last executing test programs: 1m28.936834981s ago: executing program 3 (id=547): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000004400)='/dev/comedi4\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x3b) r3 = io_uring_setup(0x1148, &(0x7f0000000240)={0x0, 0xc95e, 0x1, 0x21, 0x30f}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000ce7600", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/18, @ANYRES32=0x0, @ANYBLOB="0300000005000000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x64, &(0x7f0000000480), 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x52, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x1e, &(0x7f00000002c0)=""/30, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x2, 0xb}], 0x10, 0x1}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x21880, 0x58, '\x00', 0x0, @fallback=0x1b, r4, 0x8, &(0x7f0000000380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0x0, 0x7, 0xe61}, 0x10, r6, r4}, 0x94) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r7 = memfd_secret(0x80000) ftruncate(r7, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}]}, 0x48}}, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000000)={0x1, 0x1, 0xffffffff, 0x4, 0x54, 0xc0000000, 0x40, 0x7, 0x20, 0x1000c190, 0x100, 0x8, 0x0, 0x0, 0x0}) 1m26.337537626s ago: executing program 3 (id=553): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)={0x5, 0x0, [{0xfec00000, 0xb, &(0x7f0000000080)=""/11}, {0x3000, 0xfff, &(0x7f00000009c0)=""/4095}, {0x54000, 0x0, &(0x7f0000000080)}, {0x4002004, 0x83, &(0x7f0000000280)=""/131}, {0x200000, 0x1000, &(0x7f00000019c0)=""/4096}]}) 1m26.10946913s ago: executing program 3 (id=554): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/net\x00') mmap(&(0x7f00004f3000/0x3000)=nil, 0x3000, 0x3000008, 0x110, r0, 0xc4339000) 1m25.919044326s ago: executing program 3 (id=556): prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0xfffe, {0xa, 0x4e22, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)='`', 0x1}], 0x1}, 0x41) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x395180, 0x149) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x81, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x400d, 0x9, 0x400, "b6640740002000"}) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r7 = fsopen(&(0x7f0000000180)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f00000001c0)='hugetlb', &(0x7f0000000200)='./file1\x00', r4) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "519300", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x7}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) 1m24.309556582s ago: executing program 3 (id=563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x52}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x240480c3) r2 = dup(r1) write$binfmt_elf32(r1, &(0x7f00000006c0)=ANY=[], 0x5c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff6, @empty, 0x7f}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x6}, 0x9c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x7fffffffffffffff, 0x0, 0x300, 0x0, 0xfffffffffffffffc, 0x0, 0xc796}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x400, 0x3}, 0x0, 0x0) 1m23.301141558s ago: executing program 3 (id=569): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ff7f00000000010006000000850000002f000000850000000700000094ffffe900000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902120001000010000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xa, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000440)=0xffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a1780", 0x33, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) sendto$inet6(r4, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="802458cec7ac07bebe"], 0x8) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000002500050326bd7008fedbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) recvmsg(r6, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 1m8.824717091s ago: executing program 32 (id=569): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ff7f00000000010006000000850000002f000000850000000700000094ffffe900000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902120001000010000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xa, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000440)=0xffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000040)="9e4aa4c07d192c34f0ab28f8dc69582227b99a06a74bede44e623b5f0e09bc13ff7292a6f773766ad22ae8cb1923ebb34a1780", 0x33, 0x41, &(0x7f0000000180)={0xa, 0x4e23, 0x8001, @loopback, 0xe}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0), 0x0) sendto$inet6(r4, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="802458cec7ac07bebe"], 0x8) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000004100)=ANY=[@ANYBLOB="180000002500050326bd7008fedbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14) recvmsg(r6, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 10.39456173s ago: executing program 4 (id=874): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000b209000008009f000d000000080026006c09"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mknod$loop(&(0x7f0000000200)='./file1\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRES8=r6, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESOCT=r6, @ANYRES64=r6, @ANYRES32=r4, @ANYRESHEX=r5, @ANYRES32=r6, @ANYBLOB="69de1a333b9ae4b9ec32aa7333969d3d9d97b502a9ab7f89dd253d455c5e51c9dc303b99a2c3aaea1c0fd1e0969b0e098ca4538638ddeb323b3835b338676d2ec049284f0728db2320c7cd4fa95d7e5f6d462b162e0884aa2d6dd5623eee536aea9fdbd32ac8ca8797ed2c15efafe99a7912", @ANYRES64=r6], &(0x7f0000000000)='GPL\x00', 0x5a11, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10037}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x3, &(0x7f0000000200)=0x22b2) get_robust_list(r7, &(0x7f0000000680)=&(0x7f0000000300)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f0000000600)={&(0x7f0000000280)}}, &(0x7f00000006c0)=0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) connect$qrtr(r6, &(0x7f0000000100)={0x2a, 0x2, 0x3fff}, 0xc) sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d000000000000048675f8001d000a00a0e69ee517d39ae85e50eb395466cc49b84d50d4b64460512d6ae313a5c3d81e6182949a36c23d3b48dffefffffffffffffff60a64c9f40800", 0x5c}], 0x1, 0x0, 0x6a, 0x1f00c00e}, 0x4002000) socket$inet6_sctp(0xa, 0x1, 0x84) 9.251606307s ago: executing program 5 (id=883): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@upd={0xf8, 0x12, 0x2, 0x70bd27, 0x25dfdbff, {{'drbg_nopr_sha384\x00'}, '\x00', '\x00', 0x400, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xd8}, {0x8, 0x1, 0x6}]}, 0xf8}}, 0x4800) pselect6(0x40, &(0x7f0000000040)={0x1, 0x7fffffffffffffff, 0x0, 0x300, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xc796}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x400, 0x3, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) 8.985612728s ago: executing program 2 (id=884): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) r7 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r3], 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0xa0, 0x63, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0xb, 0x45, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x81, 0x6, 0x4, 0x40, 0x2}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0x780f, 0xfffa, [0x3f00, 0xc00f]}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40b}}]}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0x1, 0x101}}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 8.361071521s ago: executing program 2 (id=885): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x95) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200000000000000000000000000018900"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x3, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x122, 0x0) shutdown(r4, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x119) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000800000000", @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x8000) r8 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 8.360144333s ago: executing program 4 (id=886): dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1f, 0x2, @thr={&(0x7f00000000c0)="6f6a344af3c276f817693c752a89616b0407388f59ff25680b034edfc85cf06a91135e099a926aaf23545f169296a4ba2ee3bbec1d3c76bc", &(0x7f00000001c0)="7ab4234496d92947dfce7795ed7067e5790fe69f4faef0e435c431367d9129b50cf129ff59884741aca3f9382a5cce1798c8360311fcc130cce05d0485327805ac0df5f184bbd0881dabc2d7985aa367db57f2ad112097b0dccdbae2d926d583abd3fc9a9c65721cc0909fedfe3b019e"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = accept4$rose(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r1], 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 8.357176961s ago: executing program 5 (id=887): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="a4a201f4939c383fd44e41d0aa4e999c5222be733acfb118ad2f306db817800869ea65c94b3292f6f55c6842073e50afc9100c8be1060fc7ffc73ab6a6af09acaaf16b0b5e20699ee46a57f0a0fe5b839373f041d6acd83b033d9c9bef50a57480f0cbe07601c956a89a651bec77bb19b239935167b45d2066ac2477a45ba793e13a88d8a0b8d170d026ad8ecf8ddc23a2254d323204d8a39bfec95c6abfd5d5450931e62eb1b7134c7e109c"], 0x40}}, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000500)='status\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000100)={0x2, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x4, 0x0, @SEQ_NOTEON}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x502, 0x0) ioctl$TIOCGPTLCK(r6, 0x80045439, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000980)="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", 0x69f}], 0x1) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x2, &(0x7f0000000080)={0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x5) 7.409535543s ago: executing program 0 (id=889): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) (async) timer_create(0x2, &(0x7f0000000400)={0x0, 0x24, 0x2, @thr={&(0x7f00000002c0)="e838cf4ecd1508eabd2e294d75b89f998a49bfbd74d5e72552bacfe7c9ce7650be99d79866f1cd3fe4", &(0x7f0000000340)="d4a312bc"}}, &(0x7f0000000300)) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000ef00000000000000008500000053000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3, 0x30, r1, 0xd483e000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x79, 0x0, &(0x7f00000000c0)="e0bd547ed387000000009b6f5bec2e1592dff2f8ccbbb767a8ede28e5fc4430bec98769f185737eafdd9c51e2eb1d60d7fe85e9a472cce4cbea0f0068db5b444a4762a9c477addb392e75c191aee5573baa7dd74eb4b6846e30637198419243568f7f7c11f7d8b9d1891137dda7644163e7c9506ed0cb5d410", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, &(0x7f0000000040)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7, 0x89, 0x3, 0x6, 0x7ffffffe, 0x3, 0x800, 0x9, 0x2, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0xc, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0x5}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r6, 0x1) 7.333667331s ago: executing program 5 (id=890): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0x1001a, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x14, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0xf0fa, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.27451892s