last executing test programs: 9m45.431284166s ago: executing program 3 (id=2227): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x100, 0xb, 0x3, 0x2, 0x1, 0x102, 0x3, 0x20000000, 0x8, 0xb, 0xffffffff, 0xb51, 0x80000001, 0x400, 0x3, 0xe, 0x9, 0x1, 0xfe9, 0xff, 0x6, 0x2, 0x6, 0x8, 0x4c, 0x2, 0x6, 0x6a77, 0x8000005, 0x7fffffff, 0xa, 0xfffffffc]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000001c0)={0x2, 0x3, 0x82, &(0x7f00000003c0)=""/130}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0xe7}) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)=ANY=[], 0x120}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0xdff, 0x951, 0x5}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) msgsnd(0x0, &(0x7f00000035c0)=ANY=[], 0x1b, 0x5f005e4c1fdd0237) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20) socket(0x400000000010, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) symlink(0x0, &(0x7f00000059c0)='./file0\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0xa08200, 0x0) 9m40.140881642s ago: executing program 3 (id=2237): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x812}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0)=0x1208, &(0x7f0000000700)}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x40044102, 0x0) write(r2, &(0x7f00000003c0)='ep0\n', 0x4) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r5, &(0x7f0000000380)='./cgroup\x00', r5, &(0x7f00000003c0)='./mnt\x00', 0x2) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) 9m39.034339521s ago: executing program 3 (id=2243): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001980)={'#! ', './nfsd/portlist', [{0x20, '\x00'}, {0x20, '\\'}], 0xa, "5e3a9979ba4f"}, 0x1d) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="b3e2702ad45c", 0x6}, {&(0x7f00000001c0)="719bf5cdb30ceb609e6e83831b8db91467696f75c5ad85181ccc83add801b48288034216a4a9e3cbbb9a30bc7d2015e409b7e8690d49bea767ed256fa9924e91a4a340974732ce07b3af15f9a9fbb2b6cd6355a35dd52437c646cb14533416c7108810bd9ac0a300d65f980e93ea05c936b6a8951ae5357410d20935281b7aeca59ad320870da7007edf9ae2a3dc9e48232e7fbb99ee819d18eede982bb3b34da6edf3783b2cac79a095ae83775d89dbf1e3af54e9ae5eace3a57c9f1f4ec733dd8301fd68715021be1ff51b39476df0d3159978ec56acccecd65f91547668c8d232996552e63131b731b96143", 0xed}, {&(0x7f00000019c0)="90b49a1f04cb594641b9ec76cc6b04b7dde02dfd5665b8ac8840cd7960d198dff948d16d4f0f4ef6055f7f1b90c96491984d350a336353f05fabfdaac959169262eb45d1f24506a4183fc4d4527b8d90f9e3d5401f5324c43a0f3084f5fdc654495c512cf2f0a0f6a881072381adc5eb94eda4911bdb79df3d2f729e1eaab3b4470952f966b5cf048ea971e059a5440dc5c31d009d6881a5557dc187e3d9e02e7912c279e2cce9e20a950be74c431cda5173af0f5348cd58b2bc3b0f83ccf2301a666c8650cd513adf0955ed4ddc066f725d2c58ebe97be65ab1b5a2c22fdf736308715db1202fecbfff2e84e81893acbb", 0xf1}], 0x3, &(0x7f0000000600)=[{0xb0, 0x108, 0x1, "2051cae614daf64bb13e634ca949a00cbb1a1bb333c60ed40f2c7346dab780476523c7116f31ce275864e2b41286dc2bc85935f535ee04c19d609c78528f2f05ca87279de3479f0600000000000000a2b1d0e8e31147528153d3308f1ee5ffa67df086392a0eb72607073564e48d7385eb37ef3e290439dd513e642b0423b03ac22c5403626a3fa0f496abc0dc4aa0d32c3cb7891ff6a249818b9fbf65ee"}, {0x70, 0x10f, 0x6, "0fe8937bed6a19326b84d2baaa09abb1d39d911f8eb5e3fefae93ea7170de57880939f7dd08f44999303b82a230747f3cd279a7818e9d753a53d251af2463d205d8bb964e6ddbe3c1b840e3728f96b5921adcb59e1d2618660b7da3b"}, {0x1008, 0x115, 0x1, "3ebe5f4f07a3c551d311cf20a629e7acfeca081c746c81f3d1efe5f905477b42a7c90ed8a21e57fd83d8cf4bcd491c9c6fce6e2144b18d8a37fb09a60698ce9dbac002352ed0cfaf3939222b42ee94428483021513abc8958d1c06eb50035e5ad1b33780746fd3904702dd445e0c65e47fc1ab791487d4569de44794ed14cc5a798a0e95ce93905342a96aa6a4b7668e28fc5b123ba9ee99ca6493b76a8e0083319aef4c7f6e214af7c4ffe267e086b4e123e79cfa4ba87b1e99430f63a8ea8ed6e23932e85e57bdc2111cef3af84eda0c0b2389bc16f85cd00b58718e1b616b00431b90aebfc6b3097aebcab79e6b9597d0b00bc5543c2b43d7412d157e61b22b8a4a725d8db3924c8a87fc25f242062dab44af1c58dda45a29fe1cfdad9959092a23f306f053dba48792a829e5bbdf4b1827c0f8d20a17fcb25db76461f5d7ffeaa14863bc11266a6547684527e99883ce9bf981df0f32fbe383c337fd09aff5b74911e923d83bdb68d38632b627256c40e505b6b4d4b6445989b97027669adab5afb03bb1e870cfef74769ab89cf3f75dd2ad33c79b10142aa2674955874e723944ae938f7d1e29e949935ee87e86bd5ca9a773867556aedc517368531775f30b28207a4b8a0ca723bcf44a25d53f92394d78d2dcf5027d9f5bbcc3673405642c01c6d33da1981b36fa58e11969261a2d6f66ecbea7592ef6e505fc22223d5041da5cbc99f2ce4bd18c252c10689f5a42982feadd20520f1d19cb96b9f5fb3150b28ba3ea80781c7212d670a2eabf74fc706114647c0c408a6551e4446ac9167312921a1a7fd671de84be3ec519d0121dfe61a3444c5f9de3be477b31ed2856e31ea39c4631e344cb032aed1eaa077afed4be7d6a16aa2bc062d9ceadf8ceef7b1887230eb1588e13a556038cc4d56949d6f461c93b206cd9957a0e695556b3fa92007e0376d44a3755e456dd970bd2754e575a5c240b3b30d49996bd434f3af4dc1d174716bd598c20b07fcd3797379f843ca84ea227f1eeb8aa08167f4ecaa0ce1b0c622f37ace846ff7429f65c02bf3e3c6fc1d76cfcafee65e6e19d9ac10979eed50d089f1e2dd94de583d6036137ded5a8651511678fe1f0cd179e3e829374808e429ae3632b0c54c3e594020654da6fa29b47518474e4a1f2d10deb02908c1e20da1785872b551cef50da029ac77ed7e65746c3adb20c9a3da078445b5d8f5cef56d698e924e0e339bd381bd39b923bfc7aeb8b0c43e801d78678b3329df1dbafd046ba32be688bbe8a8d44e7163c11592e25ae0aeccb0ab8f963c3c00b913ab073efa585b342daa1f801d9254ff314e08e3672b7cdfa8de2608c8dc31c86377a3297ff730eb6064fbee3af901ffa93d2ebfd5b17e24690d8e668114ce74fc0ed91bf711765655362a50a77ac9d4e02e2a77343614e4f8f55fb786896466dd2cbece0015545424d4e65685bf66ab0ec754b63b77b70a041a0fcf8c90e895858213271bc3424832c15a3573078cf0c475c83441783bfe8d0bbf8eaf82e081baeac443363877ecdc5ba5bf8281872f779ddc834467c6d30523f118d2a4375233b71d92592943ad738aaa53fd286f38c7a390fa9e6b503f0779d2fb96a6b862736267cf207fe1e1958a3c245edafa2ff063f2bdd8645970f4dcf2954a3b7faa8562cd904968c8fab0ad0d1ca76e0bf6c347ffcd28d8944fbbd0c8f2058bc43f2905a11717a3ebbf7e8ac8c68078c98da03a290ddc3bfd5e885b4488dd22ba9a71da183438c6fbc38491c9cbcd25a23dbb18a28b12b4aade074bcb7fbbe723e9ecd05597bbd7bb733a66ced074adee49ec72eeff81b3129dfd90a91b5a24fd388c7348c08bc439c20200fd894306893c500a6c35a63abedce8c4395f221d147ea18aa8cbbf1ffc9bf5cf9b155edb86d448a6f84b02f1376e4b4a757f6b9329261cc86e667537355ba16d51615ef61214bcba086ea8d21762aa55049e4c266fb731bbcd3f30d12c258b35c3132c0bf46f5c9d16dcd777ce3bf0b2ab1ae487e3cc11fe057b165b29bb4ff9daa2bee6b36d18fad729cb248982ae8ab491525d3701b5b8b5595bcb16a28357b45abf4f34f7eee0a459d7ebd26bccf6e24409aa57e738ad4e84b0f822860a70f418c74e867bb014bc6324e783bc7f143805f7cddec5e8c2479ce37df8c88826cbe90200d65537e5b3bcc338b76441607f97bcb66641c18fac6ef6b29e8302f98ed4146c249675ab331e71f9f8a2cf90677e9e017b854b392653471c8114030314d0c9ebe1f49cdbf1dd01d3f4f581558721aeb33263f10775086067556c3321a0fb3ed24e27fd617ea9ee2c314965b12cedf2478b9796cfd12431fb1a4a34048a7795c917242d09f01eb76cdfa9213ac472a60c8daf4a10d05d055f549a97a6722d9c7ba75b59ee7159d2dd3e3edf3112bd46f648e724368d30431ed20d1d58dea1b9c1960eb556b343c4bc0a1e1c56434af167a1a85a56afd4d9c9dd77f6092b412f03ca484b3b5b26f90a6917530d063e5446e90bde7da505cbede234698c20df7403c4a20dd89f706587cda4a94128d164c6400f6ad90cdb60aef825ef1a26f0107634168bea9d789ae40126de57725bf6cef696709def6be57dcd8d44995c2494404f26adedc44917f1ea885fce82d0c7edd5cec4f263bda4bd473f6c50260bdf8cfd1ee6e006f6bb730542fcdc3cfb202c1adaab36320a7e27fe434a633a7fe48b83eba202f5875ef0c8030e6d53ac94ba37c8bec5d5af2ea408c578cc50134e2cd0d656426bd35e3cbdafe51d25edc0b5a1c413c854f6810828df9c309261a3691af5a12c9536026a818c6221e71ad82978d7ca7285f424e0e18553df797f56e5c6fe457123874c9805de2a91241fd902cfdc4640a6718212b5b9013dafc52507a40206b5a7703a557080bf1e1d833cab157a5ac331eb3b8c2a40fc5dabd810a9be3ee00f32d4b7330ac52cc15e20aa685d7cb3da6f5e60bd7a1b97d27049aa8d4ab6ab3cf10443692a4c917caf53f2731627e8e57aa7c700ca62af2ba784d19e430db488bf26f65c11989fdbf7e2b235cebeae834efdb959f6083c8bb0515744c28085ee54a40466cacdd3b1d1d8715010cf24d8664c93e004cb16234e2d8886aed494b092e77323a99a2afffdfec67090d1eddb4acc4aa398f0c1860854c01eed9f2592623322b2519e90c91e94b93f00b1b58250c7211ca4b580fc998cd3ef4d95e1ba914d60f48a12b018421f8bd495111f15ce38d6a132ad74acceb08b805e29cab79a794eb05194ea13faf6bb7dfec84893e5fa9f0c628de98dcfc744d2b9cac11e16f69735aa46a74fa89d3fb25218859fe40cae94aaf0de58128d2464a098a81f015858d9d4cd18ae10c490939919345042ccf2259d83c8b25c1367b71513f07865e03f84a563b3c7fd1c5b21adbdd6b1541fc5fe81f0a2b6dc0858f65c5aa94c0be9e1ca70d46fbed7b7205ddb431e754a3a11c1e40f673fe67628c086beace9117e4e7e68648998f4061b6e5573c7087e4794ca5305ea510bcd8bc39f77b1e4d1f63f4ff695dd0e713880dae998d567acd05b10f5abf1db3903203d1ab2b4bb09bfb7e92fb322e4993e371ba80c6bb769cfe169ca02df103b903c5cbaeb537af92c75944117baaa9a8f762d4471e22fbe2b81779fedc57c859e5fc6739ff4ddc9e8551098c4afd0a897e0cdaa744d57123bd778cb0e1610beff8306a09789a92720a4a462d591f267eb8ff440f6e94e90837b1e82e60ac86335dc34a59fdedbd07d2262b65c91d64598ce8d317fd72263a17c59c591b15f901db619508dcd19961b52d0c3bec200e77660a6631025089a7ca75bd608a6d00882346b0486701f799d934c1e757c0683e8e93ee87fa42790d87f08e11780311dd5a46e6c09fc863f64a3b652f2e1d233be035a824e0b00e28b40354833118d6fd87d536b7f772a0ba14715ded95dd3a3ba5340fc3f8b2b079d9fccb435d6610221b4e5e04cbcfe9eece39af3e502dd1f0200cd3e98b69e4733c01e8512adc2ff5a9e63cc7a145452d0ddd31630b6e4113edd6078392255a4eb0509c629c1495d8c773e638c2eee947320618b7b2668203ad41817cfbd47e1fdd1e751e78250b2e36bee1e1bae83b7ef43ccb37d09f5bf1eb3db0cee23b4c66f8984f09fea61ad8a6b7848029dee290ae726906da12644a00dd19206e48e1beb114f0b3f2660f3567c28fea6c7a49915dd8438e6b2ec6bc330cfd737d829fb900e52e8f81a17c05d247ca4ef8d4d78f7421c42cb50a6056335b6f5a9bdda8cb45fa52b9a06ead445b119a7f1f9448036589689e4c1642d732b2536094459dc7ae9ffa928ac99461c08213dceda771d800a69b7552b4633a74690ee360e9a9ad5a044f08d88948673c6a452211efb702587fc91d1c134bde1d37f180befe7317be8133ce42c056cd424cce90e5a7794982f4acf4398ae85ecea746a9b51f86c978ef37b3aa6645792230f0c921cd02910a060003b6caf3956e3ba78f98f941ed5276b01cbfdad2b702259907082f99e5805ec9559a02a0073a224b68d90598fe670afab8f44d1daf912e363847ec01e102c082849cfb9dc11e95223c719fd70ddbb6d5314b7300ede899d61ad7d60e878d17e3a0b5bbb842a22c63df48f9af38257dfd95c616bf8d626e4890691344b33177fca34248382202bc9c087fa7b78eb4aef16a96e6ef77981a0914c9d2d430b6359a3d0b975184f0d2fb17eeca02b7bfc14564d849fe9fa0a3982b069ccade557fe4ff16013e4bbcbf9c5ef80f768d3910773cbed727bd3c0acdcebaf9a4a7268279e57ebc9a539886aa35a108c3c8a887bf7cde2759210d0df7747aa540939d617ba1971ea34662735accf81777e8cdd1a84549e3d8d1c7d14616d0ace617f5d508d5770d8b235464c1ae9de1f60ccbb921b83fe234a620f2d4b2eadcb3d97fe305cf36142a3b24b0a65b437622c0c3e47b6ac01aefda8c5566c298628b14beaa99117eb16c993cf2977c34b07cc60c0d40c28345692baca9fa797f15f6b0bb43e0d8a82b61bf6b7b8fb6d84bd1f5c8222aef0a527da0e592a70882c9391466f73c5d985ca32384968d8796688cd415e4c41bde889d23cbba20f3ecc55a77d883eefb6e389f31fa10fe3309af6710d9a838856ec4459a5d573ebcf24012dc16a2aec45200af5a6f8f6b611457c15347211403ae121d5bd5ac6297dd13e1c36f44fc12314262cd8b1cf0575e23539b97ec6a532adf86e0b1a8966cbbb019d06897eec45894c1f508b851041544c3a59828a34b96cedbce6f23f5a756162b790178ae5b422840034d679b8ad270a62bc9b797b0367c8e4d6c1479c82846072dc6c3e73135b4b05d1534e5febcda50dd8b6ec658ec51696ebfd6f9a0accd95fd25d563dbc4234da34df811d37e17145ebab6fbd525c5daf3eea1b4d6a2da2cd4b64aa7c6eaa7139b3608ce19a85ad715cb3c2987d099498bbd5ab0655da4ef19ecf8857ad697ca404f2e9a69ed9bfe7ff5d619b5112dc601a042a067464d639987d64c7bcda6e64856fa5fbe64aacec68a070c44aa4277487479a33434e8887888e25e209b00970e2dd1c45162e0caa085b5a8d45b2fe103702347f7f32802a91a7bec8154682b439f4e068e7b323d53e0e0d3ac9b7f51fd00d5870cfebaecea28120d220731217354195996b019dfd400c0f58d839b4a4e1045db15301303438d44582fcedac2f0c0c6e172dfa02ed5ff6e0830140d85772e5b4ab5aba3f146b2"}, {0x98, 0x109, 0x4, "9682a3da61b7478da2bdf9c96e9522aafcb032f19442bf8532ea5000ffa394fcf74cc59aefb831b567e1da81a0f19cca677b336f95bf644da7393c32857d54d7e515d96bfc272dbb08bf40c276ea49a8197fe44cb9c3d5aec1e073ed317c2ff879b318432bbbb1c556cd4b46cbdafe02e2879dbf35bec665a4a14d65fcde02003a9dc0bd"}, {0xd8, 0xff, 0x1, "4ec4b016bc57a32474b0170dfa61db136e5751a75b38dc5152015a459a03899ade0af9cf8e0f54f58fa425ad4adac18d6c379b64c00d330c3d16bc35258df720b7b037a991dd4e18fdd226cfe568d56a019c393983ae9a2ff798830f55ba749856329d23f970976ced3260c5d6038d2f805f5ffa6e498a6e56dfdb0b4145e3e2c729daadad1cdbda66a2d0cafdfc17d630ac7c6c565dba4bd970bcaf789d6d131d5d253d53f261b2a062ea1c913796d4d69a8741cc10fb0485bd39f8a3abf15c76f583b2abd790d1"}, {0x80, 0x0, 0x9, "fb1d27319342066fbfaad486bb66dbd330059b53e0ecf9766378affee1e67dd4a917ab3c5fb28b71e84e353eebd922568e675ddf8ddaa996e2c7d4d47279739262b8b24b143c4c7a3d29c144d4fc011eb3d69e9e0af4bfb29ecece012be25983fa9c6fa39d55995c01d44f672592"}], 0x1318}}], 0x1, 0x4000020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {&(0x7f0000000300)=""/126, 0x7e}, {0x0}, {0x0}, {&(0x7f0000000240)=""/134, 0x86}, {0x0}, {&(0x7f0000000380)=""/153, 0x99}], 0x7}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='3', 0x34000) 9m37.664264337s ago: executing program 3 (id=2244): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0xaf501a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000280)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360e0b37b4fe035bbb0958730484c835a63c7d9281b467a326d41ed87c66bae", 0x5f}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x1}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @local}, 0xffffffffffffff93}}], 0x1, 0x2000c080) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x6}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000080}, 0x20040844) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000140)={0x80a0000, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r7, 0xae9a) 9m35.545616001s ago: executing program 3 (id=2251): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) socket(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) 9m32.91488669s ago: executing program 3 (id=2255): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000020c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000021c0)=0xe8) r3 = open(&(0x7f0000002200)='./file0\x00', 0x410000, 0x12) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000002240)={0xc}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) fchownat(r0, &(0x7f0000002080)='./file0\x00', r2, r1, 0x100) 9m32.003038415s ago: executing program 32 (id=2255): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000020c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000021c0)=0xe8) r3 = open(&(0x7f0000002200)='./file0\x00', 0x410000, 0x12) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000002240)={0xc}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) fchownat(r0, &(0x7f0000002080)='./file0\x00', r2, r1, 0x100) 8m56.950920547s ago: executing program 2 (id=2337): socket$netlink(0x10, 0x3, 0x10) r0 = socket(0x4, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x2d}}], 0x2, 0x48000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00", 0xffffffffffffffff}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x75, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x8) close(r2) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x1, 0x0, 0x2000}) r9 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40053}, &(0x7f0000000480)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60400, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, 0x0, 0x0) sendmsg$NFT_BATCH(r13, 0x0, 0x40) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40400) sendmsg$NFT_MSG_GETSETELEM(r13, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 8m56.700989435s ago: executing program 2 (id=2338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='100000', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 8m56.498123275s ago: executing program 2 (id=2339): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000000)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r6 = dup(r5) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f045}) poll(&(0x7f0000000180)=[{r5, 0x3}], 0x1, 0x9) 8m53.891899805s ago: executing program 2 (id=2344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @private=0xa010100}}) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x4eaa, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000300000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x6000) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "2d1cc967f6f6661360e795c004488acf", 0x2}}}, 0xfa) 8m51.584337669s ago: executing program 2 (id=2349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ftruncate(0xffffffffffffffff, 0x8000000000000000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x80984120, &(0x7f0000000340)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0x4, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x40014) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x19, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x8080, 0x800, 0x0, 0x440000, 0x0, 0x0, 0x400000, 0x0, 0xfffffffd, 0x20000, 0x0, 0x7}}) connect$inet(r10, 0x0, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20, 0xfffe, 0x832}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000180)={0x3ff, 0x40, 0xd, 0x6, 0x2, 0x0, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x24000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b2404"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 8m47.491555257s ago: executing program 2 (id=2356): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000087cd000000000000000000f0850000450f0000009500000800000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x33}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 8m29.894414216s ago: executing program 33 (id=2356): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000087cd000000000000000000f0850000450f0000009500000800000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x33}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 7m46.899929478s ago: executing program 0 (id=2414): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) 7m46.821345164s ago: executing program 0 (id=2415): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af25, &(0x7f0000000040)) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) getsockopt(r0, 0xffffff80, 0x3, &(0x7f0000000600)=""/131, &(0x7f00000006c0)=0x83) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00'}) dup3(r1, r5, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000200)={0x8, 0x0, 0x5}) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) 7m45.659462228s ago: executing program 0 (id=2418): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000002) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) truncate(0x0, 0x7) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5b2d4287694e9bed"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x60) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)={0x38, r6, 0x809, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x7, 0x2}, {0x4, 0x6}, {0x4, 0x3}, {0xbc}, {0x3, 0x2}, {0xdc, 0x3}, {0x6, 0x4}], "6171610cb4c61b4c"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000000e40)={0x464, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x6b}}}}, [@NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="886f63a6794fa724f0ac61e8a03778c9ad9e8e400e93cf87f47841629743ee51"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8287788d96f7cd2b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dec42a4f1a6505cd3fecd41676d6729a61b744fce0170fa11d14a39a8798a4b5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ff082a596768c0da22f137963bb90d904730e1497e1873a6a2a0ea940b7498c9"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0132f0674ff41f132efef334bae904015841d87cd7da2ad3e0515b97a5d89877"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2b2969acc9c03b83f115413ac38fc8c134e042be2d5a6a39b72b91163ad20fb8"}]}, @NL80211_ATTR_REKEY_DATA={0x30, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f7a4eb306532ab8438556c478a00204f"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x961e}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cbe64bc441b3015247d401c4bba0c046"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="29e7c135fa647fb1107ee6a51a30de5a"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="19eb4ba1689d9f69547242ae9b353b3732a1dfe08fb04157"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9568a64323c393a7472d419d981809d2"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="185398fc14c6abe727302928933a728300038d6b81e61806cb562f6a773b39d6"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f668eca30577957b6229bba069583f13091c33d3b9a4c733"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6b63046c5d73c094fc99bb3ba18932e4"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6101e0c85eb5cd67ca87125b07b315723ec8d0482edb3bfc642e1d27ffc0f7ab"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3287b05c04cc2a260c30dc36dd9fd2095511c39142255c49c73aa2dd3a2f41f2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="872438d1cece6ed68566ba23c36a163b"}]}, @NL80211_ATTR_REKEY_DATA={0xac, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="31d938d976474412a57a24fc4946653b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="476a6d73def8ac146c2e72ae8ee045ae"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="35fc245fb657fd82269c2aea7546434414ced6418e98e902"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcc817f94f496fa3"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="024de93ebb9ed81fd307a986e3b11dda"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "37d511e69fb046f6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9de32bae81047a8ff960b1067901d4ba"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1b4c50cb0fa28e17db1c3c9458316b223a81e607cc139e002ce0b2c99980ed9b"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9918}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2d5e9f681e2078e0aa80b7f7cf53f2ca"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cef695d89abc0d69901ff9ca1474704c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1ca591ab3030b589"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4ca841d46578d2f8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5526d2f455255dce"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b14a04ba95789106"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0e601488eb2fd88"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c1345e85f1a19033"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b1060435c029a38"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7c4eccc31f641d0b3483c2778e311d52"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="72b9d1a7e638b59fce16b21e3024b5b2c5cfc6de7e12121f4d2221f168269bb2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d531671d49da5516"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e35a87ad39466bff4a869e2815cbc970d0487f39a15843e64b9bf9b7a8922c58"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b4d09aad3b99750a8da5b695a8469887"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e8080bdfc015a518"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dcd80a3a2865df6e"}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000806) 