last executing test programs: 12.498106121s ago: executing program 1 (id=1884): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1401, 0x201, 0x70bd2d, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) 12.110742237s ago: executing program 1 (id=1886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x20044044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) syz_open_dev$MSR(0x0, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r6) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x29ce}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x4d3df2ec829dca2e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r2, r12, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x228, 0x0, r2}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x168, 0x0, r2}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80)) 11.808264315s ago: executing program 2 (id=1887): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private2]}]}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000340)={0x3, 0x0, @c}, 0x29, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0xa0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x28}, 0x28) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x2e, 0x1a}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033a43885430f18d1565ff8c571a26b926f7b36", &(0x7f0000000780)=""/26) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000500)={0xf, 0x8, 0xfa00, {r6, 0x2}}, 0x10) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000040)) 11.698325375s ago: executing program 4 (id=1888): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r2, 0x0) r7 = socket(0xc, 0x4, 0x3d) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e60, 0xc, @local, 0x10}, {0xa, 0x4e24, 0x0, @loopback}, 0x1, {[0x8, 0x0, 0x1000, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f000077d000/0x3000)=nil, 0x3000, 0x17) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 11.602201932s ago: executing program 3 (id=1889): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f00003e3000/0x3000)=nil, 0x3000, 0x300000e, 0x32, r1, 0x3000) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x7, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000040)={0xffffffff, 0x2000401, 0xe, 0xc4d3, 0x7, "0441920887e87fcb367800000000080100", 0xa, 0x200}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfea8) 8.430312919s ago: executing program 1 (id=1890): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xfffffffffffffffd, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xad, 0xffffffffffffffff], 0xffff1000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.361883891s ago: executing program 2 (id=1891): io_setup(0xfffffff7, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x24000000) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x1, r3, &(0x7f0000000340)="0911f8b12fafd7537555bff4e5cfb067d809ba7bcf0a4d586d13f3a2fbd874361d3d31819ca129c3e7f6deb208f28cda7d8f3f676a8d68e18a0c478a807a1d7a9f72032b3c09904bfe33463ebcf5cbd22627c7a0fc48241b0ba669932cd8725c029923c17c13bdc1426c9fb2f5e3e2c9551cf3eedc5bfb1b69a1ec01941072", 0x7f, 0x6, 0x0, 0x2}]) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e61afb9fdd672bad09dfb78c7699c74e891a00200ffffffffffffe4000000000000000008000240000000000e00010049444c4554494d4552000000090002007379"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) chdir(&(0x7f0000000280)='./file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a00000409"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, 0x0, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x840000, 0x85) umount2(&(0x7f0000000040)='./bus\x00', 0x4) getpeername$netlink(r1, &(0x7f00000001c0), &(0x7f0000000200)=0xc) lseek(r7, 0x101, 0x1) getdents(r7, 0x0, 0x0) 7.527009489s ago: executing program 4 (id=1892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) setpriority(0x2, 0x0, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r8 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r8, 0x0, 0x10) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r9, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @time={0x8323, 0x344}, {0x0, 0x3}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfa, 0x94, 0xfe, @time={0x4, 0x80000007}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x8, 0x6}, {}, {0x0, 0x6}, @time}], 0x70) prctl$PR_SET_MM(0x23, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 7.421482263s ago: executing program 3 (id=1893): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x4, 0x10001}, 0xc) 7.075897037s ago: executing program 3 (id=1894): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0xa, 0xb0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13, 0x7}, [@extension_unit={0x9, 0x24, 0xa, 0x1, 0x5, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1e, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000001840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1186dd6c00000000082b010000000000000000000000000000000000000000000000aa000003a1660000000000000000000000e466b4a588c8e482528611a8152eb1add32137ee394ea1debccbb78c8c12c520975c4dabf25810e19c598b275fc4cde1b3a2c05444da917b6e397ed3d43f2724d3ddd9fdb2293c33594cbc6ee581433ff02ff0ed452ad221a345a1b09796d7a692e395d11ace"], 0x0) r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c0, 0x24, 0x10, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x190, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0xe191}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x102, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x857f, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb987, 0x0, 0x1, 0x1, 0xa, 0x4, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x51}, 0x24008810) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x140, 0x0, 0xfffffff7, 0x2, 0x10000007, 0x1, 0x7ffc, 0x30000002, 0x7, 0xc72d, 0xffffffff, 0x7, 0x3, 0x4, 0x100, 0x72f0, 0x101, 0x6, 0x6, 0x404, 0x4, 0x484, 0xa2dc, 0x80008, 0x1000, 0x80000001, 0xa, 0x2, 0x3, 0x3, 0x4]}) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001780)={@fda={0x66646185, 0x6, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000001800)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 4.908739302s ago: executing program 1 (id=1897): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109141, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xfe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000080) fsetxattr$trusted_overlay_redirect(r4, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0x40, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 4.341629081s ago: executing program 2 (id=1899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x488f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) pselect6(0x40, &(0x7f0000000000)={0x200000a, 0x4, 0x0, 0x1, 0x4000000000010001, 0x58, 0x938c, 0x8000000000000007}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=0x41424344, @ANYBLOB="0012610000000004"], 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 4.202231028s ago: executing program 1 (id=1900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x410fd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}, 0x1, 0x0, 0x0, 0x8050}, 0x20044044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) syz_open_dev$MSR(0x0, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xffffffff, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r6) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x29ce}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x4d3df2ec829dca2e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x3}]}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) getsockname$packet(r7, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000004c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x1, 0xdc9, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x1}}}, &(0x7f0000000540)=0x0) syz_ublk_setup_queues(r2, r12, &(0x7f0000000580)={0x0, 0x1d8c, 0x8, 0x0, 0x228, 0x0, r2}, &(0x7f00000014c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcba3, 0x100, 0x3, 0x81, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x130d, 0x4000, 0x1, 0x1cc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece3, 0x8, 0x3, 0x8e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e19, 0x2, 0x2, 0x168, 0x0, r2}}], 0x4, &(0x7f0000002f00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x3, 0xc0, 0x0, 0x0}}, &(0x7f0000002f80)) 4.193458836s ago: executing program 0 (id=1901): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x100, 0x88c, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="800000001000810502000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d0040040000000600012800e00010069703665727370616e0000004c00028006000f000200000006000e000200000008000c00ff010000080004000100000004001200"], 0x80}, 0x1, 0x0, 0x0, 0x640608c3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x4000000003c, 0x5, 0x0) 3.08216138s ago: executing program 2 (id=1902): close(0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x440, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r5, 0x80286f4e, &(0x7f0000000100)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r5, 0x80286f4e, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.923357366s ago: executing program 0 (id=1903): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r2, 0x0) r7 = socket(0xc, 0x4, 0x3d) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e60, 0xc, @local, 0x10}, {0xa, 0x4e24, 0x0, @loopback}, 0x1, {[0x8, 0x0, 0x1000, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f000077d000/0x3000)=nil, 0x3000, 0x17) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 2.125278406s ago: executing program 3 (id=1904): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001300)="16d73f4c20944e29aba243bf101b11a1fb3f7e1967f7fa9aebbc49868930d981556c5713971a24fd89893ac98d3b0657deecd1aab8b3d04bac70314fdecd3f25c0239e4bbff8ffb3b45a6ad44936a2caaa56aeb400c8b2a6373d7effb5c6fde776343474b64e96ef10167793af4f62a48b1fe4854e04034a6e5fe61aa2e10556614ebaae938f25859e729a30c6fdeab5cb5674b4b0c42d166ba9f5d00eab51c03c48b5b2a077085bedeb208504d589f5e172a916ce3abc0d5a6521e1f362563614c35c4fb976b93b482347f77985156a5796ae23e8a920c297908a28290fe18f673659ac1915143af988e4f7b15b6a7d849e5bcdf2ceb0e861973885eecbbcef06dbc8594cd573a8107baeacb8824cfacad048ef7ebfa6ff1088deeba6fa5f329ccc1a781448ff62e013d14117ae5138e8124b62e6736150730a814c45d64ae6266f5e3c216e9a65f4fbecc2a74878ec8c4d3b0264c863d8fe0cb75da76d26a5c98d1258398d805ae5c02bdf83e6cd0949a9f897bb12bac3ed4cdbc05fbcea6b978b998dd43f97d80dae36f7a5b2343d2d6d81a2f4d73e30bc9f68f0604ce9b624867739d6b675112e6fa4d8bfb931998f132cd4a666d6cb3b02c2f8a9ae11f6560d5a47c226b4a70a126ab4348a380801cb5692728321269c9fa037c96f7e4f9941df36cbbd8b0edb80d6105a5f9af5df1a9e45741887d27a6464da7d8c47c15879ab47489c78007f4d95d7f37943600f450d383213b8d838033da7dcb097313f6e577d45e3c0f5d0af08dc980dd2f7e00da274bc451ac2eee378339eb308e87caa6564b327e1643f31e2c7fe5a4d26f88843b36fc678895a6007b4d46b518ec3cc9a5b97b3f10f7b41cbc879b90e21e448a7794f34286c162f46b5105d682276a0bd8fb1e010434d281569fb6613c95869355141a48b43483ffe14c4e4d7f560cbb8409bf38af38a2773b2270217940cd33a7802885dac4fac6e599ebda0a7cec487e3223c55e7e2b29672470b539d153b93a84cc6712207f02d0c9639e19a56bc79ea229708c09837cf6635b32449a50ef68ffaf9d3f6b7d151e4bcac1fd73e94cd3fbd7d7474be9be968b006822833018f798105a9d265a02e883a49af57246b94c6afeb4f01fc7ffbb62cf11aefc8ed923f2666a558855bd831eb799c392e39babc8ad07f144ad2da298e09318d86d8785833630f42fc78b7d092ba4a5401c0e28f89e36e8804080dc03620661b5f0cbb191b3eb20297592d72c2d8ebaaeeffc1bbc14f960880e8705e6361955035c103a3021330844ece755a40454c3a38b7a556bfdb0a7f3e3501a55d3dd164439ccd1d08ffcc89ff41841a204da8e1221e2b740682e2436d7a8cf2406bc6ea51c65b43f6dc004233be72f52e3277eb28afc867e8e39f7fd13de8d2bfcb770e07d75f6ec161c7c55f01272fb31f6a49d01d48cc46700b01655ba9109eed46afea6a6973a59449b07781939216c1fdd9368d4852a036acb4e4d05563137351b1237bfe064ad111eca09cb7c526aa40b430a7245efdb27481d95c6b3390866f7c53cd7f2fd511a3f979afac58b6d6ca8906321fc1f4ab648f8f9150aa49d51b59990ff915a341bca78c41afe971cd52a58ab78901fcdc3383b19f36c57f95d0ccb891737e00dc1184ebf81b0f126c4a12fb9a26b6cae47870b6309573b58d6c45c37c6b151d386564df46e9d611aecc9530def865d0fa0e48cacb0afed32f6f8d29c9987ba82eeff972b4309c50a88e3d8a0e550c2307204d6b48276e5c42fbd0545d00090c7327e8bed051adb797c0d8d9c018fa624c5451edd3b34e32cbb3771c0b964a54a41c5aaed4b548cd3e951474714e8cb0fa7b2b620df3da9e6a5f1314ca3595191259b4a511dceb9df40da86d9d65209d5292a9236f03ec794af4e6c326371f57d0a82b522a4028dfb05dad11200c3dac4a86619562175c5e39fffe8a96aca1c69e7eca2fbe198af3f92d3fc52dd6a800f342b82787f8dbda8bbd1a921df6b067a134b9de89d1223f1cceff06724dfd4e7ff15c56c622aa1843f9d0eb73f35a1ad92774e96d00282dffe16e05a60cf4f88bc1696cec071ff677ca2ca1ecf713a383fca6a2f83dcdd7bfda5e8ceb8559ca3f376fe2e31293fde6f9c3ff8eb15820548c6e1be0a367b3a97c3487fab4c0e517f2661dbf75aeea88fb0374a7de21fa2fd6539371eed39bdbacd696487f9ccd37e78ad53ac7f6b49428e6dbcfb54569b13daee9d503210c155587c2dc321d78b8912af18de49cb614021580cc0c27826518f2ab4a9fb60be394c4040bf27e8f63d20d87fc3bde15256047187b94b2d1f5fafde228f52e1e5c12358cd3e84cd77352629a85212dfd45aa51bbc434207a12dfe254de4d1e861b40edc2b77bf462db230d154abc62a8ae9821cc85a1220ef2796a0b031ed980e3cd00030b35e7067e68b60539174afe48597b7dffbbb035b4334dab1cd578ed491d55e32aedf3efd606ae45d9bdbd62a78b92ef00698636dcc32368fdf224ff48f9f45e26447c3c98c4429fb15359f420ee40b0f20fd1f84a7bd1ad0696875db71d2ce16d0caf1b0877a01f9d6fc2030b68d6a02ec327cabd315a3e05d6179e42d1b3f431dcd84c8affa9f71043606308e6a9e5c2e63f90a0a04ffa433a9c3376ecdcd698c76e74d6b705c55e99d282bf5ab1cf9a564722acbd81e23d44081daa3ad4b9660745ad4c205c0bd60393987d6f2600c268015e3027f7747770bf210aee18ee20e5d2730cbc035257cac6697a020314fad6d3c40a07753855729c13065baa42d8c34e6c94530ecd23607d127fe25896afacfb86844998751fc30b442b881ea854a8bca4776d5ad5a4f8b004aa64b072dadb5595248fe53717fbfdd930a791053cfdb80627391ae98aa70b68f918e46851805e56630caeb0a0d98158d68ef3e6bde6085db9b4e8beb4268dfe28e3bf18d880af3218ae19985c6b4781dd69f5c125888e67022d133e5098d4fd9805d141a689fc2cd8f91b899a78f709e03c6da49a83cc568306bd0f70f225242f7a6183b4b9c29d4a2a4a77b33235ad2e96f0f94e37237e0a3692bba933f89c459015a46eab71f6ebfb09320ef70fa9ed05310332e0e1b9f05b1984591327d324206ee5fa4867378cfe674ef10ed6aafd3f060f0778653697188f71733488c1734d7425d68b944367923637c2517fd924b56e2b7ffc846fd8e7e31d974cc151ee7c43e2dd7422ce845ac13822c27ecc45982667eece3d30b832a42ff479a4ac72527317a75f0caa7f91451e076427ef36f91cef9d3986ddbf1a12e7c8ebd7cab1510cf3a26d1cbd90075f04942d14d61b7dc6e906cc708638c6f4f3561acdee0d7058f52bacbe6b2b2595103175981cf68c64f78522c694f11b98ccddf46d17f720ed60b46c7c17d255b4c4a5f750dc425b5bce8f63d5ca15eb49e8e77535401505361fbd7601e1af65749892c1d23b6ef885468046f8fbf694f21a756e5b188f97ebf4e97170825a3f565cbff5479ec000f606ac68bc3def92c3c6e7c3909605af0ea1654e9a12f418fbccb67c5132fc4806da2c1b38e163c49d0d3a56eafc484ab53094815bb596cf5c5a8e566ecc3f076b64c7afe72f8b87ac1903e92cf9ce48ac213dc19348382e6afaa2908caa081c944cdaf6cca1fe8e5e697e8476a7d28e90cb9b99bf0b26579032abd42f0353d0fa609b5e11932aeadc03fd4532bf3accefa1c55b6194151efe0cee54f3fd969e7695f2e3b2e6a4450e20b83dde9135dbf4b578e4782aa19fcb39a65e4c43a6eb07aa46bcc935cbba1368ea32f678bf0174344f3f95ee792f84a6532ef713a90bc75ca74bde040ec2a3c53066bf6a4140392cd07d73d0f4111e8d926c783b54fd3b8677b6c7f489184fc64fe41a76182283aac06f0607683a0977f91c70bf2cf6a85dd889cca54887d4a400af1997c311ed74869e1224dd6df6ac044a00d8027a4de710763a4b11af54b56eb52a92ecadec65ac2ee7742df2d59e28da932938d558b499a3f82a60c89fde2f2a5200f87c416bd76f39333335c621bbfd5e9a5c40ba0fc7200897f20975287e6c251e8096b2d7d4be2d95eeec23ffc67b1177576133dd6f028c1ac6ba4df3859301664f09b61df5ff8d3277ea631684e02c148b51ca91eeffc23745b38794247e29fe95b2dea917637a5a3d2bbfa896ff0912f586eb7a00bfc5ceb46e22dbc0211d04830200f20866b60929a3d3d43bc983b6f7a538bf4e971165ec8ddefb8100846f5c415df0f2f3cd99493ddcf5be9fc05cd274f1130d95391cf3b122f1ed2e5d86c5631565d4da6a7c0abd1f6666d3ea879049586dbb7e9909b8cf886b1b60628f6fee6e375981f8958b670c13aab553eb92e2b499ce696cd606f1b8bd61b97099d94776bd0234b5ed435c95565a815d4e49ff576e8610519df7d1420077a5faa6e511714e9023d59e674e64037fed386425ebfb7a87bcedb81d9a0626e8f274dfc00482719f034ac44831b5f084123e0983e4559114c1a08cc0d653e29bfb87fea21c1c662bae0ae88fd6e5326853827ccf8f127a0828f6a445192ebceec8be43dee528b0d56254dbecb37a1130b41eb3a3f998f3d5bb4c5b4e38c48c11195ab891eb5bb0a3c7c2b205b8c6855ace442a5a63eba4acbb2998545da5c727b417805e46a94052a383b34b77587620e44107918cc0bcb1b2de783fad8250cd253d2cc8c97529eb2f4e8e1ad75d1bd8939cb78dab74e6ed217581adda2e5bf7c52b6c0d168c7508d571d4100f69b1d9d2799d8f82a44f47cfd9fe7418019505731820603674dd0d99342e0aed7d474a787dfd2033f982c4cb6ee74ebc03d2b9aa7f24121251a8a86e301babf2382e017c1cadb518b81b15982eab8ce810e51ad6123786c44f2d014df5d3c187f80edff995e33f5c2be4863345fdf205ff649e8e7102138267e73836bee5906819f538ff3f15a511c398b3617d1a963aa700a4311b6ebd59178df263edc445b24e486c3e2ee60a5c7d49b065ff08668c4cea0383cdd9dc380d0307261666c314063cc630c70d064ac1aa00177238226d5319973de8c509927fc92367bb081c1282bd1951dc35d10089c3c1fc953b1bf9d2de1b5c02f8f8ea9b66d9babbbfbe89d0ecfab821fee1fe2a9a0b42", 0xe43}], 0x1}}], 0x1, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907835d8e8278b540000"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x121801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x93, 0x0, 0xf, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x80ffffff}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.970036137s ago: executing program 0 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.895442595s ago: executing program 2 (id=1906): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r3 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept$phonet_pipe(r3, 0x0, &(0x7f00000000c0)) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) 1.779959567s ago: executing program 0 (id=1907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe8302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xffffffffffffffed, 0x100000000, 0x0, 0xfffffffffffffffd, 0x2000100001, 0x0, 0x2004c8, 0x7, 0x4, 0x1, 0x7, 0x8000, 0x2, 0x0, 0xad, 0xffffffffffffffff], 0xffff1000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000240)={0x20003, 0x0, {[0x9, 0xc9, 0xf3, 0xc0, 0x7, 0xab, 0xd0f0, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.571636587s ago: executing program 0 (id=1908): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fanotify_init(0x4, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6907e6e2ea2f7397) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='encrypted\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x2000000000000090, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xffff7fff, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="e40000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000001200000a0001000000000000000000944398af4e22c9e7280001000100000000000000000000000000000000000000000000000010005402000800000031010000000000000000030016000000aaaaaaaaaaaa000000000000000000000000000000000000000000000000000028000100a00e00000180c200000300000000000000000000000000000000000010001107bdc3000014000b000200000000000000a40300000000000014000b00080000000000000002000000008300000000000000582a000000"], 