ago: executing program 0 (id=891): r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) (async) getpeername(r0, &(0x7f0000019300)=@in, &(0x7f0000000240)=0x80) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000010a000000fc0100000099000000000000000000000000000004000000"], 0xfc}}, 0x0) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e24, 0xffff087a, @local, 0x150}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000000)={0x1, 0x1, 0xffffffff, 0x4, 0x54, 0xc0000000, 0x40, 0x7, 0x20, 0x1000c190, 0x100, 0x8, 0x0, 0x0, 0x0}) 6.969854292s ago: executing program 0 (id=893): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000010000009500000015f40000"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r2, 0x0, 0x15, &(0x7f0000000280)=0xfffffffa, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0019"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) 6.830818075s ago: executing program 0 (id=894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12015002c9825f2082057400702a0102030109021b000205e820040904000000ff"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_emit_ethernet(0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000000c0)="1a00000082000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001180)=[@in6={0xa, 0x4e21, 0x4, @private2, 0x1ff}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, 0x8) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r6 = landlock_create_ruleset(&(0x7f0000001080)={0xa000, 0x6, 0x1}, 0x18, 0x2) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001100)='/dev/comedi2\x00', 0x6021c1, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000001140)={0x400a, r7}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x8, 0x2, 0xff, 0xf, '\x00', 0x4480}) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 6.408795007s ago: executing program 5 (id=895): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x400000002000000, 0x2) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000440)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x4000) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={0x0, r5, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e"], 0xd) 5.877353907s ago: executing program 5 (id=897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) getpid() poll(&(0x7f0000000080)=[{r1, 0x4000}], 0x1, 0xfffffffa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x8, {0x8, 0xb, "1769c4361f5e"}}, &(0x7f0000000040)={0x0, 0x3, 0x49, @string={0x49, 0x3, "9036c59ea9bc952e16f97da40855ff75738d73aaa8899b7b575725d1a7f04cd9dcb8d709c662ddc256411e9ebe2bb83aa5d78f36a009b654387abd3ee972d7df6ff4a9015f4aef"}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x70, "ed6f3dd068e14c4b5fcf3d1a8886fe41a4a854b8411f7d0d8b0d391fcf3a54980d68b78a0ff82fe9ec6619f9fc524d8101d5783ed53bd3ba2ed136e3968f2a2338b7913ce3a8fc696207e976c309c30ed2f1a99442c2f79252e1cb2f507ed2de7ceff4498756ea973826872dd7d4d0e3"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0xadc}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0xb8b}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "3757578200f1abd764b6eab4b50b47430bae0562e3ebef53558facf3995856adc816fdd6f6d169f8af647b38d125c5"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) (async) getpid() (async) poll(&(0x7f0000000080)=[{r1, 0x4000}], 0x1, 0xfffffffa) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_disconnect(r0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x8, {0x8, 0xb, "1769c4361f5e"}}, &(0x7f0000000040)={0x0, 0x3, 0x49, @string={0x49, 0x3, "9036c59ea9bc952e16f97da40855ff75738d73aaa8899b7b575725d1a7f04cd9dcb8d709c662ddc256411e9ebe2bb83aa5d78f36a009b654387abd3ee972d7df6ff4a9015f4aef"}}}, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x40, 0x17, 0x70, "ed6f3dd068e14c4b5fcf3d1a8886fe41a4a854b8411f7d0d8b0d391fcf3a54980d68b78a0ff82fe9ec6619f9fc524d8101d5783ed53bd3ba2ed136e3968f2a2338b7913ce3a8fc696207e976c309c30ed2f1a99442c2f79252e1cb2f507ed2de7ceff4498756ea973826872dd7d4d0e3"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000200)={0xc0, 0xa1, 0x4, 0xadc}, &(0x7f0000000240)={0x40, 0xa0, 0x4, 0xb8b}, &(0x7f0000000280)={0xc0, 0xa2, 0x2f, "3757578200f1abd764b6eab4b50b47430bae0562e3ebef53558facf3995856adc816fdd6f6d169f8af647b38d125c5"}}) (async) 5.876353626s ago: executing program 2 (id=898): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xf0, 0x6a, 0x87, 0x10, 0x1266, 0x1011, 0x99f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x7, 0xd, 0x80, 0x5, [{{0x9, 0x4, 0xa, 0x5, 0x1, 0xff, 0xb2, 0x64, 0x6, [], [{{0x9, 0x5, 0x80, 0x0, 0x410, 0xc, 0x92, 0xc2}}]}}, {{0x9, 0x4, 0xd3, 0xe2, 0x0, 0xa6, 0x41, 0xa8}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x6, 0x6, 0x10, 0xff, 0x9}, 0x15c, &(0x7f0000000f00)=ANY=[@ANYBLOB="050f5c01065d100a37a7056a017fc10408f978ecdf0c8b1c12833d66a06613ba99fb78c057fb48016ba2b945f570e3dc3eba212ad08cb0a0de36269a3b8831d07a7fd694b97f3079cfb2af9dd7ffc602cb31760bb14cf82748df15b65c5302dce959d5100b9646bf1fc4be11dcc697c6a3b259a7b7ca5eb8d085be318303259e6630dde663fbc8270c1295e665ceb6e956d1f40b92936f12022e39ec61782442a8f0dc251bde640dc5c00d909a4857d321e93787082bd7785ea16504acaf6b80e0a6efffb53905e73fc19943ac8044c7a43700379a2d3c75d8c14f638b8483b6e784947db69c954f78128b6bb8a2fc43522c6ebf22ceb75b15391b372482a151342f5a9251f96f10f63ae25787b457ccdcfc40728e62f0e701396c83a5377ca24d2e7b8ba0437b797a04250e9003100b0b10010c0400810c0400011410040d8c572bcca17a293a2c5b25d7ad0eb07703100b2921edeca48948dc370626ca465f2a42ea71a3011098efa81cdc7213393e0e79440f25893a3505a1999662e0a594b738e3b6a080b883292ca7abbe9865041648492988a15d2ae9cd11fe88968facec0b3fe6bd81746fccf3f228344233db29ab6374dada3c1b2f665a8518e9dd64da8b654d4bf4dc564417e7a672f0c2ef9fdb693342e03cf4c5569e970509f979d7a9525d1262f8b4ffd6ff8f1c1c1ef0ebd1a7c185f64719949503c4f5bf5a6bcb52ff9169403dd723e8a98a6f31e04ea84f2703467d", @ANYBLOB="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", @ANYRESDEC], 0x1, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 5.660268567s ago: executing program 4 (id=900): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r3, 0x0, 0x0, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3401000017000100000000800000000000000000000000000000000000000000000000006c000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000fd7f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000000000000000000800000000000000000000000000000000c0008000866"], 0x134}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c0001006272696467656de73799633aac1a2693fccf32b1171b276f48916f5dd2c9dca80de1319a3ab3173db4ebfb494d9cd663f0946373d635386ff71c68ca15752da590546f4598d3aa543e3f077695f75654e0c662520732cc583de0a2ee79a91e9f845a1fda5bb4d225eb21057ecc104872fded79fded2f46b5991bd1495f76c8602de9503ad53f833961ca1c0581e5bd2066eda585413d792292b51a9973041ca685b7bd67760ba6ae0762e7d206a4ce1b952bf2fbf82deb8e459938c2ba2d1865b12312d96dc87ceb6bdd99234370186d"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6578, 0xd}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000600)={0xad, 0x2, 0x9, 0x7, "c3b7597eefe6bf3a9ad9dcade52b44d8876389cd7b06d50302506103941c9e8206baccb97716bd34e4fd407fbf166c8c834c4f348d24aa0ef0a6c4362bdc56de4661c986fbf8b9deb963aac7c225667e53bd78abf94f8524af0758f833cf23d3c6863479a6f5a06df44fd552958e09524f7aa6c418ef4182c93c4ec44134ce26adf3bc3c954fe922b996fdf11b4b930c4cc1f299a3"}) 4.59946139s ago: executing program 1 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @random="a082c3015da1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x2101) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r11, 0x4611, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) 4.247725536s ago: executing program 2 (id=903): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000780)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f8666bf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtclass={0x30, 0x28, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff8, 0x16}, {0x8, 0xffff}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r4 = creat(0x0, 0x122) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x90a, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005500)={0x2020}, 0x2020) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 3.553376263s ago: executing program 0 (id=904): mkdir(&(0x7f0000001040)='./file0\x00', 0xa) mount$binder(0x0, &(0x7f0000001640)='./file0\x00', &(0x7f0000001680), 0x80, 0x0) add_key(&(0x7f0000000180)='keyring\x00', 0x0, &(0x7f0000000100)="01000000100000000000006bb55a2a630b00c145", 0x14, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) r1 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x70}}, @common=@inet=@udp={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e22]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@unspec=@mark={{0x30}, {0x401, 0x6, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$media(0x0, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000055060010402038b142010400000109023800010000000009040000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x60001, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) setregid(0xee01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file1', [{0x20, 'keyring\x00'}, {0x20, '#8)\\'}, {0x20, '$M6&3n\xa6\xf3\x01\x80\xbe\xf2\nm\x1b}\xefV\xa5R\x85O\xc1[\xa5\xcc\x03\x1f\b^R\xf7\x88Bn-\xc5\x97\r\xfdRM\xa6\x95>\x84U\xab\x99.\x19\x1d!]\xb0\xd3\x8b\xf6\xdf\x9d\xaf&\xec\xf7\xeb\xe7\xfa[1#'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, '%-$[\x1e.'}, {0x20, '!\xd0\x9a\v\'`\x03\x12~\x1c\x1fo\x87\n\x1e\x02\xd7\xc9\xa7\xc8\x90<:3\x80\xd5\x87\x11i0\f\xf6G\'*\xa1\xb3\xba\xa7\xfd\x86\xf2$\xa1\xe4\n\xbb\xce\xbd)~\xee\xd2a\xe0\xf2::\x04\xaaI\xcce\x84\x04\xaeq-\xcd\xf0\nB\xb0K1g\xc6\x8e\v\x9f\x82\xf3>\xeb\xd8\xa8\x9f\xeb\x01\'|\\\x82\x1c-\x13\x90gc\b\x96:\xaf7\xa5\xbb\'U\x90\x9c[\xe4\xb2\x065\x13'}], 0xa, "fcd372108161ad4648068e486906a2bd0413f897f4fb05f515f682f3d65fac4c1b48b9baceae0cebd3027ca7a2cc211f543a7525ea82f7000000000000000093e9f1"}, 0x12e) setresgid(0x0, 0x0, 0x0) 3.112270667s ago: executing program 1 (id=905): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xc, 0xfffffffffffff337}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='mm_vmscan_write_folio\x00', r0}, 0x39) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xa) (async) r1 = getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048812) sched_setscheduler(r1, 0x0, &(0x7f00000007c0)=0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$vhost_msg(r3, &(0x7f0000000440)={0x1, {&(0x7f00000003c0)=""/105, 0x69, &(0x7f0000000600)=""/231}}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x2, 0x0) (async) syz_open_procfs$userns(r1, &(0x7f0000000540)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) move_pages(0x0, 0x55c, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000780)=[0x7, 0x4], &(0x7f0000000740)=[0x0], 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_off}]}) (async) read$FUSE(r6, &(0x7f00000076c0)={0x2020}, 0x2020) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.0257592s ago: executing program 5 (id=906): r0 = epoll_create1(0x80000) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x100, 0x4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xcac1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) lseek(r5, 0x1000000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.797073025s