7m44.472353184s ago: executing program 0 (id=2420): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x812}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0)=0x1208, &(0x7f0000000700)=r0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x40044102, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x2) 7m33.752584312s ago: executing program 0 (id=2425): r0 = socket(0x18, 0x80000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = userfaultfd(0x80801) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x57, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6415800}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00007d5000/0x1000)=nil, 0x1000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000f, 0x40010, 0xffffffffffffffff, 0xec776000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x4) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @private=0xa010101, 0x4e22, 0x0, 'sh\x00', 0x0, 0x2, 0x72}, 0x2c) write(r0, 0x0, 0x0) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000008963ef2101c708b31f7f8ae68e6f7bc814471547c28518d37133905a146993bb7ed90a03843ed4902aef488b7df26723f01e470d4d187eb39fd9af7be801eaff5fb"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9e4f9d08e3cf514f5fcb3982131b9c12564e90a"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FE_SET_PROPERTY(r9, 0x40106f52, &(0x7f0000000100)={0x1c, &(0x7f0000000240)=[{0x13, '\x00', @data=0x6ac, 0x7ff}]}) 7m29.402384686s ago: executing program 0 (id=2433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0xc, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0xfff5}], 0x300, 0xf1c) 7m12.01569046s ago: executing program 34 (id=2433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0xc, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0xfff5}], 0x300, 0xf1c) 6m58.032013023s ago: executing program 4 (id=2475): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m54.938578434s ago: executing program 4 (id=2483): sync() sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 6m54.491112656s ago: executing program 4 (id=2486): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'hsr0\x00'}}, 0x1e) unshare(0x8040480) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 6m53.276191709s ago: executing program 4 (id=2487): accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 6m52.443307594s ago: executing program 4 (id=2492): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m51.450839758s ago: executing program 4 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r2, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xa, 0x43, 0x55c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 6m35.805168692s ago: executing program 35 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(r2, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x72, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xa, 0x43, 0x55c}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 13.150679522s ago: executing program 5 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x36, &(0x7f0000000900)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r8, 0x1, 0xff, 0x6, @remote}, 0x14) 11.905953601s ago: executing program 7 (id=3462): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) 11.704228676s ago: executing program 8 (id=3463): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9a900004f78ffffffff1cccff"], 0x1c}}, 0x0) recvmmsg$unix(r3, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000400)={0x0, 0xea60}, 0x10) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 10.967611756s ago: executing program 6 (id=3464): syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x2, 0xb00, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xf, [{@local, 0x8001}]}]}}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 10.479013226s ago: executing program 8 (id=3465): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001980)={'#! ', './nfsd/portlist', [{0x20, '\x00'}, {0x20, '\\'}], 0xa, "5e3a9979ba4f"}, 0x1d) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000001c0)="719bf5cdb30ceb609e6e83831b8db91467696f75c5ad85181ccc83add801b48288034216a4a9e3cbbb9a30bc7d2015e409b7e8690d49bea767ed256fa9924e91a4a340974732ce07b3af15f9a9fbb2b6cd6355a35dd52437c646cb14533416c7108810bd9ac0a300d65f980e93ea05c936b6a8951ae5357410d20935281b7aeca59ad320870da7007edf9ae2a3dc9e48232e7fbb99ee819d18eede982bb3b34da6edf3783b2cac79a095ae83775d89dbf1e3", 0xb2}, {&(0x7f00000019c0)="90b49a1f04cb594641b9ec76cc6b04b7dde02dfd5665b8ac8840cd7960d198dff948d16d4f0f4ef6055f7f1b90c96491984d350a336353f05fabfdaac959169262eb45d1f24506a4183fc4d4527b8d90f9e3d5401f5324c43a0f3084f5fdc654495c512cf2f0a0f6a881072381adc5eb94eda4911bdb79df3d2f729e1eaab3b4470952f966b5cf048ea971e059a5440dc5c31d009d6881a5557dc187e3d9e02e7912c279e2cce9e20a950be74c431cda5173af0f5348cd58b2bc3b0f83ccf2301a666c8650cd513adf0955ed4ddc066f725d2c58ebe97be65ab1b5a2c22fdf736308715db1202fecbfff2e84e81893acbb", 0xf1}], 0x3, &(0x7f0000000600)=[{0xb0, 0x108, 0x1, "2051cae614daf64bb13e634ca949a00cbb1a1bb333c60ed40f2c7346dab780476523c7116f31ce275864e2b41286dc2bc85935f535ee04c19d609c78528f2f05ca87279de3479f0600000000000000a2b1d0e8e31147528153d3308f1ee5ffa67df086392a0eb72607073564e48d7385eb37ef3e290439dd513e642b0423b03ac22c5403626a3fa0f496abc0dc4aa0d32c3cb7891ff6a249818b9fbf65ee"}, {0x70, 0x10f, 0x6, "0fe8937bed6a19326b84d2baaa09abb1d39d911f8eb5e3fefae93ea7170de57880939f7dd08f44999303b82a230747f3cd279a7818e9d753a53d251af2463d205d8bb964e6ddbe3c1b840e3728f96b5921adcb59e1d2618660b7da3b"}, {0x1008, 0x115, 0x1, "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"}, {0x98, 0x109, 0x4, "9682a3da61b7478da2bdf9c96e9522aafcb032f19442bf8532ea5000ffa394fcf74cc59aefb831b567e1da81a0f19cca677b336f95bf644da7393c32857d54d7e515d96bfc272dbb08bf40c276ea49a8197fe44cb9c3d5aec1e073ed317c2ff879b318432bbbb1c556cd4b46cbdafe02e2879dbf35bec665a4a14d65fcde02003a9dc0bd"}, {0xd8, 0xff, 0x1, "4ec4b016bc57a32474b0170dfa61db136e5751a75b38dc5152015a459a03899ade0af9cf8e0f54f58fa425ad4adac18d6c379b64c00d330c3d16bc35258df720b7b037a991dd4e18fdd226cfe568d56a019c393983ae9a2ff798830f55ba749856329d23f970976ced3260c5d6038d2f805f5ffa6e498a6e56dfdb0b4145e3e2c729daadad1cdbda66a2d0cafdfc17d630ac7c6c565dba4bd970bcaf789d6d131d5d253d53f261b2a062ea1c913796d4d69a8741cc10fb0485bd39f8a3abf15c76f583b2abd790d1"}, {0x80, 0x0, 0x9, "fb1d27319342066fbfaad486bb66dbd330059b53e0ecf9766378affee1e67dd4a917ab3c5fb28b71e84e353eebd922568e675ddf8ddaa996e2c7d4d47279739262b8b24b143c4c7a3d29c144d4fc011eb3d69e9e0af4bfb29ecece012be25983fa9c6fa39d55995c01d44f672592"}], 0x1318}}], 0x1, 0x4000020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {&(0x7f0000000300)=""/126, 0x7e}, {0x0}, {0x0}, {&(0x7f0000000240)=""/134, 0x86}, {0x0}, {&(0x7f0000000380)=""/153, 0x99}], 0x7}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) 9.360124863s ago: executing program 8 (id=3466): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x4a, 0x0, {0x7, 0x1f, 0x5, 0xffffffffd3110f4f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0xa2, 0x8, r7, 0x0, 0x2, 0xfcd9, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3250d3e3fdb97b5cfc6041d48ffac2f489dacbf28aad3c14fb87bf8a9af78aef1f1aefe8622e9605c7bef173b96e2ba8731c5f92ed95de177724d8a802ac59e63353ad2fd8890463e96d8241965b9d56c0c2cf7ec19d7006800"/206, 0x4}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) 9.172761892s ago: executing program 5 (id=3468): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x105842, 0xa9) writev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x40000}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 9.07289049s ago: executing program 6 (id=3469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007d800474"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) 9.002960496s ago: executing program 1 (id=3470): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/loop0', 0xa) 8.80358607s ago: executing program 6 (id=3471): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="0810b841e7b8c5afc0bbe5f1230e1b8bad301dd4de3cac61856df1e3444083303ca13006b2fe5ee12dc16199c3109ecee03ca163ce34f8d9a13b4d000f43204c7d07393297be382e0694882890a8d59bbb94c37b1a57bb9ac552c63813199ff63b5ad0d448cd615a1790c81c8c7394956add6009b83951e2e668f0381b6d2ca79e890aacea24ab716ec77a9d14a03f228b0836971552d52fb595483f9e57a98dbf8f1b2af86315f96bb97ff704ac39b371fbf0cbf83efda3981c7fbf732cfb370f5c52d0f2708e984c8d6bc60b59ab867faa4e8516ca2ca8410b06859880b7f8e419213319e42901f93a01ba5e9b0fb4eb11beea0845dded4a1840ded5439fd43991a143787bc6929506a8847521d494ce671fb1ad2cda8ba856a01a07af82406397db4643c142d3912f610e3ae9e8508d48a9c0954f268fd346e787338be74716faf0ae4ff6fcc57ef2022966c24717dbd7f6c0100fd28c36e409710f1005eb56ce9f8decc88df27e820c45f27a312ed524689a61c0a16205270e6e1e7a62b7bf2cd0bbf8c975d98056927c5fe9cbb7c70e0cfc4d34c97c357adf1c725297de8f3ba8efcad842b9962dd726e160287b1af0b9791f8f5880a606987b4d3b85aafa7edf1f1033af5a290e3de6f1520caf1c9c2a696dc04e37750084b563c268eb0295f2b63e9f76e59a764a753e36d2bed3a3e199192c1629a876b91f5406c94c5757f32c1849b554835a4ac1b2f69a781255b859170315abbbb52667fd11b15280cd79ea86451e937e5667a7690caec45277aae3fdadefed9e9289b2040a25da405a14a163dfcb1499c4de313a6aa5ef58ce3cd86615a5bd8063e42638824df548f8abd5fdbd7158fa28c74eb29340418c87d4518c4aa9bbb4e01bcf559048116b768837cf599a439d52271db13fc7e0bff95e677a31f87b6e097e22253485864c8a8a275309cf8fcffbb2f3351149d3386010f1bc2c3359495e49639976f592597bf971b271723ee8963fb4e979e32433042ac943bba51d21a4ac5286317497b852333fbb42ef03ccbd3f220d0c50277a1dc0eb1a5498e29e1a6d4f2178ea43bac36fd9d816cfae4627362c4b4f3ed8a8aa27e59da6e102e1ef20561a5e7c1a2260dbcf2343ab56b7c13bbfe7b509966ba20093cfaf4717ce8011c54378c09ad51161b328db9a3906df705ff6a3df5f6ce19d8c1d2a72601b4149549ee43dab62b9701511b1c1ebf6530ff9480c171b5c68aa5901d84819af9a42cffe35d3a4d867cd1812cf1e3aea15ee56b93ee0d65915371d87f5e96e8a85da5ba89886dddbb0a7ad5d77f6766e7132e5e56c4c605d434b9a3726960573d96dc2033bfc9fa1d7eefcb9491eb2dc55a43cddcba4cab7c1155b3254d37865f6045e2f4c31a25004c02392b8942673b3210b3c51e83ca5c54e817485bf247eacdab175a5eae063230c8ac45d0d2e0f76404eaf49f40434733d8e69309775b5dfa38368d0fa385787c937194c000b111fd512a9260e98b64cc9498f727b21573b779e8250a00c2c5e583f324695e28e19f550fc1536943db7ab7bdf3e0543b0bffec465bff037b6600eb5d6d37ef6ba6503fc4a395c4f011b138718265d7ca11dba0d0bfa5e97e8d653309e206bc6701742abdcacf9261b834acbc602bcbdcc74c8f360df1821306db69afd520a823269b714c54e88dfab17880ec2023477d952976b673261955909184858a87e902d3b272056447c882676297a466305d292f725facc26dc10413ff8e4b4cd9871ca8d14b59df62cf19cae6b3b548b34032ff1d64640c1d734c730eca28b43148e20309f10c3be7823407314c9b6f7b7568d59d9dac5a5dc4d802ee5ef00dc6e800bf5948cfd4bf42e3d82500cf3bf6922afbd715c431ebdc6ebea8c858b7f7647df975e85aad2781a29ec497393cb2834fcfc6817c8e659f158ac918392afed4b6be6ec4914a39898e1de46ab5bb7d560e6dbbc1d5ac7537fb0ddea37cbc47d153edcdda2c21590ca39e96a22e0e6383a4781dd85239d47cf377d3673a6603cc39c3dd3be97403e8503cdfad3c470b225c47bbd55f903f9eb981c2c9ac084ee2bcbe94ce0777e4ebefd04621a21a0c22e2b700a265529e855f0f48f3c49659defe8814ddf38acfc3625785d7fda9e3b22f6a4e8bc4d24d307a1445cc9b24b01a27462d7bbb38c21357712cb23c9214987678ef3a24bbf5e1afa2f6fce13d5a993ac3295b6a5696f930f95891844d354d4770f54c3d82eee4532fda5e3c588e5ddd5d0c8aead2b5a638c3a6b000a4ba4f4f3b949d42a95b2db3d36770dd0a0fa38aa3c4a1861bceb8e65953bfab32a24a32b0e6a541a0fdcef20aa1660f85cc3e67fbced6544686009cb7a2679a946e5d450b57a5ff26221bc2892289d6976c8c6533cd1d99b5a318486e3f815b2aca4ed829a02397d8777f5e51182d0a642676d8bc777088e5553fb06aca344c11e008f4986f658dad61537955034003a8d6733456e1be6d34e5003d83ac0553e06226a64b075aebe51cd2ca4dc125bd2e5216d8badb9ae0bd6037f1f2a521fcce6c3dbf50bcd3eee15217b3e905b23cc48b277c28fae49e7c848849024a9b63118a83c8ad22c62dc827ab1d3087a3ee5dc441f618bc5f1b905208af39d39fa6ef98b14cfab17086f8560219378ddf6441fd9c42492ca0c93a3b8f34f52ff2e0487f7889283170fbe3d0a6bbc4a853bd722aa3099bf9a67a00f3d197170b7091f627e72a4f1183184022f4bf357ffb2f91f8ec56caf3a25316a7d4aa97105bb6992aac4c3bb549ac0f44c893118668bc5a0f80fd36fe417dc161f58d32bbdde887ca24d4847e5d2cfe1d403d9f1e36f093f333e6b2628b86d6aa04f20ff7315e673c7aeb422f43f841a1d88800eae67b67ac9bea8376f0ceefcd6d0fa9eafd7cc840ae5e94903b2b105c19c9b4cc513a3ba128fc442ec44bc3dd31e7fa0aa7cc48f76dee7cdb50373cf1d38792060f31ccf0790bed8b1650fd9b89f29318854dc20ff3bc4494812168d0cc2cf5067eb456f9bff76a667ca9591bad8345f9ca6188ea64152183515ccf1bdb322bf211204ae1aa4ba283abd792ed119004662c90f2bf62140ed8373968e546f1717547c91043f54436d9fc55dde66bb855f580afd9d13817fb58365bae446bb81207fd55c63cb55010dd4b557ab83b11f6c121ab5e944231e3ec4fe26b9063f02ea8bb63a4b63220936ad293a2feba07eff6b8cb6ee1384f4e6851b1b8e26c8e1489cdc8baf3a1aeb86fb909ab59ea46b792460135a674c58aa70ed9366f2bce27c6f561a33f196ac615191080400c8483f918731a3495b15bb9ac61bd274696eb4a1e50a2bc2bb4c03b48852c3d3f57339759ef93e3a6b41338770b6dc055d7b3c8d5a39fd8e8ae97df853e8190d2ced216f33d2094b910b44e456e0b60cf969908269efca0569d001611ddd15764ed7cc76532aaceaa576e78a173ff4dfa5217a8448a6544a57ad05df3c78b619480d5011c2751c190f005a750f4abd00f93463569d29d661381449c2160873d8950e804f845c54ec5dd9181d92f362163ffba4a8ea3c601adde3b9a5640e63d278b0baf3ab18b9be07142167312c6a7bdef87eb164ab45b47f342e0bb78699d9d03ae604056e3573fdd63f21bc84e63fd0bcd105e9000b6a3bbb3cc24d03b3bec5e8a05bf8d3bd803add92332073dd08dab92baf9ac665e2b5813e740730bb229568e1c98858d1da77de414238a26f4c540421a12b19c3fde2a3b13f756d8cad00fc2b1459de44e377d3ec2fa958aab5a978b23512ede49810d3f788a193b4d58b9a130d47f965a8ed368504d4ecfa4eef6e37bf9222323da97d284c99f0f89308d6a9cf6168a5900ea1f518f5ca8579e898743c5732111c90b567250ba005963459d1096e2bd017b4504a5e8e08c627fa552f93533277f8a68613d697c0c57b17865e6eb71533825acb662c3bf262d3ea8f043685b0580d0174b4e7c5109226013e5188ae01bfc63335b894c69bcd555af1b9bc60693a8b740baaf5796708975e3ccfecbbd3442e8879803be80609f2c1af7456964336df89708bbb6e505e7d86d925b86689dae9d69b065a9096578403de05be543792ebc5fedad1dded4114b7ce2982b486810f558d139ed3dc5f49907d6b822e8cd0da90d8247e37ae5972fde80a3a67b6363faecb6dbda474081d443f3cf81773bb21f5f0eb0e5698c0f0c129e4d6b9d05d9e7fdc04980276f6560f456303095ff630798c9a48010fd8b1660a08a80e607ea227d49abd05c1adffffc4dc3bf9383139e7b5b1673ca37e14ffc7cb83be001d1c6e8d102a168ba06a9d920ba6140c608a2f60aba3a5f20babe13ba0c7aba2ca670d5ceac33282108c5b6494eeb28563f7db7cf7cf9c3a736363db403d19b55597648d293de9db7e479202e5b9281bed2212421fe4494cd981a37ba31f6f4f023ef4abd8bce8d8cc3d76048b8963ab3d5a1e05a6bde0296f27beeae20b2d8aab90c1051f9656c32c11d189d31282bff1bdcb924f61a1869a243131d86456eb0c0ab8220c45f115b6332b2998a400cc99ebc1ec3f74ed60969d852609c451e84d33ff363323b1c6e414f5e3ca10f07ccd3f42301c7a058f24f6523b59bce24d436e0466bc43a1abc4812a193f1b95f3f98e751e5d3c51b997399a13d223", 0xcf3}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000087cd000000000000000000f0850000450f0000009500000800000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x33}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 8.710757746s ago: executing program 1 (id=3472): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, 0x0, 0x8000, &(0x7f00000000c0)={@align=0x157, {0x7, 0x0, 0x280, 0x9}}, 0x80000001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xf}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x1, 0x0, 0x0, r5, 0x14}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x1, 0x0, {0x0}, {0xffffffffffffffff}, 0x5, 0x1}) write$P9_RGETLOCK(r2, &(0x7f0000000280)={0x30, 0x37, 0x2, {0x2, 0x10, 0x100000001, r6, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 8.663396382s ago: executing program 8 (id=3473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) 7.357302323s ago: executing program 8 (id=3474): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f0000000040)='\x16\x00', 0x8000, &(0x7f00000000c0)={@align=0x157, {0x7, 0x0, 0x280, 0x9}}, 0x80000001, 0x0, &(0x7f0000000180)=0xf}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x1, 0x0, 0x0, r5, 0x14}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x1, 0x0, {0x0}, {0xffffffffffffffff}, 0x5, 0x1}) write$P9_RGETLOCK(r2, &(0x7f0000000280)={0x30, 0x37, 0x2, {0x2, 0x10, 0x100000001, r6, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 5.35959357s ago: executing program 8 (id=3475): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) 5.211987153s ago: executing program 1 (id=3476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x10dc, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10ac, 0x2, [@TCA_TCINDEX_ACT={0x10a8, 0x7, [@m_xt={0x114, 0x17, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x48, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x110, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xcb, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0xfffffffe, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x27e}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x6, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x5}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x9, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0xffff, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1c, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x2000003}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x6, 0x100, 0x1, 0x100000, 0x200005}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x10000007, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x7, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x4, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x7, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x2}, {0xf, 0x5, 0x80, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3fb, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0xa, 0x4cf, 0x766, 0x0, 0x7, 0x4}, {0x800005, 0xb0cc, 0x7, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x3, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x5, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x800005, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0xd, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x0, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x3, 0x2, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x1007, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f800040000000000000ff00", 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 4.854902004s ago: executing program 6 (id=3477): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x812}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, 0x0, &(0x7f0000000700)=r0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x0499', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/ep_name\x00', 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x40044102, 0x0) write(r3, &(0x7f00000003c0)='ep0\n', 0x4) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r6, &(0x7f0000000380)='./cgroup\x00', r6, &(0x7f00000003c0)='./mnt\x00', 0x2) syslog(0x3, &(0x7f0000000300)=""/121, 0x79) 4.839703447s ago: executing program 7 (id=3478): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, 0x0, 0x8000, &(0x7f00000000c0)={@align=0x157, {0x7, 0x0, 0x280, 0x9}}, 0x80000001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0xf}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000180)={0x1, 0x0, 0x0, r5, 0x14}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000240)={0x1, 0x0, {0x0}, {0xffffffffffffffff}, 0x5, 0x1}) write$P9_RGETLOCK(r2, &(0x7f0000000280)={0x30, 0x37, 0x2, {0x2, 0x10, 0x100000001, r6, 0x12, '/dev/snd/midiC#D#\x00'}}, 0x30) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 3.833993094s ago: executing program 5 (id=3479): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x4a, 0x0, {0x7, 0x1f, 0x5, 0xffffffffd3110f4f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000600)={0xa2, 0x8, r6, 0x0, 0x2, 