0xe4}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000140)=""/175) socket$inet_udp(0x2, 0x2, 0x0) 1.406769788s ago: executing program 0 (id=1909): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000000009040000024f6996000905c6d6000000000009050202"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) 1.358966543s ago: executing program 4 (id=1910): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a06050045ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.170941462s ago: executing program 4 (id=1911): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000", 0xa2}], 0x1}, 0x0) 1.064713964s ago: executing program 4 (id=1912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x488f6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4810) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) pselect6(0x40, &(0x7f0000000000)={0x200000a, 0x4, 0x0, 0x1, 0x4000000000010001, 0x58, 0x938c, 0x8000000000000007}, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000881}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=0x41424344, @ANYBLOB="0012610000000004"], 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, 0x0, 0x0) clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 986.104373ms ago: executing program 1 (id=1913): r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x4, 0x0, "3632c48ef578cc00"}, 0x10}, 0x1, 0x0, 0x0, 0x84841}, 0x800) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f0000000480)={{0x7, 0x4, 0x4, 0x0, 'syz1\x00', 0x4e8}, 0x0, [0x6d3c, 0x6, 0x8000000000000000, 0x9, 0x6, 0x8, 0x7fff, 0xfffffffffffffffc, 0x400, 0x9, 0x200, 0xffffffffffffffff, 0x8, 0x5, 0x0, 0xe, 0x1, 0x0, 0x362, 0x1, 0x0, 0xcda5, 0x9, 0xf, 0x7d5, 0x6, 0xffffffffffffffff, 0x7, 0x10000, 0xffffffffffff8001, 0x2, 0x300000000000, 0x3, 0xc19, 0x416, 0x0, 0x33c244e4, 0xff, 0x86, 0x6, 0x2, 0x2076524200000000, 0xfa3, 0x10, 0x4, 0x7, 0x0, 0x8000, 0x5, 0x4, 0x6, 0x1, 0x2, 0x6, 0xbec7, 0x6, 0x54, 0x5, 0x9, 0x42, 0xfeb4, 0x5, 0x5, 0x1, 0x3ac, 0x80000000, 0x1, 0xd, 0x1, 0x5, 0x1, 0x2, 0x8, 0x4, 0x8, 0x3, 0xf6, 0x8000000000000000, 0x8, 0x0, 0xfffffffffffffffb, 0xacc, 0x0, 0x4c06, 0x7, 0xfffffffffffffff7, 0xaf, 0x3, 0xffffffffffffffff, 0xffffffff, 0x4, 0x4, 0x4, 0x2, 0x8000, 0x80000, 0x0, 0x14fd, 0x7fff, 0x9, 0x2, 0x4, 0x8000, 0xb01f, 0x8001, 0x8, 0x1000, 0x401, 0x7ca, 0x2, 0x7, 0x2, 0x8000000000000001, 0x7, 0xd5, 0xff, 0xfffffffffffffffa, 0x6, 0x2, 0x6c1, 0xb87, 0x9, 0x256, 0x3, 0x4, 0x2, 0x3, 0xeff]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r10 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) readv(r10, &(0x7f0000003a00)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r11, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x6508, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="020108dd012918000e3580009f0001140000002f0600ac1414b0e0000003808a8972bdc933091ce132d73006"], 0xdd12}], 0x1, 0x0, 0x0, 0x20040090}, 0x54) 391.705991ms ago: executing program 2 (id=1914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0xa, 0xb0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0xe5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x13, 0x7}, [@extension_unit={0x9, 0x24, 0xa, 0x1, 0x5, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1e, 0x9, 0x10, {0xa, 0x25, 0x25, 0x5, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe3, 0x1, {0xa, 0x25, 0x25, 0x2, 0xd, 0x1}}}}}}}}]}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x3e, &(0x7f0000001840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1186dd6c00000000082b010000000000000000000000000000000000000000000000aa000003a1660000000000000000000000e466b4a588c8e482528611a8152eb1add32137ee394ea1debccbb78c8c12c520975c4dabf25810e19c598b275fc4cde1b3a2c05444da917b6e397ed3d43f2724d3ddd9fdb2293c33594cbc6ee581433ff02ff0ed452ad221a345a1b09796d7a692e395d11ace"], 0x0) r4 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x100000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x1c0, 0x24, 0x10, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x190, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0xe191}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_PARMS={0x38, 0x1, {0x9, 0xb, 0x1, 0xc, 0x102, 0x6, 0x7, 0x7, 0x10, 0x8, 0x1d, 0xf, 0x2, 0xd, 0x857f, 0x7}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0xbaa, 0x8, 0xa, 0xb987, 0x0, 0x1, 0x1, 0xa, 0x4, 0xa, 0x1c, 0xf, 0x0, 0x9, 0x32}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x51}, 0x24008810) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x140, 0x0, 0xfffffff7, 0x2, 0x10000007, 0x1, 0x7ffc, 0x30000002, 0x7, 0xc72d, 0xffffffff, 0x7, 0x3, 0x4, 0x100, 0x72f0, 0x101, 0x6, 0x6, 0x404, 0x4, 0x484, 0xa2dc, 0x80008, 0x1000, 0x80000001, 0xa, 0x2, 0x3, 0x3, 0x4]}) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001780)={@fda={0x66646185, 0x6, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x100a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000001800)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 346.227717ms ago: executing program 3 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x700, 0x0, 0x8, {{0x12, 0x4, 0x2, 0x4, 0x48, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x26, 0x3, 0x5, [{@remote, 0x2}, {@private=0xa010102, 0x8}, {@loopback, 0x5}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}]}}}}}) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@bridge_getlink={0x98, 0x12, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x1000}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'veth0_to_hsr\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'vlan0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x2, 0x5a, "b9e3dc9e28deba40a5caa8a0cd1d5fd0c81268510846e8866127eaf54651597b7edbb01a989dbd06943cec3333d79d46fef3a826f05284fdb8acd348661b9f484bd193a7a52ae948cbe5b5d4b725528eb6651068c757227f4617"}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000003c0)=r5, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000400)={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @enc_lim={0x4, 0x1, 0x1}]}, 0x18) r6 = syz_open_dev$vcsu(&(0x7f0000000440), 0x9, 0x40000) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000500)={0x8, 0x8001, 0x8, 0xb, 0x8, 0xc12}) setuid(0xffffffffffffffff) pread64(r6, &(0x7f0000000540)=""/104, 0x68, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x81, 0x4, 0x8, 0x81, 0x16}}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44010) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000740)={r5, 0x1}, 0x8) timer_delete(0x0) io_uring_enter(r6, 0x34ac, 0xc0c7, 0x12, &(0x7f0000000780)={[0x9]}, 0x8) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000007c0)="9453fb2ab353e7ad6b1dccd7139516c8") setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000800)={r5, @in6={{0xa, 0x4e24, 0x4000000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xdb}}}, 0x84) r8 = request_key(&(0x7f00000008c0)='pkcs7_test\x00', &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000940)='\x00', 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r8, 0x5e8c9e46) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r6) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000080) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r6) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r10, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa1c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x804) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x40) 200.344301ms ago: executing program 3 (id=1916): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r5) read(0xffffffffffffffff, &(0x7f0000000040)=""/138, 0x8a) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x28000080) sendmsg$inet6(r5, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) syz_open_procfs(r2, 0x0) r6 = socket(0xc, 0x4, 0x3d) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e60, 0xc, @local, 0x10}, {0xa, 0x4e24, 0x0, @loopback}, 0x1, {[0x8, 0x0, 0x1000, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f000077d000/0x3000)=nil, 0x3000, 0x17) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 4 (id=1917): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="3686af105a9427fe9c5d3e3697e26d7508300dfa9d71135290e9e1e1da6be6aa6f0e4ffaaeb02ae18cceb253e160e4ce22cc69cc38efceacbe95525ad600"/73, 0x49}], 0x1}}], 0x1, 0x4080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x5, 0xb, 0x380000, 0x8, 0x247, 0xfffffffffffffff7, 0x9, 0x2, 0x8, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0x3, 0x4000000006, 0x0, 0x590, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0x8, 0x8000000000000000, 0x0, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x0, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x800000000, 0x5, 0x7, 0x7, 0x3, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r6, 0x1f, 0x20, &(0x7f0000000000)=0xfff, 0x4) write$nbd(r5, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x3a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001880)={r5, &(0x7f0000000880)="4ac6a6728c7057c003ef14ffac9a8ede36268acefa248ac0847fbd52a6b941d0056b15e142d1ace4efd6bd4e5e6af46cbfb203b1bb8f4cbbb6c93d2830ff33bdf8e772619bb8b597ff939dbe3f8450766f786bfc46329bdc255d2df667412e93f8d31d81ede15db8f94b45131aab7201f29866b2dc17511e9ad3d73233b27a2c6b762e19ae058e19b3211efd5dd379afabd9337ac8f6fa6a048c3393a6833ef97932f4c845825fcacaab0629e420cabac4c87239f6212888881ae6169d2bb1506e06b00afb65f7f1b142496b2bd919266190d34c3e3a00dd2ba7953ac030d74abea09cc2780b61a88e83c46e9a8a605e3f8fa28f23e15ed5329eedd31ec396688a155467e318d0b8ba34c7d191a4ddd14ceb3a6c337de63d36c303233b0818b2a8481a602a5230d5e601905f07c1fed05d7605737b3d37cbac980494997f85e61c510a70d4ce705a7badc197c700c9a2b2d506decaf301983361b57ecc4f64f89bbfc552400a0b7eae787607e32a0cf985813cca32ea18dee39da4bc4ded12ec983eb9b5b51fdb94f11da9eb87b86756d2f6c2df637ef6a89432c68ebff0e7826efe9e633f072a1e29de97fcff16b30693dd1df20e1a89dc4ca728073bf0edfce4644da3b48468a1c2433636f4d2e48db8ddb3d942496bb11d9ac7c388ae2062916018b4eaf8843465c40962e1b7cb062d32db236020e99d8de18a70862885532a4dd17ad383cc1db443f23c6e5ab44ddb5fcfebe1225dcaed0595194f179db455d7e5efe5df5961b437293a8f2436a90cf94a64c07e86bf1989bbc7044c4e15021f9c33c31740a8ae7a073e8b507341b70896b44fd00af117e601635a8d9613695848934e22b30587476062185a2d9a1f258dbf77cacb8ffe6cca1cc024fb11659a637e9bdfcf07b5a1ec0226425ad19e9bf0744501db925d2f46daebba755f3e44585e981816f53c32f105130f6757fad9fae496dbe4507c56d4ff3e2eaaacdab05e0bd46bd2822791ba43b2adf2e0954a1629ba06a30374997669e96ffe5003e7f661ded0631fd23c982496025dcb3cc5dbe1aae56389c09958b0e620b0453921fa21a6bfeab349930a6e9051e2491b9c87c89bfb0c54389a5a90671fab22538b6acb50d9140f0d3770c0f2683dfe442823242ae5bc84084971e96a666ff449a9bcc27022271443def7565264aa8ea5a4afbf1421ec72469c4d260122b8fd560b6f7acd2089c526deb89207375ee2ffa4c47b103560eac98b6b9b6a300dd6e23986b711a8a0b1918fccd2debef558886a0edebbd3ab7ba0b9368582ac287623a90cc443b55b563f1ec60edbb45d2734452222519ab04957f2b0bd5577080216c02c3aefa15a92c8f35eb72a4a282f2d167b91f5ec4ab61fcb4d0831c49a8a1e4e00cb48959a95211e85fd2150c5d046c5c759e0d579f75198cb57157e84cccadb281be9d4038d67589558c69a2743225713093c2f9b365b719b465f7e4dc7ae68403b4d049dce986ed04f624cac63ff0664ac14bc8a32aad5faf86f12cbce5e5ddd0d1daf1a224912ac53a0366d9c2725cc1ce359bfb5f5cd4e7d7ed8b7d5db761f8343e03fa1b638d8bc81b66f945d26f7519d2aeb77cabcf707a9a5ecb4b9e593aa5a6a961421f3c5fac0a1da1ad02d9e47369867ba3a4c57d01e2cd4f778249dd1f5fc7b59f5a7f8c1d6f5ede07fb95d5c954ea7723d4181219b71c8c7807cd87144049f3890b754c81882112827a37fa305ba3159fe920f1fdc255c8dc991941771c5f4ff580bce744a8b9639260ec345cd2328f8c467f970b897af04159f235f72f6cab529429ede677cd57fa6c5bfbff6cd2480e33c57d486714601f48162e8750fb1c2c815b54df3525ee311c591fa41f00812680fd7b9be619caf4af568437d77db5c6e42fa91facdde0893393e87f28039dabba1c29273517ca7bd224773dbcd0d0849003cdfcf6122d372623eba7e4f35773b11c840db2cd8c220c7f1482ab139f8ae3a7cea70e7a430dddc09be9017ee9f5e92dc3061309624c38cef0f695eacaa9932a2a935c8ba799c28e4b2f3e16fc2f643cef9e48ff344ecee342a7c1e13ce51f5d48958f954c76b45f8e9a7a4ee69c4fb53bff92659f461ae5b914ba66cc2e8ca64edded17de4f8d86f50ea1c4094b88e9151217302b9e233d306fb297a67178a75d52416bfe44938c174f9233f22a7d9fff3556f7eeb40d200af605160ec7342f3811faea07418701358d4bfc6d18e161ee6128edd7d321291da90dc852930ed0cf8098431e375124f4919f66f2cf539990f0f7f99a8e3bc55275cf60ea03251f9892d9b959efed12b84a27604687ae4469b5d1c28d03cb29e8cbf1b1ecde50c612b8c8890d8c985740604b4e3e4cea832ecfd3bb5038dbaea276eaa3938b20be57d66ceccbd4990a8d3682913a277e7b02181ec9d96f0bbab2892338326facfff4fb05323506be340d1556795dd8a49fd7d2f45ad0dadffef52533eb9105c89f61461d440292100f59229b260a70e3f9b831ab2c9f60996a9644d6676363cb05068460f538173408f6854a39bb7a999ab1047eddd3f6122aa0679995cd0dafca218766698a68fbf75056991ab5e7f8362cfa67b3c6a05ad87841dc8be1edd5d8a6972a8c7038cf6585ffdb8d549902a5dc58fb98847829871c23fe4ab996e9417018be5ff3f6da37b4cf48176f1dd8a257ffa739d8a2061baa1935439cd7e2f313aedbb003a96cdace07cc72d86dcbcc61f8c2938dbce32c9f17ddf115126c83a2dbadb44493dcc42dca8a785f5d9759e59cfe2758ae0910384a076325ca2b3c67f83a3c010f82f762978c8aabe38c30fdb7b881644175c2b6a828f60431707336d64d3768aeab7bd806a42dd18a239b95745f7f803b6110f5ef0d65dfad9b1e8d04bd42c651eee489d46bd296c790aaa34f739534070a76b0b876871edac7d2304099bb54884590b51aa680220cc2dbc9c3ecf5bf954eb51c1acd6549329e47140a1245f344274fd72a05d5c76ac6faeabdc7561aa375ffc54887720ecd405ff82dc4f9ed27f440d6be57f0653736e876d7109d03f126d52dc9d546eea34d00b442e9be7b5fa33b98e605926c8e39c1644c9cb39334d28a83cbc02f05e73e9b5d0a3be0caded1e7be2e7ed0b078bc0d749ac5483270692f39ed2b648b847d2fecbf56581745c0c15a6faa5dfac40e94f249cac74fcc297bb3645969590cb99ee9b630c61e0ca8c622f1f66732eec4af330a91ad60444d4de2c2aa47a902488b6202511b542935ee478880378d4e18ad26abde96a1c21c917dbd0c9e4233b79595a871b8abe23b078c1721d45fb36a9fa5249b7a9624774ac5e8f64785fa9c2421d717ff97cfa497d7b730d7d62d2c4678bf36a1a69cbecd94bd916949827fcd7f4ba30f7d5ebc6c851f7232fc98680154770b98e00f5294a87044150e0501686fdd409b060fe8773bc6e48b3ed6d96a0b2c06b05ed6382b8d6571e7704256e0589ec91cec529a587a6f5924c8089d1af458a2c058f465ee0bac693867a9ba3c1622eab93f0cb82dee81f49a825426c52f93e92efa2d516ada9fb34735ddc72243de09de60aca6e7738fd731d724d91b97ac59ce73012937de00f31b899f62677ae0ced6413d087b087d4af995305c2e286039b9c96d397e285eeba5f1b88a809550d7df9634b98f38fa37b881ce74b54d5e39e5fa21b4f1bfb50d2615d026a175f26bf41931905f416a16d7c1b98631987156982af8d09a86d51d1075614bb94b35f1fd039571489200902830da3d130ce2e0e70687c57d150ba6810db46a9841fe22502135a007bf5ef07621c0e0cb3c5cd2f02044b50481f92c2dcdcd2ded742d6209f476160f55934b4952474d31ae2fe4e3c062526f90f1d157e218689548b9428fe85d353c9c53acce7fae82211326cffeaa55e1d5f7b3d8d33ddf64db181942648ead68fa50d0221fc56faf2b6ee0819d0343272ab343aeed2915c03615d39d149d44e8d7665ce1a38435acd7024028f156ba5c325833d1c67e026048ed7eb8510f9a2e93ddd2bcd67a005d8cca6018179bcfa06ce3926390c53b6d5e7b8e1457e292e7e7e3b61c4004ea8f69bc07afcc38668f7321fbb1bfda0a34f833f99cbac160d71813070c9a6e8e0e726519dc93bf2036eef5aeaed26bf87fc2cb8eab8cd9418f518446dff64478541fcced68c874a88075f0a5968670bde512a2444c6abfd4dc8cbbc2d1025afa13a69caadf1896b343bacce6fc84dbc214bc8d512f62327cced78f1334dde05a19cd0c4442229f3af1ddace078aad37106f20e53b1c5fe92dd2dacdc4f07ba07397ff72ec9913ab6c8e66fc2c7a2622c4ff7ba27fd7def9dab918a0c7876f5b620b48eb893e608f332f483cf85594d3e71b309fcf9580e0ee83ac45cce642aa4d79fecc6ada27e6104f9238119e2b43122a15ac43e88c442a723eccac43ab5ae47050ac54c87590bdab5f8d6c195ef67520a4a7aedf10930e197f06cf546e036385d587db366180adf0f670ebd0e42e91ea3d33cf972d878af7fe93d6720a0d0adcd20f57495ae9e334f06916ce5d67b19da0228d1820a14f7c1d0077d683ff6ff8d93f8ec7753906f6351c8d34663a6b35edc9ea7d2be17fbe5cb5d1f3d6f08e511af7e4835e9f7f9d3e3259432924ae25bbb3ea463683f42a12cad569a7bb43c335ee153e21aa3a76f16d90a1cd4d7f4bd9d6928ce1750c62e79ab0c19e9af5dfe17af1bbdd041fd3c936b546a8f5e5b796dc1488c433e3fdf58309df4f7df6f84e9c9fba3bdffe4dffe9d300c339f8fffb92f3b3c4fe75b55c955a0ef42536c8181dc6131dbfb7d6a779ba7fd4075d46cd8a7e9e9dc41e33102da8a55db8c4e544a636c34ab557339dbc2337359508f15dc00ceb300469eace213e5271e9065e903fb54953288e593024cce2c6c0e3f295b354d57389686270512d171d055d4c5d1b1e519f8899829cd81b7577274ef337720b3ade83aa8826a6e5341d472191878b9326702e506f1847a2f7b25eedba0a04b0b118779497e1ab31be8bae65abf492407291be8a54346c333c75860c6de779b4c13b6e7305331e7db6506e88e91587c81bf816b1b9315763fd7ebfe6beb4f47014e3a9f198c4fc83944b4991b57cdbff3d7c7351becbfc0db7175fec16dd89b9fea469b1d81bc4da4ea137d0f871e72c065f318ddcb289108030b924b26b97f4a40df779cf766e0029da3713a53156c9de2ed0f3666f09833d7844d4f485143cb7a3393904796aa365e1830f06bec89b34d24053fc23e0bf699683131b0ad327418d7e9acc25dd67783cab30349ee97cca653034c7f0dc6b8b0e922602f30bfa2ee5ada218886b2d8a79daad247a13a96dba8c74a1f91176ca62ae315ec45622c0adfb254e02efbaac05bd3abfca614e0b9bfbab8500f87a8f253c4b06cd81ab6013e03ba854ac42b73ce47ee6ad75412afa4265a822c153e3f0bba475b20004f3fc77d40d6e024a3aed0c1101b59878ceb4624730ca1e3facb8fa6f4c69672235c0709d6488a166b5725a232105f3c8daa9dedfa345ab65a89c2082aace03740e7b6c947576624aae1b2698062d5c53d2a82dca42062cb4a91ebfeea98245df8d1211cde8e979e9d2ba6e3c229124ce7896a18639ed4c6a669ed9830a99b17b603248f5b0927deeb48ecd4c2c39d0e7440044544246e05c3c809af1febe1c881a8f846345f59881c843d2786aa82acf45e43ce13fd5aba3632081cc0be486ffd971247642c33764e7b4690cc29d7a9f76e83b"}, 0x1c) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x60b17f360213d71e, 0x1a, &(0x7f0000000740)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4c}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1328f}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @generic={0x4, 0x1, 0x1, 0x5, 0x932b}], &(0x7f0000000180)='GPL\x00', 0x6e7e25bc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) kernel console output (not intermixed with test programs): r: syz [ 453.979025][ T6418] usb 5-1: SerialNumber: syz [ 454.122968][T10292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.375635][ T29] audit: type=1400 audit(1781413256.341:1022): avc: denied { read } for pid=10291 comm="syz.4.1160" dev="sockfs" ino=29222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.404207][T10292] 9p: Bad value for 'rfdno' [ 455.185858][T10287] dlm: no local IP address has been set [ 455.191748][T10287] dlm: cannot start dlm midcomms -107 [ 455.739646][ T6418] ipaq 5-1:3.74: PocketPC PDA converter detected [ 455.746578][ T6418] usb 5-1: active config #3 != 1 ?? [ 455.772127][ T6418] usb 5-1: USB disconnect, device number 29 [ 456.301859][ T29] audit: type=1400 audit(1781413258.261:1023): avc: denied { create } for pid=10308 comm="syz.1.