ago: executing program 4 (id=907): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') socket(0x1d, 0x2, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket(0x23, 0x3, 0x1) r3 = socket(0x3, 0x3, 0x0) sendto$rose(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x1, @default}, 0x1c) write(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000200)) r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, r4}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff0, 0x0, 0x4) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r10, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r10, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r10, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, 0x0) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x11, r11, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r6, 0x68be, 0xb726, 0x3d, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000002c0)=0x14) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 1.827668193s ago: executing program 1 (id=908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) (async) gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3d, 0x800000000004, @thr={&(0x7f0000000280), &(0x7f0000000480)="23b059467c911f0a4450ec3e53a06f82e5217d50be265c4f9924232447724aa392d9057dc0f0b2819b5b7f82d09d10c79ae3129b397e9be804e9a716f3dec77a9cd2cbad604e517ee5fa875fe03489c0c7af5178f2b178fea2c04cb7f68d4be94e948aa802bad3b603fc822c9670217f"}}, 0x0) (async) syncfs(r2) (async) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r6) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000034) (async) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) 1.788675956s ago: executing program 4 (id=909): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x68, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x95ce, 0xe9}}, @val={0x72, 0x6}}}]}, 0x68}}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getcwd(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.717907086s ago: executing program 2 (id=910): dup(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x1f, 0x2, @thr={&(0x7f00000000c0)="6f6a344af3c276f817693c752a89616b0407388f59ff25680b034edfc85cf06a91135e099a926aaf23545f169296a4ba2ee3bbec1d3c76bc", &(0x7f00000001c0)="7ab4234496d92947dfce7795ed7067e5790fe69f4faef0e435c431367d9129b50cf129ff59884741aca3f9382a5cce1798c8360311fcc130cce05d0485327805ac0df5f184bbd0881dabc2d7985aa367db57f2ad112097b0dccdbae2d926d583abd3fc9a9c65721cc0909fedfe3b019e"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYRESOCT], 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000040)) 1.365776225s ago: executing program 2 (id=911): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8d5, 0x10}, 0xc) r3 = dup(r2) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x0, 0xbc83, 0x4}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) gettid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x1, @val=@netfilter={0x3, 0x4, 0x600, 0x1}}, 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005f0001000000000000000000170000000500020000000000a5e82296e9a9e393911303050dba9218bde042aef8510b6a39068f574af5e63a506a59205a8b7cb4289267fae0b3cf049292e6b966b98aec6069d088c7bc6c2f9e73b2624d6701a4ecbd93953ccb36a2f6713da9d27758bfa2df168f223ca476ac6f8ed01540466ca6907263de052d8411719fa8c22590120997e9de7effb3cc76b8a3175f6d4d27e28f1d13d51230a7e864054066eab7e7504cf9ed5483724b5e0ec1bafe42f6a1254bd69d743f6a2ff6f5e85818d3"], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000003920adae00140000a234c6deed9aa299669f0006000200000001000000002e612e2000"], 0x0, 0x32, 0x0, 0x1, 0x7}, 0x28) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) accept4(r6, &(0x7f00000002c0)=@ethernet={0x0, @remote}, &(0x7f0000000380)=0x80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000201010200000000000000000a0000071800028014000180080001000000000008000200ffffffff945b0fd44420"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) 1.236323167s ago: executing program 1 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) sendmsg$IPSET_CMD_GET_BYNAME(r0, 0x0, 0xd1302af0c2963958) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x3, 'f'}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc7e}}], 0x68}}], 0x2, 0x0) 497.290229ms ago: executing program 4 (id=913): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0x486, 0x0, 0xffffffffffffffff}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19ef4300040000000400000002000068e89eabd0", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f00000001c0)="058f0aa8018987a3c2680f0abafc2cd3386bc0eb14d99aac130c6c47961e1d", &(0x7f0000000100)=""/20, 0x2}, 0x20) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x800, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x200}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) 193.993177ms ago: executing program 1 (id=914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000500009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000aa4608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 1.872197ms ago: executing program 1 (id=915): r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x301) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) (async) shmctl$IPC_RMID(r0, 0x0) 0s ago: executing program 0 (id=916): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) rmdir(&(0x7f0000000080)='./file0\x00') r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000340)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000019300)=""/97, &(0x7f0000000480)=""/74, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r5 = eventfd2(0x50, 0x80001) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r5}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) kernel console output (not intermixed with test programs): 57822][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.447817][ T5926] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 215.020970][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 215.029279][ T5888] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 215.059952][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 215.065953][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.078266][ T5926] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 215.108006][ T5926] usb 5-1: can't read configurations, error -71 [ 215.143483][ T48] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 215.152227][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 215.152237][ T30] audit: type=1400 audit(1767364372.133:676): avc: denied { read write } for pid=7748 comm="syz.4.431" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 215.352770][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 215.390685][ T30] audit: type=1400 audit(1767364372.175:677): avc: denied { open } for pid=7748 comm="syz.4.431" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 215.395112][ T5888] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 215.431405][ T5897] usb 3-1: USB disconnect, device number 14 [ 215.447666][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 215.464400][ T48] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 215.546344][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.668253][ T30] audit: type=1400 audit(1767364372.511:678): avc: denied { create } for pid=7747 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.716333][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.048903][ T48] usb 4-1: config 0 descriptor?? [ 216.054015][ T5888] usb 1-1: Product: syz [ 216.075822][ T30] audit: type=1400 audit(1767364372.511:679): avc: denied { setopt } for pid=7747 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.078322][ T48] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 216.106126][ T5888] usb 1-1: Manufacturer: syz [ 216.110722][ T5888] usb 1-1: SerialNumber: syz [ 216.166010][ T5888] usb 1-1: config 0 descriptor?? [ 216.181373][ T30] audit: type=1400 audit(1767364372.585:680): avc: denied { bind } for pid=7747 comm="syz.2.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.232375][ T5888] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 216.247904][ T30] audit: type=1400 audit(1767364372.721:681): avc: denied { create } for pid=7756 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.323767][ T5926] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 216.494991][ T5926] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 216.526293][ T5926] usb 5-1: config 0 has no interface number 0 [ 216.539075][ T5926] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 216.556264][ T7741] netlink: 'syz.0.429': attribute type 4 has an invalid length. [ 216.564406][ T30] audit: type=1400 audit(1767364373.624:682): avc: denied { write } for pid=7738 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.586851][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 216.614852][ T5888] gspca_vc032x: reg_w err -71 [ 216.614919][ T30] audit: type=1400 audit(1767364373.645:683): avc: denied { connect } for pid=7738 comm="syz.0.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.639232][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.639472][ T30] audit: type=1400 audit(1767364373.645:684): avc: denied { name_connect } for pid=7738 comm="syz.0.429" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 216.647480][ T5926] usb 5-1: Product: syz [ 216.679289][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.694593][ T30] audit: type=1400 audit(1767364373.645:685): avc: denied { setopt } for pid=7738 comm="syz.0.429" lport=53337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.714943][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.714960][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.714969][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.714976][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.714984][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.714992][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715000][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715008][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715016][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715023][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715031][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715038][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715045][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715053][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715060][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715068][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715075][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715082][ T5888] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.715089][ T5888] gspca_vc032x: Unknown sensor... [ 216.715152][ T5888] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 216.722125][ T5888] usb 1-1: USB disconnect, device number 17 [ 216.834591][ T5926] usb 5-1: Manufacturer: syz [ 216.839270][ T5926] usb 5-1: SerialNumber: syz [ 216.854057][ T5926] usb 5-1: config 0 descriptor?? [ 216.954062][ T48] gspca_vc032x: reg_w err -110 [ 216.958882][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.964278][ T5881] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 216.973681][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 