0xfcd9, &(0x7f0000000400)="697ab143aeb2e35669aca2aea0cef279b0644270906e1af1e733c243ca19145cf450553fb5952288eb9ad7fd825fec0168fe4fdda9f8da7ad6fcadf42722e5a61a4f82714ce9cda6d39c7a50f9e7be936c4c3211cf6d882b7d8b32759169cd5daf7daeafb7a0d3250d3e3fdb97b5cfc6041d48ffac2f489dacbf28aad3c14fb87bf8a9af78aef1f1aefe8622e9605c7bef173b96e2ba8731c5f92ed95de177724d8a802ac59e63353ad2fd8890463e96d8241965b9d56c0c2cf7ec19d7006800"/206, 0x4}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) 3.222875781s ago: executing program 1 (id=3480): creat(0x0, 0xecf86c37d53049cc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x1f}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x19, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 3.184593037s ago: executing program 7 (id=3481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007d800474"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) 3.006916785s ago: executing program 5 (id=3482): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/dev/loop0', 0xa) 2.934861561s ago: executing program 1 (id=3483): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_fuse_handle_req(r0, &(0x7f0000020880)="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", 0x2000, &(0x7f0000023b40)={&(0x7f0000022880)={0x50, 0xfffffffffffffffe, 0x7, {0x7, 0x2d, 0x1, 0x100808, 0x1, 0x2, 0x3, 0x4, 0x0, 0x0, 0x1, 0x7}}, &(0x7f0000022900)={0x18, 0x0, 0x101, {0xffff}}, &(0x7f0000022940)={0x18, 0x0, 0x4, {0x7}}, &(0x7f0000022980)={0x18, 0xffffffffffffffda, 0x7fff, {0x5}}, &(0x7f00000229c0)={0x18, 0x0, 0x9, {0x5}}, &(0x7f0000022c00)={0x28, 0x0, 0x4f, {{0x7, 0xf6, 0x2}}}, &(0x7f0000022c40)={0x60, 0x0, 0x7fff, {{0x2, 0x6, 0x6, 0xfffffffffffffe8b, 0x6ff91044, 0x3, 0x5, 0xa}}}, &(0x7f0000022cc0)={0x18, 0x0, 0xffffffff, {0x7}}, &(0x7f0000022d00)=ANY=[], &(0x7f0000022d40)={0x20, 0x0, 0x0, {0x0, 0x1e}}, &(0x7f0000022dc0)={0x78, 0xffffffffffffffda, 0xfffffffffffffacd, {0x8537, 0x4, 0x0, {0x6, 0x7f, 0xd62, 0x7fffffffffffffff, 0x2, 0x8, 0x4, 0x7, 0x1fffe000, 0x685e41792b2b982e, 0x9, 0x0, 0xffffffffffffffff, 0x1, 0x8000}}}, &(0x7f0000022ec0)={0x90, 0x0, 0x7, {0x2, 0x2, 0x275, 0x81, 0x237, 0xfffffffb, {0x0, 0x7e, 0x3, 0x4, 0x9, 0xfffffffffffffffd, 0x3, 0x800, 0xfffffff8, 0x1000, 0x4, 0x0, 0x0, 0x100, 0x5}}}, &(0x7f0000022f80)=ANY=[@ANYBLOB="20010000000000000a00000000000000000000000000000001000080000000000c000000050000002f6465762f726164696f000000000000010000000000000008000000000000000a000000cad800002f6465762f66757365000000000000000000000000000000a5bdffffffffffff050000000800000066757365000000000100000000000000ff070000000000000a000000018000002fd7249a946465762f6675736500000000000000010000000000000000000000000000000300000005000000270a250000000000040000000000000003000000"], &(0x7f0000002480)=ANY=[@ANYBLOB="8802000000000000040000000000000006000000000000000200000000000000040000000000000000000000000000000300000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0d00000008000000000000000200000000000000010000000000000008000000a90000007b5e252123277d7d04000000000000000200000000000000ffffffff00000000010000000000008006000000fcffffff0400000000000000010000000000008000000000000000000300000000000000030000000000000008000000000000000500000007000000050000000040000005000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="08000000090000000000000001000000000000000600000000000000010000000000000028000000000000"], &(0x7f00000237c0)={0xa0, 0xfffffffffffffff5, 0xffffffffffffffff, {{0x1, 0x1, 0x1, 0x9, 0x4, 0x0, {0x0, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x4, 0x0, 0x2, 0xfff, 0x1000, 0xe, 0x0, 0x0, 0x2, 0x4}}, {0x0, 0x7}}}, &(0x7f0000023880)={0x20, 0x0, 0x7, {0x101, 0x4, 0xd4, 0x9}}, &(0x7f0000023a00)={0x130, 0x0, 0x1, {0x1ff, 0x3, 0x0, '\x00', {0x200, 0x7ff, 0x379b, 0x0, 0x0, 0x0, 0xc000, '\x00', 0x2, 0x96ff, 0x0, 0x3, {0x6, 0x9}, {0xe, 0xffffffff}, {0x4, 0x200}, {0x10000, 0x2}, 0xfffffffd, 0x5, 0xf96, 0x7}}}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x5, 0x31008003, 0xfffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x10000}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000e72000/0x2000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000007880)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8, @rand_addr=' \x01\x00', 0xffffffff}]}, &(0x7f0000000240)=0xfd3a) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) 2.870534672s ago: executing program 7 (id=3484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, 0x0, 0x0) 2.866989693s ago: executing program 6 (id=3485): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x8000000000002, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0xeeee0000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x8}}, 0x20) 2.590675984s ago: executing program 5 (id=3486): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001980)={'#! ', './nfsd/portlist', [{0x20, '\x00'}, {0x20, '\\'}], 0xa, "5e3a9979ba4f"}, 0x1d) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)="719bf5cdb30ceb609e6e83831b8db91467696f75c5ad85181ccc83add801b48288034216a4a9e3cbbb9a30bc7d2015e409b7e8690d49bea767ed256fa9924e91a4a340974732ce07b3af15f9a9fbb2b6cd6355a35dd52437c646cb14533416c7108810bd9ac0a300d65f980e93ea05c936b6a8951ae5357410d20935281b7aeca59ad320870da7007edf9ae2a3dc9e48232e7fbb99ee819d18eede982bb3b34da6edf3783b2cac79a095ae83775d89dbf1e3", 0xb2}, {&(0x7f00000019c0)="90b49a1f04cb594641b9ec76cc6b04b7dde02dfd5665b8ac8840cd7960d198dff948d16d4f0f4ef6055f7f1b90c96491984d350a336353f05fabfdaac959169262eb45d1f24506a4183fc4d4527b8d90f9e3d5401f5324c43a0f3084f5fdc654495c512cf2f0a0f6a881072381adc5eb94eda4911bdb79df3d2f729e1eaab3b4470952f966b5cf048ea971e059a5440dc5c31d009d6881a5557dc187e3d9e02e7912c279e2cce9e20a950be74c431cda5173af0f5348cd58b2bc3b0f83ccf2301a666c8650cd513adf0955ed4ddc066f725d2c58ebe97be65ab1b5a2c22fdf736308715db1202fecbfff2e84e81893acbb", 0xf1}], 0x3, &(0x7f0000000600)=[{0xb0, 0x108, 0x1, "2051cae614daf64bb13e634ca949a00cbb1a1bb333c60ed40f2c7346dab780476523c7116f31ce275864e2b41286dc2bc85935f535ee04c19d609c78528f2f05ca87279de3479f0600000000000000a2b1d0e8e31147528153d3308f1ee5ffa67df086392a0eb72607073564e48d7385eb37ef3e290439dd513e642b0423b03ac22c5403626a3fa0f496abc0dc4aa0d32c3cb7891ff6a249818b9fbf65ee"}, {0x70, 0x10f, 0x6, "0fe8937bed6a19326b84d2baaa09abb1d39d911f8eb5e3fefae93ea7170de57880939f7dd08f44999303b82a230747f3cd279a7818e9d753a53d251af2463d205d8bb964e6ddbe3c1b840e3728f96b5921adcb59e1d2618660b7da3b"}, {0x1008, 0x115, 0x1, "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"}, {0x98, 0x109, 0x4, "9682a3da61b7478da2bdf9c96e9522aafcb032f19442bf8532ea5000ffa394fcf74cc59aefb831b567e1da81a0f19cca677b336f95bf644da7393c32857d54d7e515d96bfc272dbb08bf40c276ea49a8197fe44cb9c3d5aec1e073ed317c2ff879b318432bbbb1c556cd4b46cbdafe02e2879dbf35bec665a4a14d65fcde02003a9dc0bd"}, {0xd8, 0xff, 0x1, "4ec4b016bc57a32474b0170dfa61db136e5751a75b38dc5152015a459a03899ade0af9cf8e0f54f58fa425ad4adac18d6c379b64c00d330c3d16bc35258df720b7b037a991dd4e18fdd226cfe568d56a019c393983ae9a2ff798830f55ba749856329d23f970976ced3260c5d6038d2f805f5ffa6e498a6e56dfdb0b4145e3e2c729daadad1cdbda66a2d0cafdfc17d630ac7c6c565dba4bd970bcaf789d6d131d5d253d53f261b2a062ea1c913796d4d69a8741cc10fb0485bd39f8a3abf15c76f583b2abd790d1"}, {0x80, 0x0, 0x9, "fb1d27319342066fbfaad486bb66dbd330059b53e0ecf9766378affee1e67dd4a917ab3c5fb28b71e84e353eebd922568e675ddf8ddaa996e2c7d4d47279739262b8b24b143c4c7a3d29c144d4fc011eb3d69e9e0af4bfb29ecece012be25983fa9c6fa39d55995c01d44f672592"}], 0x1318}}], 0x1, 0x4000020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{0x3}, {0xff, 0xc8, 0x9d}}}}, 0xa) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {&(0x7f0000000300)=""/126, 0x7e}, {0x0}, {0x0}, {&(0x7f0000000240)=""/134, 0x86}, {0x0}, {&(0x7f0000000380)=""/153, 0x99}], 0x7}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x40084146, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) 1.048572025s ago: executing program 7 (id=3487): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f0000003600)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0xcfa}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x101}, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x410503) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) msgget$private(0x0, 0x4d2) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x709, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r6, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x14}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000087cd000000000000000000f0850000450f0000009500000800000000"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x33}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 991.186911ms ago: executing program 5 (id=3488): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) 330.722294ms ago: executing program 1 (id=3489): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) 153.545038ms ago: executing program 6 (id=3490): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x7, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000140), 0x24, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000001140)='\x00', 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60010000100001000000000800000000ac1e0001000000000000000000000000fc01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x160}}, 0x0) sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @private=0xa010102}, 0x0, 0x0, 0x1, 0x3}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)="cd3951de6b4a7e999a4872381bc7e26aa5f0417ab1a08191ab958023c8cdb9a828c157ab0f820ea2f7ee99fd737329fab3948b3c5c5baa15d1cad7dc9b0ab1d348e73c80395493e5517602814f16e74455cd9fc4ccb274fdf0624262904de3b412882780e8adfa18f92682de6f1ee1d39151a02b17cb07cd1fbbcf73fc2754fd939c18fa176d8e5b03201996f61ddf5a09e565e60cca7fc4656f1cabb432d9dce58a378660122c8b0d001b3a07fce8e6d514617be5d70f3a11b0cdc917f4de88a8d84637c93243e1bc2606", 0xcb}, {&(0x7f0000000380)="d622204823319e48ca9819da22b78c44b6dea6266751c2e0c2d3bd21eab3d3309b51be2f17e6d4c35886a8b7ec924a991dc9d927214f1bb401adaf691d58d98bbc0479abc5420dba870ca94f73c9f9578beb71c79f2c2c9463594683dceffa20acc1bb0d75c6d35b78a270cb9a2bf5deaac3b8acd569a12810a60a3f2e22bdbad6db16c1f06d506029e83d7987197645eac80fd14c", 0x95}, {&(0x7f0000000440)="36abf709af3a489922704d354d12c620d9e542ffd4765a1b8a6f186f3ccaa1f5a6", 0x21}, {&(0x7f0000000480)}, {&(0x7f0000000580)="a5e15c94d4c2d0d4dbfc48ea84153e03a3ab98264b0b78bf4fd1ef47ddeae55c81b7a7ce4965", 0x26}], 0x5, &(0x7f0000000640)=[{0x60, 0x107, 0x3, "79b3b47d2ce95ad058f0ad1cf3c6579a3df27edf3852476ec17e6a61f2f143a710a0d8ac7a09fb6ff39dab239cc3585e3b57baae75f665028253eb1aacd8d36b8b551d80a0538b325a2c"}, {0x38, 0x103, 0x0, "feceb733095fef5f6215e0f9d88892c4e5a99084bfb69a8e2c8752521b56f8fb01ad6152f78965c0"}], 0x98}, 0x24000800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r4, 0x8010500d, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x1, 0x4f, 0x10, 0x9, 0x8, r0}) 0s ago: executing program 7 (id=3491): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFULA_CFG_MODE={0xa, 0x2, {0x2c, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffff800, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xf9, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4048884}, 0x24000011) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) clock_adjtime(0x0, &(0x7f0000000600)={0xf3f, 0x1, 0x2, 0x400, 0x5, 0x8, 0x200, 0x7, 0xb43c, 0x0, 0x5, 0x2, 0x7f, 0x6, 0x6a0, 0x4, 0x1, 0x80000001, 0xfffffffffffffff6, 0x5, 0x4, 0x1, 0x7ff, 0x2d77, 0x43c, 0x4832}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x2, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0xfff2, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44850) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x3, 0x8, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf7", 0x10}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0xb, 0x3}, {}, {0x4, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1010) kernel console output (not intermixed with test programs): ing remainder of the config [ 1231.163780][ T5721] usb 6-1: config 220 has no interface number 2 [ 1231.213195][ T5721] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1231.282066][ T5721] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1231.311501][ T5721] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1231.339595][ T5721] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1231.390302][ T5721] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1231.426026][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.463397][ T5721] usb 6-1: Product: syz [ 1231.496722][ T5721] usb 6-1: Manufacturer: syz [ 1231.520564][ T5721] usb 6-1: SerialNumber: syz [ 1231.936794][T17809] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.957456][T17809] binder: 17807:17809 ioctl 4018620d 200000004a80 returned -16 [ 1232.047976][ T30] audit: type=1400 audit(1786065673.194:6356): avc: denied { create } for pid=17781 comm="syz.5.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1232.183672][ T30] audit: type=1400 audit(1786065673.214:6357): avc: denied { mount } for pid=17781 comm="syz.5.2824" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1232.366227][T17804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1232.400558][T14025] usb 7-1: device descriptor read/8, error -71 [ 1232.438965][ T5721] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1232.449336][ T5721] uvcvideo 6-1:220.0: No valid video chain found. [ 1232.556148][ T5721] usb 6-1: selecting invalid altsetting 0 [ 1232.577008][ T5721] usb 6-1: selecting invalid altsetting 0 [ 1232.582779][ T5721] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1232.603825][ T5721] usb 6-1: USB disconnect, device number 21 [ 1232.604399][T17804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1232.630906][T17804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1232.668822][T17804] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1232.733790][T17804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1232.767267][ T30] audit: type=1400 audit(1786065673.954:6358): avc: denied { ioctl } for pid=17823 comm="syz.1.2832" path="socket:[74178]" dev="sockfs" ino=74178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1232.953318][ T30] audit: type=1400 audit(1786065674.124:6359): avc: denied { write } for pid=17811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.037524][ T30] audit: type=1400 audit(1786065674.224:6360): avc: denied { write } for pid=17830 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.059932][T16427] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1233.204957][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.226650][T16427] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 1233.240212][T16427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1233.377875][ T5721] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1233.427940][ T9949] Bluetooth: hci0: command 0x0c1a tx timeout [ 1233.441857][T16427] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.554529][T16427] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1233.586636][ T5721] usb 9-1: device descriptor read/64, error -71 [ 1233.609875][T16427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.645607][T16427] usb 2-1: config 0 descriptor?? [ 1233.855883][ T5721] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1233.878140][T17824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.886776][T17824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.022490][T17856] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 1234.044499][ T5721] usb 9-1: device descriptor read/64, error -71 [ 1234.051796][T17856] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 1234.182261][ T5721] usb usb9-port1: attempt power cycle [ 1234.193675][T16427] CPU: 1 UID: 0 PID: 16427 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.193704][T16427] Tainted: [L]=SOFTLOCKUP [ 1234.193711][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1234.193725][T16427] Workqueue: usb_hub_wq hub_event [ 1234.193749][T16427] Call Trace: [ 1234.193756][T16427] [ 1234.193764][T16427] dump_stack_lvl+0x100/0x190 [ 1234.193791][T16427] hid_parser_reserved.cold+0xa/0xf [ 1234.193816][T16427] hid_open_report+0x49b/0x810 [ 1234.193840][T16427] ? __pfx_hid_open_report+0x10/0x10 [ 1234.193864][T16427] ? lg_probe+0x1a3/0x7e0 [ 1234.193895][T16427] lg_probe+0x246/0x7e0 [ 1234.193919][T16427] ? __pfx_lg_probe+0x10/0x10 [ 1234.193938][T16427] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1234.193964][T16427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1234.193990][T16427] ? mark_held_locks+0x40/0x70 [ 1234.194012][T16427] ? hid_match_id+0x258/0x2e0 [ 1234.194036][T16427] ? __pfx_lg_probe+0x10/0x10 [ 1234.194058][T16427] hid_device_probe+0x50e/0x800 [ 1234.194080][T16427] ? __pfx_hid_device_probe+0x10/0x10 [ 1234.194101][T16427] really_probe+0x241/0xa60 [ 1234.194126][T16427] __driver_probe_device+0x20e/0x450 [ 1234.194146][T16427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1234.194168][T16427] driver_probe_device+0x4a/0x140 [ 1234.194189][T16427] __device_attach_driver+0x1df/0x320 [ 1234.194212][T16427] ? __pfx___device_attach_driver+0x10/0x10 [ 1234.194232][T16427] bus_for_each_drv+0x159/0x1e0 [ 1234.194261][T16427] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1234.194289][T16427] ? lockdep_hardirqs_on+0x78/0x100 [ 1234.194309][T16427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1234.194342][T16427] __device_attach+0x1e4/0x4d0 [ 1234.194363][T16427] ? __pfx___device_attach+0x10/0x10 [ 1234.194385][T16427] ? do_raw_spin_unlock+0x145/0x1e0 [ 1234.194418][T16427] device_initial_probe+0xaf/0xd0 [ 1234.194437][T16427] bus_probe_device+0x64/0x160 [ 1234.194465][T16427] device_add+0x121d/0x1970 [ 1234.194488][T16427] ? __pfx_device_add+0x10/0x10 [ 1234.194513][T16427] ? debugfs_create_file_full+0x41/0x60 [ 1234.194546][T16427] hid_add_device+0x2bf/0x440 [ 1234.194573][T16427] ? mutex_init_lockdep+0xf1/0x120 [ 1234.194599][T16427] usbhid_probe+0xa64/0x10b0 [ 1234.194628][T16427] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1234.194661][T16427] ? __pfx_usbhid_probe+0x10/0x10 [ 1234.194687][T16427] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1234.194717][T16427] ? mark_held_locks+0x40/0x70 [ 1234.194741][T16427] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1234.194771][T16427] usb_probe_interface+0x303/0x8f0 [ 1234.194798][T16427] ? __pfx_usb_probe_interface+0x10/0x10 [ 1234.194823][T16427] really_probe+0x241/0xa60 [ 1234.194846][T16427] __driver_probe_device+0x20e/0x450 [ 1234.194865][T16427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1234.194888][T16427] driver_probe_device+0x4a/0x140 [ 1234.194909][T16427] __device_attach_driver+0x1df/0x320 [ 1234.194931][T16427] ? __pfx___device_attach_driver+0x10/0x10 [ 1234.194949][T16427] bus_for_each_drv+0x159/0x1e0 [ 1234.194976][T16427] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1234.195002][T16427] ? lockdep_hardirqs_on+0x78/0x100 [ 1234.195020][T16427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1234.195051][T16427] __device_attach+0x1e4/0x4d0 [ 1234.195071][T16427] ? __pfx___device_attach+0x10/0x10 [ 1234.195093][T16427] ? do_raw_spin_unlock+0x145/0x1e0 [ 1234.195124][T16427] device_initial_probe+0xaf/0xd0 [ 1234.195145][T16427] bus_probe_device+0x64/0x160 [ 1234.195172][T16427] device_add+0x121d/0x1970 [ 1234.195198][T16427] ? __pfx_device_add+0x10/0x10 [ 1234.195220][T16427] ? mark_held_locks+0x40/0x70 [ 1234.195250][T16427] usb_set_configuration+0xd97/0x1c60 [ 1234.195286][T16427] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1234.195311][T16427] usb_generic_driver_probe+0xa1/0xe0 [ 1234.195338][T16427] usb_probe_device+0xef/0x400 [ 1234.195356][T16427] ? __pfx_usb_probe_device+0x10/0x10 [ 1234.195378][T16427] really_probe+0x241/0xa60 [ 1234.195400][T16427] __driver_probe_device+0x20e/0x450 [ 1234.195418][T16427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1234.195438][T16427] driver_probe_device+0x4a/0x140 [ 1234.195457][T16427] __device_attach_driver+0x1df/0x320 [ 1234.195476][T16427] ? __pfx___device_attach_driver+0x10/0x10 [ 1234.195490][T16427] bus_for_each_drv+0x159/0x1e0 [ 1234.195510][T16427] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1234.195532][T16427] ? lockdep_hardirqs_on+0x78/0x100 [ 1234.195547][T16427] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1234.195573][T16427] __device_attach+0x1e4/0x4d0 [ 1234.195593][T16427] ? __pfx___device_attach+0x10/0x10 [ 1234.195613][T16427] ? do_raw_spin_unlock+0x145/0x1e0 [ 1234.195640][T16427] device_initial_probe+0xaf/0xd0 [ 1234.195671][T16427] bus_probe_device+0x64/0x160 [ 1234.195703][T16427] device_add+0x121d/0x1970 [ 1234.195730][T16427] ? __pfx_device_add+0x10/0x10 [ 1234.195750][T16427] ? usb_detect_static_quirks+0x335/0x3e0 [ 1234.195789][T16427] usb_new_device.cold+0x685/0x115c [ 1234.195816][T16427] ? _mutex_trylock_nest_lock+0x241/0x310 [ 1234.195835][T16427] ? do_raw_spin_lock+0x128/0x260 [ 1234.195860][T16427] ? __pfx_usb_new_device+0x10/0x10 [ 1234.195880][T16427] ? mark_held_locks+0x40/0x70 [ 1234.195900][T16427] hub_event+0x30a3/0x4a60 [ 1234.195938][T16427] ? __pfx_hub_event+0x10/0x10 [ 1234.195955][T16427] ? debug_object_deactivate+0x2e4/0x3b0 [ 1234.195986][T16427] ? rcu_is_watching+0x12/0xc0 [ 1234.196019][T16427] process_one_work+0xa23/0x1940 [ 1234.196053][T16427] ? __pfx_process_one_work+0x10/0x10 [ 1234.196083][T16427] ? __pfx_hub_event+0x10/0x10 [ 1234.196105][T16427] worker_thread+0x5ef/0xe50 [ 1234.196130][T16427] ? __pfx_worker_thread+0x10/0x10 [ 1234.196149][T16427] ? kthread+0x13a/0x450 [ 1234.196164][T16427] ? __pfx_worker_thread+0x10/0x10 [ 1234.196181][T16427] kthread+0x370/0x450 [ 1234.196196][T16427] ? __pfx_kthread+0x10/0x10 [ 1234.196215][T16427] ret_from_fork+0x72b/0xd50 [ 1234.196242][T16427] ? __pfx_ret_from_fork+0x10/0x10 [ 1234.196267][T16427] ? __switch_to+0x800/0x10f0 [ 1234.196285][T16427] ? __pfx_kthread+0x10/0x10 [ 1234.196303][T16427] ret_from_fork_asm+0x1a/0x30 [ 1234.196342][T16427] [ 1234.775378][ T9949] Bluetooth: hci2: command 0x0406 tx timeout [ 1234.781398][ T9949] Bluetooth: hci5: command 0x0406 tx timeout [ 1234.787468][ T9949] Bluetooth: hci4: command 0x0406 tx timeout [ 1234.795391][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1234.989983][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1234.989999][ T30] audit: type=1326 audit(1786065676.174:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.023420][ T30] audit: type=1326 audit(1786065676.174:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.050721][ T30] audit: type=1326 audit(1786065676.174:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.078855][ T30] audit: type=1326 audit(1786065676.174:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.106954][ T30] audit: type=1326 audit(1786065676.214:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.133520][ T30] audit: type=1326 audit(1786065676.214:6369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.160223][ T30] audit: type=1326 audit(1786065676.214:6370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.187428][ T30] audit: type=1326 audit(1786065676.214:6371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.213970][ T30] audit: type=1326 audit(1786065676.214:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.240645][ T30] audit: type=1326 audit(1786065676.234:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17823 comm="syz.1.2832" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f636679e0d9 code=0x7ffc0000 [ 1235.324714][ T5721] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1235.345014][ T5721] usb 9-1: device descriptor read/8, error -71 [ 1235.355991][T16427] logitech 0003:046D:C29C.0024: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 1236.145977][ T5721] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1236.359582][ T5721] usb 9-1: device descriptor read/8, error -71 [ 1236.486726][ T5721] usb usb9-port1: unable to enumerate USB device [ 1237.243710][T17880] binder: BINDER_SET_CONTEXT_MGR already set [ 1237.266415][T17880] binder: 17873:17880 ioctl 4018620d 200000004a80 returned -16 [ 1237.292199][T16427] logitech 0003:046D:C29C.0024: no inputs found [ 1237.313644][T17881] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1237.428751][T16427] usb 2-1: USB disconnect, device number 50 [ 1238.603262][T17893] comedi comedi3: comedi_config --init_data is deprecated [ 1239.191010][T17893] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2847'. [ 1240.387708][T17900] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2849'. [ 1241.205028][T17922] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2852'. [ 1241.459955][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 1241.459982][ T30] audit: type=1800 audit(1786065682.644:6593): pid=17930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2855" name="idProduct" dev="configfs" ino=74886 res=0 errno=0 [ 1241.568084][ T30] audit: type=1800 audit(1786065682.704:6594): pid=17930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2855" name="process_ump" dev="configfs" ino=74893 res=0 errno=0 [ 1241.865168][ T30] audit: type=1800 audit(1786065682.704:6595): pid=17930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2855" name="ep_name" dev="configfs" ino=74894 res=0 errno=0 [ 1242.005240][T17937] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.011751][ T30] audit: type=1400 audit(1786065683.184:6596): avc: denied { create } for pid=17936 comm="syz.6.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1242.049416][T17937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.085956][ T30] audit: type=1400 audit(1786065683.184:6597): avc: denied { write } for pid=17936 comm="syz.6.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1243.095379][T17951] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1243.161836][ T187] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1243.189698][T17952] binder: BINDER_SET_CONTEXT_MGR already set [ 1243.218724][T17952] binder: 17949:17952 ioctl 4018620d 200000004a80 returned -16 [ 1243.371050][ T187] usb 7-1: Using ep0 maxpacket: 32 [ 1243.630887][ T187] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1243.642366][ T187] usb 7-1: config 0 has no interface number 0 [ 1243.697248][ T187] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1243.711327][ T187] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1243.738013][ T187] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1243.761956][ T187] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.797656][ T187] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1243.808295][ T187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.828035][ T187] usb 7-1: Product: syz [ 1243.840510][ T187] usb 7-1: Manufacturer: syz [ 1243.853741][ T187] usb 7-1: SerialNumber: syz [ 1243.880848][ T187] usb 7-1: config 0 descriptor?? [ 1243.907594][T17946] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1243.949541][ T187] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input62 [ 1244.012552][ T4947] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 1244.020474][ T30] audit: type=1400 audit(1786065685.194:6598): avc: denied { read } for pid=4947 comm="acpid" name="mouse1" dev="devtmpfs" ino=4071 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1244.136977][ T30] audit: type=1400 audit(1786065685.194:6599): avc: denied { open } for pid=4947 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4071 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1244.217623][ C1] bcm5974 7-1:0.119: trackpad urb failed: -1 [ 1244.616197][ T30] audit: type=1400 audit(1786065685.274:6600): avc: denied { ioctl } for pid=4947 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4071 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1245.070698][T17964] macvlan2: entered allmulticast mode [ 1245.079450][T17964] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1245.276523][ T5609] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1245.491996][T17974] jffs2: notice: (17974) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1245.574358][ T30] audit: type=1400 audit(1786065686.754:6601): avc: denied { bind } for pid=17973 comm="syz.7.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1245.652686][ T30] audit: type=1400 audit(1786065686.784:6602): avc: denied { listen } for pid=17973 comm="syz.7.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1245.784739][T16427] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1245.914757][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.962078][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.008670][T17983] macvlan2: entered allmulticast mode [ 1246.016238][T17983] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1246.166527][T16427] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1246.264817][T16427] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.320640][T16427] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.356312][ T5609] Bluetooth: hci0: unexpected event 0x18 length: 247 > 23 [ 1246.526057][T16427] usb 9-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40 [ 1246.592963][T16427] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.620427][T16427] usb 9-1: Product: syz [ 1246.634355][T16427] usb 9-1: Manufacturer: syz [ 1246.664019][T16427] usb 9-1: SerialNumber: syz [ 1246.728101][T17986] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2869'. [ 1246.839359][T17990] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2868'. [ 1247.254855][T16427] usb 9-1: unit 255 not found! [ 1247.262077][ T187] usb 7-1: USB disconnect, device number 7 [ 1247.328414][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2870'. [ 1247.375223][T17995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1247.433740][T16427] usb 9-1: USB disconnect, device number 8 [ 1248.292422][ T5609] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1248.634935][T18007] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1249.786905][T18031] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2882'. [ 1249.902517][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1249.902540][ T30] audit: type=1800 audit(1786065691.084:6609): pid=18037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2884" name="idProduct" dev="configfs" ino=75232 res=0 errno=0 [ 1249.992026][ T30] audit: type=1800 audit(1786065691.164:6610): pid=18037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2884" name="process_ump" dev="configfs" ino=75239 res=0 errno=0 [ 1250.145655][ T30] audit: type=1800 audit(1786065691.164:6611): pid=18037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2884" name="ep_name" dev="configfs" ino=75240 res=0 errno=0 [ 1251.598579][T18062] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2891'. [ 1252.460745][ T187] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1252.633140][ T30] audit: type=1400 audit(1786065693.814:6612): avc: denied { write } for pid=18050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1252.756056][ T30] audit: type=1400 audit(1786065693.944:6613): avc: denied { write } for pid=18085 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1253.011234][ T187] usb 2-1: device descriptor read/64, error -71 [ 1253.134495][T18092] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2897'. [ 1253.422859][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2899'. [ 1253.553542][ T187] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1253.982908][ T187] usb 2-1: device descriptor read/64, error -71 [ 1254.201124][ T187] usb usb2-port1: attempt power cycle [ 1254.657535][ T187] usb 2-1: new low-speed USB device number 53 using dummy_hcd [ 1254.956157][T18113] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2906'. [ 1255.230327][ T187] usb 2-1: device descriptor read/8, error -71 [ 1255.692430][ T30] audit: type=1400 audit(1786065696.874:6614): avc: denied { read } for pid=5257 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1256.156629][T18141] binder: BINDER_SET_CONTEXT_MGR already set [ 1256.162631][T18141] binder: 18137:18141 ioctl 4018620d 200000004a80 returned -16 [ 1256.235880][T18140] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2913'. [ 1256.955523][T18151] macvlan2: entered allmulticast mode [ 1256.962412][T18151] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1257.136999][ T9949] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1258.038343][T18158] macvlan2: entered allmulticast mode [ 1258.115299][T18158] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1258.513165][ T9949] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1259.371059][ T30] audit: type=1400 audit(1786065700.514:6615): avc: denied { bind } for pid=18161 comm="syz.8.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1260.014033][ T30] audit: type=1400 audit(1786065700.514:6616): avc: denied { name_bind } for pid=18161 comm="syz.8.2919" src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1260.038104][ T30] audit: type=1400 audit(1786065700.514:6617): avc: denied { node_bind } for pid=18161 comm="syz.8.2919" saddr=172.20.20.187 src=12816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1260.040046][T18170] jffs2: notice: (18170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 1260.062819][ T30] audit: type=1400 audit(1786065700.554:6618): avc: denied { listen } for pid=18161 comm="syz.8.2919" laddr=172.20.20.187 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1260.232891][T18176] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1260.305519][T18170] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2921'. [ 1260.464168][ T30] audit: type=1400 audit(1786065701.624:6619): avc: denied { write } for pid=18167 comm="syz.7.2921" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1260.864091][ T30] audit: type=1400 audit(1786065702.014:6620): avc: denied { ioctl } for pid=18192 comm="syz.1.2929" path="/595/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1260.912378][T18191] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1260.996291][T18193] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(167772164.25034752.20447232), cmd(9) [ 1261.626585][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1261.736395][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1261.959188][ T9] usb 2-1: device descriptor read/64, error -32 [ 1262.289924][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1262.955403][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1263.620604][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1263.628704][ T9] usb 2-1: config 0 has no interface number 0 [ 1263.858181][T18206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1263.894604][T18206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1263.925958][T18206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1263.956052][T18206] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1263.981342][T18206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1264.050527][T18209] syzkaller0: entered promiscuous mode [ 1264.084621][T18209] syzkaller0: entered allmulticast mode [ 1264.411452][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 1265.007310][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1265.016342][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.034608][ T9] usb 2-1: config 0 descriptor?? [ 1265.080264][ T9] usb 2-1: can't set config #0, error -71 [ 1265.087788][ T9] usb 2-1: USB disconnect, device number 56 [ 1265.133409][T18216] comedi comedi3: comedi_config --init_data is deprecated [ 1265.481145][T18222] fuse: Bad value for 'fd' [ 1265.883649][T18216] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2935'. [ 1265.957097][ T30] audit: type=1400 audit(1786065707.104:6621): avc: denied { mount } for pid=18224 comm="syz.6.2938" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1265.979234][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 1266.028559][ T30] audit: type=1400 audit(1786065707.164:6622): avc: denied { name_connect } for pid=18224 comm="syz.6.2938" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1266.071289][ T30] audit: type=1400 audit(1786065707.214:6623): avc: denied { unmount } for pid=15860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1266.093188][ T5609] Bluetooth: hci3: command 0x0405 tx timeout [ 1266.099239][T17031] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.105948][T12993] Bluetooth: hci4: command 0x0406 tx timeout [ 1266.113690][T12993] Bluetooth: hci1: command 0xfc11 tx timeout [ 1266.152217][T18162] Set syz1 is full, maxelem 65536 reached [ 1266.171209][ T9949] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1266.889905][T18239] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2942'. [ 1267.041480][T18245] syzkaller0: entered promiscuous mode [ 1267.046971][T18245] syzkaller0: entered allmulticast mode [ 1267.648137][ T30] audit: type=1400 audit(1786065708.824:6624): avc: denied { read } for pid=18256 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1267.686715][T17030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1267.705554][T17030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1267.722549][T17030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1267.737747][T17030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1267.768532][T17030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1267.804240][ T30] audit: type=1400 audit(1786065708.824:6625): avc: denied { open } for pid=18256 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1269.769615][ T30] audit: type=1400 audit(1786065708.934:6626): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1269.954657][T17030] Bluetooth: hci1: command tx timeout [ 1270.353945][ T30] audit: type=1800 audit(1786065711.244:6627): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2952" name="idProduct" dev="configfs" ino=76659 res=0 errno=0 [ 1270.834465][ T30] audit: type=1800 audit(1786065711.694:6628): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2952" name="process_ump" dev="configfs" ino=76661 res=0 errno=0 [ 1270.946688][ T30] audit: type=1800 audit(1786065711.694:6629): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2952" name="ep_name" dev="configfs" ino=76662 res=0 errno=0 [ 1271.223806][ T30] audit: type=1400 audit(1786065712.404:6630): avc: denied { create } for pid=18284 comm="syz.6.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1271.570644][T18290] Invalid source name [ 1271.574698][T18290] UBIFS error (pid: 18290): cannot open "ubifs", error -22 [ 1271.882789][ T30] audit: type=1400 audit(1786065712.744:6631): avc: denied { create } for pid=18284 comm="syz.6.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1271.963322][ T9] IPVS: starting estimator thread 0... [ 1271.979473][ T30] audit: type=1400 audit(1786065712.744:6632): avc: denied { getopt } for pid=18284 comm="syz.6.2955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1272.005331][T17030] Bluetooth: hci1: command tx timeout [ 1272.114829][T18292] IPVS: using max 77 ests per chain, 184800 per kthread [ 1272.419068][ T6824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.023408][ T6824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.044952][T18304] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2959'. [ 1273.703189][ T6824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1273.722590][ T6824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.759906][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.773167][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.795456][T18256] bridge_slave_0: entered allmulticast mode [ 1273.802552][T18256] bridge_slave_0: entered promiscuous mode [ 1273.813963][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.821345][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.829407][T18256] bridge_slave_1: entered allmulticast mode [ 1273.836341][T18256] bridge_slave_1: entered promiscuous mode [ 1273.859199][T18256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.871020][T18256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.917739][T18256] team0: Port device team_slave_0 added [ 1273.932207][T18256] team0: Port device team_slave_1 added [ 1273.968218][T18256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.975196][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.001154][T18256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.075514][T17030] Bluetooth: hci1: command tx timeout [ 1274.164569][ T6824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.176613][ T6824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.190232][T18256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.197185][T18256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.223120][T18256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.655138][T17030] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1274.780799][ T6824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.791366][ T6824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.831405][T18256] hsr_slave_0: entered promiscuous mode [ 1274.853099][T18256] hsr_slave_1: entered promiscuous mode [ 1274.868035][T18256] debugfs: 'hsr0' already exists in 'hsr' [ 1274.882953][T18256] Cannot create hsr debugfs directory [ 1275.339885][T18336] fuse: Bad value for 'fd' [ 1276.183135][T18232] Bluetooth: hci1: command tx timeout [ 1277.500811][ T30] audit: type=1400 audit(1786065718.654:6633): avc: denied { write } for pid=18346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.584388][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.606791][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.619006][ T6824] bond0 (unregistering): Released all slaves [ 1277.631107][ T6824] bond1 (unregistering): Released all slaves [ 1277.648043][ T30] audit: type=1800 audit(1786065718.824:6634): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2974" name="idProduct" dev="configfs" ino=78181 res=0 errno=0 [ 1277.717791][ T30] audit: type=1400 audit(1786065718.874:6635): avc: denied { write } for pid=18373 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.768199][ T30] audit: type=1800 audit(1786065718.924:6636): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2974" name="process_ump" dev="configfs" ino=78184 res=0 errno=0 [ 1277.884574][ T30] audit: type=1800 audit(1786065718.974:6637): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2974" name="ep_name" dev="configfs" ino=78185 res=0 errno=0 [ 1278.225229][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1278.549338][T18232] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1281.220614][T18406] comedi comedi3: comedi_config --init_data is deprecated [ 1281.440863][T18232] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 1281.459174][T18408] input: syz0 as /devices/virtual/input/input63 [ 1281.984828][ T30] audit: type=1400 audit(1786065722.844:6638): avc: denied { write } for