 audit(1778183509.349:216): avc: denied { ioctl } for pid=5889 comm="syz.3.23" path="socket:[8769]" dev="sockfs" ino=8769 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.745319][ T5898] tipc: Can't bind to reserved service type 1 [ 75.140847][ T5620] usb 1-1: USB disconnect, device number 2 [ 75.245262][ T30] audit: type=1400 audit(1778183509.569:217): avc: denied { kexec_image_load } for pid=5887 comm="syz.2.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 76.272214][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.416671][ T30] audit: type=1400 audit(1778183509.809:218): avc: denied { bind } for pid=5895 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.437202][ T30] audit: type=1400 audit(1778183509.819:219): avc: denied { setopt } for pid=5895 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.457763][ T30] audit: type=1400 audit(1778183510.289:220): avc: denied { read write } for pid=5899 comm="syz.4.25" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.713445][ T30] audit: type=1400 audit(1778183510.289:221): avc: denied { open } for pid=5899 comm="syz.4.25" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.736310][ T30] audit: type=1400 audit(1778183510.289:222): avc: denied { ioctl } for pid=5899 comm="syz.4.25" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.761293][ T30] audit: type=1400 audit(1778183510.349:223): avc: denied { create } for pid=5903 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.828543][ T30] audit: type=1400 audit(1778183510.349:224): avc: denied { write } for pid=5903 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.200361][ T5926] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 78.474738][ T5937] netlink: 'syz.1.34': attribute type 39 has an invalid length. [ 78.505406][ T5939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.37'. [ 79.344869][ T5943] Zero length message leads to an empty skb [ 80.012493][ T5946] loop5: detected capacity change from 0 to 7 [ 80.071889][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 80.071905][ T30] audit: type=1400 audit(1778183515.129:243): avc: denied { ioctl } for pid=5930 comm="syz.1.34" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x5840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 80.197754][ T5948] binder: 5930:5948 ioctl c0285840 200000000000 returned -22 [ 81.198272][ T10] cfg80211: failed to load regulatory.db [ 81.212105][ T5794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.434588][ T5946] Dev loop5: unable to read RDB block 7 [ 81.482360][ T30] audit: type=1400 audit(1778183516.509:244): avc: denied { create } for pid=5951 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.515474][ T5946] loop5: unable to read partition table [ 81.771590][ T5946] loop5: partition table beyond EOD, truncated [ 81.797486][ T30] audit: type=1400 audit(1778183516.619:245): avc: denied { setopt } for pid=5951 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.830884][ T5946] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 81.875507][ T5959] IPVS: fo: FWM 3 0x00000003 - no destination available [ 81.889539][ T5710] IPVS: starting estimator thread 0... [ 81.934049][ T5958] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 82.179101][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 82.187863][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 82.196624][ T5968] netlink: 'syz.0.42': attribute type 15 has an invalid length. [ 82.453129][ T30] audit: type=1400 audit(1778183516.889:246): avc: denied { setopt } for pid=5954 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.739380][ T5961] IPVS: using max 39 ests per chain, 93600 per kthread [ 82.748816][ T30] audit: type=1400 audit(1778183517.209:247): avc: denied { create } for pid=5960 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.769052][ T30] audit: type=1400 audit(1778183517.239:248): avc: denied { write } for pid=5960 comm="syz.0.42" path="socket:[9399]" dev="sockfs" ino=9399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 82.966119][ T30] audit: type=1400 audit(1778183517.499:249): avc: denied { ioctl } for pid=5951 comm="syz.2.39" path="socket:[8878]" dev="sockfs" ino=8878 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.940444][ T30] audit: type=1400 audit(1778183518.999:250): avc: denied { write } for pid=5980 comm="syz.3.45" name="ipv6_route" dev="proc" ino=4026533305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.167497][ T5987] netlink: 'syz.0.46': attribute type 13 has an invalid length. [ 84.250620][ T30] audit: type=1400 audit(1778183519.309:251): avc: denied { read } for pid=5990 comm="syz.2.48" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.286298][ T30] audit: type=1400 audit(1778183519.309:252): avc: denied { open } for pid=5990 comm="syz.2.48" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.604262][ T5620] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.832925][ T5620] usb 2-1: Using ep0 maxpacket: 8 [ 84.915860][ T5620] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 84.967852][ T5620] usb 2-1: config 0 has no interface number 0 [ 85.025336][ T5620] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 85.091240][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.250092][ T5620] usb 2-1: config 0 descriptor?? [ 85.494557][ T6002] capability: warning: `syz.2.52' uses 32-bit capabilities (legacy support in use) [ 85.684519][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 85.684539][ T30] audit: type=1400 audit(1778183520.619:260): avc: denied { map } for pid=6001 comm="syz.2.52" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.976714][ T30] audit: type=1400 audit(1778183520.619:261): avc: denied { read write } for pid=6001 comm="syz.2.52" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=9096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.149881][ T6005] tipc: Started in network mode [ 86.154837][ T6005] tipc: Node identity 84e, cluster identity 4711 [ 86.161132][ T6005] tipc: Node number set to 2126 [ 86.391641][ T5620] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 86.434436][ T5620] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 86.464577][ T5620] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 86.531052][ T5620] usb 2-1: USB disconnect, device number 2 [ 86.573617][ T30] audit: type=1400 audit(1778183521.619:262): avc: denied { name_bind } for pid=6006 comm="syz.2.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 88.478315][ T6016] kAFS: unable to lookup cell '(,c¾ûL' [ 88.763969][ T30] audit: type=1400 audit(1778183523.829:263): avc: denied { create } for pid=6028 comm="syz.2.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.828357][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 88.845501][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 88.861087][ T6036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 88.879216][ T30] audit: type=1400 audit(1778183523.939:264): avc: denied { write } for pid=6028 comm="syz.2.60" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.900955][ T6038] warning: `syz.0.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.918211][ T30] audit: type=1400 audit(1778183523.969:265): avc: denied { connect } for pid=6037 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.942395][ T5710] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.972117][ T30] audit: type=1400 audit(1778183523.979:266): avc: denied { shutdown } for pid=6028 comm="syz.2.60" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.016053][ T30] audit: type=1400 audit(1778183523.979:267): avc: denied { read } for pid=6028 comm="syz.2.60" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.162150][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 89.169366][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.183653][ T5710] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 89.193067][ T5710] usb 2-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 89.201379][ T5710] usb 2-1: Product: syz [ 89.205742][ T5710] usb 2-1: Manufacturer: syz [ 89.213524][ T5710] usb 2-1: config 0 descriptor?? [ 89.681581][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.762124][ T5710] rc_core: IR keymap rc-xbox-dvd not found [ 89.779210][ T5710] Registered IR keymap rc-empty [ 89.798297][ T5710] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 89.842097][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 90.350736][ T5710] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 90.398775][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 90.440946][ T10] usb 1-1: config 0 has no interface number 0 [ 90.457976][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 90.480762][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 90.490480][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.527382][ T10] usb 1-1: Product: syz [ 90.644351][ T10] usb 1-1: Manufacturer: syz [ 90.649031][ T10] usb 1-1: SerialNumber: syz [ 90.656650][ T10] usb 1-1: config 0 descriptor?? [ 90.698793][ T30] audit: type=1400 audit(1778183525.649:268): avc: denied { create } for pid=6025 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.351625][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.582321][ T5710] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.903728][ T5710] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.915808][ T5710] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.927121][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.940578][ T5710] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.950830][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.961870][ T5710] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 91.976058][ T29] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 92.007418][ T5710] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.025517][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.033739][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.059146][ T5710] usb 5-1: Product: syz [ 92.059456][ T5736] usb 2-1: USB disconnect, device number 3 [ 92.063375][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 92.069457][ T29] usb 4-1: config 0 descriptor?? [ 92.085901][ T5710] usb 5-1: Manufacturer: syz [ 92.097858][ T5710] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 92.608586][ T30] audit: type=1400 audit(1778183527.429:269): avc: denied { append } for pid=6039 comm="syz.0.64" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.740610][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 92.751783][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 92.783195][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 92.814809][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 92.832324][ T29] hid (null): report_id 1629141528 is invalid [ 92.855244][ T29] hid-led 0003:27B8:01ED.0001: report_id 1629141528 is invalid [ 92.870718][ T29] hid-led 0003:27B8:01ED.0001: item 0 4 1 8 parsing failed [ 92.892187][ T29] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -22 [ 92.917272][ T10] usb 1-1: USB disconnect, device number 4 [ 93.285934][ T6070] netlink: 'syz.2.71': attribute type 39 has an invalid length. [ 93.316414][ T6052] comedi comedi2: ni_at_a2150: I/O base address or length out of range [ 93.336375][ T5736] usb 4-1: USB disconnect, device number 4 [ 93.646159][ T6070] binder: 6069:6070 ioctl c0285840 200000000000 returned -22 [ 93.826554][ T30] audit: type=1400 audit(1778183528.809:270): avc: denied { create } for pid=6074 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.011514][ T30] audit: type=1400 audit(1778183529.019:271): avc: denied { write } for pid=6074 comm="syz.1.