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 456.441540][ T29] audit: type=1400 audit(1781413258.411:1024): avc: denied { create } for pid=10316 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 456.531141][ T29] audit: type=1400 audit(1781413258.431:1025): avc: denied { read } for pid=10316 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 456.958104][T10322] lo speed is unknown, defaulting to 1000 [ 456.966939][ T29] audit: type=1400 audit(1781413258.931:1026): avc: denied { setattr } for pid=10321 comm="syz.1.1170" name="RFCOMM" dev="sockfs" ino=29324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 457.191208][ T29] audit: type=1400 audit(1781413259.161:1027): avc: denied { setopt } for pid=10330 comm="syz.1.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 457.385827][ T29] audit: type=1400 audit(1781413259.351:1028): avc: granted { setsecparam } for pid=10335 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 457.451073][T10329] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 458.145332][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'. [ 458.165037][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1176'. [ 458.997793][T10351] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1177'. [ 459.198430][T10363] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 459.244352][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 459.256098][T10363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=10363 comm=syz.0.1181 [ 459.459612][ T29] audit: type=1400 audit(1781413261.381:1029): avc: denied { create } for pid=10364 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 459.601795][ T29] audit: type=1400 audit(1781413261.401:1030): avc: denied { write } for pid=10364 comm="syz.4.1183" path="socket:[29424]" dev="sockfs" ino=29424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 459.839818][ T6418] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 460.216764][ T6418] usb 3-1: Using ep0 maxpacket: 8 [ 460.223024][ T6418] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.234479][ T6418] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.264841][ T6418] usb 3-1: config 1 has no interface number 0 [ 460.405662][ T6418] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 460.946510][ T6418] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 460.955920][ T6418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.964167][ T6418] usb 3-1: Product: syz [ 460.968360][ T6418] usb 3-1: Manufacturer: syz [ 460.973286][ T6418] usb 3-1: SerialNumber: syz [ 461.231535][T10385] fuse: Bad value for 'fd' [ 461.312767][T10388] lo speed is unknown, defaulting to 1000 [ 462.335694][T10362] xt_connbytes: Forcing CT accounting to be enabled [ 462.703329][T10362] set match dimension is over the limit! [ 462.799759][ T6418] usb 3-1: USB disconnect, device number 36 [ 463.225220][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.554907][ T29] audit: type=1400 audit(1781413265.521:1031): avc: granted { setsecparam } for pid=10416 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 463.806475][T10421] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 465.368576][T10451] lo speed is unknown, defaulting to 1000 [ 466.540047][ T6408] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 466.919601][ T6408] usb 4-1: Using ep0 maxpacket: 32 [ 466.940965][ T6408] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 466.970092][ T6408] usb 4-1: config 0 has no interface number 0 [ 466.998248][ T6408] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 467.031966][ T6408] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 467.062838][ T6408] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 467.091847][ T6408] usb 4-1: config 0 interface 196 has no altsetting 0 [ 467.112347][ T6408] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 467.131467][ T6408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.156054][ T6408] usb 4-1: Product: syz [ 467.169749][ T6408] usb 4-1: Manufacturer: syz [ 467.181317][ T6408] usb 4-1: SerialNumber: syz [ 467.203424][ T6408] usb 4-1: config 0 descriptor?? [ 467.213406][T10469] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 468.169554][ T805] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 468.269601][ T6418] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 468.342799][ T805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 468.359259][ T805] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 468.375202][ T805] usb 5-1: New USB device found, idVendor=0499, idProduct=150c, bcdDevice= 0.40 [ 468.384543][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.392738][ T805] usb 5-1: Product: syz [ 468.397285][ T805] usb 5-1: Manufacturer: syz [ 468.402058][ T805] usb 5-1: SerialNumber: syz [ 468.432289][ T6418] usb 2-1: device descriptor read/64, error -71 [ 468.631448][T10490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.643734][T10490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.664892][ T805] usb 5-1: cannot setup if 1: error -71 [ 468.671403][ T805] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 468.685843][ T805] usb 5-1: cannot setup if 1: error -71 [ 468.692888][ T805] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 468.699492][ T6418] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 468.728241][ T805] usb 5-1: cannot setup if 1: error -71 [ 468.762345][ T805] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 468.776778][ T805] usb 5-1: USB disconnect, device number 30 [ 468.812410][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.859503][ T6418] usb 2-1: device descriptor read/64, error -71 [ 468.990071][ T6418] usb usb2-port1: attempt power cycle [ 469.136880][ T6408] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 469.144779][ T6408] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 469.169072][ T6408] usb 4-1: USB disconnect, device number 60 [ 469.193349][ T6414] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 469.322892][T10521] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 469.340227][ T6418] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 469.359820][ T6414] usb 3-1: Using ep0 maxpacket: 32 [ 469.483236][ T6418] usb 2-1: device descriptor read/8, error -71 [ 469.505679][ T6414] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 469.521979][ T6414] usb 3-1: config 0 has no interface number 0 [ 469.536380][ T6414] usb 3-1: config 0 interface 12 has no altsetting 0 [ 469.729938][ T6414] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 469.744025][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.762130][ T6414] usb 3-1: Product: syz [ 469.772847][ T6414] usb 3-1: Manufacturer: syz [ 469.784479][ T6414] usb 3-1: SerialNumber: syz [ 469.803785][ T6414] usb 3-1: config 0 descriptor?? [ 469.849584][ T6418] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 469.879947][ T6418] usb 2-1: device descriptor read/8, error -71 [ 470.017241][ T6418] usb usb2-port1: unable to enumerate USB device [ 470.589255][T10530] xt_cgroup: invalid path, errno=-2 [ 472.007673][T10530] loop2: detected capacity change from 0 to 7 [ 472.051216][T10530] Dev loop2: unable to read RDB block 7 [ 472.071653][T10530] loop2: unable to read partition table [ 472.092097][T10530] loop2: partition table beyond EOD, truncated [ 472.561947][ T6414] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 472.665182][T10530] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà–·]4 ¨â·û) failed (rc=-5) [ 472.711824][T10542] 8021q: VLANs not supported on ipvlan0 [ 472.871654][T10542] binder: 10539:10542 ioctl c018620c 200000000240 returned -22 [ 473.541985][ T6414] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 473.549636][ T6414] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 473.557239][ T6414] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 474.529457][ T6414] usb 3-1: USB disconnect, device number 37 [ 475.161171][T10554] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 475.359937][ T6408] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 475.551909][ T6408] usb 2-1: Using ep0 maxpacket: 32 [ 475.693514][ T6408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.761841][ T6408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.791858][ T6408] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 475.821357][ T6408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.837830][ T6408] usb 2-1: config 0 descriptor?? [ 475.987330][ T6408] hub 2-1:0.0: USB hub found [ 476.459688][ T35] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.603764][T10572] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 476.613539][T10572] SELinux: failed to load policy [ 476.846608][ T35] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.858509][T10574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10574 comm=syz.1.1233 [ 476.879223][ T35] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.905966][ T35] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.964108][ T29] audit: type=1400 audit(1781413278.931:1032): avc: denied { name_bind } for pid=10570 comm="syz.0.1238" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 478.538110][ T6408] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 478.702212][ T6408] usbhid 2-1:0.0: can't add hid device: -71 [ 478.762311][ T29] audit: type=1400 audit(1781413280.601:1033): avc: denied { block_suspend } for pid=10585 comm="syz.3.1241" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 478.789589][ T6408] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 478.835136][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 478.856853][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1243'. [ 478.865822][ T29] audit: type=1400 audit(1781413280.631:1034): avc: denied { read } for pid=10582 comm="syz.0.1240" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.894661][ T6408] usb 2-1: USB disconnect, device number 46 [ 478.947694][T10584] bond0: (slave team0): Releasing backup interface [ 478.979186][T10584] bridge_slave_0: left allmulticast mode [ 479.011900][T10584] bridge_slave_0: left promiscuous mode [ 479.020620][ T29] audit: type=1400 audit(1781413280.991:1035): avc: denied { listen } for pid=10598 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 479.049701][ T805] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 479.064832][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.085773][T10584] bridge_slave_1: left allmulticast mode [ 479.111980][T10584] bridge_slave_1: left promiscuous mode [ 479.130333][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.155697][T10584] bond0: (slave bond_slave_0): Releasing backup interface [ 479.220725][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 479.227510][ T805] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 479.236061][ T805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.263287][T10584] bond0: (slave bond_slave_1): Releasing backup interface [ 479.271292][ T805] usb 4-1: config 0 has no interface number 0 [ 479.285799][ T805] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 479.300639][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.317490][ T805] usb 4-1: Product: syz [ 479.332826][ T805] usb 4-1: Manufacturer: syz [ 479.342644][T10584] team0: Port device team_slave_0 removed [ 479.348410][ T805] usb 4-1: SerialNumber: syz [ 479.358443][ T805] usb 4-1: config 0 descriptor?? [ 479.375415][ T805] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 479.383164][ T805] uvcvideo 4-1:0.105: No valid video chain found. [ 479.390646][T10584] team0: Port device team_slave_1 removed [ 479.397208][T10584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.443255][T10584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.459092][T10584] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 479.581338][ T29] audit: type=1400 audit(1781413281.551:1036): avc: denied { map } for pid=10585 comm="syz.3.1241" path="socket:[30727]" dev="sockfs" ino=30727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 479.653623][ T5820] usb 4-1: USB disconnect, device number 61 [ 480.592489][T10616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10616 comm=syz.2.1250 [ 480.960030][T10625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10625 comm=syz.0.1252 [ 480.974704][T10629] FAULT_INJECTION: forcing a failure. [ 480.974704][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.079510][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.1.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.079547][T10629] Tainted: [L]=SOFTLOCKUP [ 481.079555][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.079568][T10629] Call Trace: [ 481.079574][T10629] [ 481.079583][T10629] dump_stack_lvl+0x100/0x190 [ 481.079613][T10629] should_fail_ex.cold+0x5/0xa [ 481.079644][T10629] _copy_from_user+0x2e/0xd0 [ 481.079672][T10629] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 481.079708][T10629] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 481.079744][T10629] do_sock_getsockopt+0x530/0x6e0 [ 481.079766][T10629] ? __lock_acquire+0x4a5/0x2630 [ 481.079799][T10629] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 481.079824][T10629] ? find_held_lock+0x2b/0x80 [ 481.079843][T10629] ? ksys_write+0x190/0x250 [ 481.079874][T10629] ? find_held_lock+0x2b/0x80 [ 481.079902][T10629] ? __fget_files+0x21f/0x3d0 [ 481.079937][T10629] __sys_getsockopt+0x148/0x260 [ 481.079978][T10629] ? __x64_sys_getsockopt+0xbd/0x160 [ 481.080009][T10629] __x64_sys_getsockopt+0xbd/0x160 [ 481.080039][T10629] ? do_syscall_64+0x90/0x870 [ 481.080068][T10629] ? lockdep_hardirqs_on+0x78/0x100 [ 481.080096][T10629] do_syscall_64+0x115/0x870 [ 481.080122][T10629] ? clear_bhb_loop+0x40/0x90 [ 481.080156][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.080178][T10629] RIP: 0033:0x7f8d5d19ce59 [ 481.080196][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.080217][T10629] RSP: 002b:00007f8d5e0e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 481.080238][T10629] RAX: ffffffffffffffda RBX: 00007f8d5d415fa0 RCX: 00007f8d5d19ce59 [ 481.080253][T10629] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 481.080265][T10629] RBP: 00007f8d5e0e5090 R08: 0000000000000000 R09: 0000000000000000 [ 481.080279][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.080292][T10629] R13: 00007f8d5d416038 R14: 00007f8d5d415fa0 R15: 00007ffe83be0958 [ 481.080322][T10629] [ 481.341842][T10627] 9p: Unknown Cache mode or invalid value mm [ 481.346987][T10630] macsec1: entered promiscuous mode [ 481.353433][ T29] audit: type=1400 audit(1781413283.311:1037): avc: denied { mounton } for pid=10626 comm="syz.2.1253" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 481.353647][T10630] macsec1: entered allmulticast mode [ 481.506217][ T29] audit: type=1400 audit(1781413283.471:1038): avc: denied { connect } for pid=10635 comm="syz.2.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 481.826904][T10646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1259'. [ 481.845633][T10646] ip6gre1: entered promiscuous mode [ 481.851738][T10646] ip6gre1: entered allmulticast mode [ 482.422533][T10648] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 482.435060][T10648] SELinux: failed to load policy [ 482.590414][ T6407] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 482.729536][ T29] audit: type=1400 audit(1781413284.691:1039): avc: denied { ioctl } for pid=10651 comm="syz.1.1260" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 482.829329][ T29] audit: type=1400 audit(1781413284.791:1040): avc: denied { create } for pid=10651 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 482.976110][T10646] netlink: 'syz.4.1259': attribute type 6 has an invalid length. [ 482.986652][T10646] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1259'. [ 482.996050][ T6407] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 483.006316][ T6407] usb 3-1: config 0 has no interface number 0 [ 483.016137][ T6407] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 483.090640][T10658] fuse: fd is not a fuse device [ 483.530103][ T6407] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 483.542348][ T6407] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 483.559685][ T6407] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 483.581314][T10658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.725809][T10650] lo speed is unknown, defaulting to 1000 [ 483.737250][T10666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10666 comm=syz.0.1264 [ 483.752058][ T6407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.788188][ T6407] usb 3-1: config 0 descriptor?? [ 483.854815][ T6407] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input34 [ 484.220764][ T29] audit: type=1400 audit(1781413286.191:1041): avc: denied { ioctl } for pid=10635 comm="syz.2.1257" path="socket:[30826]" dev="sockfs" ino=30826 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 485.578435][T10714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1269'. [ 485.671755][ T6418] usb 3-1: USB disconnect, device number 38 [ 486.683857][T10725] comedi comedi1: 8255: I/O base address not correctly aligned [ 487.037163][ T29] audit: type=1400 audit(1781413288.961:1042): avc: denied { create } for pid=10724 comm="syz.3.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 487.288311][T10738] syz.3.1275 (10738): /proc/10737/oom_adj is deprecated, please use /proc/10737/oom_score_adj instead. [ 487.508547][T10745] 8021q: VLANs not supported on ipvlan0 [ 487.524954][T10745] binder: 10739:10745 ioctl c018620c 200000000240 returned -22 [ 487.961243][ T29] audit: type=1400 audit(1781413289.921:1043): avc: denied { setopt } for pid=10737 comm="syz.3.