216.979036][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.000020][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.005400][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.039817][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.077102][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.091054][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.102526][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.112730][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.123750][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.129319][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.222595][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.243735][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.244052][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.257468][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.286587][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.291699][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 217.312946][ T5926] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-32 [ 217.321962][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.327397][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 217.332698][ T48] gspca_vc032x: Unknown sensor... [ 217.337846][ T5926] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -32) [ 217.346757][ T48] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 217.359938][ T5881] usb 2-1: config 7 has an invalid interface number: 189 but max is 2 [ 217.455729][ T5881] usb 2-1: config 7 has an invalid interface number: 133 but max is 2 [ 217.478312][ T5881] usb 2-1: config 7 has no interface number 1 [ 217.484510][ T5881] usb 2-1: config 7 has no interface number 2 [ 217.594051][ T5881] usb 2-1: config 7 interface 189 has no altsetting 0 [ 217.611205][ T5926] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -32 [ 217.713013][ T5881] usb 2-1: config 7 interface 0 has no altsetting 0 [ 217.758042][ T5881] usb 2-1: config 7 interface 133 has no altsetting 0 [ 217.771419][ T5926] usb 5-1: USB disconnect, device number 17 [ 218.251984][ T5881] usb 2-1: New USB device found, idVendor=19d2, idProduct=4a7b, bcdDevice=e1.99 [ 218.310658][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.348036][ T5881] usb 2-1: Product: syz [ 218.357016][ T5881] usb 2-1: Manufacturer: syz [ 218.361905][ T5881] usb 2-1: SerialNumber: syz [ 218.636521][ T7781] netlink: 52 bytes leftover after parsing attributes in process `syz.4.440'. [ 218.707880][ T7781] 9p: Bad value for 'wfdno' [ 218.775967][ T5926] usb 4-1: USB disconnect, device number 22 [ 218.841996][ T5881] usb 2-1: bad CDC descriptors [ 218.879692][ T5881] usb 2-1: USB disconnect, device number 17 [ 218.951571][ T7794] binder: 7793:7794 ioctl 40046205 0 returned -22 [ 219.098724][ T5994] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 219.143014][ T5815] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.209975][ T5959] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 219.260262][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.273109][ T5994] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 219.282234][ T5815] usb 3-1: device descriptor read/64, error -71 [ 219.293414][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.323302][ T5994] usb 1-1: config 0 descriptor?? [ 219.362967][ T5959] usb 5-1: Using ep0 maxpacket: 32 [ 219.369581][ T5959] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 219.384893][ T5959] usb 5-1: config 0 has no interface number 0 [ 219.405570][ T5959] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 219.423109][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.437230][ T5959] usb 5-1: Product: syz [ 219.445139][ T5959] usb 5-1: Manufacturer: syz [ 219.454826][ T5959] usb 5-1: SerialNumber: syz [ 219.481657][ T5959] usb 5-1: config 0 descriptor?? [ 219.505627][ T5959] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 219.515047][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 219.648926][ T5815] usb 3-1: device descriptor read/64, error -71 [ 219.791621][ T5815] usb usb3-port1: attempt power cycle [ 219.810473][ T5994] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 219.825269][ T5959] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 219.967100][ T7804] IPVS: sh: FWM 3 0x00000003 - no destination available [ 219.974987][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 219.991692][ T5960] IPVS: starting estimator thread 0... [ 220.036004][ T5994] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input14 [ 220.075753][ T5959] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.086380][ T7806] IPVS: using max 62 ests per chain, 148800 per kthread [ 220.093906][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 17 [ 220.175722][ T5815] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 220.193942][ T5994] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 220.238331][ T5815] usb 3-1: device descriptor read/8, error -71 [ 220.245335][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'. [ 220.254742][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 220.314225][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.314754][ T48] usb 5-1: USB disconnect, device number 18 [ 220.380453][ T48] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 220.398921][ T5881] usb 1-1: USB disconnect, device number 18 [ 220.446470][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 220.446485][ T30] audit: type=1400 audit(1767364377.698:708): avc: denied { getattr } for pid=7808 comm="syz.3.448" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 220.490903][ T48] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 acpid: input device has been disconnected, fd 10 [ 220.533815][ T5815] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 220.563537][ T5815] usb 3-1: device descriptor read/8, error -71 [ 220.580106][ T48] quatech2 5-1:0.51: device disconnected [ 220.700946][ T5815] usb usb3-port1: unable to enumerate USB device [ 220.743689][ T30] audit: type=1400 audit(1767364377.992:709): avc: denied { create } for pid=7812 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 221.122709][ T30] audit: type=1400 audit(1767364378.401:710): avc: denied { setopt } for pid=7819 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 221.562961][ T30] audit: type=1400 audit(1767364378.863:711): avc: denied { append } for pid=7816 comm="syz.4.451" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.682519][ T30] audit: type=1400 audit(1767364378.989:712): avc: denied { shutdown } for pid=7828 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.730307][ T30] audit: type=1400 audit(1767364379.021:713): avc: denied { getopt } for pid=7828 comm="syz.1.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 221.776014][ T30] audit: type=1400 audit(1767364379.021:714): avc: denied { write } for pid=7828 comm="syz.1.454" lport=51937 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.930151][ T30] audit: type=1400 audit(1767364379.031:715): avc: denied { setopt } for pid=7828 comm="syz.1.454" lport=51937 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 221.987139][ T30] audit: type=1400 audit(1767364379.189:716): avc: denied { kexec_image_load } for pid=7834 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 222.156776][ T30] audit: type=1400 audit(1767364379.189:717): avc: denied { name_bind } for pid=7834 comm="syz.4.456" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 222.267028][ T5881] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 222.344889][ T7854] openvswitch: netlink: EtherType 0 is less than min 600 [ 222.457826][ T5994] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 222.465541][ T48] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 222.602161][ T5994] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.611385][ T5994] usb 3-1: config 3 has an invalid interface number: 21 but max is 0 [ 222.739865][ T5994] usb 3-1: config 3 has no interface number 0 [ 222.753226][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 222.758547][ T5994] usb 3-1: config 3 interface 21 has no altsetting 0 [ 222.772870][ T48] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 222.783154][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.791542][ T48] usb 1-1: Product: syz [ 222.798946][ T48] usb 1-1: Manufacturer: syz [ 222.807842][ T48] usb 1-1: SerialNumber: syz [ 222.828442][ T5994] usb 3-1: New USB device found, idVendor=110a, idProduct=1658, bcdDevice=db.db [ 222.830415][ T48] usb 1-1: config 0 descriptor?? [ 222.846132][ T48] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 222.854195][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.855054][ T48] usb 1-1: Detected FT232H [ 222.873559][ T5994] usb 3-1: Product: syz [ 222.883214][ T5994] usb 3-1: Manufacturer: syz [ 223.038601][ T48] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 223.048193][ T5994] usb 3-1: SerialNumber: syz [ 223.265276][ T7852] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 223.271813][ T7852] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 223.414317][ T7852] vhci_hcd vhci_hcd.0: Device attached [ 223.424111][ T7868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.448905][ T7868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.456942][ T48] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 223.527866][ T7865] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 223.543620][ T5994] mxuport 3-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 223.559912][ T6041] vhci_hcd vhci_hcd.2: stop threads [ 223.582780][ T5994] mxuport 3-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 223.604543][ T6041] vhci_hcd vhci_hcd.2: release socket [ 223.622901][ T5994] mxuport 3-1:3.21: probe with driver mxuport failed with error -71 [ 223.638136][ T5960] usb 1-1: USB disconnect, device number 19 [ 223.648718][ T48] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 223.668987][ T5960] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 223.696188][ T6041] vhci_hcd vhci_hcd.2: disconnect device [ 223.714913][ T5994] usb 3-1: USB disconnect, device number 19 [ 223.723521][ T5960] ftdi_sio 1-1:0.0: device disconnected [ 225.767698][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.476'. [ 225.833808][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.843094][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.851486][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 225.851501][ T30] audit: type=1400 audit(1767364383.357:731): avc: denied { create } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.011536][ T30] audit: type=1400 audit(1767364383.357:732): avc: denied { bind } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.030925][ T30] audit: type=1400 audit(1767364383.357:733): avc: denied { listen } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.052613][ T30] audit: type=1400 audit(1767364383.357:734): avc: denied { connect } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.077304][ T30] audit: type=1400 audit(1767364383.368:735): avc: denied { write } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.087422][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.097709][ T5809] block nbd0: Receive control failed (result -107) [ 226.114344][ T30] audit: type=1400 audit(1767364383.368:736): avc: denied { accept } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.133941][ T30] audit: type=1400 audit(1767364383.378:737): avc: denied { create } for pid=7901 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 226.154958][ T30] audit: type=1400 audit(1767364383.567:738): avc: denied { read } for pid=7905 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.249296][ T30] audit: type=1400 audit(1767364383.788:739): avc: denied { create } for pid=7909 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.269381][ T30] audit: type=1400 audit(1767364383.798:740): avc: denied { bind } for pid=7909 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 226.334518][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 226.341962][ T5959] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 226.353104][ T5959] usb 3-1: config 1 interface 0 has no altsetting 0 [ 226.363661][ T5959] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 226.372764][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.380739][ T5959] usb 3-1: Product: syz [ 226.390889][ T5959] usb 3-1: Manufacturer: syz [ 226.396359][ T5959] usb 3-1: SerialNumber: syz [ 226.422651][ T7898] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 226.946646][ T7912] tipc: Started in network mode [ 226.951573][ T7912] tipc: Node identity 62c99cfc5527, cluster identity 4711 [ 226.961901][ T7912] tipc: Enabled bearer , priority 0 [ 227.273547][ T7913] syzkaller0: MTU too low for tipc bearer [ 227.294261][ T7913] tipc: Disabling bearer [ 227.548826][ T7895] lo speed is unknown, defaulting to 1000 [ 227.621685][ T7931] tmpfs: Bad value for 'mpol' [ 228.543789][ T48] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 229.879603][ T5959] usb 3-1: USB disconnect, device number 20 [ 230.911577][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 230.911593][ T30] audit: type=1400 audit(1767364388.680:753): avc: denied { ioctl } for pid=7986 comm="syz.4.496" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x4b66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 230.979408][ T30] audit: type=1400 audit(1767364388.743:754): avc: denied { read } for pid=7986 comm="syz.4.496" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.003360][ T30] audit: type=1400 audit(1767364388.743:755): avc: denied { open } for pid=7986 comm="syz.4.496" path="/dev/input/event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.055940][ T7996] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 231.061597][ T30] audit: type=1400 audit(1767364388.838:756): avc: denied { read } for pid=7995 comm="syz.1.498" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.098518][ T30] audit: type=1400 audit(1767364388.838:757): avc: denied { open } for pid=7995 comm="syz.1.498" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.104567][ T48] libceph: connect (1)[c::]:6789 error -101 [ 231.126406][ T30] audit: type=1400 audit(1767364388.838:758): avc: denied { ioctl } for pid=7995 comm="syz.1.498" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 231.227748][ T7997] tipc: Enabled bearer , priority 10 [ 231.641188][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 231.761001][ T7988] ceph: No mds server is up or the cluster is laggy [ 232.134945][ T30] audit: type=1400 audit(1767364389.951:759): avc: denied { create } for pid=8006 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.498974][ T30] audit: type=1400 audit(1767364389.961:760): avc: denied { setopt } for pid=8006 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.504907][ T48] tipc: Node number set to 938384636 [ 232.589502][ T30] audit: type=1400 audit(1767364389.961:761): avc: denied { listen } for pid=8006 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.609671][ T30] audit: type=1400 audit(1767364389.961:762): avc: denied { accept } for pid=8006 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 232.663380][ T8018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.670924][ T8018] IPv6: NLM_F_CREATE should be set when creating new route [ 233.347131][ T8028] loop5: detected capacity change from 0 to 7 [ 233.602945][ T48] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 233.639319][ T8028] Dev loop5: unable to read RDB block 7 [ 233.645016][ T8028] loop5: AHDI p1 p2 p3 [ 233.653683][ T8028] loop5: partition table partially beyond EOD, truncated [ 233.723093][ T8028] loop5: p1 start 1601398130 is beyond EOD, truncated [ 233.753787][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 233.761423][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.783522][ T8028] loop5: p2 start 1702059890 is beyond EOD, truncated [ 233.793201][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.882668][ T48] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 233.962438][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.050156][ T48] usb 5-1: config 0 descriptor?? [ 234.601485][ T48] corsair 0003:1B1C:1B3E.0007: failed to start in urb: -90 [ 234.624116][ T48] corsair 0003:1B1C:1B3E.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 234.790960][ T48] usb 5-1: USB disconnect, device number 19 [ 236.479153][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 236.479168][ T30] audit: type=1400 audit(1767364394.539:771): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 236.748680][ T8100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.516'. [ 236.881352][ T30] audit: type=1400 audit(1767364394.948:772): avc: denied { ioctl } for pid=8106 comm="syz.4.520" path="socket:[16223]" dev="sockfs" ino=16223 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 236.908123][ T30] audit: type=1400 audit(1767364394.948:773): avc: denied { bind } for pid=8106 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.136003][ T30] audit: type=1400 audit(1767364394.948:774): avc: denied { write } for pid=8106 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.246822][ T30] audit: type=1400 audit(1767364395.053:775): avc: denied { watch watch_reads } for pid=8103 comm="syz.3.518" path="/dev/pts/1" dev="devpts" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 237.261429][ T5926] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 237.282437][ T48] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 237.497045][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 237.508061][ T48] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.523104][ T48] usb 3-1: config 0 has no interface number 0 [ 237.534367][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.544792][ T48] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 237.606937][ T30] audit: type=1400 audit(1767364395.694:776): avc: denied { create } for pid=8114 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.637773][ T5926] usb 1-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 237.857561][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.926879][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.937706][ T48] usb 3-1: config 0 descriptor?? [ 237.948001][ T48] usb 3-1: selecting invalid altsetting 1 [ 237.958012][ T5926] usb 1-1: config 0 descriptor?? [ 237.965272][ T48] dvb_ttusb_budget: ttusb_init_controller: error [ 237.975825][ T48] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 238.066517][ T48] DVB: Unable to find symbol ves1820_attach() [ 238.166833][ T48] DVB: Unable to find symbol stv0297_attach() [ 238.173192][ T48] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 238.354278][ T5959] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 238.788941][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.887081][ T5926] uclogic 0003:5543:0064.0008: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.0-1/input0 [ 238.887152][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.069696][ T5959] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 239.194950][ T8134] kAFS: unable to lookup cell '(,' [ 239.214210][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.301306][ T5959] usb 4-1: config 0 descriptor?? [ 239.533087][ T5926] usb 1-1: USB disconnect, device number 20 [ 239.731885][ T5815] usb 3-1: USB disconnect, device number 21 [ 239.932881][ T8124] bridge0: port 3(syz_tun) entered blocking state [ 240.028930][ T8124] bridge0: port 3(syz_tun) entered disabled state [ 240.035677][ T30] audit: type=1400 audit(1767364398.255:777): avc: denied { read } for pid=8142 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.471430][ T8124] syz_tun: entered allmulticast mode [ 240.499772][ T8124] syz_tun: entered promiscuous mode [ 240.504931][ T5959] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 240.514038][ T30] audit: type=1400 audit(1767364398.308:778): avc: denied { write } for pid=8123 comm="syz.3.524" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.541473][ T5959] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 240.555354][ T30] audit: type=1400 audit(1767364398.308:779): avc: denied { ioctl } for pid=8123 comm="syz.3.524" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.557183][ T8124] bridge0: port 3(syz_tun) entered blocking state [ 240.587056][ T8124] bridge0: port 3(syz_tun) entered forwarding state [ 240.623002][ T5183] udevd[5183]: worker [6042] terminated by signal 33 (Unknown signal 33) [ 240.633707][ T5183] udevd[5183]: worker [6042] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:10C4:EA90.0009/hidraw/hidraw0' [ 240.633710][ T5959] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 240.649347][ T5815] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 240.811494][ T5959] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 240.831058][ T8150] netlink: 332 bytes leftover after parsing attributes in process `syz.1.529'. [ 241.527541][ T8152] netlink: 104 bytes leftover after parsing attributes in process `syz.3.524'. [ 241.796633][ T5959] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -5 [ 242.163451][ T5815] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 242.173846][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.203036][ T5815] usb 3-1: config 0 descriptor?? [ 242.444791][ T8170] netlink: 64 bytes leftover after parsing attributes in process `syz.0.533'. [ 242.668573][ T5888] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 242.701316][ T30] audit: type=1400 audit(1767364401.059:780): avc: denied { call } for pid=8172 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 242.732632][ T8173] binder: 8172:8173 ioctl b704 200000000280 returned -22 [ 242.740097][ T30] audit: type=1400 audit(1767364401.090:781): avc: denied { transfer } for pid=8172 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 242.846264][ T48] usb 4-1: USB disconnect, device number 24 [ 242.855499][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.875131][ T5888] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 242.906785][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 242.922316][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.941202][ T5888] usb 5-1: Product: syz [ 242.949539][ T5888] usb 5-1: Manufacturer: syz [ 242.957188][ T5888] usb 5-1: SerialNumber: syz [ 243.402416][ T5815] usb 3-1: Cannot set autoneg [ 243.436148][ T5815] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 243.458042][ T5815] usb 3-1: USB disconnect, device number 22 [ 244.289678][ T5888] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 244.555718][ T5888] usb 5-1: device descriptor read/64, error -71 [ 244.635066][ T30] audit: type=1400 audit(1767364403.096:782): avc: denied { setopt } for pid=8191 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.793956][ T48] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 244.955451][ T5888] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 245.030683][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 245.230151][ T8197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 245.236774][ T8197] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.245758][ T8197] vhci_hcd vhci_hcd.0: Device attached [ 245.260428][ T48] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.381624][ T8198] vhci_hcd: connection closed [ 245.381843][ T3449] vhci_hcd vhci_hcd.2: stop threads [ 245.398797][ T3449] vhci_hcd vhci_hcd.2: release socket [ 245.411915][ T48] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 245.425425][ T3449] vhci_hcd vhci_hcd.2: disconnect device [ 245.444996][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.464822][ T48] usb 1-1: Product: syz [ 245.494265][ T48] usb 1-1: Manufacturer: syz [ 245.506918][ T48] usb 1-1: SerialNumber: syz [ 245.596067][ T30] audit: type=1400 audit(1767364404.103:783): avc: denied { append } for pid=8205 comm="syz.1.542" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 245.679555][ T30] audit: type=1400 audit(1767364404.135:784): avc: denied { bind } for pid=8205 comm="syz.1.