pid=18392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.008174][ T6824] tipc: Left network mode [ 1282.111972][ T30] audit: type=1400 audit(1786065722.904:6639): avc: denied { write } for pid=18422 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.175404][ T5721] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1282.315713][ T30] audit: type=1400 audit(1786065723.074:6640): avc: denied { mount } for pid=18418 comm="syz.6.2983" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1282.373965][ T30] audit: type=1400 audit(1786065723.074:6641): avc: denied { remount } for pid=18418 comm="syz.6.2983" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1282.455007][ T5721] usb 7-1: Using ep0 maxpacket: 8 [ 1282.483633][ T5721] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1282.503284][ T5721] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.536194][ T5721] usb 7-1: Product: syz [ 1282.544480][ T5721] usb 7-1: Manufacturer: syz [ 1282.570065][ T5721] usb 7-1: SerialNumber: syz [ 1282.612593][ T5721] usb 7-1: config 0 descriptor?? [ 1282.634049][ T5721] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1282.646001][ T30] audit: type=1400 audit(1786065723.814:6642): avc: denied { write } for pid=18424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1282.698727][ T5721] pctv452e: pctv452e_power_ctrl: 1 [ 1282.698727][ T5721] [ 1282.709713][ T5721] usb 7-1: selecting invalid altsetting 3 [ 1282.715551][ T30] audit: type=1800 audit(1786065723.874:6643): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2986" name="idProduct" dev="configfs" ino=77628 res=0 errno=0 [ 1282.737338][ T5721] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1282.737338][ T5721] [ 1283.763686][ T5721] dvb-usb: bulk message failed: -22 (5/0) [ 1283.774103][ T30] audit: type=1800 audit(1786065723.934:6644): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2986" name="process_ump" dev="configfs" ino=77631 res=0 errno=0 [ 1283.796610][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1283.820993][ T30] audit: type=1800 audit(1786065723.934:6645): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2986" name="ep_name" dev="configfs" ino=77632 res=0 errno=0 [ 1283.869471][ T5721] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1283.934528][ T5721] usb 7-1: media controller created [ 1283.949958][ T5721] dvb-usb: bulk message failed: -22 (8/0) [ 1283.958347][ T30] audit: type=1400 audit(1786065724.194:6646): avc: denied { write } for pid=18418 comm="syz.6.2983" laddr=::ffff:172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1284.023499][ T5721] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1284.080031][ T5721] dvb-usb: MAC address reading failed. [ 1284.090223][ T30] audit: type=1400 audit(1786065724.904:6647): avc: denied { unmount } for pid=15860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1284.127717][ T6824] hsr_slave_0: left promiscuous mode [ 1284.155681][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.183495][ T6824] hsr_slave_1: left promiscuous mode [ 1284.197098][ T30] audit: type=1400 audit(1786065724.944:6648): avc: denied { write } for pid=18446 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1284.230966][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1284.238376][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.302583][ T30] audit: type=1400 audit(1786065725.414:6649): avc: denied { ioctl } for pid=18449 comm="syz.8.2989" path="socket:[78311]" dev="sockfs" ino=78311 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1284.328426][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1284.357556][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1284.406432][ T5721] DVB: Unable to find symbol stb0899_attach() [ 1284.412953][ T5721] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1284.515088][ T5721] rc_core: IR keymap rc-tt-1500 not found [ 1284.521048][ T5721] Registered IR keymap rc-empty [ 1284.563042][ T5721] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 1284.690251][ T5721] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input64 [ 1284.884854][ T5721] dvb-usb: schedule remote query interval to 100 msecs. [ 1284.909488][ T5721] pctv452e: pctv452e_power_ctrl: 0 [ 1284.909488][ T5721] [ 1284.919087][ T6824] veth1_macvtap: left promiscuous mode [ 1284.924569][ T6824] veth0_macvtap: left promiscuous mode [ 1284.931404][ T6824] veth1_vlan: left promiscuous mode [ 1284.936618][ T6824] veth0_vlan: left promiscuous mode [ 1284.983264][ T5721] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1285.007955][ T5721] usb 7-1: USB disconnect, device number 8 [ 1285.220193][ T30] audit: type=1400 audit(1786065726.384:6650): avc: denied { write } for pid=18454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.302967][ T5721] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1285.554795][ T30] audit: type=1400 audit(1786065726.664:6651): avc: denied { write } for pid=18480 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1285.653606][T18232] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1286.634864][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 1286.669181][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 1287.418007][T18476] macvlan2: entered allmulticast mode [ 1287.423585][T18476] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1288.418682][T18256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1288.526565][T18256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1288.555275][T18256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1288.719593][T18527] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2996'. [ 1288.731968][T18256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1289.302992][T18256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1289.370667][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1289.370683][ T30] audit: type=1400 audit(1786065730.504:6656): avc: denied { write } for pid=18508 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1289.489906][T18256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1289.499312][T18256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1289.604924][ T30] audit: type=1400 audit(1786065730.734:6657): avc: denied { write } for pid=18535 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1290.366087][T18256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1290.609559][T18256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.693552][T18256] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.014498][T18554] comedi comedi3: comedi_config --init_data is deprecated [ 1291.117957][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.125060][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.307677][ T6824] IPVS: stop unused estimator thread 0... [ 1291.530033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.537113][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.561143][T18256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1291.571719][T18256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1291.805886][ T30] audit: type=1400 audit(1786065732.994:6658): avc: denied { write } for pid=18546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.225725][T18232] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1293.225757][T17030] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1293.368994][ T30] audit: type=1400 audit(1786065734.544:6659): avc: denied { write } for pid=18573 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.777846][T17030] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1294.658668][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.413811][T18617] hfs: can't find a HFS filesystem on dev nullb0 [ 1297.469235][ T30] audit: type=1400 audit(1786065738.534:6660): avc: denied { write } for pid=18609 comm="syz.8.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1297.659970][T18256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.734792][T18256] veth0_vlan: entered promiscuous mode [ 1297.760132][T18256] veth1_vlan: entered promiscuous mode [ 1297.786630][T18256] veth0_macvtap: entered promiscuous mode [ 1297.819973][T18256] veth1_macvtap: entered promiscuous mode [ 1297.849870][T18256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.863933][T18256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.994137][T11976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.054362][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.068281][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.076780][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1298.091835][T15038] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.093046][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.108217][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.117136][ T6824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.510747][ T30] audit: type=1400 audit(1786065739.574:6661): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/root/syzkaller.4YBXNT/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1298.561066][ T30] audit: type=1400 audit(1786065739.694:6662): avc: denied { mount } for pid=18256 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1298.644585][ T30] audit: type=1400 audit(1786065739.804:6663): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/root/syzkaller.4YBXNT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1298.672019][ T30] audit: type=1400 audit(1786065739.804:6664): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/root/syzkaller.4YBXNT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=79070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1298.701607][ T30] audit: type=1400 audit(1786065739.804:6665): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1299.058692][ T30] audit: type=1400 audit(1786065739.804:6666): avc: denied { mount } for pid=18256 comm="syz-executor" name="/" dev="gadgetfs" ino=7580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1299.812149][T18232] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1299.866561][ T30] audit: type=1400 audit(1786065739.864:6667): avc: denied { mount } for pid=18256 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1299.907605][ T30] audit: type=1400 audit(1786065739.864:6668): avc: denied { mounton } for pid=18256 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1301.673206][T18664] Invalid source name [ 1301.677282][T18664] UBIFS error (pid: 18664): cannot open "ubifs", error -22 [ 1301.847423][T18666] Invalid source name [ 1301.858630][T18666] UBIFS error (pid: 18666): cannot open "ubifs", error -22 [ 1302.067386][T16653] IPVS: starting estimator thread 0... [ 1302.099853][ T187] IPVS: starting estimator thread 0... [ 1302.424980][T18668] IPVS: using max 44 ests per chain, 105600 per kthread [ 1302.448507][T18669] IPVS: using max 48 ests per chain, 115200 per kthread [ 1302.589610][T17030] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1304.314518][T18699] macvlan2: entered allmulticast mode [ 1304.349736][T18699] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1304.463915][T17030] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1304.984132][T18710] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1305.253858][ T30] audit: type=1400 audit(1786065746.234:6669): avc: denied { create } for pid=18707 comm="syz.8.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1305.687711][ T30] audit: type=1400 audit(1786065746.854:6670): avc: denied { write } for pid=18707 comm="syz.8.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1305.915884][ T30] audit: type=1400 audit(1786065747.104:6671): avc: denied { map } for pid=18707 comm="syz.8.3034" path="socket:[80405]" dev="sockfs" ino=80405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1306.459201][T17030] Bluetooth: hci1: failed to read key size for handle 200 [ 1307.184737][T18725] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1307.654767][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3040'. [ 1307.664829][T18735] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3040'. [ 1307.756522][T17030] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1308.429351][T18729] bond1: option xmit_hash_policy: invalid value (6) [ 1308.495848][T18729] bond1 (unregistering): Released all slaves [ 1312.232159][T17030] Bluetooth: hci2: command 0x0406 tx timeout [ 1312.239346][T18748] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1312.748122][T18755] comedi comedi3: comedi_config --init_data is deprecated [ 1313.033482][T18748] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1313.040203][T18748] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1313.052094][ T30] audit: type=1800 audit(1786065754.234:6672): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3045" name="idProduct" dev="configfs" ino=80436 res=0 errno=0 [ 1313.073827][T18748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1313.434324][ T30] audit: type=1800 audit(1786065754.234:6673): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3045" name="process_ump" dev="configfs" ino=80439 res=0 errno=0 [ 1313.456173][ T30] audit: type=1800 audit(1786065754.234:6674): pid=18757 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3045" name="ep_name" dev="configfs" ino=80440 res=0 errno=0 [ 1313.490341][T18755] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3046'. [ 1313.598700][T18748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1313.622903][T18748] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1314.324861][T17030] Bluetooth: hci4: command 0x0406 tx timeout [ 1314.488558][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3050'. [ 1315.015057][T17030] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1315.156039][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1315.162589][T12993] Bluetooth: hci5: command 0x0406 tx timeout [ 1315.360442][T18779] macvlan2: entered allmulticast mode [ 1315.366987][T18779] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1315.531398][T17030] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1315.624621][T16653] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1315.663912][ T30] audit: type=1800 audit(1786065756.834:6675): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3057" name="idProduct" dev="configfs" ino=79587 res=0 errno=0 [ 1315.852502][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1315.858692][ T30] audit: type=1800 audit(1786065756.844:6676): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3057" name="process_ump" dev="configfs" ino=79590 res=0 errno=0 [ 1315.883719][ T30] audit: type=1800 audit(1786065756.844:6677): pid=18790 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3057" name="ep_name" dev="configfs" ino=79594 res=0 errno=0 [ 1316.127619][T16653] usb 9-1: Using ep0 maxpacket: 8 [ 1317.382850][T16653] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1317.578875][T16653] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1317.591653][T16653] usb 9-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1317.604777][T16653] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1317.618872][T16653] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1317.629171][T16653] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.958937][T16653] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1317.968075][T16653] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.126340][T18802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1319.279044][T18807] Cannot find set identified by id 0 to match [ 1319.289021][T16653] usb 9-1: usb_control_msg returned -71 [ 1319.305681][T16653] usbtmc 9-1:16.0: can't read capabilities [ 1319.348902][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'. [ 1319.381755][T16653] usb 9-1: USB disconnect, device number 9 [ 1319.887119][T18821] Invalid source name [ 1319.891508][T18821] UBIFS error (pid: 18821): cannot open "ubifs", error -22 [ 1319.977790][ T30] audit: type=1400 audit(1786065761.164:6678): avc: denied { write } for pid=18822 comm="syz.7.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1320.024238][T18815] macvlan2: entered allmulticast mode [ 1320.030167][T18815] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1320.071784][T17030] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1320.170480][ T30] audit: type=1800 audit(1786065761.344:6679): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3070" name="idProduct" dev="configfs" ino=79727 res=0 errno=0 [ 1321.336174][ T30] audit: type=1800 audit(1786065761.344:6680): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3070" name="process_ump" dev="configfs" ino=79730 res=0 errno=0 [ 1321.375083][ T30] audit: type=1800 audit(1786065761.344:6681): pid=18828 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3070" name="ep_name" dev="configfs" ino=79731 res=0 errno=0 [ 1321.778371][T16439] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1322.128831][T18849] netlink: Conntrack attr type has unexpected length (type=3, length=1, expected=8) [ 1322.133953][T18850] netlink: 'syz.1.3077': attribute type 1 has an invalid length. [ 1322.138457][T18849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.234910][T16439] usb 9-1: Using ep0 maxpacket: 32 [ 1322.245066][T16439] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 1322.248575][T18850] vlan2: entered allmulticast mode [ 1322.284158][T16439] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1322.314719][T16439] usb 9-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1322.319938][T18850] hsr_slave_0: entered allmulticast mode [ 1322.332125][T16439] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.378502][T16439] usb 9-1: config 0 descriptor?? [ 1322.637120][ T30] audit: type=1800 audit(1786065763.824:6682): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3080" name="idProduct" dev="configfs" ino=80609 res=0 errno=0 [ 1322.890888][ T30] audit: type=1800 audit(1786065763.864:6683): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3080" name="process_ump" dev="configfs" ino=80616 res=0 errno=0 [ 1323.218658][ T30] audit: type=1800 audit(1786065763.864:6684): pid=18859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3080" name="ep_name" dev="configfs" ino=80617 res=0 errno=0 [ 1323.459123][ T30] audit: type=1800 audit(1786065764.634:6685): pid=18868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3084" name="idProduct" dev="configfs" ino=79859 res=0 errno=0 [ 1323.968735][ T30] audit: type=1800 audit(1786065764.644:6686): pid=18868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3084" name="process_ump" dev="configfs" ino=79862 res=0 errno=0 [ 1324.033557][T18865] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1324.073357][T16439] input: HID 054c:03d5 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:054C:03D5.0025/input/input65 [ 1324.247276][T16439] sony 0003:054C:03D5.0025: input,hidraw0: USB HID vff.90 Joystick [HID 054c:03d5] on usb-dummy_hcd.8-1/input0 [ 1324.267415][ T30] audit: type=1800 audit(1786065764.644:6687): pid=18868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3084" name="ep_name" dev="configfs" ino=79863 res=0 errno=0 [ 1324.546127][T18865] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1324.614206][T18865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1324.621351][T18865] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1324.663448][T18865] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.109993][T16439] usb 9-1: USB disconnect, device number 10 [ 1326.154543][T17030] Bluetooth: hci2: command 0x0406 tx timeout [ 1326.557335][T18890] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3087'. [ 1326.694541][T17030] Bluetooth: hci4: command 0x0406 tx timeout [ 1326.706429][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1326.723021][T17030] Bluetooth: hci0: command 0xfc11 tx timeout [ 1326.761326][T17031] Bluetooth: hci1: command 0x0406 tx timeout [ 1326.767435][T12993] Bluetooth: hci5: command 0x0406 tx timeout [ 1326.778417][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1327.634675][T18918] comedi comedi3: comedi_config --init_data is deprecated [ 1327.904886][T18919] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3095'. [ 1328.791759][T18232] Bluetooth: hci1: command 0x0406 tx timeout [ 1329.152265][T18930] macvlan2: entered allmulticast mode [ 1329.158208][T18930] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1329.206309][T18925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1329.301331][T18232] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1329.318518][T18925] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1329.482480][T18925] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1329.502329][T18925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1329.522482][T18925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1330.244491][T18232] Bluetooth: hci2: command 0x0406 tx timeout [ 1331.108266][ T6272] Bluetooth: hci6: Frame reassembly failed (-84) [ 1331.450961][T17030] Bluetooth: hci4: command 0x0406 tx timeout [ 1331.550452][T17030] Bluetooth: hci3: command 0x0405 tx timeout [ 1331.579539][T17030] Bluetooth: hci5: command 0x0406 tx timeout [ 1331.590268][T17030] Bluetooth: hci1: command 0x0406 tx timeout [ 1331.786286][T18953] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1332.310707][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1332.310739][T17031] Bluetooth: hci0: command 0xfc11 tx timeout [ 1333.104808][ T9949] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1333.850503][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1333.850519][ T30] audit: type=1800 audit(1786065774.994:6689): pid=18974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3111" name="process_ump" dev="configfs" ino=81278 res=0 errno=0 [ 1334.191738][T18977] comedi comedi3: comedi_config --init_data is deprecated [ 1334.201297][ T30] audit: type=1800 audit(1786065774.994:6690): pid=18974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3111" name="ep_name" dev="configfs" ino=81279 res=0 errno=0 [ 1334.475347][T18982] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1334.936419][ T9949] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1335.739669][T18997] batadv_slave_0: entered promiscuous mode [ 1336.422410][ T30] audit: type=1400 audit(1786065777.604:6691): avc: denied { mount } for pid=18994 comm="syz.7.3117" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1336.527917][ T30] audit: type=1400 audit(1786065777.714:6692): avc: denied { ioctl } for pid=19001 comm="syz.8.3118" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1336.669240][T18994] batadv_slave_0: left promiscuous mode [ 1337.031462][ T30] audit: type=1400 audit(1786065778.214:6693): avc: denied { unmount } for pid=15914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1337.334738][T19017] Invalid source name [ 1337.339193][T19017] UBIFS error (pid: 19017): cannot open "ubifs", error -22 [ 1337.624663][T16439] IPVS: starting estimator thread 0... [ 1337.942097][T19018] IPVS: using max 45 ests per chain, 108000 per kthread [ 1338.002343][T19005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1338.008761][T19005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1338.015068][T19005] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1338.021265][T19005] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1338.027485][T19005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1339.024670][T17031] Bluetooth: hci2: command 0x0406 tx timeout [ 1340.064670][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1340.076853][T17031] Bluetooth: hci1: command 0x0406 tx timeout [ 1340.082941][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1340.082997][T17030] Bluetooth: hci5: command 0x0406 tx timeout [ 1340.089346][ T9949] Bluetooth: hci4: command 0x0406 tx timeout [ 1341.286530][ T30] audit: type=1800 audit(1786065782.464:6694): pid=19044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3129" name="idProduct" dev="configfs" ino=81704 res=0 errno=0 [ 1341.625298][T19039] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3128'. [ 1342.009660][ T30] audit: type=1800 audit(1786065782.464:6695): pid=19044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3129" name="process_ump" dev="configfs" ino=81707 res=0 errno=0 [ 1342.999071][ T30] audit: type=1800 audit(1786065782.464:6696): pid=19044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3129" name="ep_name" dev="configfs" ino=81708 res=0 errno=0 [ 1344.331645][T19059] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1344.967708][T19067] Invalid source name [ 1344.972167][T19067] UBIFS error (pid: 19067): cannot open "ubifs", error -22 [ 1345.457235][T19070] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1345.940612][T19070] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1346.473607][T19066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.012865][T19075] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3137'. [ 1347.038282][T19082] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1347.063872][T19070] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3135'. [ 1351.464193][T17030] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1356.077832][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.767299][T19145] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3155'. [ 1358.152015][T19156] comedi comedi3: comedi_config --init_data is deprecated [ 1358.278916][T19157] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3158'. [ 1358.695757][T19162] Invalid source name [ 1358.700216][T19162] UBIFS error (pid: 19162): cannot open "ubifs", error -22 [ 1359.949818][T19167] comedi comedi3: comedi_config --init_data is deprecated [ 1360.719332][T19169] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3161'. [ 1361.610225][T19173] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3162'. [ 1362.432890][T19180] macvlan2: entered allmulticast mode [ 1362.438787][T19180] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1362.674083][T17030] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1362.767539][ T30] audit: type=1800 audit(1786065803.934:6697): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3167" name="idProduct" dev="configfs" ino=83228 res=0 errno=0 [ 1363.277018][ T30] audit: type=1800 audit(1786065804.414:6698): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3167" name="process_ump" dev="configfs" ino=83234 res=0 errno=0 [ 1363.801079][T19178] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1363.807143][T19178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1363.813132][T19178] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1363.819115][T19178] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1363.825098][T19178] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1363.848369][ T30] audit: type=1800 audit(1786065804.414:6699): pid=19189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3167" name="ep_name" dev="configfs" ino=83235 res=0 errno=0 [ 1364.310265][T19197] Invalid source name [ 1364.314298][T19197] UBIFS error (pid: 19197): cannot open "ubifs", error -22 [ 1364.885938][T17030] Bluetooth: hci2: command 0x0406 tx timeout [ 1364.923612][ T30] audit: type=1326 audit(1786065806.084:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1364.962665][ T30] audit: type=1326 audit(1786065806.134:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1364.989202][ T30] audit: type=1326 audit(1786065806.134:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1365.015821][ T30] audit: type=1326 audit(1786065806.134:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1365.042415][ T30] audit: type=1326 audit(1786065806.144:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1365.106028][ T30] audit: type=1326 audit(1786065806.144:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1365.132808][ T30] audit: type=1326 audit(1786065806.144:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.5.3170" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3199e0d9 code=0x7ffc0000 [ 1365.261587][T19205] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3171'. [ 1365.730569][T17030] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1365.944588][T12993] Bluetooth: hci3: command 0x0405 tx timeout [ 1365.952288][T17030] Bluetooth: hci1: command 0x0406 tx timeout [ 1365.959039][T18232] Bluetooth: hci5: command 0x0406 tx timeout [ 1368.056784][T18232] Bluetooth: hci1: command 0x0406 tx timeout [ 1368.225605][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1368.512458][T18232] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1369.580128][T17030] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1370.057357][T19253] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3186'. [ 1371.358307][T19260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1371.384779][T19260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1371.414492][T19260] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1371.420645][T19260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1371.429728][T19260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1371.713899][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3190'. [ 1371.786818][T19272] macvlan2: entered allmulticast mode [ 1371.792458][T19272] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1371.834462][T17031] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1372.191760][T19282] comedi comedi3: comedi_config --init_data is deprecated [ 1372.197014][T19284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.213457][T19284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.221910][T19284] bridge0: entered allmulticast mode [ 1372.379792][T19285] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3193'. [ 1372.500418][T19284] bridge_slave_1: left allmulticast mode [ 1372.517422][T19284] bridge_slave_1: left promiscuous mode [ 1372.543829][T19284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.620199][T19284] bridge_slave_0: left allmulticast mode [ 1372.626238][T19284] bridge_slave_0: left promiscuous mode [ 1372.632520][T19284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.956829][T17031] Bluetooth: hci2: command 0x0406 tx timeout [ 1374.020991][T17030] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1374.031219][T18232] Bluetooth: hci5: command 0x0406 tx timeout [ 1374.037837][T12993] Bluetooth: hci4: command 0x0406 tx timeout [ 1374.037889][T12993] Bluetooth: hci0: command 0xfc11 tx timeout [ 1374.037926][T12993] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.058864][T17031] Bluetooth: hci3: command 0x0405 tx timeout [ 1375.516245][T19299] macvlan2: entered allmulticast mode [ 1375.521923][T19299] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1375.562543][T18232] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1375.650934][T19303] fuse: Bad value for 'group_id' [ 1375.807877][T19303] fuse: Bad value for 'group_id' [ 1375.935287][T19307] Invalid source name [ 1375.939746][T19307] UBIFS error (pid: 19307): cannot open "ubifs", error -22 [ 1376.806718][T19310] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3201'. [ 1377.214477][T19318] comedi comedi3: comedi_config --init_data is deprecated [ 1377.700899][T19320] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3203'. [ 1379.035269][ T5793] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1379.302141][ T5793] usb 9-1: Using ep0 maxpacket: 16 [ 1379.334483][ T5793] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1379.347195][ T5793] usb 9-1: config 1 has an invalid interface number: 62 but max is 0 [ 1379.357481][ T5793] usb 9-1: config 1 has no interface number 0 [ 1379.366372][ T5793] usb 9-1: config 1 interface 62 has no altsetting 0 [ 1379.388324][ T5793] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=b6.61 [ 1379.409890][ T5793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.417906][ T5793] usb 9-1: Product: syz [ 1379.422067][ T5793] usb 9-1: Manufacturer: syz [ 1379.431028][ T5793] usb 9-1: SerialNumber: syz [ 1379.624977][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1379.854967][T19351] fuse: Bad value for 'group_id' [ 1379.889912][T19351] fuse: Bad value for 'group_id' [ 1379.993865][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1379.993880][ T30] audit: type=1400 audit(1786065821.174:6747): avc: denied { create } for pid=19329 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1379.998442][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.003109][ T30] audit: type=1400 audit(1786065821.184:6748): avc: denied { write } for pid=19329 comm="syz.8.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1380.057394][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1380.066530][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.083965][ T9] usb 2-1: config 0 descriptor?? [ 1380.619257][T19331] lo speed is unknown, defaulting to 1000 [ 1380.631121][T19331] lo speed is unknown, defaulting to 1000 [ 1380.641214][T19331] lo speed is unknown, defaulting to 1000 [ 1380.878886][T16653] lo speed is unknown, defaulting to 1000 [ 1380.895166][T19331] infiniband syz2: set active [ 1380.899873][T19331] infiniband syz2: added lo [ 1380.914622][T19331] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1380.929648][T19331] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1380.946754][T19331] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1380.968395][T19331] RDS/IB: syz2: added [ 1380.972440][T19331] smc: adding ib device syz2 with port count 1 [ 1380.978585][T19331] smc: ib device syz2 port 1 has no pnetid [ 1380.993363][ T9] ath6kl: Failed to read usb control message: -71 [ 1381.134162][ T9] ath6kl: Unable to read the bmi data from the device: -71 [ 1381.159764][T16653] lo speed is unknown, defaulting to 1000 [ 1381.162542][ T9] ath6kl: Unable to recv target info: -71 [ 1381.183627][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1381.189737][ T9] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1381.192622][T19331] lo speed is unknown, defaulting to 1000 [ 1381.213481][ T9] usb 2-1: USB disconnect, device number 57 [ 1381.259901][T19365] comedi comedi3: comedi_config --init_data is deprecated [ 1381.710132][T19371] macvlan2: entered allmulticast mode [ 1381.716790][T19371] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1381.771315][T18232] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1381.788213][T19367] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1382.398549][T19376] macvlan2: entered allmulticast mode [ 1382.405122][T19376] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1382.460804][T17030] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1384.065174][ T187] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1384.118980][T19331] lo speed is unknown, defaulting to 1000 [ 1384.145458][T19394] Invalid source name [ 1384.149855][T19394] UBIFS error (pid: 19394): cannot open "ubifs", error -22 [ 1384.982535][ T5793] visor 9-1:1.62: Sony Clie 3.5 converter detected [ 1385.027606][ T5793] usb 9-1: clie_3_5_startup: get config number failed: -32 [ 1385.036555][ T5793] visor 9-1:1.62: probe with driver visor failed with error -32 [ 1385.050091][ T187] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.118444][ T187] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1385.175396][ T187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.215886][ T187] usb 6-1: config 0 descriptor?? [ 1385.251937][T19400] comedi comedi3: comedi_config --init_data is deprecated [ 1385.459763][T19403] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3228'. [ 1385.574434][ T5793] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1386.007386][ T187] ath6kl: Failed to read usb control message: -32 [ 1386.029835][ T187] ath6kl: Unable to read the bmi data from the device: -32 [ 1386.037368][ T187] ath6kl: Unable to recv target info: -32 [ 1386.057810][ T187] ath6kl: Failed to init ath6kl core: -32 [ 1386.063961][ T187] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1386.092902][ T187] usb 6-1: USB disconnect, device number 22 [ 1386.205465][T19331] lo speed is unknown, defaulting to 1000 [ 1386.337049][ T5793] usb 2-1: Using ep0 maxpacket: 16 [ 1386.530062][T19331] lo speed is unknown, defaulting to 1000 [ 1386.976398][ T5793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.986809][ T5793] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1387.029887][T19409] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1387.274576][T19331] lo speed is unknown, defaulting to 1000 [ 1387.622297][ T5793] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1387.631451][ T5793] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1387.639693][ T5793] usb 2-1: Manufacturer: syz [ 1387.785393][ T5793] usb 2-1: config 0 descriptor?? [ 1388.138267][ T187] usb 9-1: USB disconnect, device number 11 [ 1388.192173][T16654] usb 2-1: USB disconnect, device number 58 [ 1390.277326][T17030] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1390.289707][T19432] macvlan2: entered allmulticast mode [ 1390.309677][T19430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3237'. [ 1391.409503][T17030] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1391.486719][T19432] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1393.424854][T17030] Bluetooth: hci1: command 0x0406 tx timeout [ 1396.095332][ T30] audit: type=1400 audit(1786065837.284:6749): avc: denied { ioctl } for pid=19461 comm="syz.8.3243" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1396.265531][T19467] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3245'. [ 1396.591506][T19468] overlayfs: failed to verify upper (46/file1, ino=262, err=-116) [ 1396.672594][T19468] overlayfs: failed to verify index dir 'upper' xattr [ 1396.702537][ T5793] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1396.721405][T19468] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1397.313306][T19485] comedi comedi3: comedi_config --init_data is deprecated [ 1397.375702][ T5793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.402385][ T30] audit: type=1800 audit(1786065838.584:6750): pid=19487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3252" name="idProduct" dev="configfs" ino=84677 res=0 errno=0 [ 1397.426411][ T5793] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1397.439712][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.450321][ T30] audit: type=1800 audit(1786065838.614:6751): pid=19487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3252" name="process_ump" dev="configfs" ino=84680 res=0 errno=0 [ 1397.472678][ T5793] usb 7-1: config 0 descriptor?? [ 1397.816341][ T30] audit: type=1800 audit(1786065838.994:6752): pid=19487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3252" name="ep_name" dev="configfs" ino=84682 res=0 errno=0 [ 1398.360888][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1398.604939][T18232] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1398.957334][ T5793] ath6kl: Failed to read usb control message: -32 [ 1398.967279][ T5793] ath6kl: Unable to read the bmi data from the device: -32 [ 1399.003782][ T5793] ath6kl: Unable to recv target info: -32 [ 1399.021855][ T5793] ath6kl: Failed to init ath6kl core: -32 [ 1399.036890][ T5793] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1399.059077][ T5793] usb 7-1: USB disconnect, device number 9 [ 1399.261584][ T30] audit: type=1400 audit(1786065840.424:6753): avc: denied { kexec_image_load } for pid=19503 comm="syz.5.