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 488.035722][ T29] audit: type=1400 audit(1781413290.001:1044): avc: denied { ioctl } for pid=10748 comm="syz.1.1278" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 488.596048][T10765] tipc: Enabled bearer , priority 0 [ 489.065629][ T6418] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 489.217794][T10765] syzkaller0: entered promiscuous mode [ 489.259538][T10765] syzkaller0: entered allmulticast mode [ 489.274516][T10765] tipc: Resetting bearer [ 489.297734][ T6418] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 489.352372][ T6418] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 489.384488][T10764] tipc: Resetting bearer [ 489.390786][ T6418] usb 3-1: config 0 interface 0 has no altsetting 0 [ 489.413177][ T6418] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 489.440255][ T6418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.461869][ T6418] usb 3-1: config 0 descriptor?? [ 489.902612][ T6407] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 490.244044][ T6418] usbhid 3-1:0.0: can't add hid device: -71 [ 490.250531][ T6418] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 490.374813][ T6418] usb 3-1: USB disconnect, device number 39 [ 490.949577][ T6407] usb 4-1: Using ep0 maxpacket: 32 [ 490.963906][ T6407] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.978717][ T6407] usb 4-1: config 0 has no interface number 0 [ 491.327491][ T6407] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 491.361655][ T29] audit: type=1400 audit(1781413293.261:1045): avc: denied { mount } for pid=10788 comm="syz.0.1288" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 491.393432][ T6407] usb 4-1: config 0 interface 1 has no altsetting 0 [ 491.406737][ T6407] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 491.420159][ T6407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.439890][ T6407] usb 4-1: Product: syz [ 491.445610][ T6407] usb 4-1: Manufacturer: syz [ 491.456358][ T6407] usb 4-1: SerialNumber: syz [ 491.471618][ T6407] usb 4-1: config 0 descriptor?? [ 491.751865][ T6407] cx231xx 4-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 491.778607][ T6407] cx231xx 4-1:0.1: Failed to read PCB config [ 491.785219][ T6407] cx231xx 4-1:0.1: probe with driver cx231xx failed with error -71 [ 491.809295][ T6407] usb 4-1: USB disconnect, device number 62 [ 492.150635][T10810] comedi comedi1: 8255: I/O base address not correctly aligned [ 492.286069][ T29] audit: type=1326 audit(1781413294.251:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.480857][ T29] audit: type=1326 audit(1781413294.251:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.525511][ T29] audit: type=1326 audit(1781413294.251:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.570716][ T29] audit: type=1326 audit(1781413294.281:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.677513][ T29] audit: type=1326 audit(1781413294.281:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.766463][ T29] audit: type=1326 audit(1781413294.281:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 492.805878][ T29] audit: type=1326 audit(1781413294.281:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10793 comm="syz.1.1289" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5d19ce59 code=0x7fc00000 [ 493.517758][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 493.517777][ T29] audit: type=1400 audit(1781413295.191:1115): avc: denied { create } for pid=10816 comm="syz.3.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 493.939026][ T6418] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 494.211348][ T6418] usb 2-1: Using ep0 maxpacket: 8 [ 494.218285][ T6418] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.230804][ T6418] usb 2-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.241081][ T6418] usb 2-1: config 0 interface 0 has no altsetting 0 [ 494.247717][ T6418] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 494.270500][ T6418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.286824][ T6418] usb 2-1: config 0 descriptor?? [ 494.787043][ T6418] hid_parser_main: 3354 callbacks suppressed [ 494.787071][ T6418] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 494.806623][ T6418] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 494.814221][ T6418] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 494.829711][ T6418] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 494.837233][ T6418] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x0 [ 494.865030][ T6418] smartjoyplus 0003:6666:8804.000A: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.1-1/input0 [ 494.884247][ T6418] smartjoyplus 0003:6666:8804.000A: no output reports found [ 495.014562][T10596] usb 2-1: USB disconnect, device number 47 [ 495.615947][T10764] tipc: Disabling bearer [ 495.626291][ T5820] tipc: Node number set to 1631329126 [ 496.595184][T10854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10854 comm=syz.4.1299 [ 496.612293][T10854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10854 comm=syz.4.1299 [ 496.731769][T10854] vlan3: entered promiscuous mode [ 496.736918][T10854] bridge0: entered promiscuous mode [ 496.855020][T10851] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'. [ 496.889726][T10596] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 496.913636][ T29] audit: type=1400 audit(1781413298.881:1116): avc: denied { append } for pid=10845 comm="syz.2.1298" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 496.960000][T10858] lo speed is unknown, defaulting to 1000 [ 497.005105][ T29] audit: type=1400 audit(1781413298.971:1117): avc: denied { read } for pid=10855 comm="syz.1.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 497.088015][T10863] comedi comedi1: 8255: I/O base address not correctly aligned [ 497.119577][T10596] usb 4-1: Using ep0 maxpacket: 8 [ 497.128762][T10596] usb 4-1: config 0 has an invalid interface number: 92 but max is 0 [ 497.146333][T10596] usb 4-1: config 0 has no interface number 0 [ 497.159122][T10596] usb 4-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=6f.95 [ 497.182410][T10596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.204824][T10596] usb 4-1: config 0 descriptor?? [ 497.293041][T10596] cp210x 4-1:0.92: cp210x converter detected [ 497.664857][T10596] cp210x 4-1:0.92: failed to get vendor val 0x370b size 1: -71 [ 497.678952][T10596] cp210x 4-1:0.92: querying part number failed [ 497.691459][T10596] usb 4-1: cp210x converter now attached to ttyUSB0 [ 498.051552][T10596] usb 4-1: USB disconnect, device number 63 [ 498.891706][T10596] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 498.908176][ T29] audit: type=1400 audit(1781413300.871:1118): avc: denied { write } for pid=10875 comm="syz.4.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.928447][T10596] cp210x 4-1:0.92: device disconnected [ 499.379493][T10596] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 500.022906][T10596] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.034545][T10596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.049805][T10596] usb 3-1: Product: syz [ 500.059566][T10596] usb 3-1: Manufacturer: syz [ 500.066078][T10596] usb 3-1: SerialNumber: syz [ 500.082189][T10596] usb 3-1: config 0 descriptor?? [ 500.416921][T10596] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.739224][ T29] audit: type=1400 audit(1781413302.701:1119): avc: granted { setsecparam } for pid=10907 comm="syz.3.1313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 500.888539][T10910] lo speed is unknown, defaulting to 1000 [ 501.103269][T10596] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 501.123353][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.158405][T10923] fuse: fd is not a fuse device [ 502.291386][T10596] usb 3-1: USB disconnect, device number 40 [ 503.559606][ T5820] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 503.675943][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 503.819561][ T5820] usb 4-1: Using ep0 maxpacket: 32 [ 503.831951][ T5820] usb 4-1: unable to get BOS descriptor or descriptor too short [ 503.847870][ T5820] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 503.862691][ T5820] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 503.881560][ T5820] usb 4-1: config 14 has no interface number 0 [ 503.888470][ T5820] usb 4-1: config 14 has no interface number 1 [ 503.898728][ T5820] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 503.910818][ T5820] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 503.925800][ T5820] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 503.938116][ T5820] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 503.958373][ T5820] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 504.001852][T10596] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 504.027870][ T5820] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.095547][ T5820] usb 4-1: config 14 interface 57 has no altsetting 0 [ 504.125318][ T5820] usb 4-1: config 14 interface 228 has no altsetting 0 [ 504.150238][ T5820] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 504.180281][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.329539][T10596] usb 3-1: Using ep0 maxpacket: 8 [ 504.337946][T10596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.348626][ T5820] usb 4-1: Product: syz [ 504.353400][T10596] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.359530][ T5820] usb 4-1: Manufacturer: syz [ 504.721710][T10596] usb 3-1: config 1 has no interface number 0 [ 504.726718][ T5820] usb 4-1: SerialNumber: syz [ 504.727837][T10596] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 504.729753][T10596] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 504.752732][T10596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.763374][T10596] usb 3-1: Product: syz [ 504.768821][T10596] usb 3-1: Manufacturer: syz [ 504.773475][T10596] usb 3-1: SerialNumber: syz [ 505.334839][T10935] set match dimension is over the limit! [ 505.344372][ T5820] legousbtower 4-1:14.57: interrupt endpoints not found [ 505.520827][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 505.543551][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'. [ 505.552799][T10955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10955 comm=syz.0.1327 [ 505.766715][ T5820] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 505.812411][ T5820] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 505.866012][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 506.113459][T10596] usb 3-1: USB disconnect, device number 41 [ 506.213803][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.632567][T10968] lo speed is unknown, defaulting to 1000 [ 506.798750][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 507.419783][T10596] usb 4-1: USB disconnect, device number 64 [ 507.542657][T10596] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 509.668828][ T29] audit: type=1400 audit(1781413311.631:1120): avc: denied { write } for pid=10966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.376344][T10596] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 510.722937][ T29] audit: type=1400 audit(1781413312.681:1121): avc: denied { write } for pid=11021 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.158542][T10596] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.170195][T10596] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.255925][T11033] 9p: Bad value for 'rfdno' [ 511.278727][T10596] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.288253][T10596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.393318][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.583673][T10596] usb 5-1: GET_CAPABILITIES returned 0 [ 511.589243][T10596] usbtmc 5-1:16.0: can't read capabilities [ 511.687033][T11037] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 511.774243][T11037] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 511.784245][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 511.880527][ T29] audit: type=1400 audit(1781413313.841:1122): avc: denied { relabelfrom } for pid=11036 comm="syz.0.1349" name="" dev="pipefs" ino=31909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 512.358102][T11046] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 512.368464][T11046] SELinux: failed to load policy [ 513.083774][T10596] usb 5-1: USB disconnect, device number 31 [ 515.607709][T11060] FAULT_INJECTION: forcing a failure. [ 515.607709][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.629665][T11060] CPU: 1 UID: 0 PID: 11060 Comm: syz.2.1354 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.629700][T11060] Tainted: [L]=SOFTLOCKUP [ 515.629707][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 515.629720][T11060] Call Trace: [ 515.629727][T11060] [ 515.629735][T11060] dump_stack_lvl+0x100/0x190 [ 515.629766][T11060] should_fail_ex.cold+0x5/0xa [ 515.629796][T11060] _copy_from_user+0x2e/0xd0 [ 515.629825][T11060] copy_msghdr_from_user+0x9f/0x4f0 [ 515.629854][T11060] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 515.629896][T11060] ___sys_sendmsg+0x106/0x1e0 [ 515.629924][T11060] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.629986][T11060] __sys_sendmsg+0x170/0x220 [ 515.630020][T11060] ? __pfx___sys_sendmsg+0x10/0x10 [ 515.630066][T11060] ? rcu_is_watching+0x12/0xc0 [ 515.630102][T11060] do_syscall_64+0x115/0x870 [ 515.630130][T11060] ? clear_bhb_loop+0x40/0x90 [ 515.630157][T11060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.630180][T11060] RIP: 0033:0x7f671a99ce59 [ 515.630199][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.630220][T11060] RSP: 002b:00007f671b834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.630241][T11060] RAX: ffffffffffffffda RBX: 00007f671ac16090 RCX: 00007f671a99ce59 [ 515.630256][T11060] RDX: 0000000008048802 RSI: 00002000000000c0 RDI: 0000000000000008 [ 515.630270][T11060] RBP: 00007f671b834090 R08: 0000000000000000 R09: 0000000000000000 [ 515.630283][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.630296][T11060] R13: 00007f671ac16128 R14: 00007f671ac16090 R15: 00007ffcba27b3e8 [ 515.630327][T11060] [ 517.037168][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.280284][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.321833][ T5820] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 518.070737][ T5820] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 518.685804][ T5820] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 518.811577][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.959791][ T5820] usb 3-1: Product: syz [ 519.025987][ T5820] usb 3-1: Manufacturer: syz [ 519.106697][ T5820] usb 3-1: SerialNumber: syz [ 519.739522][ T6414] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 519.879604][ T6414] usb 2-1: device descriptor read/64, error -71 [ 519.914012][ T6418] usb 3-1: USB disconnect, device number 42 [ 519.973673][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'. [ 520.998877][ T6414] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 521.143769][T11112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.396338][T11119] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 521.675396][ T5625] Bluetooth: min 0 < 6 [ 521.878594][ T29] audit: type=1400 audit(1781413323.841:1123): avc: denied { read append } for pid=11123 comm="syz.1.1372" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 521.949008][ T29] audit: type=1400 audit(1781413323.851:1124): avc: denied { open } for pid=11123 comm="syz.1.1372" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 522.719083][T11133] lo speed is unknown, defaulting to 1000 [ 523.170493][T11143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.192879][T11124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 523.273699][T11124] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 523.487701][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 523.659280][ T29] audit: type=1326 audit(1781413325.611:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11135 comm="syz.4.1376" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519fb9ce59 code=0x7fc00000 [ 523.759762][ T5625] Bluetooth: hci2: command 0x0401 tx timeout [ 523.909171][T11124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 523.947458][T11124] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 523.966176][T11124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 523.972345][T11124] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 524.001040][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 524.077011][T11124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.090552][T11124] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 524.108449][T11124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 524.115476][T11124] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 524.462946][T10596] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 524.517314][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 524.961390][T10596] usb 3-1: Using ep0 maxpacket: 8 [ 524.983413][T10596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.013836][T10596] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.036952][T10596] usb 3-1: config 1 has no interface number 0 [ 525.058811][T10596] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 525.081729][T10596] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 525.113727][T10596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.231865][T10596] usb 3-1: Product: syz [ 525.261770][T10596] usb 3-1: Manufacturer: syz [ 525.295289][T10596] usb 3-1: SerialNumber: syz [ 525.297542][T11170] netlink: 9236 bytes leftover after parsing attributes in process `syz.4.1382'. [ 525.979548][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 525.999480][ T5625] Bluetooth: hci2: command 0x0401 tx timeout [ 526.079549][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 526.159714][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 526.178380][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 526.384948][ T6414] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 526.536734][T11181] netlink: 9236 bytes leftover after parsing attributes in process `syz.3.1386'. [ 526.595511][ T6414] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.629655][ T6414] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 526.679733][ T6414] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 526.698323][T11146] set match dimension is over the limit! [ 526.733400][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.010042][T11178] Bluetooth: hci0: command 0x0c1a tx timeout [ 528.079589][T11178] Bluetooth: hci2: command 0x0401 tx timeout [ 528.241104][T11178] Bluetooth: hci3: command 0x0406 tx timeout [ 528.247201][ T5617] Bluetooth: hci4: command 0x0406 tx timeout [ 528.588687][ T6414] usb 2-1: config 0 descriptor?? [ 528.692440][ T6414] usb 2-1: can't set config #0, error -71 [ 528.702861][ T6414] usb 2-1: USB disconnect, device number 50 [ 528.823043][T10596] usb 3-1: USB disconnect, device number 43 [ 529.200715][ T29] audit: type=1326 audit(1781413331.171:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11194 comm="syz.1.1391" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d5d19ce59 code=0x0 [ 529.320028][T11198] xt_hashlimit: size too large, truncated to 1048576 [ 529.534406][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 529.679934][T10596] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 529.913346][T11203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.926656][T11203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.937884][T10596] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 530.799589][T11178] Bluetooth: hci4: command 0x0406 tx timeout [ 531.065675][ T29] audit: type=1400 audit(1781413332.261:1127): avc: denied { ioctl } for pid=11205 comm="syz.4.1393" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 531.106871][T11203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.406436][T10596] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 531.474646][T11203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.599477][T11178] Bluetooth: hci1: command 0x0406 tx timeout [ 531.710819][T10596] usb 3-1: config 0 interface 0 has no altsetting 0 [ 531.738753][T11203] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.752795][T10596] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 531.963013][T10596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.982945][T10596] usb 3-1: config 0 descriptor?? [ 532.075941][T11178] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.387523][T10596] usb 3-1: can't set config #0, error -71 [ 532.417580][T10596] usb 3-1: USB disconnect, device number 44 [ 532.502810][ T29] audit: type=1400 audit(1781413334.471:1128): avc: denied { append } for pid=11220 comm="syz.3.1397" name="001" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 532.630423][ T6414] IPVS: starting estimator thread 0... [ 532.750313][T11225] IPVS: using max 36 ests per chain, 86400 per kthread [ 533.630691][T11235] netlink: 'syz.4.1399': attribute type 21 has an invalid length. [ 533.638656][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1399'. [ 533.654557][ T5617] Bluetooth: hci2: command 0x0401 tx timeout [ 533.668711][T11178] Bluetooth: hci3: command 0x0406 tx timeout [ 533.951168][T11178] Bluetooth: hci4: command 0x0406 tx timeout [ 533.959070][T10596] IPVS: starting estimator thread 0... [ 534.131292][T11238] IPVS: using max 41 ests per chain, 98400 per kthread [ 534.865512][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 534.948698][ T29] audit: type=1400 audit(1781413336.911:1129): avc: denied { bind } for pid=11222 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.049251][ T29] audit: type=1400 audit(1781413336.911:1130): avc: denied { write } for pid=11222 comm="syz.2.