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.100759][ T5736] usb 5-1: USB disconnect, device number 3 [ 94.579785][ T6081] netlink: 180 bytes leftover after parsing attributes in process `syz.0.74'. [ 95.602759][ T30] audit: type=1400 audit(1778183530.669:272): avc: denied { append } for pid=6095 comm="syz.0.79" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.890890][ T30] audit: type=1400 audit(1778183530.949:273): avc: denied { create } for pid=6095 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.989388][ T30] audit: type=1400 audit(1778183531.049:274): avc: denied { read write } for pid=6098 comm="syz.4.80" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.052419][ T30] audit: type=1400 audit(1778183531.049:275): avc: denied { open } for pid=6098 comm="syz.4.80" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.602145][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.722342][ T30] audit: type=1400 audit(1778183531.779:276): avc: denied { read } for pid=6109 comm="syz.3.83" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.751623][ T30] audit: type=1400 audit(1778183531.779:277): avc: denied { open } for pid=6109 comm="syz.3.83" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.775995][ T30] audit: type=1400 audit(1778183531.819:278): avc: denied { ioctl } for pid=6109 comm="syz.3.83" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.803510][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.925334][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.953608][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.374025][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.388671][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.397914][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.406099][ T10] usb 1-1: Product: syz [ 97.410270][ T10] usb 1-1: Manufacturer: syz [ 97.436325][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 97.842413][ T30] audit: type=1400 audit(1778183532.909:279): avc: denied { connect } for pid=6123 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.386231][ T10] usb 1-1: USB disconnect, device number 5 [ 99.596165][ T6138] overlayfs: failed to resolve './file1': -2 [ 99.842906][ T30] audit: type=1400 audit(1778183534.899:280): avc: denied { ioctl } for pid=6142 comm="syz.1.93" path="socket:[9934]" dev="sockfs" ino=9934 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.868094][ T6144] netlink: 52 bytes leftover after parsing attributes in process `syz.1.93'. [ 99.879330][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.886999][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.931004][ T6146] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 99.982741][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.120066][ T30] audit: type=1400 audit(1778183535.179:281): avc: denied { ioctl } for pid=6145 comm="syz.2.94" path="socket:[9962]" dev="sockfs" ino=9962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.159181][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 100.184399][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 100.198844][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 100.204538][ T6150] gretap1: entered promiscuous mode [ 100.208460][ T30] audit: type=1400 audit(1778183535.239:282): avc: denied { ioctl } for pid=6156 comm="syz.4.97" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 100.243929][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 100.255519][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 100.263633][ T10] usb 1-1: Product: syz [ 100.268035][ T10] usb 1-1: Manufacturer: syz [ 100.273403][ T10] usb 1-1: SerialNumber: syz [ 100.497661][ T10] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 100.516176][ T10] visor 1-1:1.0: probe with driver visor failed with error -71 [ 100.616187][ T10] usb 1-1: USB disconnect, device number 6 [ 101.503568][ T6168] netlink: 'syz.1.100': attribute type 39 has an invalid length. [ 102.773202][ T6175] binder: 6167:6175 ioctl c0285840 200000000000 returned -22 [ 102.846206][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 103.084740][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 103.084756][ T30] audit: type=1400 audit(1778183538.139:285): avc: denied { ioctl } for pid=6180 comm="syz.4.103" path="/dev/sg0" dev="devtmpfs" ino=780 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 103.416209][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 103.424332][ T10] usb 3-1: config 0 has no interface number 0 [ 103.447644][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 103.514795][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.561087][ T10] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.604778][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 103.632092][ T10] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 103.671066][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.712849][ T10] usb 3-1: config 0 descriptor?? [ 103.815973][ T6193] tipc: Started in network mode [ 103.821534][ T6193] tipc: Node identity 84e, cluster identity 4711 [ 103.828417][ T6193] tipc: Node number set to 2126 [ 103.901371][ T30] audit: type=1400 audit(1778183538.959:286): avc: denied { mounton } for pid=6182 comm="syz.0.104" path="/18/file0" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.976911][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 103.994417][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 104.039918][ T10] usb 3-1: USB disconnect, device number 4 [ 104.564090][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.213715][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 105.286496][ T6219] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 105.294360][ T6219] netlink: 152 bytes leftover after parsing attributes in process `syz.2.113'. [ 105.340132][ T6219] .`: renamed from bond0 (while UP) [ 105.386284][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.389961][ T6222] netlink: 'syz.4.115': attribute type 39 has an invalid length. [ 105.435545][ T10] usb 1-1: config 3 has an invalid interface number: 31 but max is 0 [ 105.455354][ T10] usb 1-1: config 3 has no interface number 0 [ 105.494404][ T6227] binder: 6221:6227 ioctl c0285840 200000000000 returned -22 [ 105.507524][ T10] usb 1-1: config 3 interface 31 has no altsetting 0 [ 105.543126][ T10] usb 1-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=27.78 [ 105.584231][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.639362][ T10] usb 1-1: Product: á Š [ 105.673278][ T10] usb 1-1: Manufacturer: à ’ [ 105.689127][ T10] usb 1-1: SerialNumber: Ñ— [ 106.585187][ T30] audit: type=1400 audit(1778183541.649:287): avc: denied { setopt } for pid=6243 comm="syz.4.121" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.728983][ T30] audit: type=1400 audit(1778183541.789:288): avc: denied { unlink } for pid=6237 comm="syz.3.119" name="#1" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.826721][ T30] audit: type=1400 audit(1778183541.829:289): avc: denied { mount } for pid=6237 comm="syz.3.119" name="/" dev="overlay" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.855818][ T30] audit: type=1400 audit(1778183541.839:290): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 106.954160][ T30] audit: type=1400 audit(1778183541.839:291): avc: denied { open } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.003771][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.076205][ T30] audit: type=1400 audit(1778183541.839:292): avc: denied { ioctl } for pid=5608 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.212898][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 107.225447][ T9] usb 4-1: device descriptor read/all, error -61 [ 107.385417][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.584295][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.748495][ T9] usb usb4-port1: attempt power cycle [ 107.893541][ T10] rndis_host 1-1:3.31: invalid descriptor buffer length [ 107.969603][ T10] rndis_host 1-1:3.31: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 108.090815][ T10] cdc_acm 1-1:3.31: invalid descriptor buffer length [ 108.222206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.242153][ T10] usb 1-1: USB disconnect, device number 7 [ 108.312359][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.451583][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.679050][ T30] audit: type=1400 audit(1778183543.619:293): avc: denied { ioctl } for pid=6254 comm="syz.4.124" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 108.858671][ T30] audit: type=1400 audit(1778183543.659:294): avc: denied { connect } for pid=6254 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 109.032211][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.415502][ T9] usb 4-1: device descriptor read/8, error -71 [ 109.953152][ T30] audit: type=1400 audit(1778183544.759:295): avc: denied { append } for pid=6270 comm="syz.2.128" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 109.982114][ T9] usb usb4-port1: unable to enumerate USB device [ 110.083142][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.193954][ T30] audit: type=1400 audit(1778183545.259:296): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.272507][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 110.287544][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.299772][ T10] usb 2-1: config 0 has no interfaces? [ 110.317174][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 110.330415][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 110.365666][ T10] usb 2-1: Product: syz [ 110.516686][ T6287] team0: entered allmulticast mode [ 110.528391][ T10] usb 2-1: Manufacturer: syz [ 110.543380][ T10] usb 2-1: SerialNumber: syz [ 110.549835][ T6287] team_slave_0: entered allmulticast mode [ 110.568682][ T10] usb 2-1: config 0 descriptor?? [ 110.612288][ T6287] team_slave_1: entered allmulticast mode [ 110.613481][ T30] audit: type=1400 audit(1778183545.679:297): avc: denied { bind } for pid=6290 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.647641][ T30] audit: type=1400 audit(1778183545.699:298): avc: denied { setopt } for pid=6290 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.700273][ T6295] x_tables: duplicate underflow at hook 2 [ 110.714588][ T6287] netlink: 168 bytes leftover after parsing attributes in process `syz.4.131'. [ 110.725499][ T30] audit: type=1400 audit(1778183545.699:299): avc: denied { accept } for pid=6290 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.749226][ T6287] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 110.815973][ T30] audit: type=1400 audit(1778183545.699:300): avc: denied { write } for pid=6290 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.909489][ T30] audit: type=1400 audit(1778183545.699:301): avc: denied { read } for pid=6290 comm="syz.3.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.057402][ T30] audit: type=1400 audit(1778183546.019:302): avc: denied { create } for pid=6298 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.140337][ T5710] usb 2-1: USB disconnect, device number 4 [ 111.208949][ T6307] kAFS: unable to lookup cell '(,c¾ûL' [ 111.763428][ T6303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.136'. [ 114.264540][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 114.264556][ T30] audit: type=1400 audit(1778183548.959:306): avc: denied { create } for pid=6323 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.320842][ T6312] syzkaller1: entered promiscuous mode [ 114.338824][ T6312] syzkaller1: entered allmulticast mode [ 114.542658][ T30] audit: type=1400 audit(1778183548.969:307): avc: denied { getopt } for pid=6323 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.697279][ T30] audit: type=1400 audit(1778183549.759:308): avc: denied { setopt } for pid=6321 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.806515][ T30] audit: type=1400 audit(1778183549.829:309): avc: denied { create } for pid=6339 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.819221][ T6344] tmpfs: User quota block hardlimit too large. [ 114.907120][ T30] audit: type=1400 audit(1778183549.829:310): avc: denied { bind } for pid=6339 comm="syz.4.