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 245.841252][ T48] usb 1-1: config 0 descriptor?? [ 245.997102][ T48] snd_usb_variax 1-1:0.0: Line 6 Variax Workbench found [ 246.033682][ T48] usb 1-1: selecting invalid altsetting 1 [ 246.043445][ T48] snd_usb_variax 1-1:0.0: set_interface failed [ 246.043916][ T30] audit: type=1400 audit(1767364404.576:785): avc: denied { name_connect } for pid=8208 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 246.142815][ T48] snd_usb_variax 1-1:0.0: Line 6 Variax Workbench now disconnected [ 246.169469][ T30] audit: type=1400 audit(1767364404.628:786): avc: denied { ioctl } for pid=8208 comm="syz.2.543" path="socket:[17439]" dev="sockfs" ino=17439 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.170266][ T48] snd_usb_variax 1-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 247.575080][ T30] audit: type=1400 audit(1767364406.151:787): avc: denied { connect } for pid=8215 comm="syz.2.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 247.616157][ T48] usb 1-1: USB disconnect, device number 21 [ 248.153615][ T30] audit: type=1400 audit(1767364406.781:788): avc: denied { create } for pid=8223 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 248.223912][ T30] audit: type=1400 audit(1767364406.833:789): avc: denied { sys_admin } for pid=8223 comm="syz.2.548" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 248.255006][ T8224] lo speed is unknown, defaulting to 1000 [ 248.347251][ T30] audit: type=1400 audit(1767364406.938:790): avc: denied { unmount } for pid=8223 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 248.754702][ T48] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 249.008172][ T30] audit: type=1400 audit(1767364407.684:791): avc: denied { name_bind } for pid=8234 comm="syz.1.549" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 249.018796][ T8236] bridge1: entered promiscuous mode [ 249.218555][ T8236] bridge1: entered allmulticast mode [ 249.277975][ T48] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.307493][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 249.311025][ T8236] team0: Port device bridge1 added [ 249.336460][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.424607][ T8239] bridge0: port 3(team0) entered blocking state [ 249.430953][ T8239] bridge0: port 3(team0) entered disabled state [ 249.431479][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.439625][ T30] audit: type=1400 audit(1767364407.810:792): avc: denied { create } for pid=8222 comm="syz.3.547" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.447771][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.477432][ T8239] team0: entered allmulticast mode [ 249.527834][ T8239] team_slave_0: entered allmulticast mode [ 249.528065][ T30] audit: type=1400 audit(1767364407.810:793): avc: denied { write } for pid=8222 comm="syz.3.547" name="file0" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.543721][ T8239] team_slave_1: entered allmulticast mode [ 249.556239][ T30] audit: type=1400 audit(1767364407.810:794): avc: denied { open } for pid=8222 comm="syz.3.547" path="/101/file0" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.593367][ T5815] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 249.595396][ T48] usb 1-1: config 0 descriptor?? [ 249.602835][ T8239] team0: entered promiscuous mode [ 249.610868][ T8239] team_slave_0: entered promiscuous mode [ 249.614465][ T48] hub 1-1:0.0: USB hub found [ 249.659853][ T8239] team_slave_1: entered promiscuous mode [ 249.666197][ T8239] bridge0: port 3(team0) entered blocking state [ 249.672539][ T8239] bridge0: port 3(team0) entered forwarding state [ 249.732167][ T30] audit: type=1400 audit(1767364407.810:795): avc: denied { ioctl } for pid=8222 comm="syz.3.547" path="/101/file0" dev="tmpfs" ino=576 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 249.732550][ T5888] usb 5-1: device descriptor read/64, error -71 [ 249.776812][ T8240] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 249.794630][ T5815] usb 2-1: too many configurations: 241, using maximum allowed: 8 [ 249.809144][ T48] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 249.815397][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 249.832333][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.932896][ T5815] usb 2-1: Product: syz [ 249.937670][ T5815] usb 2-1: Manufacturer: syz [ 249.942280][ T5815] usb 2-1: SerialNumber: syz [ 249.970078][ T48] usbhid 1-1:0.0: can't add hid device: -71 [ 249.996152][ T5815] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.005669][ T30] audit: type=1400 audit(1767364408.734:796): avc: denied { firmware_load } for pid=5994 comm="kworker/0:10" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 250.012156][ T5888] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 250.448688][ T5994] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.466982][ T48] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.517541][ T5888] usb 5-1: device reset changed ep0 maxpacket size! [ 250.534581][ T48] usb 1-1: USB disconnect, device number 22 [ 250.574437][ T5888] usb 5-1: USB disconnect, device number 20 [ 250.595591][ T8248] netlink: 'syz.2.552': attribute type 3 has an invalid length. [ 250.609218][ T8248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'. [ 250.627807][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 250.638440][ T8248] netlink: 5 bytes leftover after parsing attributes in process `syz.2.552'. [ 250.727266][ T5888] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.896534][ T5815] usb 2-1: USB disconnect, device number 18 [ 250.947292][ T8260] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 250.964931][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 250.971950][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.986008][ T5888] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.995468][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.013565][ T5888] usb 5-1: config 0 descriptor?? [ 251.235556][ T5888] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 251.488457][ T5994] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 251.495420][ T5994] ath9k_htc: Failed to initialize the device [ 251.516199][ T5815] usb 2-1: ath9k_htc: USB layer deinitialized [ 251.958109][ T6278] usb 5-1: USB disconnect, device number 21 [ 252.418503][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.425889][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.700227][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 252.700243][ T30] audit: type=1400 audit(1767364411.568:807): avc: denied { bind } for pid=8285 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.798083][ T30] audit: type=1400 audit(1767364411.579:808): avc: denied { name_bind } for pid=8285 comm="syz.3.563" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 252.867708][ T30] audit: type=1400 audit(1767364411.579:809): avc: denied { node_bind } for pid=8285 comm="syz.3.563" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 252.916985][ T6278] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 253.005287][ T8278] kexec: Could not allocate control_code_buffer [ 253.060275][ T5888] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 253.069426][ T6278] usb 2-1: Using ep0 maxpacket: 32 [ 253.080736][ T6278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.086905][ T30] audit: type=1400 audit(1767364411.967:810): avc: denied { create } for pid=8290 comm="syz.4.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 253.123801][ T6278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.146123][ T6278] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.155162][ T6278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.203479][ T6278] usb 2-1: config 0 descriptor?? [ 253.224892][ T5888] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 253.238876][ T6278] hub 2-1:0.0: USB hub found [ 253.244591][ T5888] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.258520][ T5888] usb 1-1: config 0 has no interface number 0 [ 253.265093][ T5888] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 253.275408][ T5888] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.291040][ T5888] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 253.304156][ T8298] warning: `syz.2.566' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.318036][ T8298] lo speed is unknown, defaulting to 1000 [ 253.336090][ T30] audit: type=1400 audit(1767364412.209:811): avc: denied { write } for pid=8297 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 253.367128][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.386373][ T5888] usb 1-1: Product: syz [ 253.391621][ T5888] usb 1-1: Manufacturer: syz [ 253.403956][ T5888] usb 1-1: SerialNumber: syz [ 253.409736][ T6278] hub 2-1:0.0: 1 port detected [ 253.410387][ T30] audit: type=1400 audit(1767364412.303:812): avc: denied { getopt } for pid=8299 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.430977][ T5888] usb 1-1: config 0 descriptor?? [ 253.552469][ T30] audit: type=1400 audit(1767364412.450:813): avc: denied { setattr } for pid=5807 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.999815][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.008689][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.023670][ T5888] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 254.049974][ T8293] lo speed is unknown, defaulting to 1000 [ 254.115962][ T30] audit: type=1400 audit(1767364413.049:814): avc: denied { checkpoint_restore } for pid=8309 comm="syz.2.571" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.322345][ T30] audit: type=1400 