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 536.155191][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.196924][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.408840][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.919850][T11178] Bluetooth: hci1: command 0x0406 tx timeout [ 539.852165][T11270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.886427][T11270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.940296][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 539.954047][T11270] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 540.459449][T11303] netlink: 'syz.1.1418': attribute type 64 has an invalid length. [ 541.478216][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 542.088250][T11322] netlink: 'syz.0.1419': attribute type 2 has an invalid length. [ 542.231636][T11314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 542.519758][T10596] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 542.690851][T10596] usb 3-1: Using ep0 maxpacket: 32 [ 542.705906][T10596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 542.736997][T10596] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 542.750263][ T6414] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 542.784741][T10596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 542.825852][T10596] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 542.848514][T10596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.853691][T11335] loop8: detected capacity change from 0 to 7 [ 542.882518][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.892150][ C0] buffer_io_error: 11 callbacks suppressed [ 542.892159][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 542.915574][ T29] audit: type=1400 audit(1781413344.881:1131): avc: denied { lock } for pid=11334 comm="syz.3.1428" path="socket:[32391]" dev="sockfs" ino=32391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 542.949308][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.958927][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 542.971456][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 542.981055][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.005166][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.014771][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.026496][ T6414] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 543.040212][ T6414] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.042171][T10596] usb 3-1: Product: syz [ 543.055738][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.067311][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.069508][ T29] audit: type=1400 audit(1781413344.961:1132): avc: denied { write } for pid=11334 comm="syz.3.1428" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 543.077498][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.109665][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.120457][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.130543][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.138910][T11335] ldm_validate_partition_table(): Disk read failed. [ 543.148013][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.157624][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.166700][ T6414] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.169469][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.177749][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.184934][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.185323][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 543.185353][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 543.221067][T11335] Dev loop8: unable to read RDB block 0 [ 543.254640][T11335] loop8: unable to read partition table [ 543.262220][T10596] usb 3-1: Manufacturer: syz [ 543.270511][T10596] usb 3-1: SerialNumber: syz [ 543.277428][T11335] loop8: partition table beyond EOD, truncated [ 543.280051][ T6418] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 543.317107][T10596] usb 3-1: config 0 descriptor?? [ 543.322661][T11335] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ֘ȵ4FLQkÝŠ5) failed (rc=-5) [ 543.364583][T10596] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 543.462000][ T6418] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 543.471324][ T6418] usb 4-1: config 0 has no interface number 0 [ 543.482653][ T6418] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 543.505993][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.520345][ T6414] usb 2-1: GET_CAPABILITIES returned 0 [ 543.527289][ T6414] usbtmc 2-1:16.0: can't read capabilities [ 543.540755][ T6418] usb 4-1: Product: syz [ 543.575519][ T6418] usb 4-1: Manufacturer: syz [ 543.589996][ T6418] usb 4-1: SerialNumber: syz [ 543.626204][ T6418] usb 4-1: config 0 descriptor?? [ 544.722640][T11178] Bluetooth: hci4: command 0x0406 tx timeout [ 545.537801][T10596] usb 3-1: USB disconnect, device number 45 [ 545.543960][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 545.605739][ T6407] usb 2-1: USB disconnect, device number 51 [ 545.746744][T11345] netlink: 'syz.0.1430': attribute type 29 has an invalid length. [ 545.755691][T11345] netlink: 'syz.0.1430': attribute type 29 has an invalid length. [ 546.095642][ T6407] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 546.365579][ T6418] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 546.379523][ T6418] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 546.443469][ T6418] asix 4-1:0.251: probe with driver asix failed with error -71 [ 546.504410][ T6418] usb 4-1: USB disconnect, device number 65 [ 546.539573][ T6407] usb 2-1: Using ep0 maxpacket: 32 [ 546.569657][ T6407] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 546.604108][ T6407] usb 2-1: config 2 has no interface number 0 [ 546.630091][ T6407] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 546.800115][ T6407] usb 2-1: config 2 interface 88 has no altsetting 0 [ 546.820019][T11358] lo speed is unknown, defaulting to 1000 [ 546.841472][ T6407] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 547.549595][ T6407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.571895][ T6407] usb 2-1: Product: syz [ 547.583655][ T6407] usb 2-1: Manufacturer: syz [ 547.598444][ T6407] usb 2-1: SerialNumber: syz [ 547.624083][T11347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.118055][T11347] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.363161][T11365] bond4: (slave bond_slave_1): Device is not bonding slave [ 548.379593][T11365] bond4: option active_slave: invalid value (bond_slave_1) [ 548.461927][T11365] bond4 (unregistering): Released all slaves [ 548.660511][ T6407] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 548.695959][ T6407] asix 2-1:2.88: probe with driver asix failed with error -71 [ 548.702426][ T6418] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 548.755804][ T6407] usb 2-1: USB disconnect, device number 52 [ 548.879541][ T6418] usb 3-1: Using ep0 maxpacket: 8 [ 548.897060][ T6418] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.912168][ T6418] usb 3-1: config 0 has no interfaces? [ 548.927786][ T6418] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 548.939703][ T6418] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.951696][ T6418] usb 3-1: Product: syz [ 548.960420][ T6418] usb 3-1: Manufacturer: syz [ 548.968437][ T6418] usb 3-1: SerialNumber: syz [ 548.986849][ T6418] usb 3-1: config 0 descriptor?? [ 550.990909][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 551.089587][T11178] Bluetooth: hci4: unexpected event for opcode 0x1005 [ 552.525310][ T94] usb 3-1: USB disconnect, device number 46 [ 552.539612][ T6414] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 552.831616][T11406] lo speed is unknown, defaulting to 1000 [ 552.883954][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 553.011115][T11412] (syz.4.1451,11412,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 553.021023][T11412] (syz.4.1451,11412,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 553.046087][ T6414] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 553.185582][ T6414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.968274][ T6414] usb 4-1: config 0 descriptor?? [ 554.514598][ T6414] ath6kl: Failed to submit usb control message: -71 [ 554.527285][ T6414] ath6kl: unable to send the bmi data to the device: -71 [ 555.412918][ T6414] ath6kl: Unable to send get target info: -71 [ 555.423345][ T6414] ath6kl: Failed to init ath6kl core: -71 [ 555.453170][ T6414] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 555.492787][ T6414] usb 4-1: USB disconnect, device number 66 [ 555.984815][ T29] audit: type=1400 audit(1781413357.951:1133): avc: denied { relabelfrom } for pid=11437 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 556.093764][ T29] audit: type=1400 audit(1781413357.951:1134): avc: denied { relabelto } for pid=11437 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 556.151146][T11438] syzkaller0: entered promiscuous mode [ 556.169329][T11438] syzkaller0: entered allmulticast mode [ 558.960746][T11178] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.003488][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 559.157950][ T29] audit: type=1400 audit(1781413361.121:1135): avc: denied { append } for pid=11466 comm="syz.4.1464" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 560.621592][T11478] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 560.625651][ T29] audit: type=1400 audit(1781413362.581:1136): avc: denied { mount } for pid=11476 comm="syz.2.1467" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 560.675259][ T29] audit: type=1400 audit(1781413362.581:1137): avc: denied { mounton } for pid=11476 comm="syz.2.1467" path="/283/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 562.479508][ T29] audit: type=1400 audit(1781413364.441:1138): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 562.561131][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.874930][T11489] team0: entered allmulticast mode [ 563.880147][T11489] team_slave_0: entered allmulticast mode [ 563.885875][T11489] team_slave_1: entered allmulticast mode [ 563.926180][T11490] team0: left allmulticast mode [ 563.993648][T11490] team_slave_0: left allmulticast mode [ 564.330456][T11490] team_slave_1: left allmulticast mode [ 564.390373][T11490] bridge0: left allmulticast mode [ 564.719787][ T6407] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 564.743006][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 564.789509][T11519] xt_connbytes: Forcing CT accounting to be enabled [ 564.814784][T11519] set match dimension is over the limit! [ 564.889441][ T6407] usb 2-1: Using ep0 maxpacket: 16 [ 564.913867][ T6407] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.958030][ T6407] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.001326][ T6407] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 565.066949][ T6407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.126445][ T6407] usb 2-1: config 0 descriptor?? [ 566.225770][T11541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11541 comm=syz.4.1479 [ 566.472688][T11544] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1480'. [ 566.576820][T11549] netlink: 'syz.0.1482': attribute type 4 has an invalid length. [ 566.921270][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1485'. [ 566.933481][ T6407] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 566.970286][ T6414] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 567.151291][ T6407] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 567.161098][ T6407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.175883][ T6414] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.180264][ T6407] usb 5-1: config 0 descriptor?? [ 567.221000][ T6414] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 567.248257][ T6414] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.266525][ T6414] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 567.287944][ T6414] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 567.315836][ T6414] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.337841][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.361808][ T6414] usb 3-1: Product: syz [ 567.373235][ T6414] usb 3-1: Manufacturer: syz [ 567.422599][ T6414] cdc_wdm 3-1:1.0: skipping garbage [ 567.431670][ T6414] cdc_wdm 3-1:1.0: skipping garbage [ 567.448836][ T6414] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 567.463386][ T6414] cdc_wdm 3-1:1.0: Unknown control protocol [ 567.604032][ T29] audit: type=1400 audit(1781413369.571:1139): avc: denied { write } for pid=11565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.789317][ T29] audit: type=1400 audit(1781413369.751:1140): avc: denied { mount } for pid=11551 comm="syz.2.1483" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 567.861005][T11178] Bluetooth: hci1: command 0x0406 tx timeout [ 568.800949][ T29] audit: type=1400 audit(1781413370.641:1141): avc: denied { write } for pid=11592 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.837362][ T94] usb 2-1: USB disconnect, device number 53 [ 569.608655][ T29] audit: type=1400 audit(1781413371.571:1142): avc: denied { write } for pid=11599 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.671053][ T94] usb 3-1: USB disconnect, device number 47 [ 569.825942][ T29] audit: type=1400 audit(1781413371.791:1143): avc: denied { write } for pid=11620 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.072112][ T6407] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 570.113121][ T6407] [drm:udl_init] *ERROR* Selecting channel failed [ 570.321661][ T6407] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 570.351680][ T6407] [drm] Initialized udl on minor 2 [ 570.406684][ T6407] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 570.522861][ T6407] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 570.646999][ T29] audit: type=1400 audit(1781413372.611:1144): avc: denied { name_bind } for pid=11648 comm="syz.4.1501" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 570.650863][ T6407] usb 5-1: USB disconnect, device number 32 [ 570.671273][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 570.685952][T11646] fuse: fd is not a fuse device [ 570.687881][ T94] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 571.019030][ T94] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 571.340413][T11644] 8021q: VLANs not supported on ip6gre0 [ 571.519540][T11178] Bluetooth: hci0: command 0x0c1a tx timeout [ 571.785474][T11178] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 576.105079][T11685] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 576.115262][T11685] SELinux: failed to load policy [ 576.201862][T11687] overlayfs: missing 'lowerdir' [ 576.218117][T11693] fuse: fd is not a fuse device [ 577.023607][T11708] 8021q: VLANs not supported on ip6gre0 [ 577.349476][ T6407] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 577.383610][ T29] audit: type=1400 audit(1781413379.351:1145): avc: denied { write } for pid=11679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.793270][T11718] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 577.800723][T11718] overlayfs: failed to set xattr on upper [ 577.806471][T11718] overlayfs: ...falling back to redirect_dir=nofollow. [ 577.813373][T11718] overlayfs: ...falling back to index=off. [ 577.819174][T11718] overlayfs: ...falling back to uuid=null. [ 577.836814][ T29] audit: type=1400 audit(1781413379.751:1146): avc: denied { mounton } for pid=11712 comm="syz.0.1519" path="/file0" dev="ramfs" ino=34054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 577.859446][ T6407] usb 2-1: Using ep0 maxpacket: 32 [ 577.862509][ T6407] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 577.884503][T11718] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 577.927869][ T6407] usb 2-1: config 0 has no interface number 0 [ 577.960266][T11720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 577.981261][ T6407] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 578.005009][ T6407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.032761][ T6407] usb 2-1: Product: syz [ 578.053347][ T6407] usb 2-1: Manufacturer: syz [ 578.075155][ T6407] usb 2-1: SerialNumber: syz [ 578.131106][ T6407] usb 2-1: config 0 descriptor?? [ 578.160256][ T6407] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 578.198461][ T6407] usb 2-1: selecting invalid altsetting 1 [ 578.225054][ T6407] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 578.285312][ T29] audit: type=1400 audit(1781413380.251:1147): avc: denied { write } for pid=11729 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.312184][ T6407] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.354721][T11705] trusted_key: syz.1.1516 sent an empty control message without MSG_MORE. [ 578.378935][ T6407] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 578.406306][ T29] audit: type=1400 audit(1781413380.371:1148): avc: denied { getopt } for pid=11704 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 578.411868][ T6407] usb 2-1: media controller created [ 578.618779][ T6407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.781451][ T6407] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 