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1399.485005][ T30] audit: type=1800 audit(1786065840.634:6754): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3257" name="idProduct" dev="configfs" ino=85382 res=0 errno=0 [ 1399.919607][ T30] audit: type=1800 audit(1786065840.794:6755): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3257" name="process_ump" dev="configfs" ino=85452 res=0 errno=0 [ 1399.970625][ T30] audit: type=1800 audit(1786065840.794:6756): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3257" name="ep_name" dev="configfs" ino=85453 res=0 errno=0 [ 1402.941267][T19538] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3265'. [ 1403.374756][ T30] audit: type=1400 audit(1786065844.544:6757): avc: denied { remount } for pid=19545 comm="syz.8.3267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1403.604901][T19549] FAULT_INJECTION: forcing a failure. [ 1403.604901][T19549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1403.619320][T19549] CPU: 0 UID: 0 PID: 19549 Comm: syz.6.3268 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.619352][T19549] Tainted: [L]=SOFTLOCKUP [ 1403.619359][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1403.619369][T19549] Call Trace: [ 1403.619376][T19549] [ 1403.619383][T19549] dump_stack_lvl+0x100/0x190 [ 1403.619410][T19549] should_fail_ex.cold+0x5/0xa [ 1403.619433][T19549] _copy_to_user+0x32/0xd0 [ 1403.619456][T19549] simple_read_from_buffer+0xcb/0x170 [ 1403.619488][T19549] proc_fail_nth_read+0x1af/0x230 [ 1403.619516][T19549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1403.619545][T19549] ? rw_verify_area+0xce/0x6d0 [ 1403.619569][T19549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1403.619596][T19549] vfs_read+0x1e4/0xb40 [ 1403.619625][T19549] ? __pfx_vfs_read+0x10/0x10 [ 1403.619649][T19549] ? __fget_files+0x215/0x3d0 [ 1403.619673][T19549] ? __fget_files+0x21f/0x3d0 [ 1403.619697][T19549] ksys_read+0x12a/0x250 [ 1403.619723][T19549] ? __pfx_ksys_read+0x10/0x10 [ 1403.619756][T19549] do_syscall_64+0x115/0x870 [ 1403.619775][T19549] ? clear_bhb_loop+0x40/0x90 [ 1403.619797][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.619815][T19549] RIP: 0033:0x7f2e4915e90e [ 1403.619831][T19549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1403.619849][T19549] RSP: 002b:00007f2e4a0dbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1403.619867][T19549] RAX: ffffffffffffffda RBX: 00007f2e4a0dc6c0 RCX: 00007f2e4915e90e [ 1403.619879][T19549] RDX: 000000000000000f RSI: 00007f2e4a0dc0a0 RDI: 0000000000000004 [ 1403.619890][T19549] RBP: 00007f2e4a0dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.619901][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.619911][T19549] R13: 00007f2e49426038 R14: 00007f2e49425fa0 R15: 00007fff9ac74b88 [ 1403.619936][T19549] [ 1404.054938][ T30] audit: type=1800 audit(1786065845.214:6758): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3272" name="idProduct" dev="configfs" ino=84910 res=0 errno=0 [ 1404.077842][ T30] audit: type=1800 audit(1786065845.214:6759): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3272" name="process_ump" dev="configfs" ino=84913 res=0 errno=0 [ 1404.127518][ T30] audit: type=1800 audit(1786065845.214:6760): pid=19554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3272" name="ep_name" dev="configfs" ino=84914 res=0 errno=0 [ 1405.345708][T18232] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1405.523002][T19566] macvlan2: entered allmulticast mode [ 1405.540789][T19566] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1406.452398][T19561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1406.459784][T19561] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1406.465981][T19561] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1406.472151][T19561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1406.478344][T19561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1406.520522][T17030] Bluetooth: hci0: sending frame failed (-49) [ 1406.526964][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-49) [ 1406.655941][T19573] macvlan2: entered allmulticast mode [ 1406.661574][T19573] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1406.757465][T18232] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1407.228255][T18232] Bluetooth: hci2: command 0x0406 tx timeout [ 1407.656850][T16654] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1407.765827][ T5793] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1408.341187][T16653] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1408.533090][ T30] audit: type=1400 audit(1786065849.704:6761): avc: denied { write } for pid=19595 comm="syz.7.3284" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 1408.558904][T19596] < [ 1408.574599][T17030] Bluetooth: hci3: command 0x0405 tx timeout [ 1408.583016][T17030] Bluetooth: hci5: command 0x0406 tx timeout [ 1408.589012][T17031] Bluetooth: hci4: command 0x0406 tx timeout [ 1408.595734][T18232] Bluetooth: hci1: command 0x0406 tx timeout [ 1408.639614][ T30] audit: type=1800 audit(1786065849.804:6762): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3285" name="idProduct" dev="configfs" ino=85791 res=0 errno=0 [ 1408.670300][ T30] audit: type=1800 audit(1786065849.804:6763): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3285" name="process_ump" dev="configfs" ino=85794 res=0 errno=0 [ 1408.948968][ T30] audit: type=1800 audit(1786065849.804:6764): pid=19598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3285" name="ep_name" dev="configfs" ino=85795 res=0 errno=0 [ 1409.376688][ T5793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.399862][T16654] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.456334][ T5793] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1410.022693][T16653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1410.033500][T16653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1410.043148][T16653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1410.777733][T16654] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1410.786797][T16654] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.795908][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.806235][ T5793] usb 7-1: config 0 descriptor?? [ 1410.812071][T16654] usb 9-1: config 0 descriptor?? [ 1410.880718][T16654] usb 9-1: can't set config #0, error -71 [ 1410.890370][T16654] usb 9-1: USB disconnect, device number 12 [ 1410.989484][ T5793] usb 7-1: can't set config #0, error -71 [ 1410.998432][ T5793] usb 7-1: USB disconnect, device number 10 [ 1411.635393][T16653] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1411.678458][T16653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.698337][T16653] usb 6-1: config 0 descriptor?? [ 1411.808130][ T30] audit: type=1400 audit(1786065852.494:6765): avc: denied { getopt } for pid=19612 comm="syz.6.3292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1411.840717][T16653] usb 6-1: can't set config #0, error -71 [ 1411.877425][T16653] usb 6-1: USB disconnect, device number 23 [ 1412.249610][ T30] audit: type=1400 audit(1786065852.814:6766): avc: denied { unmount } for pid=15860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1412.723457][T19629] Invalid source name [ 1412.727497][T19629] UBIFS error (pid: 19629): cannot open "ubifs", error -22 [ 1412.833092][T16653] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1413.512954][ T30] audit: type=1800 audit(1786065854.694:6767): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3297" name="idProduct" dev="configfs" ino=85882 res=0 errno=0 [ 1413.552278][ T30] audit: type=1800 audit(1786065854.694:6768): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3297" name="process_ump" dev="configfs" ino=85885 res=0 errno=0 [ 1413.923381][ T30] audit: type=1800 audit(1786065854.694:6769): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3297" name="ep_name" dev="configfs" ino=85886 res=0 errno=0 [ 1414.502551][T19640] comedi comedi3: comedi_config --init_data is deprecated [ 1414.519576][T19624] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1414.659935][T16653] usb 6-1: device descriptor read/all, error -71 [ 1414.743067][T19624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1414.758704][T19642] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3299'. [ 1414.928008][T19624] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1414.975143][T19624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1415.045077][T19650] Invalid source name [ 1415.049538][T19650] UBIFS error (pid: 19650): cannot open "ubifs", error -22 [ 1415.299590][T18232] Bluetooth: hci2: command 0x0406 tx timeout [ 1415.341969][T19624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1415.376923][ T6132] Bluetooth: hci6: Frame reassembly failed (-84) [ 1415.903165][T19655] comedi comedi3: comedi_config --init_data is deprecated [ 1416.120386][T19658] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3303'. [ 1416.504843][T16439] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1416.670262][T19661] macvlan2: entered allmulticast mode [ 1416.676674][T19661] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1416.782577][T17031] Bluetooth: hci2: unexpected event 0x18 length: 247 > 23 [ 1416.877562][T17031] Bluetooth: hci5: command 0x0406 tx timeout [ 1416.890716][ T9949] Bluetooth: hci4: command 0x0406 tx timeout [ 1416.987777][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1417.248552][T16439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.413214][ T9949] Bluetooth: hci1: command 0x0406 tx timeout [ 1417.548424][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.562597][ T9949] Bluetooth: hci0: command 0xfc11 tx timeout [ 1417.569558][T17030] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 1417.584549][ T9949] Bluetooth: hci6: command 0xfc11 tx timeout [ 1417.603181][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1418.454353][T16439] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1418.463955][T16439] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1418.473913][T16439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.484318][T16439] usb 7-1: Product: syz [ 1418.488961][T16439] usb 7-1: Manufacturer: syz [ 1418.493919][T16439] usb 7-1: SerialNumber: syz [ 1418.507604][T16439] usb 7-1: config 0 descriptor?? [ 1418.518096][T16439] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1418.536063][T16439] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1418.547122][T16439] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1418.557053][T16439] usb 7-1: media controller created [ 1418.559200][T19673] fuse: Bad value for 'group_id' [ 1418.568056][T19673] fuse: Bad value for 'group_id' [ 1418.576162][T16439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1419.348304][T16439] DVB: Unable to find symbol tda10046_attach() [ 1419.373536][T16439] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1419.426101][T16439] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1420.111608][T16439] dvb_usb_m920x 7-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1420.136612][T16439] usb 7-1: USB disconnect, device number 11 [ 1420.475025][T16653] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1421.852277][T16653] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1421.889079][T16653] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1421.910570][T19691] binder: 19690:19691 ioctl 4018620d 0 returned -22 [ 1421.953151][T16653] usb 9-1: Product: syz [ 1421.966831][T16653] usb 9-1: SerialNumber: syz [ 1421.977329][T16653] usb 9-1: config 0 descriptor?? [ 1422.730030][ T187] usb 9-1: USB disconnect, device number 13 [ 1423.548916][T19713] macvlan2: entered allmulticast mode [ 1423.559010][T19713] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1423.617679][T18232] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1425.970063][T19732] Invalid source name [ 1425.982191][T19732] UBIFS error (pid: 19732): cannot open "ubifs", error -22 [ 1426.175465][T18232] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1429.421886][ T30] audit: type=1800 audit(1786065870.604:6770): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3326" name="idProduct" dev="configfs" ino=86440 res=0 errno=0 [ 1429.624320][ T30] audit: type=1800 audit(1786065870.684:6771): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3326" name="process_ump" dev="configfs" ino=86447 res=0 errno=0 [ 1430.144628][ T30] audit: type=1800 audit(1786065870.704:6772): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3326" name="ep_name" dev="configfs" ino=86448 res=0 errno=0 [ 1430.742009][T19756] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3331'. [ 1432.848458][ T30] audit: type=1400 audit(1786065874.024:6773): avc: denied { read } for pid=19763 comm="syz.5.3332" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1432.907228][ T30] audit: type=1400 audit(1786065874.024:6774): avc: denied { open } for pid=19763 comm="syz.5.3332" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1432.933953][ T30] audit: type=1400 audit(1786065874.064:6775): avc: denied { ioctl } for pid=19763 comm="syz.5.3332" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1433.016855][T16654] libceph: connect (1)[c::]:6789 error -22 [ 1433.022837][T16654] libceph: mon0 (1)[c::]:6789 connect error [ 1433.170055][T19777] comedi comedi3: comedi_config --init_data is deprecated [ 1433.306331][T16654] libceph: connect (1)[c::]:6789 error -22 [ 1433.313417][T16654] libceph: mon0 (1)[c::]:6789 connect error [ 1433.556858][T19768] ceph: No mds server is up or the cluster is laggy [ 1433.751618][T17030] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23 [ 1433.791599][T19783] macvlan2: entered allmulticast mode [ 1433.810662][T19783] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1433.841601][ T5793] libceph: connect (1)[c::]:6789 error -22 [ 1433.848569][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 1433.940719][T19777] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3329'. [ 1435.458852][T19790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19790 comm=syz.1.3337 [ 1435.532327][ T30] audit: type=1400 audit(1786065876.664:6776): avc: denied { write } for pid=19789 comm="syz.1.3337" path="socket:[87474]" dev="sockfs" ino=87474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1435.964794][T16439] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1436.347071][T19795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1436.353124][T19795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1436.359112][T19795] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1436.365088][T19795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1436.371068][T19795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1436.401114][ T6824] Bluetooth: hci0: Frame reassembly failed (-84) [ 1436.422619][T16439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.454892][T16439] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 11264, setting to 1024 [ 1436.470661][T16439] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1436.666151][T16439] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1436.789300][T19809] overlayfs: failed to resolve './file1/file0': -2 [ 1436.826166][T16439] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1436.879943][T16439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.936129][T16439] usb 2-1: Product: syz [ 1436.951996][T16439] usb 2-1: Manufacturer: syz [ 1436.979875][T16439] usb 2-1: SerialNumber: syz [ 1437.035684][T16439] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1437.514645][T16439] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1437.728883][T16439] scsi host1: usb-storage 2-1:1.0 [ 1437.824446][T18232] Bluetooth: hci2: command 0x0406 tx timeout [ 1438.415008][ T30] audit: type=1400 audit(1786065879.464:6777): avc: denied { ioctl } for pid=19789 comm="syz.1.3337" path="socket:[87474]" dev="sockfs" ino=87474 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1438.477721][T17030] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1438.486150][T18232] Bluetooth: hci1: command 0x0406 tx timeout [ 1438.498493][ T9949] Bluetooth: hci3: command 0x0405 tx timeout [ 1438.505185][T17031] Bluetooth: hci5: command 0x0406 tx timeout [ 1438.514102][T18232] Bluetooth: hci4: command 0x0406 tx timeout [ 1438.578453][T19819] macvlan2: entered allmulticast mode [ 1438.584099][T19819] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1438.627121][T12993] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1438.646486][ T983] usb 2-1: USB disconnect, device number 59 [ 1438.807835][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3346'. [ 1439.072358][T19831] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1439.495294][T19840] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1440.113743][T19845] Invalid source name [ 1440.117793][T19845] UBIFS error (pid: 19845): cannot open "ubifs", error -22 [ 1440.951133][T19849] comedi comedi3: comedi_config --init_data is deprecated [ 1441.535582][T19854] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1442.308055][ T30] audit: type=1800 audit(1786065882.904:6778): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3355" name="idProduct" dev="configfs" ino=86964 res=0 errno=0 [ 1442.954756][ T30] audit: type=1800 audit(1786065882.904:6779): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3355" name="process_ump" dev="configfs" ino=86967 res=0 errno=0 [ 1442.979849][ T30] audit: type=1800 audit(1786065882.944:6780): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3355" name="ep_name" dev="configfs" ino=86968 res=0 errno=0 [ 1445.115185][T19881] comedi comedi3: comedi_config --init_data is deprecated [ 1445.803361][T19883] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3362'. [ 1446.407856][T19896] Invalid source name [ 1446.412340][T19896] UBIFS error (pid: 19896): cannot open "ubifs", error -22 [ 1446.521790][ T983] IPVS: starting estimator thread 0... [ 1446.945924][T19897] IPVS: using max 43 ests per chain, 103200 per kthread [ 1447.282953][T19895] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3365'. [ 1447.491833][T19889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1447.497906][T19889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1447.503914][T19889] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1447.516556][T19889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1447.546284][T19889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1447.797968][T19908] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1448.782815][T12993] Bluetooth: hci2: command 0x0406 tx timeout [ 1448.899664][T19915] comedi comedi3: comedi_config --init_data is deprecated [ 1449.065172][T19916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3370'. [ 1449.505821][T12993] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.505835][T18232] Bluetooth: hci3: command 0x0405 tx timeout [ 1449.513727][T12993] Bluetooth: hci5: command 0x0406 tx timeout [ 1449.520322][ T9949] Bluetooth: hci4: command 0x0406 tx timeout [ 1453.571606][T19952] fuse: Unknown parameter 'group_i00000000000000000000' [ 1454.194814][ T30] audit: type=1800 audit(1786065895.374:6781): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3382" name="idProduct" dev="configfs" ino=87723 res=0 errno=0 [ 1454.745337][ T30] audit: type=1800 audit(1786065895.414:6782): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3382" name="process_ump" dev="configfs" ino=87726 res=0 errno=0 [ 1454.774495][ T30] audit: type=1800 audit(1786065895.414:6783): pid=19958 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3382" name="ep_name" dev="configfs" ino=87727 res=0 errno=0 [ 1455.894635][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3386'. [ 1455.974305][T19972] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3385'. [ 1456.281583][T19977] fuse: Unknown parameter 'grou00000000000000000000' [ 1456.818156][T19981] fuse: Unknown parameter 'group_i00000000000000000000' [ 1459.486630][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3398'. [ 1460.614011][T18232] Bluetooth: hci4: unexpected event 0x18 length: 247 > 23 [ 1460.638276][T20022] macvlan2: entered allmulticast mode [ 1460.657740][T20022] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1462.453749][T20029] fuse: Unknown parameter 'group_id00000000000000000000' [ 1463.709210][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3410'. [ 1463.928717][T20050] fuse: Unknown parameter 'grou00000000000000000000' [ 1464.608506][T20059] comedi comedi3: comedi_config --init_data is deprecated [ 1465.055340][T20059] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3414'. [ 1465.268626][T16439] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1465.446689][T16439] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.490409][T16439] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1465.521765][T16439] usb 6-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1465.553201][T20070] comedi comedi3: comedi_config --init_data is deprecated [ 1465.561030][T16439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.830918][T20072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1465.918964][T16439] mos7720 6-1:1.0: required endpoints missing [ 1467.697280][T20080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1467.846314][T20080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1467.877300][T20080] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1467.885197][T20080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1467.894843][T20080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1468.685019][T16439] usb 6-1: USB disconnect, device number 26 [ 1468.939779][ T30] audit: type=1400 audit(1786065910.124:6784): avc: denied { setopt } for pid=20102 comm="syz.5.3427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1468.986643][ T30] audit: type=1400 audit(1786065910.174:6785): avc: denied { read } for pid=20105 comm="syz.8.3428" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1469.195546][T20108] Invalid source name [ 1469.199597][T20108] UBIFS error (pid: 20108): cannot open "ubifs", error -22 [ 1469.293562][ T9949] Bluetooth: hci2: command 0x0406 tx timeout [ 1469.762554][ T30] audit: type=1400 audit(1786065910.174:6786): avc: denied { open } for pid=20105 comm="syz.8.3428" path="net:[4026532782]" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1469.915506][ T9949] Bluetooth: hci1: command 0x0406 tx timeout [ 1469.915665][T17031] Bluetooth: hci3: command 0x0405 tx timeout [ 1469.922015][ T9949] Bluetooth: hci5: command 0x0406 tx timeout [ 1469.927633][T17031] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.030069][T20111] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1470.059938][ T30] audit: type=1400 audit(1786065910.174:6787): avc: denied { create } for pid=20105 comm="syz.8.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1470.223187][ T30] audit: type=1400 audit(1786065910.364:6788): avc: denied { read } for pid=20100 comm="syz.1.3426" name="video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1470.294529][ T30] audit: type=1400 audit(1786065910.374:6789): avc: denied { open } for pid=20100 comm="syz.1.3426" path="/dev/video8" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1470.320918][ T30] audit: type=1400 audit(1786065910.374:6790): avc: denied { ioctl } for pid=20100 comm="syz.1.3426" path="/dev/video8" dev="devtmpfs" ino=952 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1470.352694][ T30] audit: type=1400 audit(1786065910.374:6791): avc: denied { create } for pid=20100 comm="syz.1.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1470.468384][ T30] audit: type=1400 audit(1786065910.374:6792): avc: denied { getopt } for pid=20100 comm="syz.1.