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 114.931313][ T6347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6347 comm=syz.2.146 [ 114.967781][ T6347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6347 comm=syz.2.146 [ 114.976865][ T6322] netlink: 'syz.1.140': attribute type 3 has an invalid length. [ 114.988390][ T30] audit: type=1400 audit(1778183550.039:311): avc: denied { map } for pid=6343 comm="syz.2.146" path="socket:[11073]" dev="sockfs" ino=11073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.988431][ T30] audit: type=1400 audit(1778183550.039:312): avc: denied { read } for pid=6343 comm="syz.2.146" path="socket:[11073]" dev="sockfs" ino=11073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.995718][ T30] audit: type=1400 audit(1778183550.059:313): avc: denied { setopt } for pid=6343 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.561985][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.562364][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.742177][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 116.759162][ T10] usb 4-1: config index 0 descriptor too short (expected 64967, got 165) [ 116.807255][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.861502][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.914615][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.937929][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.947359][ T10] usb 4-1: Product: syz [ 116.951576][ T10] usb 4-1: Manufacturer: syz [ 116.962641][ T10] usb 4-1: SerialNumber: syz [ 116.970269][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.982570][ T10] usb 4-1: 0:2 : does not exist [ 117.119797][ T24] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 117.127934][ T24] usb 2-1: config 1 has no interface number 0 [ 117.135265][ T24] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 117.192932][ T30] audit: type=1400 audit(1778183552.249:314): avc: denied { setopt } for pid=6360 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.197438][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.212345][ T24] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 117.230622][ T24] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.249928][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 117.257782][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.259630][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.272519][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 117.286313][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 117.295543][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.303584][ T29] usb 5-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 117.311934][ T24] usb 2-1: Product: syz [ 117.368469][ T24] usb 2-1: Manufacturer: syz [ 117.373120][ T29] usb 5-1: Product: syz [ 117.377332][ T24] usb 2-1: SerialNumber: syz [ 117.381940][ T29] usb 5-1: Manufacturer: syz [ 117.389985][ T6358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.407511][ T30] audit: type=1400 audit(1778183552.469:315): avc: denied { name_bind } for pid=6360 comm="syz.3.154" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 117.409484][ T10] usb 4-1: USB disconnect, device number 9 [ 117.438136][ T29] usb 5-1: config 0 descriptor?? [ 117.656602][ T6358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.664116][ T29] rc_core: IR keymap rc-xbox-dvd not found [ 118.150833][ T29] Registered IR keymap rc-empty [ 118.163883][ T29] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 118.176714][ T29] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 118.195334][ T6390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.229891][ T6390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.292029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 119.622565][ T6399] syzkaller1: entered promiscuous mode [ 119.629370][ T6399] syzkaller1: entered allmulticast mode [ 119.660200][ T5736] usb 5-1: USB disconnect, device number 4 [ 119.660335][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 120.143390][ T6403] netlink: 'syz.4.167': attribute type 39 has an invalid length. [ 121.213160][ T6410] binder: 6402:6410 ioctl c0285840 200000000000 returned -22 [ 121.262024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.067596][ T6413] netlink: 32 bytes leftover after parsing attributes in process `syz.3.169'. [ 122.076524][ T6413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 122.741214][ T6422] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.171'. [ 122.845764][ T6422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6422 comm=syz.3.171 [ 123.389821][ T24] usb 2-1: Incompatible driver and firmware versions [ 123.496388][ T6434] netlink: 296 bytes leftover after parsing attributes in process `syz.0.173'. [ 123.627474][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.627489][ T30] audit: type=1400 audit(1778183558.689:319): avc: denied { recv } for pid=4978 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.124 dest=47462 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 123.905720][ T30] audit: type=1400 audit(1778183558.749:320): avc: denied { bind } for pid=6433 comm="syz.0.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.929283][ T6422] sctp: [Deprecated]: syz.3.171 (pid 6422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.929283][ T6422] Use struct sctp_sack_info instead [ 123.988710][ T30] audit: type=1400 audit(1778183558.759:321): avc: denied { name_bind } for pid=6433 comm="syz.0.173" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.048873][ T30] audit: type=1400 audit(1778183558.759:322): avc: denied { node_bind } for pid=6433 comm="syz.0.173" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 124.082907][ T30] audit: type=1400 audit(1778183558.769:323): avc: denied { connect } for pid=6433 comm="syz.0.173" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.182888][ T30] audit: type=1400 audit(1778183558.769:324): avc: denied { name_connect } for pid=6433 comm="syz.0.173" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 124.212931][ T6446] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 124.252069][ T30] audit: type=1400 audit(1778183558.779:325): avc: denied { map } for pid=6433 comm="syz.0.173" path="socket:[12361]" dev="sockfs" ino=12361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 124.302297][ T30] audit: type=1400 audit(1778183558.969:326): avc: denied { shutdown } for pid=6421 comm="syz.3.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 124.322584][ T30] audit: type=1400 audit(1778183559.059:327): avc: denied { egress } for pid=6437 comm="syz.2.174" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 124.369471][ T30] audit: type=1400 audit(1778183559.059:328): avc: denied { sendto } for pid=6437 comm="syz.2.174" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 124.540000][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 124.690416][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.697305][ T5620] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 124.762060][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.784411][ T6453] bond1: (slave bridge1): making interface the new active one [ 124.800664][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=6446 comm=syz.3.171 [ 124.813769][ T6453] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 124.874137][ T5620] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 124.888986][ T5620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.902681][ T5620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 124.915137][ T5620] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.922047][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 124.930590][ T5620] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.942604][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.943936][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.950698][ T5620] usb 1-1: Product: syz [ 124.966218][ T5620] usb 1-1: Manufacturer: syz [ 124.973862][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 124.977019][ T5620] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 124.992851][ T24] usb 5-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 125.001573][ T24] usb 5-1: Product: syz [ 125.006556][ T24] usb 5-1: Manufacturer: syz [ 125.049537][ T24] usb 5-1: config 0 descriptor?? [ 125.162322][ T5794] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 125.172051][ T24] rc_core: IR keymap rc-xbox-dvd not found [ 125.245440][ T24] Registered IR keymap rc-empty [ 125.268319][ T24] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 125.286399][ T29] usb 2-1: USB disconnect, device number 5 [ 125.370258][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.399023][ T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 125.460943][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.692797][ T5794] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 125.751001][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.777693][ T5794] usb 3-1: config 0 descriptor?? [ 125.893658][ T5620] usb 5-1: USB disconnect, device number 5 [ 125.893701][ C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 126.573221][ T5794] usbhid 3-1:0.0: can't add hid device: -71 [ 126.582659][ T5794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 126.602440][ T5794] usb 3-1: USB disconnect, device number 5 [ 126.986838][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.127359][ T5794] usb 1-1: USB disconnect, device number 8 [ 127.152054][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 127.180186][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 127.195602][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.198861][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.204770][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.231751][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 127.250881][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.285372][ T24] usb 5-1: config 0 descriptor?? [ 127.500379][ T6487] netlink: 'syz.2.188': attribute type 39 has an invalid length. [ 128.684869][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 128.684885][ T30] audit: type=1400 audit(1778183563.749:330): avc: denied { set_context_mgr } for pid=6472 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 128.712446][ T5736] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 128.733715][ T30] audit: type=1400 audit(1778183563.799:331): avc: denied { read } for pid=6472 comm="syz.4.183" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.760054][ T30] audit: type=1400 audit(1778183563.799:332): avc: denied { open } for pid=6472 comm="syz.4.183" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.818256][ T30] audit: type=1400 audit(1778183563.879:333): avc: denied { write } for pid=6472 comm="syz.4.183" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.845074][ T30] audit: type=1400 audit(1778183563.909:334): avc: denied { map } for pid=6472 comm="syz.4.183" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.895263][ T5736] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.019371][ T30] audit: type=1400 audit(1778183563.939:335): avc: denied { call } for pid=6472 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 129.038687][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.066205][ T5736] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.078840][ T6487] binder: 6486:6487 ioctl c0285840 200000000000 returned -22 [ 129.111720][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.168237][ T5736] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.180596][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.193963][ T5736] usb 1-1: Product: syz [ 129.198193][ T5736] usb 1-1: Manufacturer: syz [ 129.226851][ T5736] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 129.270596][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.301820][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.336124][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.349474][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.962347][ T30] audit: type=1400 audit(1778183565.019:336): avc: denied { mounton } for pid=6508 comm="syz.3.194" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 129.986871][ T6509] MINIX-fs: unable to read superblock [ 129.994333][ T6509] netlink: 52 bytes leftover after parsing attributes in process `syz.3.194'. [ 130.010708][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.017872][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.318279][ T6517] netlink: 128 bytes leftover after parsing attributes in process `syz.3.196'. [ 130.369641][ T30] audit: type=1400 audit(1778183565.429:337): avc: denied { ioctl } for pid=6519 comm="syz.1.197" path="socket:[11632]" dev="sockfs" ino=11632 ioctlcmd=0xf512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 130.414571][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 130.427489][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.441155][ T24] usb 5-1: USB disconnect, device number 6 [ 130.566212][ T5710] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 130.567264][ T10] IPVS: starting estimator thread 0... [ 130.591351][ T5794] usb 1-1: USB disconnect, device number 9 [ 130.592074][ T5736] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.642152][ T5620] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.692809][ T6524] IPVS: using max 47 ests per chain, 112800 per kthread [ 130.712095][ T5710] usb 3-1: device descriptor read/64, error -71 [ 130.776794][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.790106][ T5736] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 130.790360][ T13] IPVS: stop unused estimator thread 0... [ 130.807095][ T5736] usb 4-1: can't read configurations, error -71 [ 130.814036][ T5620] usb 2-1: Using ep0 maxpacket: 32 [ 130.824764][ T5620] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 130.837504][ T5620] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 130.852778][ T5620] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.866021][ T5620] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 130.876709][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.884808][ T5620] usb 2-1: Product: syz [ 130.892282][ T5620] usb 2-1: Manufacturer: syz [ 130.901244][ T5620] usb 2-1: SerialNumber: syz [ 130.917307][ T5620] usb 2-1: config 0 descriptor?? [ 130.954240][ T5710] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 131.092054][ T5710] usb 3-1: device descriptor read/64, error -71 [ 131.136906][ T30] audit: type=1400 audit(1778183566.199:338): avc: denied { mount } for pid=6519 comm="syz.1.197" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 131.202232][ T5710] usb usb3-port1: attempt power cycle [ 131.241705][ T6532] process 'syz.1.197' launched './file0' with NULL argv: empty string added [ 131.283691][ T30] audit: type=1400 audit(1778183566.349:339): avc: denied { accept } for pid=6519 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.304214][ T6520] netlink: 'syz.1.197': attribute type 27 has an invalid length. [ 131.321040][ T6520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=55 sclass=netlink_audit_socket pid=6520 comm=syz.1.197 [ 131.365121][ T6534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 131.376547][ T6534] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 131.542167][ T5710] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 131.563707][ T5710] usb 3-1: device descriptor read/8, error -71 [ 131.722185][ T5794] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 131.812096][ T5710] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 131.834261][ T5710] usb 3-1: device descriptor read/8, error -71 [ 131.916605][ T5794] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 131.925781][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.934055][ T5794] usb 1-1: Product: syz [ 131.938305][ T5794] usb 1-1: Manufacturer: syz [ 131.943519][ T5794] usb 1-1: SerialNumber: syz [ 131.950409][ T5794] usb 1-1: config 0 descriptor?? [ 131.955939][ T5710] usb usb3-port1: unable to enumerate USB device [ 131.992539][ T5620] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 131.999577][ T5620] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 132.174055][ T5794] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 132.194031][ T5794] usb 1-1: USB disconnect, device number 10 [ 132.578326][ T6550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.208'. [ 132.589422][ T6550] netlink: 64 bytes leftover after parsing attributes in process `syz.4.208'. [ 132.599464][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.208'. [ 132.892175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.172054][ T5710] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.282493][ T5794] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 133.352449][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 133.368207][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.384591][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.394944][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 133.404862][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 133.420162][ T24] usb 2-1: USB disconnect, device number 6 [ 133.429229][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 133.445701][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 133.468159][ T5710] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 133.479954][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 133.488370][ T5794] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 133.498033][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.506302][ T5710] usb 5-1: Product: syz [ 133.510565][ T5794] usb 1-1: Product: syz [ 133.515178][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 133.543050][ T5710] usb 5-1: Manufacturer: syz [ 133.554191][ T5710] usb 5-1: SerialNumber: syz [ 133.570435][ T5794] usb 1-1: Manufacturer: syz [ 133.587540][ T5710] usb 5-1: config 0 descriptor?? [ 133.606763][ T5794] usb 1-1: SerialNumber: syz [ 133.612071][ T5709] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 133.625271][ T5710] usb 5-1: no audio or video endpoints found [ 133.635032][ T5794] usb 1-1: config 0 descriptor?? [ 133.775386][ T5709] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 133.784848][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.792895][ T5709] usb 3-1: Product: syz [ 133.797072][ T5709] usb 3-1: Manufacturer: syz [ 133.801695][ T5709] usb 3-1: SerialNumber: syz [ 133.809885][ T5709] usb 3-1: config 0 descriptor?? [ 133.859050][ T30] audit: type=1400 audit(1778183568.919:340): avc: denied { bind } for pid=6559 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.897192][ T5794] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 133.914924][ T6560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.916442][ T30] audit: type=1400 audit(1778183568.949:341): avc: denied { name_bind } for pid=6559 comm="syz.4.210" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 133.949426][ T6560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.954456][ T5794] usb 1-1: USB disconnect, device number 11 [ 133.963200][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.011837][ T30] audit: type=1400 audit(1778183568.949:342): avc: denied { node_bind } for pid=6559 comm="syz.4.210" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 134.012269][ T5736] usb 5-1: USB disconnect, device number 7 [ 134.046502][ T5709] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 134.080192][ T5709] usb 3-1: USB disconnect, device number 10 [ 134.122069][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 134.129908][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 134.143621][ T24] usb 2-1: config 0 has no interface number 0 [ 134.153769][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 134.167553][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 134.183110][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.197546][ T24] usb 2-1: Product: syz [ 134.203713][ T24] usb 2-1: Manufacturer: syz [ 134.215749][ T24] usb 2-1: SerialNumber: syz [ 134.229356][ T24] usb 2-1: config 0 descriptor?? [ 135.301509][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 135.352891][ T6581] kAFS: unable to lookup cell '(,c¾ûL' [ 136.011026][ T6592] tmpfs: User quota block hardlimit too large. [ 136.066256][ T6592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6592 comm=syz.2.221 [ 136.158872][ T6595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6595 comm=syz.2.221 [ 137.480011][ T30] audit: type=1326 audit(1778183572.539:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6599 comm="syz.2.223" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f196279cdd9 code=0x0 [ 137.529243][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 137.544603][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 137.583257][ T30] audit: type=1400 audit(1778183572.639:344): avc: denied { create } for pid=6599 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.606122][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 137.625019][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 137.633733][ T30] audit: type=1400 audit(1778183572.649:345): avc: denied { connect } for pid=6599 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.656701][ T24] usb 2-1: USB disconnect, device number 7 [ 137.762106][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 137.818079][ T30] audit: type=1400 audit(1778183572.879:346): avc: denied { ioctl } for pid=6609 comm="syz.4.227" path="socket:[12135]" dev="sockfs" ino=12135 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 137.922080][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 137.933651][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.954757][ T29] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 137.963957][ T29] usb 4-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 137.972636][ T29] usb 4-1: Product: syz [ 137.976878][ T29] usb 4-1: Manufacturer: syz [ 137.989782][ T29] usb 4-1: config 0 descriptor?? [ 138.052093][ T29] rc_core: IR keymap rc-xbox-dvd not found [ 138.058087][ T29] Registered IR keymap rc-empty [ 138.067829][ T29] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 138.079461][ T29] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 138.679088][ T10] usb 4-1: USB disconnect, device number 12 [ 138.679119][ C1] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 138.785841][ T6627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.231'. [ 