578.801525][ T6407] zl10353_read_register: readreg error (reg=127, ret==-71) [ 578.832082][ T6407] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 579.002753][ T6407] usb 2-1: USB disconnect, device number 54 [ 579.503962][ T6414] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 579.997135][ T6414] usb 2-1: Using ep0 maxpacket: 8 [ 580.352986][T11758] 9p: Bad value for 'rfdno' [ 580.483947][ T6414] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 580.495527][ T6414] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 580.505455][ T6414] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 580.515415][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.179075][T11178] Bluetooth: hci4: command 0x0406 tx timeout [ 581.320252][ T6414] usb 2-1: config 0 descriptor?? [ 582.007181][T11766] fuse: fd is not a fuse device [ 582.149566][ T29] audit: type=1400 audit(1781413384.111:1149): avc: denied { write } for pid=11734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.185055][T11774] 8021q: VLANs not supported on ip6gre0 [ 582.607030][ T29] audit: type=1400 audit(1781413384.571:1150): avc: denied { write } for pid=11779 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 582.747615][T11780] lo speed is unknown, defaulting to 1000 [ 582.808332][T11786] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 582.839623][T11786] SELinux: failed to load policy [ 582.881486][ T6407] usb 2-1: USB disconnect, device number 55 [ 586.072180][T11795] syz.1.1534 (11795): drop_caches: 2 [ 586.126443][T11812] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1538'. [ 586.184785][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 586.255782][T11815] autofs4:pid:11815:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(832.8192), cmd(0xc018937e) [ 586.256183][T11816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 586.270635][ T29] audit: type=1400 audit(1781413388.221:1151): avc: denied { ioctl } for pid=11811 comm="syz.2.1538" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 586.388468][T11814] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 586.398883][T11814] SELinux: failed to load policy [ 586.434984][T11815] autofs4:pid:11815:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 586.774377][T11178] Bluetooth: hci0: ISO packet for unknown connection handle 1039 [ 586.778942][T11823] netlink: 'syz.1.1540': attribute type 10 has an invalid length. [ 587.941522][T11822] 8021q: VLANs not supported on ip6gre0 [ 588.036277][T11823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.057252][T11829] 9p: Bad value for 'rfdno' [ 588.077225][T11823] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 588.389140][T11833] fuse: fd is not a fuse device [ 588.753617][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1545'. [ 589.220891][ T5820] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 589.311357][ T29] audit: type=1400 audit(1781413391.281:1152): avc: denied { setopt } for pid=11841 comm="syz.2.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 589.429661][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 589.457874][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.475139][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 589.485293][ T5820] usb 5-1: config 1 has no interface number 0 [ 589.638650][ T5820] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 589.658278][ T5820] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 589.819115][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.234917][ T5820] usb 5-1: Product: syz [ 590.239472][ T5820] usb 5-1: Manufacturer: syz [ 590.244554][ T5820] usb 5-1: SerialNumber: syz [ 591.401356][T11865] lo speed is unknown, defaulting to 1000 [ 591.720817][T11862] CIFS mount error: No usable UNC path provided in device string! [ 591.720817][T11862] [ 591.805768][T11862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 592.222933][T11873] 8021q: VLANs not supported on ip6gre0 [ 592.281378][T11875] devpts: Bad value for 'max' [ 592.593860][ T5820] usb 5-1: USB disconnect, device number 33 [ 593.498088][ T29] audit: type=1400 audit(1781413395.461:1153): avc: denied { nlmsg_read } for pid=11885 comm="syz.3.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 593.573977][T11894] 9p: Bad value for 'rfdno' [ 597.679043][T11921] 8021q: VLANs not supported on ip6gre0 [ 598.081657][T11924] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1569'. [ 598.109448][T11924] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 598.517098][ T29] audit: type=1400 audit(1781413400.481:1154): avc: denied { write } for pid=11933 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 598.653624][T11929] CIFS mount error: No usable UNC path provided in device string! [ 598.653624][T11929] [ 598.689713][T11929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 598.720158][ T6407] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 598.849754][ T6414] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 599.032583][T11944] netlink: 'syz.0.1576': attribute type 2 has an invalid length. [ 599.369525][ T6407] usb 4-1: Using ep0 maxpacket: 16 [ 599.377294][ T6407] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 599.393215][ T6407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 599.419459][T10596] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 599.429901][ T6407] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 599.430399][ T6414] usb 3-1: Using ep0 maxpacket: 32 [ 599.461877][ T6407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 599.483670][ T6407] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 599.485596][ T6414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.505506][ T6407] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 599.505535][ T6407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.505559][ T6407] usb 4-1: Product: syz [ 599.505577][ T6407] usb 4-1: Manufacturer: syz [ 599.505600][ T6407] usb 4-1: SerialNumber: syz [ 599.510771][ T6407] usb 4-1: config 0 descriptor?? [ 599.576732][ T6407] port100 4-1:0.0: NFC: Could not get supported command types [ 599.586888][T10596] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 599.614233][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 599.626258][ T6414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.635459][T10596] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.663189][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.694638][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 599.696797][ T6414] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 599.717441][T10596] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 599.740523][T10596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.755166][ T6414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.759462][T10596] usb 2-1: Product: syz [ 599.790220][T10596] usb 2-1: Manufacturer: syz [ 599.805196][ T6414] usb 3-1: config 0 descriptor?? [ 599.806481][T10596] usb 2-1: SerialNumber: syz [ 599.842386][ T6414] hub 3-1:0.0: USB hub found [ 599.847435][T10596] usb 2-1: config 0 descriptor?? [ 599.869484][T10596] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 600.022757][T10596] usb 4-1: USB disconnect, device number 67 [ 600.034474][T11939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11939 comm=syz.2.1575 [ 600.097633][T11929] devpts: Bad value for 'max' [ 600.130453][ T6407] usb 2-1: USB disconnect, device number 56 [ 600.295647][ T29] audit: type=1400 audit(1781413402.261:1155): avc: denied { listen } for pid=11946 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 600.322339][ T29] audit: type=1400 audit(1781413402.261:1156): avc: denied { accept } for pid=11946 comm="syz.4.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 600.360889][ T6414] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 600.386720][ T6414] usbhid 3-1:0.0: can't add hid device: -71 [ 600.403831][ T6414] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 600.443700][ T6414] usb 3-1: USB disconnect, device number 48 [ 600.877657][T11953] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 601.018275][T11959] 9p: Bad value for 'rfdno' [ 601.608396][T11967] 8021q: VLANs not supported on ip6gre0 [ 601.965077][T11971] zonefs (nullb0) ERROR: Not a zoned block device [ 607.739832][T12007] 8021q: VLANs not supported on ip6tnl0 [ 609.286169][T12024] team0: entered allmulticast mode [ 609.309501][T12024] team0: left allmulticast mode [ 609.329013][T12024] bridge0: left allmulticast mode [ 609.472180][T11178] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 613.058364][T12065] 8021q: VLANs not supported on ip6gre0 [ 614.199863][T11178] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 616.251199][T12098] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 616.259487][T12098] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 616.267921][T12098] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 616.431859][T12103] kAFS: unable to lookup cell 'ÿ' [ 617.249945][T12116] overlayfs: missing 'lowerdir' [ 617.641960][T12118] 8021q: VLANs not supported on ip6tnl0 [ 617.668924][T12108] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 617.718879][T12108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.760035][T12108] team0: Port device netdevsim1 added [ 617.814055][T12122] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 618.535791][T12122] team0: Port device netdevsim1 removed [ 618.644437][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1622'. [ 619.126619][T11178] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 619.447442][T12146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.541634][T12147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.589436][ T6407] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 619.624803][T12146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.769731][ T6407] usb 2-1: Using ep0 maxpacket: 32 [ 619.781060][ T6407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.797959][ T6407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.819244][ T6407] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 619.845733][ T6407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.876858][ T6407] usb 2-1: config 0 descriptor?? [ 619.919761][ T6407] hub 2-1:0.0: USB hub found [ 620.140845][T12144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12144 comm=syz.1.1627 [ 620.706736][T12172] 9p: Bad value for 'rfdno' [ 621.534817][ T29] audit: type=1400 audit(1781413423.491:1157): avc: denied { getopt } for pid=12158 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 621.735189][T12169] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1634'. [ 621.864029][ T6407] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 621.909260][ T6407] usbhid 2-1:0.0: can't add hid device: -71 [ 621.926826][ T6407] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 621.990657][ T6407] usb 2-1: USB disconnect, device number 57 [ 622.079487][ T6414] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 622.309964][ T6414] usb 4-1: Using ep0 maxpacket: 32 [ 622.329167][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.430840][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.577885][ T6414] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 622.704981][ T6414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.762369][ T6414] usb 4-1: config 0 descriptor?? [ 622.780777][ T6414] hub 4-1:0.0: USB hub found [ 622.899514][T10596] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 622.995779][T12183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12183 comm=syz.3.1637 [ 623.080567][T10596] usb 2-1: Using ep0 maxpacket: 32 [ 623.104665][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.150952][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.160811][T10596] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.180286][T10596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.195374][T10596] usb 2-1: config 0 descriptor?? [ 623.216356][T10596] hub 2-1:0.0: USB hub found [ 623.487690][T12188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12188 comm=syz.1.1638 [ 623.599522][ T6414] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 623.615110][ T6414] usbhid 4-1:0.0: can't add hid device: -71 [ 623.621862][ T6414] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 623.735560][T11178] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 624.073911][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.098842][ T6414] usb 4-1: USB disconnect, device number 68 [ 624.293790][T10596] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 624.316269][T10596] usbhid 2-1:0.0: can't add hid device: -71 [ 624.323181][T10596] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 624.442490][T10596] usb 2-1: USB disconnect, device number 58 [ 625.103742][ T29] audit: type=1400 audit(1781413427.061:1158): avc: denied { name_connect } for pid=12208 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 625.582836][T12215] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12218] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[12215] [ 625.972378][ T29] audit: type=1400 audit(1781413427.941:1159): avc: denied { accept } for pid=12208 comm="syz.0.1645" lport=39933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 627.164295][T12232] netlink: 'syz.2.1650': attribute type 64 has an invalid length. [ 627.173957][T12231] 9p: Bad value for 'rfdno' [ 627.241419][T12234] kAFS: unable to lookup cell 'ÿ' [ 628.588327][T12239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=12239 comm=syz.2.1654 [ 629.031087][ T29] audit: type=1400 audit(1781413430.991:1160): avc: denied { write } for pid=12247 comm="syz.0.1655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 629.164520][T12253] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 629.439554][T10596] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 629.631553][T12253] bond0: (slave netdevsim1): Releasing backup interface [ 629.641636][T12261] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 629.715041][T12253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.780651][T10596] usb 5-1: Using ep0 maxpacket: 32 [ 629.796785][T10596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.826858][T12253] team0: Port device netdevsim1 added [ 629.845837][T10596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.884897][T10596] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.935563][T10596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.957797][T12261] team0: Port device netdevsim1 removed [ 629.973094][T10596] usb 5-1: config 0 descriptor?? [ 629.993627][T10596] hub 5-1:0.0: USB hub found [ 630.036191][T12261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.091061][T12261] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 630.185627][T12268] geneve1: entered promiscuous mode [ 630.216779][T12254] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12254 comm=syz.4.1656 [ 630.244307][T12262] lo speed is unknown, defaulting to 1000 [ 631.440441][T10596] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 631.455513][T10596] usbhid 5-1:0.0: can't add hid device: -71 [ 631.466107][T10596] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 631.504519][T10596] usb 5-1: USB disconnect, device number 34 [ 632.907458][T12289] netlink: 'syz.2.1664': attribute type 64 has an invalid length. [ 633.767659][T12295] CIFS: VFS: UNC: path must begin with // or \\ [ 633.839896][T12295] Malformed UNC in devname [ 633.839896][T12295] [ 634.005198][T12295] CIFS: VFS: Malformed UNC in devname [ 634.997505][ T29] audit: type=1400 audit(1781413436.961:1161): avc: denied { listen } for pid=12310 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 635.220678][ T6407] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 635.242992][ T29] audit: type=1400 audit(1781413436.981:1162): avc: denied { setopt } for pid=12310 comm="syz.0.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 635.519528][ T6407] usb 4-1: Using ep0 maxpacket: 16 [ 635.666670][T12316] lo speed is unknown, defaulting to 1000 [ 636.359913][ T6407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 636.513934][ T6407] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 636.545584][ T6407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.748268][ T6407] usb 4-1: Product: syz [ 636.752602][ T6407] usb 4-1: Manufacturer: syz [ 636.757299][ T6407] usb 4-1: SerialNumber: syz [ 636.786345][ T6407] usb 4-1: config 0 descriptor?? [ 636.806191][ T6407] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 637.625652][ T6407] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 637.825445][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 638.056783][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 638.145521][ T6407] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 639.894510][ T29] audit: type=1400 audit(1781413440.961:1163): avc: denied { write } for pid=12338 comm="syz.1.1677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 640.014389][ T6407] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 640.412834][ T6407] em28xx 4-1:0.0: board has no eeprom [ 640.629450][ T6407] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 640.638696][ T6407] em28xx 4-1:0.0: dvb set to bulk mode. [ 640.644886][T10596] em28xx 4-1:0.0: Binding DVB extension [ 641.126755][T12346] 9p: Bad value for 'rfdno' [ 641.133511][ T6407] usb 4-1: USB disconnect, device number 69 [ 641.191095][ T6407] em28xx 4-1:0.0: Disconnecting em28xx [ 642.004415][T10596] em28xx 4-1:0.0: Registering input extension [ 642.012350][ T6407] em28xx 4-1:0.0: Closing input extension [ 642.132269][ T29] audit: type=1400 audit(1781413444.101:1164): avc: denied { create } for pid=12359 comm="syz.0.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 642.166489][ T6407] em28xx 4-1:0.0: Freeing device [ 642.376510][ T29] audit: type=1400 audit(1781413444.331:1165): avc: denied { ioctl } for pid=12359 comm="syz.0.1681" path="socket:[37189]" dev="sockfs" ino=37189 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 642.718234][ T29] audit: type=1400 audit(1781413444.681:1166): avc: denied { mount } for pid=12357 comm="syz.4.1680" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 642.919777][ T29] audit: type=1400 audit(1781413444.881:1167): avc: denied { remount } for pid=12357 comm="syz.4.1680" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 643.463191][ T29] audit: type=1400 audit(1781413445.431:1168): avc: denied { write } for pid=12376 comm="syz.0.1683" lport=43295 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 643.639633][ T29] audit: type=1400 audit(1781413445.431:1169): avc: denied { setopt } for pid=12376 comm="syz.0.1683" lport=43295 faddr=::ffff:172.20.255.