audit(1767364413.259:815): avc: denied { name_bind } for pid=8313 comm="syz.2.573" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 254.813005][ T6278] usb 2-1: USB disconnect, device number 19 [ 254.983120][ T8324] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.575'. [ 254.995627][ T8324] overlayfs: unescaped trailing colons in lowerdir mount option. [ 255.023926][ T8324] netlink: 'syz.2.575': attribute type 20 has an invalid length. [ 255.265716][ T5815] usb 1-1: USB disconnect, device number 23 [ 255.813099][ T8336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 255.843842][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.577'. [ 255.856876][ T30] audit: type=1400 audit(1767364414.876:816): avc: denied { mount } for pid=8333 comm="syz.4.577" name="/" dev="ramfs" ino=17082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 255.859884][ T8336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.231854][ T5815] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 256.412698][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 256.423888][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.465820][ T5815] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 256.475089][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.484053][ T5815] usb 2-1: Product: syz [ 256.488322][ T5815] usb 2-1: Manufacturer: syz [ 256.502533][ T5815] usb 2-1: SerialNumber: syz [ 256.528946][ T5815] usb 2-1: config 0 descriptor?? [ 256.549678][ T5815] net1080 2-1:0.0: probe with driver net1080 failed with error -22 [ 256.584734][ T5888] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 256.755428][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 256.765324][ T5888] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 256.773876][ T5888] usb 1-1: config 0 has no interface number 0 [ 256.842475][ T5859] usb 2-1: USB disconnect, device number 20 [ 256.860144][ T5888] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 256.992792][ T5888] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 257.198880][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.262838][ T5888] usb 1-1: Product: syz [ 257.276391][ T5888] usb 1-1: Manufacturer: syz [ 257.294794][ T5888] usb 1-1: SerialNumber: syz [ 257.332565][ T5888] usb 1-1: config 0 descriptor?? [ 257.345084][ T8341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.526178][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 257.526193][ T30] audit: type=1400 audit(1767364416.619:824): avc: denied { create } for pid=8353 comm="syz.2.583" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 257.570057][ T8341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.602686][ T8354] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 257.612805][ T8354] overlay: Unknown parameter 'subj_type' [ 257.857327][ T8363] batman_adv: batadv0: Adding interface: gretap1 [ 257.863931][ T8363] batman_adv: batadv0: Interface activated: gretap1 [ 258.374331][ T5888] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 138 [ 258.548223][ T30] audit: type=1400 audit(1767364417.700:825): avc: denied { append } for pid=8369 comm="syz.1.589" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 258.605329][ T30] audit: type=1400 audit(1767364417.700:826): avc: denied { ioctl } for pid=8369 comm="syz.1.589" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 259.229416][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.595'. [ 259.550900][ T5994] usb 1-1: USB disconnect, device number 24 [ 259.979456][ T30] audit: type=1400 audit(1767364419.201:827): avc: denied { mount } for pid=8396 comm="syz.0.597" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 260.047860][ T30] audit: type=1400 audit(1767364419.201:828): avc: denied { map } for pid=8396 comm="syz.0.597" path="socket:[17257]" dev="sockfs" ino=17257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.096176][ T30] audit: type=1400 audit(1767364419.201:829): avc: denied { read accept } for pid=8396 comm="syz.0.597" path="socket:[17257]" dev="sockfs" ino=17257 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 260.222587][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 260.250377][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 260.776289][ T30] audit: type=1400 audit(1767364420.031:830): avc: denied { create } for pid=8417 comm="syz.0.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 260.977862][ T30] audit: type=1400 audit(1767364420.073:831): avc: denied { read } for pid=8417 comm="syz.0.604" path="socket:[18021]" dev="sockfs" ino=18021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 261.243113][ T8418] netlink: 80 bytes leftover after parsing attributes in process `syz.0.604'. [ 261.757481][ T8433] netlink: 'syz.2.607': attribute type 9 has an invalid length. [ 261.765146][ T8433] netlink: 'syz.2.607': attribute type 11 has an invalid length. [ 261.772925][ T8433] netlink: 'syz.2.607': attribute type 12 has an invalid length. [ 261.780735][ T8433] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.607'. [ 262.164565][ T30] audit: type=1400 audit(1767364421.112:832): avc: denied { read } for pid=8430 comm="syz.4.609" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.272335][ T30] audit: type=1400 audit(1767364421.112:833): avc: denied { open } for pid=8430 comm="syz.4.609" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.318704][ T8436] kAFS: No cell specified [ 262.412716][ T30] audit: type=1400 audit(1767364421.112:834): avc: denied { ioctl } for pid=8430 comm="syz.4.609" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.456316][ T5815] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.534626][ T30] audit: type=1400 audit(1767364421.658:835): avc: denied { map } for pid=8438 comm="syz.2.610" path="socket:[17315]" dev="sockfs" ino=17315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 262.609090][ T30] audit: type=1400 audit(1767364421.658:836): avc: denied { write } for pid=8424 comm="syz.1.606" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 262.633148][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 262.667232][ T5815] usb 5-1: config 7 has an invalid interface number: 116 but max is 0 [ 262.710584][ T5815] usb 5-1: config 7 has no interface number 0 [ 263.007101][ T5815] usb 5-1: config 7 interface 116 has no altsetting 0 [ 263.040161][ T5815] usb 5-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=f1.1a [ 263.061074][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.069096][ T5815] usb 5-1: Product: syz [ 263.089461][ T5815] usb 5-1: Manufacturer: syz [ 263.098893][ T5815] usb 5-1: SerialNumber: syz [ 263.339665][ T8454] netlink: 'syz.2.613': attribute type 21 has an invalid length. [ 263.517670][ C0] hrtimer: interrupt took 25885 ns [ 263.980405][ T30] audit: type=1400 audit(1767364423.401:837): avc: denied { bind } for pid=8460 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 264.031525][ T8461] netlink: 'syz.1.615': attribute type 3 has an invalid length. [ 264.044866][ T30] audit: type=1400 audit(1767364423.432:838): avc: denied { node_bind } for pid=8460 comm="syz.1.615" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 264.315776][ T8475] netlink: 52 bytes leftover after parsing attributes in process `syz.1.618'. [ 264.347591][ T8475] bridge0: port 3(team0) entered disabled state [ 264.354270][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.362588][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.569545][ T5815] asix 5-1:7.116: probe with driver asix failed with error -22 [ 264.649147][ T5815] usb 5-1: USB disconnect, device number 22 [ 264.732409][ T30] audit: type=1400 audit(1767364424.188:839): avc: denied { audit_write } for pid=8483 comm="syz.1.620" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 264.763902][ T8480] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 264.831496][ T30] audit: type=1400 audit(1767364424.241:840): avc: denied { connect } for pid=8476 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.983899][ T30] audit: type=1400 audit(1767364424.419:841): avc: denied { write } for pid=8476 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.092731][ T30] audit: type=1400 audit(1767364424.514:842): avc: denied { ioctl } for pid=8476 comm="syz.2.619" path="socket:[17374]" dev="sockfs" ino=17374 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.246916][ T30] audit: type=1400 audit(1767364424.724:843): avc: denied { unmount } for pid=8476 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 267.840417][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 267.840431][ T30] audit: type=1400 audit(1767364427.454:845): avc: denied { ioctl } for pid=8536 comm="syz.4.633" path="socket:[18233]" dev="sockfs" ino=18233 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 268.292215][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.301891][ T30] audit: type=1400 audit(1767364427.937:846): avc: denied { ioctl } for pid=8557 comm="syz-executor" path="socket:[18493]" dev="sockfs" ino=18493 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 268.370276][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.384620][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.392835][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.400510][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.419546][ T30] audit: type=1400 audit(1767364428.052:847): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 268.818114][ T8568] 9p: Bad value for 'wfdno' [ 269.138543][ T8557] lo speed is unknown, defaulting to 1000 [ 269.561931][ T6842] bridge0: port 3(syz_tun) entered disabled state [ 269.635720][ T6842] syz_tun (unregistering): left allmulticast mode [ 269.650710][ T6842] syz_tun (unregistering): left promiscuous mode [ 269.666053][ T6842] bridge0: port 3(syz_tun) entered disabled state [ 270.122220][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 270.385380][ T5134] Bluetooth: hci5: command tx timeout [ 270.385871][ T30] audit: type=1326 audit(1767364430.068:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8582 comm="syz.4.