138.803376][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.810546][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.845226][ T6630] tmpfs: User quota block hardlimit too large. [ 138.851607][ T6627] netlink: 52 bytes leftover after parsing attributes in process `syz.0.231'. [ 138.865708][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6630 comm=syz.4.233 [ 138.891498][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6630 comm=syz.4.233 [ 139.112110][ T5794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 139.121254][ T6634] netlink: 180 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.131261][ T5709] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.982184][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 140.153741][ T5794] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.173608][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.185291][ T5794] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.198396][ T5794] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.208187][ T5709] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=69.6f [ 140.217976][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 140.229624][ T5709] usb 2-1: New USB device strings: Mfr=100, Product=120, SerialNumber=0 [ 140.256457][ T5794] usb 3-1: Product: syz [ 140.263223][ T5709] usb 2-1: Product: syz [ 140.277372][ T5794] usb 3-1: Manufacturer: syz [ 140.283931][ T5709] usb 2-1: Manufacturer: syz [ 140.293841][ T5794] usb 3-1: SerialNumber: syz [ 140.419378][ T5794] usb 3-1: config 0 descriptor?? [ 140.430632][ T5709] usb 2-1: config 0 descriptor?? [ 140.446121][ T5794] usb 3-1: selecting invalid altsetting 0 [ 141.601470][ T30] audit: type=1400 audit(1778183576.659:347): avc: denied { getopt } for pid=6623 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.707509][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.752803][ T5709] rc_core: IR keymap rc-xbox-dvd not found [ 141.786801][ T5709] Registered IR keymap rc-empty [ 141.787125][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.899692][ T5709] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 142.062322][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.142578][ T5709] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 142.250071][ T5794] usb 3-1: USB disconnect, device number 11 [ 142.316582][ T24] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 142.328849][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.336562][ T24] usb 1-1: config 1 has no interface number 0 [ 142.366689][ T24] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 142.371113][ T10] usb 2-1: USB disconnect, device number 8 [ 142.378238][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 142.389142][ T24] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 142.504189][ T5620] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.528871][ T24] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.600926][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 142.627092][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.655256][ T24] usb 1-1: Product: syz [ 142.667010][ T24] usb 1-1: Manufacturer: syz [ 142.673338][ T5620] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 142.683029][ T24] usb 1-1: SerialNumber: syz [ 142.697945][ T5620] usb 5-1: config 1 has no interface number 0 [ 142.704391][ T6655] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 142.728070][ T5620] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 142.764567][ T5620] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 142.789457][ T5620] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.811800][ T5620] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 142.902950][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.917219][ T5620] usb 5-1: Product: syz [ 142.929929][ T5620] usb 5-1: Manufacturer: syz [ 142.937159][ T5620] usb 5-1: SerialNumber: syz [ 142.953048][ T6659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.964970][ T30] audit: type=1400 audit(1778183578.029:348): avc: denied { connect } for pid=6664 comm="syz.3.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.016053][ T6655] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 143.427015][ T6655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.533880][ T6655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.561894][ T6659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 143.575037][ T30] audit: type=1400 audit(1778183578.639:349): avc: denied { mount } for pid=6654 comm="syz.0.239" name="/" dev="rpc_pipefs" ino=12999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 144.312021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.432019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.744884][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.774899][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.206483][ T24] usb 1-1: Incompatible driver and firmware versions [ 145.245361][ T24] usb 1-1: USB disconnect, device number 12 [ 145.301896][ T5620] usb 5-1: Incompatible driver and firmware versions [ 145.331064][ T5620] usb 5-1: USB disconnect, device number 8 [ 145.952710][ T6694] tmpfs: User quota block hardlimit too large. [ 145.964931][ T5620] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 145.981791][ T6694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6694 comm=syz.0.250 [ 146.015171][ T6694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6694 comm=syz.0.250 [ 146.066579][ T30] audit: type=1400 audit(1778183581.129:350): avc: denied { create } for pid=6695 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 146.109726][ T30] audit: type=1400 audit(1778183581.149:351): avc: denied { block_suspend } for pid=6697 comm="syz.4.252" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.164123][ T5620] usb 2-1: descriptor type invalid, skip [ 146.169845][ T5620] usb 2-1: descriptor type invalid, skip [ 146.175610][ T5620] usb 2-1: descriptor type invalid, skip [ 146.193593][ T5620] usb 2-1: not running at top speed; connect to a high speed hub [ 146.209564][ T5620] usb 2-1: config 3 has an invalid interface number: 43 but max is 0 [ 146.220439][ T5620] usb 2-1: config 3 has no interface number 0 [ 146.235666][ T5620] usb 2-1: config 3 interface 43 has no altsetting 0 [ 146.254170][ T5620] usb 2-1: New USB device found, idVendor=12d1, idProduct=9c06, bcdDevice=bc.34 [ 146.266753][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.285758][ T5620] usb 2-1: Product: syz [ 146.303918][ T5620] usb 2-1: Manufacturer: syz [ 146.315489][ T5620] usb 2-1: SerialNumber: syz [ 146.586749][ T30] audit: type=1400 audit(1778183581.649:352): avc: denied { create } for pid=6681 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.671318][ T30] audit: type=1400 audit(1778183581.719:353): avc: denied { setopt } for pid=6681 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.707921][ T30] audit: type=1400 audit(1778183581.759:354): avc: denied { listen } for pid=6681 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.744065][ T30] audit: type=1400 audit(1778183581.759:355): avc: denied { accept } for pid=6681 comm="syz.1.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.840099][ T30] audit: type=1400 audit(1778183581.899:356): avc: denied { create } for pid=6714 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.915821][ T30] audit: type=1400 audit(1778183581.899:357): avc: denied { connect } for pid=6714 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 147.079065][ T6718] Illegal XDP return value 4156564602 on prog (id 35) dev N/A, expect packet loss! [ 147.095807][ T5620] option 2-1:3.43: GSM modem (1-port) converter detected [ 147.128928][ T5620] usb 2-1: USB disconnect, device number 9 [ 147.146932][ T5620] option 2-1:3.43: device disconnected [ 147.942060][ T24] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 148.164906][ T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 148.174024][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.182061][ T24] usb 4-1: Product: syz [ 148.186225][ T24] usb 4-1: Manufacturer: syz [ 148.190786][ T24] usb 4-1: SerialNumber: syz [ 148.210241][ T24] usb 4-1: config 0 descriptor?? [ 148.616991][ T5729] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.650600][ T24] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 148.682270][ T24] usb 4-1: USB disconnect, device number 13 [ 148.758223][ T30] audit: type=1400 audit(1778183583.819:358): avc: denied { mounton } for pid=6737 comm="syz.1.264" path="/proc/142/task" dev="proc" ino=13269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 148.813429][ T5729] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 148.821435][ T5729] usb 5-1: config 1 has no interface number 0 [ 148.828055][ T5729] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 148.842077][ T5729] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 148.855819][ T5729] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.933255][ T5729] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 148.942391][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.950439][ T5729] usb 5-1: Product: syz [ 148.954903][ T5729] usb 5-1: Manufacturer: syz [ 148.959955][ T5729] usb 5-1: SerialNumber: syz [ 148.968357][ T6730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 149.003797][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.022400][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.052109][ T5620] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.053941][ T6743] tmpfs: User quota block hardlimit too large. [ 149.074040][ T6743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6743 comm=syz.2.266 [ 149.090441][ T6743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6743 comm=syz.2.266 [ 149.187979][ T6730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 149.195240][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 149.332147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.406320][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.416618][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.860138][ T30] audit: type=1400 audit(1778183584.919:359): avc: denied { execute } for pid=6750 comm="syz.3.269" name="file2" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.037160][ T5729] usb 5-1: Incompatible driver and firmware versions [ 150.067959][ T5729] usb 5-1: USB disconnect, device number 9 [ 150.068192][ T30] audit: type=1400 audit(1778183584.919:360): avc: denied { execute_no_trans } for pid=6750 comm="syz.3.269" path="/55/file2" dev="tmpfs" ino=320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.504622][ T30] audit: type=1400 audit(1778183585.129:361): avc: denied { create } for pid=6750 comm="syz.3.269" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.638968][ T30] audit: type=1400 audit(1778183585.679:362): avc: denied { unlink } for pid=5617 comm="syz-executor" name="file0" dev="tmpfs" ino=321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.881038][ T5620] kernel read not supported for file [fscontext] (pid: 5620 comm: kworker/0:3) [ 150.953679][ T6774] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 150.961441][ T6774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 150.971216][ T6774] bridge0: port 3(dummy0) entered blocking state [ 150.977887][ T6774] bridge0: port 3(dummy0) entered disabled state [ 150.985182][ T6774] dummy0: entered allmulticast mode [ 150.996402][ T6774] dummy0: entered promiscuous mode [ 151.015127][ T6775] ±ÿ: renamed from lo (while UP) [ 152.077359][ T6781] tmpfs: User quota block hardlimit