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 643.720110][ T29] audit: type=1400 audit(1781413445.471:1170): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 643.869788][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.641866][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.024246][T12378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 645.072779][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.097918][ T29] audit: type=1400 audit(1781413447.061:1171): avc: denied { write } for pid=12392 comm="syz.2.1688" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 645.933645][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1693'. [ 646.324032][ T29] audit: type=1400 audit(1781413448.151:1172): avc: denied { write } for pid=12404 comm="syz.3.1693" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 646.421870][T12410] netlink: 'syz.3.1693': attribute type 1 has an invalid length. [ 646.430655][T12410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1693'. [ 647.665884][T12420] 9p: Bad value for 'rfdno' [ 648.638616][ T29] audit: type=1400 audit(1781413450.601:1173): avc: denied { ioctl } for pid=12429 comm="syz.2.1700" path="socket:[36760]" dev="sockfs" ino=36760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 649.089424][ T6407] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 649.214856][T12437] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.271633][ T6407] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 649.296627][ T6407] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 649.321913][ T6407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.344198][ T6407] usb 2-1: Product: syz [ 649.354443][ T6407] usb 2-1: Manufacturer: syz [ 649.366233][ T6407] usb 2-1: SerialNumber: syz [ 649.545825][ T29] audit: type=1400 audit(1781413451.511:1174): avc: denied { create } for pid=12436 comm="syz.3.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 650.096587][T12443] /dev/nullb0: Can't lookup blockdev [ 650.188870][ T6407] usb 2-1: Can't get UAC3 power state for id 10 [ 650.221373][ T6407] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 650.277753][ T6407] usb 2-1: applying playback min mute quirk [ 650.299733][ T6407] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 650.325474][ T6407] usb 2-1: applying playback min mute quirk [ 650.344869][ T6407] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 650.375154][ T6407] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 2, val = 0/1/1 [ 650.609100][ T6407] usb 2-1: USB disconnect, device number 59 [ 651.380548][T12184] udevd[12184]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.532682][T10596] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 652.753299][ T6414] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 652.771685][T10596] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 652.927504][ T6414] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 652.930503][T10596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.949905][ T6414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.138166][ T6414] usb 3-1: Product: syz [ 653.142919][ T6414] usb 3-1: Manufacturer: syz [ 653.149470][ T6414] usb 3-1: SerialNumber: syz [ 653.183736][T10596] usb 4-1: config 0 descriptor?? [ 653.201190][T10596] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 653.748957][T12477] fuse: fd is not a fuse device [ 654.504896][ T6414] usb 3-1: 1:1 : no cluster descriptor [ 654.518457][ T6414] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 654.870505][T10596] usb 4-1: USB disconnect, device number 70 [ 654.942263][ T6414] usb 3-1: USB disconnect, device number 49 [ 654.963072][T12483] 9p: Bad value for 'rfdno' [ 655.675968][ T6407] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 657.279474][ T6407] usb 2-1: device descriptor read/64, error -71 [ 657.595669][T11999] udevd[11999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.819422][ T6407] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 657.969440][ T6407] usb 2-1: device descriptor read/64, error -71 [ 657.982200][T12496] syzkaller0: entered promiscuous mode [ 657.993088][T12496] syzkaller0: entered allmulticast mode [ 658.089644][ T6407] usb usb2-port1: attempt power cycle [ 658.097371][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 658.167275][T12501] comedi comedi1: 8255: I/O base address not correctly aligned [ 658.627320][T12504] comedi comedi1: 8255: I/O base address not correctly aligned [ 659.978259][ T29] audit: type=1400 audit(1781413461.941:1175): avc: denied { write } for pid=12515 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 660.068754][T12517] fuse: Unknown parameter './file0' [ 660.226833][ T29] audit: type=1400 audit(1781413462.191:1176): avc: denied { create } for pid=12515 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 660.519464][ T6407] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 661.846637][ T6407] usb 3-1: Using ep0 maxpacket: 16 [ 662.016597][ T29] audit: type=1400 audit(1781413463.981:1177): avc: denied { mount } for pid=12524 comm="syz.4.1725" name="/" dev="hugetlbfs" ino=37949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 662.129578][ T6407] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 662.317710][ T6407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 662.328158][ T6407] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 662.337948][ T6407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 662.347687][ T6407] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 662.363784][ T6407] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 662.377553][ T6407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.389794][ T6407] usb 3-1: Product: syz [ 662.397787][ T6407] usb 3-1: Manufacturer: syz [ 662.402711][ T6407] usb 3-1: SerialNumber: syz [ 662.795935][ T6407] usb 3-1: config 0 descriptor?? [ 662.817997][ T6407] port100 3-1:0.0: NFC: Could not get supported command types [ 663.898413][ T6407] usb 3-1: USB disconnect, device number 50 [ 664.416133][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 666.664023][T12559] lo speed is unknown, defaulting to 1000 [ 666.889408][ T6407] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 667.372538][T12563] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 667.644864][ T6407] usb 3-1: Using ep0 maxpacket: 16 [ 667.806644][ T6407] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 667.817167][ T6407] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.826400][ T6407] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 667.835688][ T6407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.858602][ T6407] usb 3-1: config 0 descriptor?? [ 668.247738][T12578] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 668.258132][T12578] SELinux: failed to load policy [ 671.768995][ T6407] usb 3-1: string descriptor 0 read error: -71 [ 671.847784][ T6407] usb 3-1: USB disconnect, device number 51 [ 672.359531][ T29] audit: type=1800 audit(1781413473.981:1178): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1743" name="bus" dev="tmpfs" ino=1708 res=0 errno=0 [ 672.546476][T12599] fuse: Bad value for 'user_id' [ 672.551460][T12599] fuse: Bad value for 'user_id' [ 674.245512][T12619] netlink: 'syz.4.1749': attribute type 64 has an invalid length. [ 675.132456][ T29] audit: type=1400 audit(1781413476.861:1179): avc: denied { link } for pid=12627 comm="syz.4.1752" name="#15" dev="tmpfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 675.228961][ T29] audit: type=1400 audit(1781413476.861:1180): avc: denied { rename } for pid=12627 comm="syz.4.1752" name="#16" dev="tmpfs" ino=1988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 675.540630][ T6414] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 675.961286][ T29] audit: type=1400 audit(1781413477.931:1181): avc: denied { create } for pid=12648 comm="syz.4.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 676.157334][T11178] Bluetooth: hci4: connection err: -111 [ 676.868442][T12659] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1759'. [ 677.023034][ T6414] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 677.042318][ T6414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.055538][ T6414] usb 3-1: config 0 descriptor?? [ 677.074411][ T6414] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 678.854491][T12691] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 678.864829][T12691] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 679.083580][ T29] audit: type=1400 audit(1781413481.051:1182): avc: denied { connect } for pid=12631 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 679.108234][ T6414] usb 3-1: USB disconnect, device number 52 [ 680.049120][ T29] audit: type=1400 audit(1781413482.011:1183): avc: denied { accept } for pid=12699 comm="syz.1.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 681.609865][ T6414] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 681.627103][ T29] audit: type=1400 audit(1781413483.591:1184): avc: denied { map } for pid=12721 comm="syz.4.1778" path="socket:[38637]" dev="sockfs" ino=38637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 683.141484][T12724] sctp: [Deprecated]: syz.1.1779 (pid 12724) Use of int in max_burst socket option deprecated. [ 683.141484][T12724] Use struct sctp_assoc_value instead [ 683.165516][ T6414] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 683.193165][ T6414] usb 4-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config [ 683.242977][ T6414] usb 4-1: config 0 has no interface number 0 [ 683.274536][ T6414] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 683.329223][ T6414] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 683.510520][ T6414] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 683.538640][ T6414] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 684.783601][ T6414] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8 [ 684.797279][ T6414] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x8 has invalid maxpacket 65468, setting to 64 [ 685.342292][ T6414] usb 4-1: string descriptor 0 read error: -71 [ 685.364989][ T6414] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 685.429554][ T6414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.444327][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.458128][T12720] [U]  [ 685.473988][ T6414] usb 4-1: config 0 descriptor?? [ 685.516313][ T6414] usb 4-1: can't set config #0, error -71 [ 685.550476][ T6414] usb 4-1: USB disconnect, device number 71 [ 685.612781][T12744] syzkaller0: entered promiscuous mode [ 685.638783][T12744] syzkaller0: entered allmulticast mode [ 685.895452][T12752] tipc: Started in network mode [ 685.920929][T12752] tipc: Node identity 2afc08170bcf, cluster identity 4711 [ 685.951011][T12752] tipc: Enabled bearer , priority 0 [ 686.003112][T12757] netlink: 'syz.0.1787': attribute type 16 has an invalid length. [ 686.011796][T12757] netlink: 'syz.0.1787': attribute type 17 has an invalid length. [ 686.201268][ T6414] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 686.306504][T12757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.314824][T12757] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.326512][T12757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.373446][T12757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.383987][T12757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.397536][T12757] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 686.442151][ T6414] usb 4-1: Using ep0 maxpacket: 16 [ 686.448292][T12743] tipc: Resetting bearer [ 686.463352][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.509841][ T6414] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 686.510525][T12743] tipc: Disabling bearer [ 686.549486][ T6414] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 686.579538][ T6414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.603525][ T6414] usb 4-1: config 0 descriptor?? [ 688.056607][T12771] 9p: Bad value for 'rfdno' [ 689.375993][T12773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.384481][T12773] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.397680][T12773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.481329][T12773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.490766][T12773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.502887][T12773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 689.513258][T12773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.526831][T12773] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 689.553080][ T29] audit: type=1400 audit(1781413491.521:1185): avc: denied { setopt } for pid=12781 comm="syz.0.1794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 689.559779][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.581487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.601799][ T6414] usbhid 4-1:0.0: can't add hid device: -71 [ 689.612469][ T6414] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 689.652127][ T6414] usb 4-1: USB disconnect, device number 72 [ 689.823362][ T29] audit: type=1400 audit(1781413491.791:1186): avc: denied { ioctl } for pid=12791 comm="syz.0.1797" path="socket:[38771]" dev="sockfs" ino=38771 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 689.853595][T12792] sctp: [Deprecated]: syz.0.1797 (pid 12792) Use of int in max_burst socket option. [ 689.853595][T12792] Use struct sctp_assoc_value instead [ 690.673968][T12810] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 691.256755][T12814] netlink: 'syz.0.1801': attribute type 10 has an invalid length. [ 691.304188][T12810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.389269][T12810] team0: Port device netdevsim1 added [ 691.535098][T12814] team0: Port device netdevsim1 removed [ 692.656186][T12814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.843197][T12814] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 693.917737][T12840] bpf: Bad value for 'context' [ 695.111703][ T29] audit: type=1400 audit(1781413497.081:1187): avc: denied { shutdown } for pid=12844 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 695.132338][ T29] audit: type=1400 audit(1781413497.101:1188): avc: denied { read } for pid=12844 comm="syz.3.1811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 696.914635][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 697.319783][T12864] gtp0: entered promiscuous mode [ 697.349584][T12864] gtp0: entered allmulticast mode [ 697.500738][T12870] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 697.519729][T12870] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 697.536760][T12870] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1817'. [ 698.887862][T12880] random: crng reseeded on system resumption [ 698.897800][ T29] audit: type=1400 audit(1781413500.851:1189): avc: denied { write } for pid=12874 comm="syz.4.1819" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 699.789508][ T5717] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 699.908391][T12891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 699.952330][ T5717] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 699.980644][ T5717] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 700.004150][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.015451][ T5717] usb 4-1: Product: syz [ 700.021386][ T5717] usb 4-1: Manufacturer: syz [ 700.030684][ T5717] usb 4-1: SerialNumber: syz [ 700.148535][T12896] lo speed is unknown, defaulting to 1000 [ 700.935277][ T5717] usb 4-1: Can't get UAC3 power state for id 10 [ 700.965493][ T5717] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 701.012253][ T5717] usb 4-1: applying playback min mute quirk [ 701.022739][ T5717] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 701.041487][ T5717] usb 4-1: applying playback min mute quirk [ 701.054434][ T5717] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 701.084283][ T5717] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 2, val = 0/1/1 [ 701.221843][ T5717] usb 4-1: USB disconnect, device number 73 [ 701.541411][T12459] udevd[12459]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.713224][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1829'. [ 702.746108][T12930] can0: slcan on ttyS3. [ 703.045642][T12930] can0 (unregistered): slcan off ttyS3. [ 703.866437][ T5717] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 704.867036][ T5717] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 705.460645][ T5717] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 705.533260][ T5717] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 705.587921][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 705.628426][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 705.653755][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 705.670709][T12948] sch_tbf: peakrate 13395277610288505775 is lower than or equals to rate 14891426328479775655 ! [ 705.685133][ T5717] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 705.705650][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.724439][ T5717] usb 5-1: config 0 descriptor?? [ 705.759442][T10596] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 705.809457][ T6407] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 705.889538][T10596] usb 3-1: device descriptor read/64, error -71 [ 705.963622][ T6407] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 705.980087][ T805] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 705.990795][ T6407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.013231][ T6407] usb 4-1: config 0 descriptor?? [ 706.035068][ T6407] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 706.039085][ T5717] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 706.078073][ T5717] usb 5-1: USB disconnect, device number 35 [ 706.091837][ T5717] usblp0: removed [ 706.130832][T10596] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 706.151066][ T805] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 706.168096][ T805] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 706.179465][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.197864][ T805] usb 2-1: Product: syz [ 706.203515][ T805] usb 2-1: Manufacturer: syz [ 706.208302][ T805] usb 2-1: SerialNumber: syz [ 706.269551][T10596] usb 3-1: device descriptor read/64, error -71 [ 706.407312][T10596] usb usb3-port1: attempt power cycle [ 706.859663][ T805] usb 2-1: Can't get UAC3 power state for id 10 [ 706.877160][ T805] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 706.913835][ T805] usb 2-1: applying playback min mute quirk [ 706.927805][ T805] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 706.947747][ T805] usb 2-1: applying playback min mute quirk [ 706.959982][ T805] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 706.980288][ T805] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 2, val = 0/1/1 [ 706.994861][ T6407] usb 4-1: USB disconnect, device number 74 [ 