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1470.563708][ T30] audit: type=1400 audit(1786065910.384:6793): avc: denied { mounton } for pid=20100 comm="syz.1.3426" path="/81" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1470.704864][T18232] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1470.705696][T12993] Bluetooth: hci0: command 0xfc11 tx timeout [ 1470.994647][T16654] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1471.326941][T16654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.389218][T16654] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1471.430115][T16654] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1471.495306][T16654] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 1471.509630][T20131] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3432'. [ 1471.657242][T16654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.700776][T20124] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1471.739696][T16654] mos7720 2-1:1.0: required endpoints missing [ 1473.953490][T16439] usb 2-1: USB disconnect, device number 60 [ 1474.447538][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 1474.447560][ T30] audit: type=1400 audit(1786065915.624:6891): avc: denied { unmount } for pid=14899 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1474.746753][ T30] audit: type=1400 audit(1786065915.914:6892): avc: denied { mounton } for pid=20153 comm="syz.6.3437" path="/199/mnt_trace" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1475.130427][ T30] audit: type=1400 audit(1786065915.914:6893): avc: denied { mount } for pid=20153 comm="syz.6.3437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1475.394674][T18232] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1475.849932][ T30] audit: type=1400 audit(1786065915.914:6894): avc: denied { search } for pid=20153 comm="syz.6.3437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1475.965124][ T30] audit: type=1400 audit(1786065915.914:6895): avc: denied { read } for pid=20153 comm="syz.6.3437" name="trace_pipe" dev="tracefs" ino=3812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1476.126172][ T30] audit: type=1400 audit(1786065915.914:6896): avc: denied { open } for pid=20153 comm="syz.6.3437" path="/199/mnt_trace/trace_pipe" dev="tracefs" ino=3812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1476.289212][ T30] audit: type=1400 audit(1786065916.004:6897): avc: denied { read } for pid=20174 comm="syz.7.3439" dev="nsfs" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1476.328372][ T30] audit: type=1400 audit(1786065916.004:6898): avc: denied { open } for pid=20174 comm="syz.7.3439" path="net:[4026532785]" dev="nsfs" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1476.434861][ T30] audit: type=1400 audit(1786065916.314:6899): avc: denied { write } for pid=20174 comm="syz.7.3439" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1476.459295][ T30] audit: type=1400 audit(1786065916.314:6900): avc: denied { create } for pid=20174 comm="syz.7.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1478.947384][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1479.194114][T20214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1479.203194][T12993] Bluetooth: hci5: unexpected event 0x18 length: 247 > 23 [ 1479.764094][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1479.764139][ T30] audit: type=1400 audit(1786065920.754:6966): avc: denied { create } for pid=20198 comm="syz.5.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1480.065189][ T30] audit: type=1400 audit(1786065921.054:6967): avc: denied { read } for pid=20233 comm="syz.8.3452" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1480.303824][ T30] audit: type=1400 audit(1786065921.054:6968): avc: denied { open } for pid=20233 comm="syz.8.3452" path="net:[4026532782]" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1480.327130][ T30] audit: type=1400 audit(1786065921.054:6969): avc: denied { create } for pid=20233 comm="syz.8.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1480.435100][T20222] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1480.444501][ T30] audit: type=1400 audit(1786065921.594:6970): avc: denied { create } for pid=20213 comm="syz.1.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1480.557094][ T30] audit: type=1400 audit(1786065921.724:6971): avc: denied { create } for pid=20233 comm="syz.8.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1480.578050][ T30] audit: type=1400 audit(1786065921.724:6972): avc: denied { getopt } for pid=20233 comm="syz.8.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1480.600695][ T30] audit: type=1400 audit(1786065921.764:6973): avc: denied { ioctl } for pid=20221 comm="syz.6.3450" path="socket:[89759]" dev="sockfs" ino=89759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1480.638554][T20241] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1480.654496][ T30] audit: type=1400 audit(1786065921.814:6974): avc: denied { mounton } for pid=20221 comm="syz.6.3450" path="/201/sys" dev="tmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1480.722571][T20231] macvlan2: entered allmulticast mode [ 1480.728945][ T30] audit: type=1400 audit(1786065921.844:6975): avc: denied { mount } for pid=20221 comm="syz.6.3450" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1480.780228][T20231] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1481.650810][T12993] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1483.385462][T20278] macvlan2: entered allmulticast mode [ 1483.396536][T20278] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1483.484421][T18232] Bluetooth: hci1: unexpected event 0x18 length: 247 > 23 [ 1484.806391][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1484.806408][ T30] audit: type=1400 audit(1786065925.994:6999): avc: denied { unmount } for pid=15914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1485.194370][ T30] audit: type=1400 audit(1786065926.374:7000): avc: denied { write } for pid=20256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1485.223635][ T30] audit: type=1400 audit(1786065926.384:7001): avc: denied { module_request } for pid=20281 comm="syz.5.3460" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1485.556374][ T30] audit: type=1400 audit(1786065926.734:7002): avc: denied { sys_module } for pid=20281 comm="syz.5.3460" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1485.803055][ T30] audit: type=1400 audit(1786065926.884:7003): avc: denied { create } for pid=20281 comm="syz.5.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1486.036634][ T30] audit: type=1400 audit(1786065926.884:7004): avc: denied { write } for pid=20281 comm="syz.5.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1486.297474][ T30] audit: type=1400 audit(1786065927.094:7005): avc: denied { write } for pid=20295 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1486.676426][T18232] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1487.481758][ T30] audit: type=1400 audit(1786065928.654:7006): avc: denied { read } for pid=20309 comm="syz.8.3466" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1487.566583][ T30] audit: type=1400 audit(1786065928.654:7007): avc: denied { open } for pid=20309 comm="syz.8.3466" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1487.629051][ T30] audit: type=1400 audit(1786065928.714:7008): avc: denied { read } for pid=20309 comm="syz.8.3466" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1490.063519][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1490.063555][ T30] audit: type=1400 audit(1786065931.244:7017): avc: denied { create } for pid=20336 comm="syz.8.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1490.743440][ T30] audit: type=1400 audit(1786065931.314:7018): avc: denied { write } for pid=20336 comm="syz.8.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1491.373291][ T30] audit: type=1400 audit(1786065932.554:7019): avc: denied { read write } for pid=16362 comm="syz-executor" name="loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1491.448169][ T30] audit: type=1400 audit(1786065932.594:7020): avc: denied { open } for pid=16362 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1491.598486][ T30] audit: type=1400 audit(1786065932.594:7021): avc: denied { ioctl } for pid=16362 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1491.684626][ T30] audit: type=1400 audit(1786065932.744:7022): avc: denied { create } for pid=20326 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1491.785880][ T30] audit: type=1400 audit(1786065932.744:7023): avc: denied { bind } for pid=20326 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1491.864910][ T30] audit: type=1400 audit(1786065932.744:7024): avc: denied { accept } for pid=20326 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1491.897216][ T30] audit: type=1400 audit(1786065932.744:7025): avc: denied { setopt } for pid=20326 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1492.150436][ T30] audit: type=1400 audit(1786065932.744:7026): avc: denied { write } for pid=20326 comm="syz.6.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1493.613187][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 1495.571241][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1495.571283][ T30] audit: type=1400 audit(1786065936.134:7093): avc: denied { write } for pid=20376 comm="syz.5.3486" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1495.617135][T18232] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1495.692688][ T30] audit: type=1400 audit(1786065936.134:7094): avc: denied { create } for pid=20376 comm="syz.5.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1495.714498][ T30] audit: type=1400 audit(1786065936.134:7095): avc: denied { connect } for pid=20376 comm="syz.5.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1495.737286][ T30] audit: type=1400 audit(1786065936.204:7096): avc: denied { write } for pid=20376 comm="syz.5.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1496.270798][ T30] audit: type=1400 audit(1786065937.144:7097): avc: denied { create } for pid=20386 comm="syz.7.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1496.366866][ T30] audit: type=1400 audit(1786065937.144:7098): avc: denied { setopt } for pid=20386 comm="syz.7.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1496.430685][ T30] audit: type=1400 audit(1786065937.524:7099): avc: denied { create } for pid=20386 comm="syz.7.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1496.503780][ T30] audit: type=1400 audit(1786065937.534:7100): avc: denied { unmount } for pid=18256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1496.588003][ T30] audit: type=1400 audit(1786065937.544:7101): avc: denied { read } for pid=5257 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1496.637888][ T30] audit: type=1400 audit(1786065937.604:7102): avc: denied { create } for pid=20389 comm="syz.5.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1601.934317][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1601.941283][ C1] rcu: 0-...!: (1 GPs behind) idle=50ec/1/0x4000000000000000 softirq=106459/106471 fqs=0 [ 1601.952275][ C1] rcu: (detected by 1, t=10505 jiffies, g=114785, q=426 ncpus=2) [ 1601.960080][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1601.960106][ C0] NMI backtrace for cpu 0 [ 1601.960119][ C0] CPU: 0 UID: 0 PID: 20399 Comm: syz.6.3490 Tainted: G L syzkaller #0 PREEMPT(full) [ 1601.960139][ C0] Tainted: [L]=SOFTLOCKUP [ 1601.960144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1601.960152][ C0] RIP: 0010:__kasan_check_byte+0x13/0x50 [ 1601.960175][ C0] Code: 2a 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 41 54 49 89 f4 55 48 89 fd 53 e8 7d 1e 00 00 <89> c3 84 c0 74 0b 89 d8 5b 5d 41 5c e9 7c 97 41 09 4c 89 e1 48 89 [ 1601.960188][ C0] RSP: 0018:ffffc90000007df0 EFLAGS: 00000097 [ 1601.960201][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 1601.960210][ C0] RDX: 0000000000000000 RSI: ffffffff8bbc0586 RDI: ffffed1017085083 [ 1601.960218][ C0] RBP: ffff8880b8428418 R08: 0000000000000001 R09: 0000000000000000 [ 1601.960227][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bbc0586 [ 1601.960235][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1601.960244][ C0] FS: 00007f2e4a0dc6c0(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 1601.960260][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1601.960269][ C0] CR2: 00007f45ba762000 CR3: 000000007ca34000 CR4: 00000000003526f0 [ 1601.960279][ C0] Call Trace: [ 1601.960285][ C0] [ 1601.960292][ C0] lock_acquire+0x132/0x370 [ 1601.960311][ C0] _raw_spin_lock_irq+0x36/0x50 [ 1601.960330][ C0] ? __hrtimer_run_queues+0x1b7/0x9c0 [ 1601.960350][ C0] __hrtimer_run_queues+0x1b7/0x9c0 [ 1601.960373][ C0] hrtimer_interrupt+0x3e5/0x940 [ 1601.960397][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1601.960418][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1601.960439][ C0] [ 1601.960444][ C0] [ 1601.960449][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1601.960464][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x54/0x70 [ 1601.960495][ C0] Code: e9 d1 fd b1 09 8b 82 24 17 00 00 85 c0 74 f1 8b 82 f8 16 00 00 83 f8 02 75 e6 48 8b 8a 00 17 00 00 8b 92 fc 16 00 00 48 8b 01 <48> 83 c0 01 48 39 d0 73 cd 48 89 01 48 89 34 c1 e9 97 fd b1 09 0f [ 1601.960507][ C0] RSP: 0018:ffffc90004de7448 EFLAGS: 00000246 [ 1601.960518][ C0] RAX: 0000000000054dcb RBX: 000000000005a932 RCX: ffffc900062db000 [ 1601.960528][ C0] RDX: 0000000000080000 RSI: ffffffff828709a7 RDI: ffff88804d502540 [ 1601.960537][ C0] RBP: ffff88813fe74160 R08: 0000000000000007 R09: 0000000000000000 [ 1601.960546][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffffea000000000f [ 1601.960555][ C0] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 1601.960566][ C0] ? page_table_check_set+0xd7/0x930 [ 1601.960585][ C0] page_table_check_set+0xd7/0x930 [ 1601.960603][ C0] __page_table_check_ptes_set+0x27a/0x4e0 [ 1601.960620][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1601.960638][ C0] ? copy_page_range+0x1a11/0x5b20 [ 1601.960658][ C0] copy_page_range+0x2197/0x5b20 [ 1601.960689][ C0] ? mas_wr_store_entry+0xa1/0x1e80 [ 1601.960706][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1601.960729][ C0] ? __pfx___might_resched+0x10/0x10 [ 1601.960746][ C0] ? dup_mmap+0xcfe/0x21b0 [ 1601.960763][ C0] ? down_write+0x146/0x1f0 [ 1601.960779][ C0] ? up_write+0x2e5/0x5c0 [ 1601.960797][ C0] dup_mmap+0xd44/0x21b0 [ 1601.960819][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1601.960835][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1601.960857][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1601.960872][ C0] ? find_held_lock+0x2b/0x80 [ 1601.960891][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1601.960914][ C0] copy_process+0x4588/0x8030 [ 1601.960938][ C0] ? __pfx_copy_process+0x10/0x10 [ 1601.960957][ C0] ? tomoyo_path_number_perm+0x188/0x580 [ 1601.960976][ C0] kernel_clone+0x176/0x9d0 [ 1601.960998][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1601.961017][ C0] ? rcu_is_watching+0x12/0xc0 [ 1601.961036][ C0] ? irqentry_exit+0x24d/0xa00 [ 1601.961049][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1601.961063][ C0] __do_sys_clone+0xd9/0x120 [ 1601.961080][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 1601.961105][ C0] do_syscall_64+0x115/0x870 [ 1601.961118][ C0] ? clear_bhb_loop+0x40/0x90 [ 1601.961133][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.961146][ C0] RIP: 0033:0x7f2e4919e0d9 [ 1601.961158][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.961170][ C0] RSP: 002b:00007f2e4a0dbfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1601.961182][ C0] RAX: ffffffffffffffda RBX: 00007f2e49425fa0 RCX: 00007f2e4919e0d9 [ 1601.961191][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411 [ 1601.961199][ C0] RBP: 00007f2e49235024 R08: 0000000000000000 R09: 0000000000000000 [ 1601.961208][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1601.961216][ C0] R13: 00007f2e49426038 R14: 00007f2e49425fa0 R15: 00007fff9ac74b88 [ 1601.961230][ C0] [ 1601.962100][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g114785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1602.458605][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1602.468564][ C1] rcu: RCU grace-period kthread stack dump: [ 1602.474433][ C1] task:rcu_preempt state:R running task stack:28824 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1602.487917][ C1] Call Trace: [ 1602.491185][ C1] [ 1602.494110][ C1] __schedule+0x125c/0x6730 [ 1602.498631][ C1] ? __pfx___schedule+0x10/0x10 [ 1602.503476][ C1] ? find_held_lock+0x2b/0x80 [ 1602.508154][ C1] ? schedule+0x225/0x2c0 [ 1602.512482][ C1] schedule+0xdd/0x2c0 [ 1602.516553][ C1] schedule_timeout+0x127/0x280 [ 1602.521401][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1602.526767][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1602.532045][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1602.537845][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 1602.543299][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 1602.548053][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1602.553330][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1602.558261][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1602.563448][ C1] ? rcu_is_watching+0x12/0xc0 [ 1602.568211][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1602.574015][ C1] rcu_gp_kthread+0x179/0x230 [ 1602.578681][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1602.583866][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1602.589673][ C1] ? __kthread_parkme+0x18c/0x230 [ 1602.594698][ C1] ? kthread+0x13a/0x450 [ 1602.598925][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1602.604110][ C1] kthread+0x370/0x450 [ 1602.608166][ C1] ? __pfx_kthread+0x10/0x10 [ 1602.612743][ C1] ret_from_fork+0x72b/0xd50 [ 1602.617330][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1602.622435][ C1] ? __switch_to+0x800/0x10f0 [ 1602.627100][ C1] ? __pfx_kthread+0x10/0x10 [ 1602.631677][ C1] ret_from_fork_asm+0x1a/0x30 [ 1602.636450][ C1] [ 1602.639455][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1602.645767][ C1] CPU: 1 UID: 0 PID: 20400 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.657124][ C1] Tainted: [L]=SOFTLOCKUP [ 1602.661429][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1602.671468][ C1] RIP: 0010:smp_call_function_many_cond+0x58e/0x1870 [ 1602.678141][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b4 9b 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 [ 1602.697738][ C1] RSP: 0018:ffffc900057375f8 EFLAGS: 00000293 [ 1602.703809][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdb952 [ 1602.711767][ C1] RDX: ffff8880b4040000 RSI: ffffffff81fdb92c RDI: ffff8880b4040000 [ 1602.719985][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 1602.727943][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1602.735901][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 1602.743857][ C1] FS: 00007f45ba3f6c80(0000) GS:ffff888123eed000(0000) knlGS:0000000000000000 [ 1602.752774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1602.759354][ C1] CR2: 00007f45ba65a7e8 CR3: 000000003adab000 CR4: 00000000003526f0 [ 1602.767315][ C1] Call Trace: [ 1602.770580][ C1] [ 1602.773502][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1602.778702][ C1] ? trace_contention_end+0x126/0x160 [ 1602.784069][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1602.790385][ C1] ? ldt_dup_context+0x45/0x300 [ 1602.795230][ C1] ? find_held_lock+0x2b/0x80 [ 1602.799906][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1602.804836][ C1] ? ldt_dup_context+0x1a4/0x300 [ 1602.809773][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1602.814967][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1602.820072][ C1] flush_tlb_mm_range+0x45f/0x16f0 [ 1602.825179][ C1] ? dup_mmap+0x12ec/0x21b0 [ 1602.829675][ C1] ? dup_mmap+0x12ec/0x21b0 [ 1602.834172][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1602.839712][ C1] ? up_write+0x2e5/0x5c0 [ 1602.844037][ C1] dup_mmap+0x1307/0x21b0 [ 1602.848375][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1602.853044][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1602.858851][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1602.863788][ C1] ? find_held_lock+0x2b/0x80 [ 1602.868465][ C1] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1602.874370][ C1] copy_process+0x4588/0x8030 [ 1602.879039][ C1] ? __css_rstat_updated+0x1ce/0x5a0 [ 1602.884330][ C1] ? __pfx_copy_process+0x10/0x10 [ 1602.889346][ C1] ? rcu_is_watching+0x12/0xc0 [ 1602.894107][ C1] ? __pfx___up_read+0x10/0x10 [ 1602.898862][ C1] ? do_user_addr_fault+0x7de/0x12f0 [ 1602.904144][ C1] ? do_user_addr_fault+0x7de/0x12f0 [ 1602.909428][ C1] kernel_clone+0x176/0x9d0 [ 1602.913926][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1602.918950][ C1] ? find_held_lock+0x2b/0x80 [ 1602.923621][ C1] ? __might_fault+0xc5/0x140 [ 1602.928287][ C1] __do_sys_clone+0xd9/0x120 [ 1602.932879][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 1602.938101][ C1] do_syscall_64+0x115/0x870 [ 1602.942686][ C1] ? clear_bhb_loop+0x40/0x90 [ 1602.947361][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.953246][ C1] RIP: 0033:0x7f45ba590636 [ 1602.957653][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1602.977251][ C1] RSP: 002b:00007fff738dbf50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1602.985660][ C1] RAX: ffffffffffffffda RBX: 00007fff738dbf58 RCX: 00007f45ba590636 [ 1602.993619][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1603.001577][ C1] RBP: 000055bc0f67e5e0 R08: 0000000000000000 R09: 00000000000000d0 [ 1603.009536][ C1] R10: 00007f45ba3f6f50 R11: 0000000000000246 R12: 000055bc0f68cd80 [ 1603.017501][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1603.025470][ C1]