too large. [ 152.117611][ T6781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=6781 comm=syz.2.278 [ 152.170139][ T6781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4946 sclass=netlink_route_socket pid=6781 comm=syz.2.278 [ 154.044276][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 154.733650][ T6800] team0: entered allmulticast mode [ 154.806458][ T6800] team_slave_0: entered allmulticast mode [ 154.846610][ T6800] team_slave_1: entered allmulticast mode [ 154.869502][ T6800] netlink: 156 bytes leftover after parsing attributes in process `syz.2.284'. [ 154.912063][ T6800] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 155.036061][ T6812] netlink: 'syz.1.287': attribute type 39 has an invalid length. [ 155.136779][ T6816] binder: 6811:6816 ioctl c0285840 200000000000 returned -22 [ 155.342126][ T5794] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 155.422126][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 155.512192][ T5794] usb 4-1: device descriptor read/64, error -71 [ 155.612108][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 155.854544][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 155.879267][ T5794] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 155.920133][ T24] usb 3-1: config 0 has no interface number 0 [ 155.949155][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 155.968844][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 155.981041][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.022891][ T24] usb 3-1: Product: syz [ 156.036491][ T24] usb 3-1: Manufacturer: syz [ 156.051615][ T24] usb 3-1: SerialNumber: syz [ 156.062922][ T5794] usb 4-1: device descriptor read/64, error -71 [ 156.193740][ T5794] usb usb4-port1: attempt power cycle [ 156.212114][ T5620] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.273686][ T24] usb 3-1: config 0 descriptor?? [ 156.413669][ T5620] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 156.421884][ T5620] usb 5-1: config 1 has no interface number 0 [ 156.525549][ T5620] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 156.544601][ T5620] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 156.556193][ T5620] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.626037][ T6833] netlink: 180 bytes leftover after parsing attributes in process `syz.1.293'. [ 156.700451][ T5620] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 156.720295][ T5620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.912019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 157.098765][ T5620] usb 5-1: Product: syz [ 157.110503][ T5794] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 157.130687][ T5620] usb 5-1: Manufacturer: syz [ 157.312870][ T5794] usb 4-1: device descriptor read/8, error -71 [ 157.320327][ T5620] usb 5-1: SerialNumber: syz [ 157.341787][ T6825] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.372074][ T30] audit: type=1400 audit(1778183592.429:363): avc: denied { read append } for pid=6836 comm="syz.1.294" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.454762][ T30] audit: type=1400 audit(1778183592.429:364): avc: denied { open } for pid=6836 comm="syz.1.294" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 157.562480][ T5794] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 157.639199][ T6825] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 157.654798][ T5794] usb 4-1: device descriptor read/8, error -71 [ 157.781221][ T5794] usb usb4-port1: unable to enumerate USB device [ 157.991899][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.035605][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.064104][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 158.099252][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.166758][ T24] usb 3-1: USB disconnect, device number 12 [ 158.206273][ T6837] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.226692][ T6837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.285744][ T6837] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 158.327873][ T6837] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.339928][ T6837] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 158.367947][ T6837] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.381000][ T6837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.416172][ T6837] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 158.437245][ T6837] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.458283][ T6837] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 158.491420][ T6837] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.497834][ T6837] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 158.528376][ T6825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.553756][ T6825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.795617][ T30] audit: type=1400 audit(1778183593.809:365): avc: denied { read } for pid=6841 comm="syz.3.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.997734][ T5620] usb 5-1: Incompatible driver and firmware versions [ 159.033313][ T5620] usb 5-1: USB disconnect, device number 10 [ 159.139725][ T6851] team0: entered allmulticast mode [ 159.151967][ T6851] team_slave_0: entered allmulticast mode [ 159.173157][ T6851] team_slave_1: entered allmulticast mode [ 159.180041][ T6851] netlink: 168 bytes leftover after parsing attributes in process `syz.1.299'. [ 159.185582][ T30] audit: type=1400 audit(1778183594.249:366): avc: denied { read write } for pid=6854 comm="syz.2.301" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.192366][ T6851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 159.214583][ T6855] loop9: detected capacity change from 0 to 524287935 [ 159.244015][ T5736] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 159.269447][ T30] audit: type=1400 audit(1778183594.249:367): avc: denied { open } for pid=6854 comm="syz.2.301" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.298524][ T6857] netlink: 'syz.3.302': attribute type 39 has an invalid length. [ 159.402162][ T5736] usb 1-1: Using ep0 maxpacket: 8 [ 159.415585][ T5736] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 159.432006][ T6863] binder: 6856:6863 ioctl c0285840 200000000000 returned -22 [ 159.439611][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.453558][ T6860] netlink: 128 bytes leftover after parsing attributes in process `syz.1.303'. [ 159.508827][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.520011][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.546546][ T30] audit: type=1400 audit(1778183594.609:368): avc: granted { setsecparam } for pid=6865 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 159.591707][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.661536][ T5736] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 159.695275][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.741089][ T5736] usb 1-1: Product: syz [ 159.756274][ T5736] usb 1-1: Manufacturer: syz [ 159.762254][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.782583][ T5736] usb 1-1: SerialNumber: syz [ 159.812087][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 159.844644][ T5736] usb 1-1: config 0 descriptor?? [ 159.875787][ T6848] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.927578][ T30] audit: type=1326 audit(1778183594.979:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6869 comm="syz.4.305" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf90d9cdd9 code=0x0 [ 159.998149][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.031738][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 160.047217][ T10] usb 2-1: can't read configurations, error -71 [ 160.082923][ T30] audit: type=1400 audit(1778183595.149:370): avc: denied { shutdown } for pid=6869 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.112516][ T5736] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 160.140853][ T5736] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 160.195195][ T30] audit: type=1400 audit(1778183595.259:371): avc: denied { write } for pid=6869 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 160.286758][ T5710] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 160.319248][ T5710] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 160.344614][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.376377][ C0] powermate: config urb returned -71 [ 160.377198][ T5709] usb 1-1: USB disconnect, device number 13 [ 160.381667][ C0] powermate: usb_submit_urb(config) failed [ 160.387806][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 160.393099][ T5710] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 160.394224][ T4929] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.414654][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 160.472481][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 160.491817][ T6885] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 160.548518][ T30] audit: type=1400 audit(1778183595.609:372): avc: denied { read write } for pid=6887 comm="syz.0.308" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 160.553724][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 160.609181][ T6885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.624939][ T5736] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 160.685366][ T5736] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.696995][ T6890] bond2: (slave geneve2): making interface the new active one [ 160.710513][ T6890] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 161.209772][ T6906] Bluetooth: MGMT ver 1.23 [ 162.010789][ T5614] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.038259][ T6906] kAFS: unable to lookup cell '(,c¾ûL' [ 162.045537][ T6909] kAFS: unable to lookup cell '(,c¾ûL' [ 162.261501][ T5710] stv0680 3-1:4.0: Could not get descriptor 0200 [ 163.042106][ T5614] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.048158][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 163.054166][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 163.060144][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 163.207926][ T5710] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 163.219209][ T5710] stv0680 3-1:4.0: last error: 34, command = 0x19 [ 163.395679][ T5710] usb 3-1: USB disconnect, device number 13 [ 163.432337][ T6921] netlink: 'syz.2.316': attribute type 39 has an invalid length. [ 164.442087][ T4929] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.932786][ T6923] binder: 6920:6923 ioctl c0285840 200000000000 returned -22 [ 165.130285][ T4929] Bluetooth: hci4: command 0x0406 tx timeout [ 165.136623][ T4929] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.333071][ T6924] kAFS: unable to lookup cell '(,c¾ûL' [ 165.718919][ T5620] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 165.745065][ T6934] netlink: 128 bytes leftover after parsing attributes in process `syz.0.319'. [ 165.891745][ T6951] tipc: Started in network mode [ 165.900255][ T6951] tipc: Node identity 84e, cluster identity 4711 [ 165.906936][ T6951] tipc: Node number set to 2126 [ 165.917498][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 165.938834][ T5620] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 165.966690][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.000091][ T5620] usb 4-1: config 0 descriptor?? [ 166.005685][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.034536][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 166.034550][ T30] audit: type=1400 audit(1778183601.099:375): avc: denied { read } for pid=6955 comm="syz.1.328" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.075107][ T5620] as10x_usb: device has been detected [ 166.087612][ T5620] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 166.107707][ T30] audit: type=1400 audit(1778183601.099:376): avc: denied { open } for pid=6955 comm="syz.1.328" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.133963][ T30] audit: type=1400 audit(1778183601.139:377): avc: denied { ioctl } for pid=6955 comm="syz.1.328" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 166.161307][ T5620] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 166.185630][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.198915][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 166.206874][ T10] usb 1-1: can't read configurations, error -71 [ 166.274994][ T30] audit: type=1400 audit(1778183601.339:378): avc: denied { ioctl } for pid=6929 comm="syz.3.318" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14911 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 166.309751][ T5620] as10x_usb: error during firmware upload part1 [ 166.316741][ T5620] Registered device nBox DVB-T Dongle [ 166.318498][ T5620] usb 4-1: USB disconnect, device number 18 [ 166.331648][ T30] audit: type=1400 audit(1778183601.369:379): avc: denied { execmod } for pid=6929 comm="syz.3.318" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 166.373156][ T30] audit: type=1400 audit(1778183601.369:380): avc: denied { execute } for pid=6929 comm="syz.3.318" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 166.406491][ T5620] Unregistered device nBox DVB-T Dongle [ 166.407935][ T5620] as10x_usb: device has been disconnected [ 166.425974][ T30] audit: type=1400 audit(1778183601.369:381): avc: denied { firmware_load } for pid=5620 comm="kworker/0:3" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 166.472177][ T5710] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 166.635828][ T5710] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 166.646171][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.661608][ T5710] usb 2-1: Product: syz [ 166.666237][ T5710] usb 2-1: Manufacturer: syz [ 166.671022][ T5710] usb 2-1: SerialNumber: syz [ 166.727335][ T5710] usb 2-1: config 0 descriptor?? [ 166.848061][ T30] audit: type=1400 audit(1778183601.899:382): avc: denied { read write } for pid=6961 comm="syz.4.329" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.197508][ T5710] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 167.213164][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 167.244740][ T30] audit: type=1400 audit(1778183601.909:383): avc: denied { open } for pid=6961 comm="syz.4.329" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.378678][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65308 sclass=netlink_route_socket pid=6971 comm=syz.3.331 [ 167.451439][ T30] audit: type=1400 audit(1778183602.229:384): avc: denied { ioctl } for pid=6961 comm="syz.4.329" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.456572][ T5710] usb 2-1: USB disconnect, device number 13 [ 167.876253][ T6980] lo speed is unknown, defaulting to 1000 [ 167.884460][ T6980] lo speed is unknown, defaulting to 1000 [ 167.937330][ T6980] lo speed is unknown, defaulting to 1000 [ 167.960894][ T6980] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 168.001803][ T6980] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 168.030011][ T6980] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 168.912169][ T6990] netlink: 'syz.3.334': attribute type 39 has an invalid length. [ 169.052658][ T6980] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 169.314713][ T6998] lo speed is unknown, defaulting to 1000 [ 170.183962][ T6996] binder: 6989:6996 ioctl c0285840 200000000000 returned -22 [ 170.201199][ T6997] kAFS: unable to lookup cell '(,c¾ûL' [ 170.280949][ T6980] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 170.668965][ T6980] lo speed is unknown, defaulting to 1000 [ 170.843164][ T6980] lo speed is unknown, defaulting to 1000 [ 170.870920][ T6980] lo speed is unknown, defaulting to 1000 [ 170.884643][ T6980] lo speed is unknown, defaulting to 1000 [ 170.904108][ T6980] lo speed is unknown, defaulting to 1000 [ 171.221311][ T7016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.340'. [ 171.383439][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65308 sclass=netlink_route_socket pid=7022 comm=syz.1.342 [ 171.405900][ T7022] FAULT_INJECTION: forcing a failure. [ 171.405900][ T7022] name failslab, interval 1, probability 0, space 0, times 0 [ 171.418599][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT(full) [ 171.418621][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.418630][ T7022] Call Trace: [ 171.418635][ T7022] [ 171.418639][ T7022] dump_stack_lvl+0x100/0x190 [ 171.418657][ T7022] should_fail_ex.cold+0x5/0xa [ 171.418672][ T7022] ? ioctl_standard_iw_point+0x3e9/0xc90 [ 171.418686][ T7022] should_failslab+0xc2/0x120 [ 171.418698][ T7022] __kmalloc_noprof+0xe0/0x850 [ 171.418716][ T7022] ioctl_standard_iw_point+0x3e9/0xc90 [ 171.418730][ T7022] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 171.418742][ T7022] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 171.418755][ T7022] ? irqentry_exit+0x246/0x790 [ 171.418770][ T7022] ? __pfx_ioctl_standard_call+0x10/0x10 [ 171.418789][ T7022] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 171.418799][ T7022] ioctl_standard_call+0x167/0x1d0 [ 171.418813][ T7022] ? __pfx_ioctl_standard_call+0x10/0x10 [ 171.418825][ T7022] ? __pfx_cfg80211_wext_siwessid+0x10/0x10 [ 171.418835][ T7022] wext_ioctl_dispatch.constprop.0+0x312/0x3e0 [ 171.418851][ T7022] wext_handle_ioctl+0x105/0x1b0 [ 171.418864][ T7022] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 171.418879][ T7022] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 171.418891][ T7022] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 171.418909][ T7022] sock_ioctl+0x2d4/0x6b0 [ 171.418924][ T7022] ? __pfx_sock_ioctl+0x10/0x10 [ 171.418936][ T7022] ? hook_file_ioctl_common+0x149/0x410 [ 171.418956][ T7022] ? selinux_file_ioctl+0x13b/0x290 [ 171.418970][ T7022] ? selinux_file_ioctl+0xb6/0x290 [ 171.418984][ T7022] ? __pfx_sock_ioctl+0x10/0x10 [ 171.418999][ T7022] __x64_sys_ioctl+0x18e/0x210 [ 171.419010][ T7022] do_syscall_64+0x10b/0xf80 [ 171.419023][ T7022] ? clear_bhb_loop+0x40/0x90 [ 171.419036][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.419046][ T7022] RIP: 0033:0x7f445819cdd9 [ 171.419055][ T7022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.419066][ T7022] RSP: 002b:00007f4459114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.419076][ T7022] RAX: ffffffffffffffda RBX: 00007f4458416090 RCX: 00007f445819cdd9 [ 171.419082][ T7022] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000009 [ 171.419089][ T7022] RBP: 00007f4459114090 R08: 0000000000000000 R09: 0000000000000000 [ 171.419094][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.419100][ T7022] R13: 00007f4458416128 R14: 00007f4458416090 R15: 00007fffb914d678 [ 171.419114][ T7022] [ 171.742136][ T5710] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 171.945911][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short [ 172.043153][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 172.050827][ T5710] usb 4-1: can't read configurations, error -71 [ 172.100630][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 172.100641][ T30] audit: type=1400 audit(1778183607.159:389): avc: denied { mounton } for pid=7031 comm="syz.4.346" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 172.328828][ T5729] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 172.360096][ T7034] PKCS8: Unsupported PKCS#8 version [ 172.375629][ T7034] netlink: 'syz.4.346': attribute type 2 has an invalid length. [ 172.383533][ T7034] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 172.391277][ T7034] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.346'. [ 172.452922][ T7034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.656268][ T5729] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 173.115312][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.143949][ T5729] usb 3-1: Product: syz [ 173.148168][ T5729] usb 3-1: Manufacturer: syz [ 173.153039][ T5729] usb 3-1: SerialNumber: syz [ 173.165687][ T5729] usb 3-1: config 0 descriptor?? [ 173.234954][ T30] audit: type=1400 audit(1778183608.299:390): avc: denied { write } for pid=7035 comm="syz.3.347" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.178789][ T30] audit: type=1400 audit(1778183609.189:391): avc: denied { read } for pid=7039 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.315392][ T5729] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 174.327209][ T5729] usb 3-1: USB disconnect, device number 14 [ 174.420598][ T7042] netlink: 'syz.1.350': attribute type 39 has an invalid length. [ 174.535481][ T7043] binder: 7041:7043 ioctl c0285840 200000000000 returned -22 [ 174.891488][ T30] audit: type=1400 audit(1778183609.949:392): avc: denied { append } for pid=7046 comm="syz.4.348" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 175.112690][ T7047] netlink: 'syz.4.348': attribute type 12 has an invalid length. [ 175.219715][ T7047] netlink: 'syz.4.348': attribute type 29 has an invalid length. [ 175.294588][ T7047] netlink: 148 bytes leftover after parsing attributes in process `syz.4.348'. [ 175.319070][ T7047] netlink: 'syz.4.348': attribute type 3 has an invalid length. [ 175.430503][ T7047] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 175.440181][ T7047] netlink: 35 bytes leftover after parsing attributes in process `syz.4.348'. [ 175.480435][ T7052] netlink: 180 bytes leftover after parsing attributes in process `syz.3.351'. [ 177.430039][ T7069] netlink: 128 bytes leftover after parsing attributes in process `syz.4.357'. [ 179.412198][ T5708] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 179.812111][ T30] audit: type=1400 audit(1778183614.769:393): avc: denied { bind } for pid=7088 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.092074][ T5708] usb 3-1: device descriptor read/64, error -71 [ 180.418220][ T7097] overlayfs: failed to resolve './file0': -2 [ 180.722052][ T5708] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 181.672132][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 181.842291][ T10] usb 4-1: device descriptor read/64, error -71 [ 181.892932][ T5736] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 181.952388][ T5620] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 182.053936][ T5736] usb 2-1: Using ep0 maxpacket: 16 [ 182.067474][ T5736] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.122133][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 182.146018][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.190250][ T5736] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.222152][ T5620] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 182.245713][ T5736] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 182.283615][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.309510][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.318300][ T10] usb 4-1: device descriptor read/64, error -71 [ 182.387125][ T5620] usb 1-1: config 0 descriptor?? [ 182.430728][ T5736] usb 2-1: config 0 descriptor?? [ 182.439761][ T10] usb usb4-port1: attempt power cycle [ 183.105044][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 183.142496][ T10] usb 4-1: device descriptor read/8, error -71 [ 183.153968][ T7116] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 183.166629][ T7116] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 183.174574][ T7116] netlink: 'syz.2.369': attribute type 1 has an invalid length. [ 183.184373][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 183.216305][ T30] audit: type=1400 audit(1778183618.279:394): avc: denied { setopt } for pid=7115 comm="syz.2.