707.013361][T10596] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 707.060661][T10596] usb 3-1: device descriptor read/8, error -71 [ 707.087160][ T805] usb 2-1: USB disconnect, device number 63 [ 707.392005][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.450487][T10596] usb 3-1: new low-speed USB device number 56 using dummy_hcd [ 707.532299][T10596] usb 3-1: device descriptor read/8, error -71 [ 707.691983][T10596] usb usb3-port1: unable to enumerate USB device [ 707.964278][T12962] orangefs_mount: mount request failed with -4 [ 710.666921][T12980] sch_tbf: peakrate 13395277610288505775 is lower than or equals to rate 14891426328479775655 ! [ 712.609954][ T94] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 712.662267][T10596] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 712.663071][T13009] netlink: 'syz.3.1859': attribute type 64 has an invalid length. [ 712.861033][ T94] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 712.881740][ T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.893188][ T94] usb 3-1: config 0 descriptor?? [ 712.920032][T10596] usb 5-1: Using ep0 maxpacket: 32 [ 712.920141][ T29] audit: type=1400 audit(1781413514.881:1190): avc: denied { read } for pid=13012 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 712.927272][T10596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.998404][T10596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.019060][T10596] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 713.049433][T10596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.080036][T10596] usb 5-1: config 0 descriptor?? [ 713.115526][T10596] hub 5-1:0.0: USB hub found [ 713.127787][T13015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 713.144636][ T94] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 713.154188][ T94] [drm:udl_init] *ERROR* Selecting channel failed [ 713.213570][ T94] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 713.358501][T13002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13002 comm=syz.4.1855 [ 713.407354][ T94] [drm] Initialized udl on minor 2 [ 713.416144][ T94] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 713.425210][ T94] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 713.435024][ T805] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 713.445370][ T94] usb 3-1: USB disconnect, device number 57 [ 713.469646][ T805] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 714.954904][T13031] syzkaller0: entered promiscuous mode [ 714.963771][T13031] syzkaller0: entered allmulticast mode [ 714.972196][T13033] xt_CONNSECMARK: invalid mode: 66 [ 715.006211][T13033] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 715.020571][T13033] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 715.037552][T13033] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 715.058843][T13033] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 715.310571][T10596] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 715.374314][T13035] lo speed is unknown, defaulting to 1000 [ 715.499742][T10596] usbhid 5-1:0.0: can't add hid device: -71 [ 715.506229][T10596] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 715.541316][T10596] usb 5-1: USB disconnect, device number 36 [ 717.610099][T10596] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 718.511919][T10596] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 718.557411][T10596] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 718.579556][T10596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.589692][T10596] usb 2-1: Product: syz [ 718.595325][T10596] usb 2-1: Manufacturer: syz [ 718.600672][T10596] usb 2-1: SerialNumber: syz [ 719.176302][T10596] usb 2-1: Can't get UAC3 power state for id 10 [ 719.221820][T10596] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 719.280417][T10596] usb 2-1: applying playback min mute quirk [ 719.310005][T10596] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 719.336968][T10596] usb 2-1: applying playback min mute quirk [ 719.361209][T10596] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 719.362782][T13080] overlayfs: overlapping lowerdir path [ 719.406118][T10596] usb 2-1: [2] FU [Generic Out Playback Volume] ch = 2, val = 0/1/1 [ 719.511418][T11178] Bluetooth: hci4: connection err: -111 [ 719.520811][T13086] overlayfs: failed to verify upper (349/file0, ino=1856, err=-116) [ 719.592850][T13086] overlayfs: failed to verify index dir 'upper' xattr [ 719.619837][T10596] usb 2-1: USB disconnect, device number 64 [ 719.643046][T13086] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 720.909248][T10596] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 722.344078][T12458] udevd[12458]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 723.293781][T13116] SELinux: policydb magic number 0x4040789 does not match expected magic number 0xf97cff8c [ 723.305021][T13116] SELinux: failed to load policy [ 723.319443][T10596] usb 2-1: Using ep0 maxpacket: 32 [ 723.330318][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.341880][T10596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.764614][T10596] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 723.809541][T13085] tipc: Enabling of bearer rejected, failed to enable media [ 723.872599][T10596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.395284][T10596] usb 2-1: config 0 descriptor?? [ 724.424334][T13085] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1882'. [ 724.453569][T10596] usb 2-1: can't set config #0, error -71 [ 724.528506][T10596] usb 2-1: USB disconnect, device number 65 [ 724.909441][ T94] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 725.258146][T13134] overlayfs: failed to clone upperpath [ 725.294217][ T94] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.000658][T10596] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 726.749374][ T94] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 727.790978][ T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.801769][ T94] usb 3-1: config 0 descriptor?? [ 727.899546][ T94] usb 3-1: can't set config #0, error -71 [ 727.913316][ T94] usb 3-1: USB disconnect, device number 58 [ 727.960985][T10596] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 727.978461][T10596] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 728.000051][T10596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.019076][T10596] usb 4-1: Product: syz [ 728.025066][T10596] usb 4-1: Manufacturer: syz [ 728.030466][T10596] usb 4-1: SerialNumber: syz [ 728.509794][ T94] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 728.706218][T13152] fuse: fd is not a fuse device [ 728.729761][T13152] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1901'. [ 729.184113][T10596] usb 4-1: Can't get UAC3 power state for id 10 [ 729.226931][T10596] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 729.259388][ T94] usb 2-1: Using ep0 maxpacket: 32 [ 729.278528][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.292786][T10596] usb 4-1: applying playback min mute quirk [ 729.313203][T10596] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 729.325540][ T94] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.347146][T10596] usb 4-1: applying playback min mute quirk [ 729.358762][ T94] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 729.369570][T10596] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 729.387488][ T94] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.397546][T10596] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 2, val = 0/1/1 [ 729.422576][ T94] usb 2-1: config 0 descriptor?? [ 729.599981][ T94] hub 2-1:0.0: USB hub found [ 729.658750][T13151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13151 comm=syz.1.1900 [ 730.024838][T10596] usb 4-1: USB disconnect, device number 75 [ 730.215629][T11997] udevd[11997]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 730.646458][ T94] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 730.686682][ T94] usbhid 2-1:0.0: can't add hid device: -71 [ 730.699966][ T94] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 730.742388][ T94] usb 2-1: USB disconnect, device number 66 [ 730.817518][T13180] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.1908'. [ 732.247090][ T5717] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 732.653190][ T5717] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 837.979293][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 837.986270][ C1] rcu: 0-...!: (1 ticks this GP) idle=b05c/1/0x4000000000000000 softirq=63320/63320 fqs=1 [ 837.997339][ C1] rcu: (detected by 1, t=10503 jiffies, g=72785, q=183 ncpus=2) [ 838.005064][ C1] Sending NMI from CPU 1 to CPUs 0: [ 838.005101][ C0] NMI backtrace for cpu 0 [ 838.005121][ C0] CPU: 0 UID: 0 PID: 13203 Comm: syz.3.1916 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.005148][ C0] Tainted: [L]=SOFTLOCKUP [ 838.005155][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.005167][ C0] RIP: 0010:lock_acquire+0x71/0x370 [ 838.005196][ C0] Code: 8d f2 0e 0f 82 a4 02 00 00 8b 35 8e c0 f2 0e 85 f6 0f 85 bf 00 00 00 48 8b 44 24 30 65 48 2b 05 9d 03 25 12 0f 85 ed 02 00 00 <48> 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 65 8b 05 [ 838.005215][ C0] RSP: 0018:ffffc90000007d10 EFLAGS: 00000046 [ 838.005231][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 838.005243][ C0] RDX: 0000000000000000 RSI: ffffffff8deea8c4 RDI: ffffffff8c1c4780 [ 838.005256][ C0] RBP: ffffffff9b3a3a20 R08: 000000004fa421e6 R09: 0000000000000000 [ 838.005268][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 838.005279][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 838.005291][ C0] FS: 00007fd7dcf7d6c0(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 838.005310][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.005323][ C0] CR2: 0000200000398030 CR3: 0000000035eda000 CR4: 00000000003526f0 [ 838.005336][ C0] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 838.005348][ C0] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 838.005365][ C0] Call Trace: [ 838.005371][ C0] [ 838.005381][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 838.005412][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 838.005435][ C0] ? debug_object_deactivate+0x135/0x3b0 [ 838.005456][ C0] debug_object_deactivate+0x135/0x3b0 [ 838.005478][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 838.005503][ C0] ? timerqueue_linked_add+0x260/0x430 [ 838.005536][ C0] __hrtimer_run_queues+0x2f0/0xa00 [ 838.005570][ C0] hrtimer_interrupt+0x3e5/0x940 [ 838.005606][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 838.005635][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 838.005659][ C0] [ 838.005666][ C0] [ 838.005672][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.005694][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 838.005718][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 0e 58 f6 48 89 df e8 ae 5e 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 2a 48 f6 65 8b 05 6e 0d 7d 08 85 c0 74 16 5b [ 838.005736][ C0] RSP: 0018:ffffc90003a27758 EFLAGS: 00000246 [ 838.005750][ C0] RAX: 0000000000000002 RBX: ffff88803574a300 RCX: 0000000000000040 [ 838.005763][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fe0d RDI: ffffffff8c1c4780 [ 838.005775][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 838.005787][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888038048780 [ 838.005799][ C0] R13: 0000000000000246 R14: ffff88803574a2e8 R15: ffffc90003a278d8 [ 838.005821][ C0] __skb_try_recv_datagram+0x16a/0x500 [ 838.005849][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 838.005872][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 838.005903][ C0] __unix_dgram_recvmsg+0x1bc/0xc30 [ 838.005934][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 838.005962][ C0] ? __lock_acquire+0x4a5/0x2630 [ 838.005990][ C0] ? iovec_from_user+0xda/0x140 [ 838.006016][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 838.006045][ C0] ____sys_recvmsg+0x5b3/0x640 [ 838.006067][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 838.006096][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 838.006123][ C0] ? rcu_is_watching+0x12/0xc0 [ 838.006151][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 838.006172][ C0] ? kfree+0x1dd/0x6c0 [ 838.006196][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 838.006223][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 838.006246][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 838.006277][ C0] ? __pfx___might_resched+0x10/0x10 [ 838.006307][ C0] do_recvmmsg+0x301/0x760 [ 838.006332][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 838.006357][ C0] ? __sched_setaffinity+0x17c/0x280 [ 838.006379][ C0] ? do_futex+0x192/0x350 [ 838.006411][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 838.006439][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 838.006458][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 838.006488][ C0] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 838.006510][ C0] ? rcu_is_watching+0x12/0xc0 [ 838.006539][ C0] do_syscall_64+0x115/0x870 [ 838.006563][ C0] ? clear_bhb_loop+0x40/0x90 [ 838.006585][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.006605][ C0] RIP: 0033:0x7fd7dc19ce59 [ 838.006621][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.006638][ C0] RSP: 002b:00007fd7dcf7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 838.006656][ C0] RAX: ffffffffffffffda RBX: 00007fd7dc416090 RCX: 00007fd7dc19ce59 [ 838.006669][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000005 [ 838.006681][ C0] RBP: 00007fd7dc232d6f R08: 0000000000000000 R09: 0000000000000000 [ 838.006693][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 838.006704][ C0] R13: 00007fd7dc416128 R14: 00007fd7dc416090 R15: 00007ffdc820ac78 [ 838.006725][ C0] [ 838.007093][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g72785 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 838.533681][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 838.543644][ C1] rcu: RCU grace-period kthread stack dump: [ 838.549524][ C1] task:rcu_preempt state:R running task stack:28056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 838.563043][ C1] Call Trace: [ 838.566316][ C1] [ 838.569248][ C1] __schedule+0x1295/0x67a0 [ 838.573779][ C1] ? __pfx___schedule+0x10/0x10 [ 838.578636][ C1] ? find_held_lock+0x2b/0x80 [ 838.583313][ C1] ? schedule+0x2bf/0x390 [ 838.587646][ C1] schedule+0xdd/0x390 [ 838.591717][ C1] schedule_timeout+0x127/0x280 [ 838.596563][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 838.601932][ C1] ? __pfx_process_timeout+0x10/0x10 [ 838.607218][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 838.613024][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 838.618486][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 838.623252][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 838.628539][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 838.633475][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 838.638675][ C1] rcu_gp_kthread+0x179/0x230 [ 838.643352][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 838.648545][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 838.654354][ C1] ? __kthread_parkme+0x18c/0x230 [ 838.659391][ C1] ? kthread+0x13a/0x450 [ 838.663628][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 838.668822][ C1] kthread+0x370/0x450 [ 838.672886][ C1] ? __pfx_kthread+0x10/0x10 [ 838.677478][ C1] ret_from_fork+0x72b/0xd50 [ 838.682069][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 838.687182][ C1] ? __switch_to+0x800/0x1100 [ 838.691862][ C1] ? __pfx_kthread+0x10/0x10 [ 838.696461][ C1] ret_from_fork_asm+0x1a/0x30 [ 838.701243][ C1] [ 838.704254][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 838.710565][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.721416][ C1] Tainted: [L]=SOFTLOCKUP [ 838.725731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.735791][ C1] Workqueue: events_unbound toggle_allocation_gate [ 838.742306][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 838.748995][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 a9 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 838.768602][ C1] RSP: 0018:ffffc90000127870 EFLAGS: 00000293 [ 838.774677][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2dfd [ 838.782637][ C1] RDX: ffff88801e2b0000 RSI: ffffffff81fc2dd7 RDI: ffff88801e2b0000 [ 838.790608][ C1] RBP: ffff8880b8443560 R08: 0000000000000005 R09: 0000000000000000 [ 838.798574][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 838.806534][ C1] R13: ffffed10170886ad R14: 0000000000000001 R15: ffff8880b853c800 [ 838.814498][ C1] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 838.823420][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 838.829998][ C1] CR2: 0000001b33e1bff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 838.837961][ C1] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 838.845921][ C1] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 838.853884][ C1] Call Trace: [ 838.857156][ C1] [ 838.860086][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 838.865124][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 838.871450][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 838.876830][ C1] ? __pfx___text_poke+0x10/0x10 [ 838.881774][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 838.886804][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 838.891918][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 838.898414][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 838.904146][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 838.910404][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 838.916639][ C1] ? find_held_lock+0x2b/0x80 [ 838.921319][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 838.927296][ C1] jump_label_update+0x37a/0x550 [ 838.932235][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 838.938129][ C1] static_key_enable+0x1a/0x20 [ 838.942890][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 838.948179][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 838.954073][ C1] ? rcu_is_watching+0x12/0xc0 [ 838.958845][ C1] process_one_work+0xa0e/0x1980 [ 838.963796][ C1] ? __pfx_process_one_work+0x10/0x10 [ 838.969179][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 838.975073][ C1] worker_thread+0x5ef/0xe50 [ 838.979676][ C1] ? kthread+0x13a/0x450 [ 838.983913][ C1] ? __pfx_worker_thread+0x10/0x10 [ 838.989023][ C1] kthread+0x370/0x450 [ 838.993088][ C1] ? __pfx_kthread+0x10/0x10 [ 838.997679][ C1] ret_from_fork+0x72b/0xd50 [ 839.002274][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 839.007388][ C1] ? __switch_to+0x800/0x1100 [ 839.012070][ C1] ? __pfx_kthread+0x10/0x10 [ 839.016657][ C1] ret_from_fork_asm+0x1a/0x30 [ 839.021440][ C1]