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 183.285872][ T5736] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 183.553069][ C0] ================================================================== [ 183.561153][ C0] BUG: KASAN: use-after-free in mcp2221_raw_event+0x103c/0x10a0 [ 183.568804][ C0] Read of size 1 at addr ffff88805732ffff by task swapper/0/0 [ 183.576261][ C0] [ 183.578581][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 183.578606][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 183.578619][ C0] Call Trace: [ 183.578627][ C0] [ 183.578635][ C0] dump_stack_lvl+0x100/0x190 [ 183.578664][ C0] print_report+0x13d/0x4b0 [ 183.578692][ C0] ? __virt_addr_valid+0x239/0x430 [ 183.578718][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 183.578750][ C0] kasan_report+0xdf/0x1d0 [ 183.578772][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 183.578806][ C0] mcp2221_raw_event+0x103c/0x10a0 [ 183.578836][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.578863][ C0] __hid_input_report.constprop.0+0x314/0x460 [ 183.578886][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 183.578916][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 183.578942][ C0] hid_irq_in+0x52e/0x6b0 [ 183.578976][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 183.579010][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 183.579031][ C0] dummy_timer+0xda1/0x36c0 [ 183.579058][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.579085][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 183.579105][ C0] ? rcu_is_watching+0x12/0xc0 [ 183.579136][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 183.579158][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 183.579179][ C0] __hrtimer_run_queues+0x470/0xa00 [ 183.579214][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 183.579245][ C0] handle_softirqs+0x1ea/0xa00 [ 183.579277][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 183.579305][ C0] ? _raw_spin_unlock+0x28/0x50 [ 183.579326][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 183.579346][ C0] __irq_exit_rcu+0x162/0x210 [ 183.579375][ C0] irq_exit_rcu+0x9/0x30 [ 183.579402][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 183.579426][ C0] [ 183.579439][ C0] [ 183.579447][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.579472][ C0] RIP: 0010:sched_core_balance+0xa6/0xea0 [ 183.579500][ C0] Code: 0e 00 e8 5d dc b3 09 5d 85 c0 0f 85 ba 0a 00 00 e9 8f 09 00 00 49 8d 7c 24 48 e8 25 ca b6 09 e8 60 9f 3a 00 fb 48 63 44 24 48 <48> c7 c3 40 62 0c 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 47 [ 183.579521][ C0] RSP: 0018:ffffffff8e407b60 EFLAGS: 00000202 [ 183.579540][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 183.579553][ C0] RDX: 0000000000000000 RSI: ffffffff8df200e1 RDI: ffffffff8c1c3780 [ 183.579568][ C0] RBP: ffffffff81d6359d R08: 0000000000000001 R09: 0000000000000000 [ 183.579581][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b240 [ 183.579594][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843b240 [ 183.579609][ C0] ? sched_core_balance+0x6d/0xea0 [ 183.579640][ C0] ? lock_acquire+0x1b1/0x370 [ 183.579665][ C0] ? __schedule+0x2d69/0x6820 [ 183.579688][ C0] finish_task_switch.isra.0+0x506/0x1010 [ 183.579713][ C0] __schedule+0x10f1/0x6820 [ 183.579735][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 183.579758][ C0] ? try_to_wake_up+0x15f/0x1900 [ 183.579780][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 183.579804][ C0] ? __pfx___schedule+0x10/0x10 [ 183.579825][ C0] ? rcu_is_watching+0x12/0xc0 [ 183.579858][ C0] schedule_idle+0x54/0x80 [ 183.579879][ C0] do_idle+0x2dd/0x590 [ 183.579899][ C0] ? __pfx_do_idle+0x10/0x10 [ 183.579920][ C0] cpu_startup_entry+0x4f/0x60 [ 183.579940][ C0] rest_init+0x251/0x260 [ 183.579967][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 183.579995][ C0] start_kernel+0x484/0x490 [ 183.580018][ C0] x86_64_start_reservations+0x24/0x30 [ 183.580043][ C0] x86_64_start_kernel+0x12b/0x130 [ 183.580068][ C0] common_startup_64+0x13e/0x148 [ 183.580102][ C0] [ 183.580110][ C0] [ 183.939052][ C0] The buggy address belongs to the physical page: [ 183.945452][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5732f [ 183.954203][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 183.961318][ C0] raw: 00fff00000000000 ffffea00015ccb88 ffff8880b84411a0 0000000000000000 [ 183.969895][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 183.978472][ C0] page dumped because: kasan: bad access detected [ 183.984874][ C0] page_owner tracks the page as freed [ 183.990234][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5736, tgid 5736 (kworker/0:6), ts 183283346454, free_ts 183283508433 [ 184.007077][ C0] post_alloc_hook+0x153/0x170 [ 184.011854][ C0] get_page_from_freelist+0x11a6/0x33b0 [ 184.017410][ C0] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 184.023317][ C0] alloc_pages_mpol+0x1fb/0x540 [ 184.028163][ C0] alloc_pages_noprof+0x1a/0x160 [ 184.033099][ C0] get_free_pages_noprof+0x10/0xb0 [ 184.038202][ C0] __kasan_populate_vmalloc+0xa0/0x210 [ 184.043662][ C0] alloc_vmap_area+0x95d/0x2b70 [ 184.048509][ C0] __get_vm_area_node+0x1ca/0x330 [ 184.053527][ C0] __vmalloc_node_range_noprof+0x228/0x1630 [ 184.059419][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 184.064535][ C0] hid_open_report+0x2de/0x810 [ 184.069293][ C0] mcp2221_probe+0x49/0xb0 [ 184.073714][ C0] hid_device_probe+0x50e/0x800 [ 184.078557][ C0] really_probe+0x241/0xa60 [ 184.083062][ C0] __driver_probe_device+0x22e/0x480 [ 184.088353][ C0] page last free pid 5736 tgid 5736 stack trace: [ 184.094668][ C0] __free_frozen_pages+0x747/0x1040 [ 184.099864][ C0] __kasan_populate_vmalloc+0x1ea/0x210 [ 184.105415][ C0] alloc_vmap_area+0x95d/0x2b70 [ 184.110268][ C0] __get_vm_area_node+0x1ca/0x330 [ 184.115294][ C0] __vmalloc_node_range_noprof+0x228/0x1630 [ 184.121187][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 184.126299][ C0] hid_open_report+0x2de/0x810 [ 184.131056][ C0] mcp2221_probe+0x49/0xb0 [ 184.135476][ C0] hid_device_probe+0x50e/0x800 [ 184.140320][ C0] really_probe+0x241/0xa60 [ 184.144825][ C0] __driver_probe_device+0x22e/0x480 [ 184.150116][ C0] driver_probe_device+0x4c/0x1b0 [ 184.155147][ C0] __device_attach_driver+0x1df/0x340 [ 184.160511][ C0] bus_for_each_drv+0x159/0x1e0 [ 184.165359][ C0] __device_attach+0x1e4/0x4d0 [ 184.170123][ C0] device_initial_probe+0xaf/0xd0 [ 184.175923][ C0] [ 184.178238][ C0] Memory state around the buggy address: [ 184.183858][ C0] ffff88805732fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.191911][ C0] ffff88805732ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.199965][ C0] >ffff88805732ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 184.208013][ C0] ^ [ 184.215979][ C0] ffff888057330000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.224035][ C0] ffff888057330080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.232086][ C0] ================================================================== [ 184.240138][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 184.247321][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 184.256250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.266299][ C0] Call Trace: [ 184.269572][ C0] [ 184.272408][ C0] dump_stack_lvl+0x100/0x190 [ 184.277094][ C0] vpanic+0x552/0x970 [ 184.281073][ C0] ? __pfx_vpanic+0x10/0x10 [ 184.285574][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 184.290595][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 184.295889][ C0] panic+0xd1/0xe0 [ 184.299604][ C0] ? __pfx_panic+0x10/0x10 [ 184.304016][ C0] ? end_report.part.0+0x23/0x90 [ 184.308963][ C0] ? rcu_is_watching+0x12/0xc0 [ 184.313737][ C0] ? end_report.part.0+0x23/0x90 [ 184.318677][ C0] check_panic_on_warn.cold+0x19/0x34 [ 184.324049][ C0] end_report.part.0+0x3a/0x90 [ 184.328819][ C0] kasan_report.cold+0xe/0x18 [ 184.333501][ C0] ? mcp2221_raw_event+0x103c/0x10a0 [ 184.338796][ C0] mcp2221_raw_event+0x103c/0x10a0 [ 184.343912][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 184.349720][ C0] __hid_input_report.constprop.0+0x314/0x460 [ 184.355785][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 184.361248][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 184.366802][ C0] hid_irq_in+0x52e/0x6b0 [ 184.371145][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 184.376527][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 184.381722][ C0] dummy_timer+0xda1/0x36c0 [ 184.386229][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 184.392035][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 184.396971][ C0] ? rcu_is_watching+0x12/0xc0 [ 184.401739][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 184.407543][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 184.412481][ C0] __hrtimer_run_queues+0x470/0xa00 [ 184.417692][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 184.422811][ C0] handle_softirqs+0x1ea/0xa00 [ 184.427584][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 184.432872][ C0] ? _raw_spin_unlock+0x28/0x50 [ 184.437721][ C0] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 184.443347][ C0] __irq_exit_rcu+0x162/0x210 [ 184.448027][ C0] irq_exit_rcu+0x9/0x30 [ 184.452277][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 184.457907][ C0] [ 184.460827][ C0] [ 184.463752][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 184.469733][ C0] RIP: 0010:sched_core_balance+0xa6/0xea0 [ 184.475457][ C0] Code: 0e 00 e8 5d dc b3 09 5d 85 c0 0f 85 ba 0a 00 00 e9 8f 09 00 00 49 8d 7c 24 48 e8 25 ca b6 09 e8 60 9f 3a 00 fb 48 63 44 24 48 <48> c7 c3 40 62 0c 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 47 [ 184.495063][ C0] RSP: 0018:ffffffff8e407b60 EFLAGS: 00000202 [ 184.501129][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 184.509095][ C0] RDX: 0000000000000000 RSI: ffffffff8df200e1 RDI: ffffffff8c1c3780 [ 184.517061][ C0] RBP: ffffffff81d6359d R08: 0000000000000001 R09: 0000000000000000 [ 184.525031][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b843b240 [ 184.532993][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b843b240 [ 184.540958][ C0] ? sched_core_balance+0x6d/0xea0 [ 184.546081][ C0] ? lock_acquire+0x1b1/0x370 [ 184.550760][ C0] ? __schedule+0x2d69/0x6820 [ 184.555442][ C0] finish_task_switch.isra.0+0x506/0x1010 [ 184.561163][ C0] __schedule+0x10f1/0x6820 [ 184.565665][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 184.571469][ C0] ? try_to_wake_up+0x15f/0x1900 [ 184.576402][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 184.582560][ C0] ? __pfx___schedule+0x10/0x10 [ 184.587433][ C0] ? rcu_is_watching+0x12/0xc0 [ 184.592203][ C0] schedule_idle+0x54/0x80 [ 184.596617][ C0] do_idle+0x2dd/0x590 [ 184.600683][ C0] ? __pfx_do_idle+0x10/0x10 [ 184.605272][ C0] cpu_startup_entry+0x4f/0x60 [ 184.610029][ C0] rest_init+0x251/0x260 [ 184.614277][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 184.619830][ C0] start_kernel+0x484/0x490 [ 184.624334][ C0] x86_64_start_reservations+0x24/0x30 [ 184.629796][ C0] x86_64_start_kernel+0x12b/0x130 [ 184.634909][ C0] common_startup_64+0x13e/0x148 [ 184.639860][ C0] [ 184.643433][ C0] Kernel Offset: disabled [ 184.647732][ C0] Rebooting in 86400 seconds..