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5d38f749 code=0x7fc00000 [ 270.487195][ T8596] mmap: syz.1.647 (8596): VmData 37728256 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 270.729786][ T30] audit: type=1400 audit(1767364430.467:849): avc: denied { getopt } for pid=8602 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 271.595100][ T30] audit: type=1400 audit(1767364431.307:850): avc: denied { sys_nice } for pid=8607 comm="syz.0.649" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 271.689169][ T30] audit: type=1400 audit(1767364431.496:851): avc: denied { create } for pid=8610 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 271.714435][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.842461][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.849691][ T8557] bridge_slave_0: entered allmulticast mode [ 271.857363][ T8557] bridge_slave_0: entered promiscuous mode [ 271.867957][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.875274][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.882660][ T8557] bridge_slave_1: entered allmulticast mode [ 271.890397][ T8557] bridge_slave_1: entered promiscuous mode [ 271.953388][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.982787][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.375777][ T5134] Bluetooth: hci5: command tx timeout [ 272.744890][ T8557] team0: Port device team_slave_0 added [ 272.789413][ T8557] team0: Port device team_slave_1 added [ 272.869882][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.890174][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.924067][ T5994] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.029632][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.077802][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.086561][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.179181][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.251261][ T30] audit: type=1400 audit(1767364433.134:852): avc: denied { write } for pid=8646 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 273.277479][ T8557] hsr_slave_0: entered promiscuous mode [ 273.288229][ T8557] hsr_slave_1: entered promiscuous mode [ 273.295879][ T8557] debugfs: 'hsr0' already exists in 'hsr' [ 273.303329][ T8557] Cannot create hsr debugfs directory [ 273.662476][ T6278] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 273.663402][ T8557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.689653][ T8557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.715973][ T8557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.737339][ T8557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.825778][ T6278] usb 1-1: not running at top speed; connect to a high speed hub [ 273.837074][ T6278] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.858698][ T6278] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.893889][ T6278] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.917990][ T6278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.923686][ T8660] bridge_slave_0: left allmulticast mode [ 273.931753][ T8660] bridge_slave_0: left promiscuous mode [ 273.940625][ T8660] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.948097][ T6278] usb 1-1: Product: syz [ 273.953354][ T6278] usb 1-1: Manufacturer: Ѕ [ 273.960594][ T8660] bridge_slave_1: left allmulticast mode [ 273.964034][ T6278] usb 1-1: SerialNumber: syz [ 273.987121][ T8660] bridge_slave_1: left promiscuous mode [ 273.993115][ T30] audit: type=1400 audit(1767364433.911:853): avc: denied { wake_alarm } for pid=8659 comm="syz.4.661" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 274.016195][ T8660] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.034274][ T8660] bond0: (slave bond_slave_0): Releasing backup interface [ 274.067326][ T8660] bond0: (slave bond_slave_1): Releasing backup interface [ 274.097886][ T8660] team0: Port device team_slave_0 removed [ 274.123828][ T8660] team0: Port device team_slave_1 removed [ 274.141809][ T8660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.164541][ T8660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.192896][ T8660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.213344][ T8660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.225240][ T8660] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 274.296502][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 274.397237][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.412956][ T6278] usb 1-1: 0:2 : does not exist [ 274.447624][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.473521][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.480536][ T6278] usb 1-1: USB disconnect, device number 25 [ 274.480692][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.568253][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.575418][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.586811][ T5134] Bluetooth: hci5: command tx timeout [ 275.061225][ T5994] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.081850][ T5994] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 275.122643][ T5994] usb 2-1: can't read configurations, error -71 [ 275.370061][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.578042][ T5994] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 275.732348][ T8557] veth0_vlan: entered promiscuous mode [ 275.758994][ T8557] veth1_vlan: entered promiscuous mode [ 275.803444][ T8557] veth0_macvtap: entered promiscuous mode [ 275.815977][ T5994] usb 2-1: Using ep0 maxpacket: 16 [ 275.816056][ T8557] veth1_macvtap: entered promiscuous mode [ 275.822582][ T5994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.837270][ T5994] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.846427][ T5994] usb 2-1: New USB device found, idVendor=060b, idProduct=4b0a, bcdDevice= 0.00 [ 275.848026][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.855591][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.863747][ T5994] usb 2-1: config 0 descriptor?? [ 275.976862][ T8708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.672'. [ 275.987205][ T8708] unsupported nlmsg_type 40 [ 276.453194][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.557671][ T5134] Bluetooth: hci5: command tx timeout [ 276.598329][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.641965][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.664797][ T5994] usb 2-1: string descriptor 0 read error: -71 [ 276.676571][ T5994] usb 2-1: USB disconnect, device number 22 [ 276.683923][ T8717] netlink: 'syz.2.674': attribute type 1 has an invalid length. [ 276.701412][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.716968][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.140915][ T8717] bond1: entered promiscuous mode [ 277.155247][ T8717] bond1: entered allmulticast mode [ 277.169252][ T8717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.406047][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.413931][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.477508][ T6519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.499167][ T6519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.531945][ T30] audit: type=1400 audit(1767364437.638:854): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/root/syzkaller.Yuap4o/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 277.584527][ T30] audit: type=1400 audit(1767364437.638:855): avc: denied { mount } for pid=8557 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 277.648781][ T30] audit: type=1400 audit(1767364437.701:856): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/root/syzkaller.Yuap4o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 277.697295][ T30] audit: type=1400 audit(1767364437.701:857): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/root/syzkaller.Yuap4o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 277.728427][ T30] audit: type=1400 audit(1767364437.795:858): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 277.754125][ T30] audit: type=1400 audit(1767364437.795:859): avc: denied { mount } for pid=8557 comm="syz-executor" name="/" dev="gadgetfs" ino=7551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 277.788228][ T30] audit: type=1400 audit(1767364437.795:860): avc: denied { mount } for pid=8557 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 277.812925][ T30] audit: type=1400 audit(1767364437.795:861): avc: denied { mounton } for pid=8557 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 277.969613][ T8744] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 278.495662][ T8749] lo speed is unknown, defaulting to 1000 [ 278.722746][ T8757] netlink: 830 bytes leftover after parsing attributes in process `syz.2.682'. [ 278.815394][ T30] audit: type=1400 audit(1767364438.982:862): avc: denied { accept } for pid=8756 comm="syz.2.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 278.869267][ T5926] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 278.919048][ T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 279.122373][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 279.142767][ T5926] usb 2-1: config 0 has no interfaces? [ 279.148673][ T5926] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 279.159287][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.169883][ T5926] usb 2-1: config 0 descriptor?? [ 279.357251][ T5815] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 279.566710][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 279.574654][ T5815] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 279.579988][ T48] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.597264][ T5926] usb 2-1: USB disconnect, device number 23 [ 279.606867][ T48] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 279.616019][ T5815] usb 5-1: config 0 has no interface number 0 [ 279.628556][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.639961][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 279.652045][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.653175][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.672931][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 279.673323][ T48] usb 6-1: config 0 descriptor?? [ 279.692739][ T5815] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 279.703682][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.714294][ T5815] usb 5-1: config 0 descriptor?? [ 279.726134][ T5815] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 279.934326][ T8768] lo speed is unknown, defaulting to 1000 [ 280.094333][ T48] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 280.109619][ T5815] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 280.124690][ T48] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000A/input/input18 [ 280.244196][ T48] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 280.292456][ T5815] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 280.306503][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.688'. [ 280.332698][ T5815] usb 1-1: config 0 has no interface number 0 [ 280.355399][ T5815] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.404861][ T6930] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 280.413359][ T5815] usb 1-1: config 0 interface 10 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.454524][ T8781] netlink: 36 bytes leftover after parsing attributes in process `syz.4.688'. [ 280.463592][ T5815] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 280.474964][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.488603][ T8755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.510271][ T8755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.528196][ T8781] geneve2: entered promiscuous mode [ 280.536092][ T5815] usb 1-1: config 0 descriptor?? [ 280.855150][ T6930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.855199][ T6930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 280.855237][ T6930] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 280.855262][ T6930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.882849][ T6930] usb 2-1: config 0 descriptor?? [ 281.015725][ T48] usb 6-1: USB disconnect, device number 2 [ 281.044437][ T5994] usb 5-1: USB disconnect, device number 23 [ 281.078040][ T5994] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 281.199544][ T30] audit: type=1400 audit(1767364441.470:863): avc: denied { map } for pid=8792 comm="syz.2.694" path="socket:[19262]" dev="sockfs" ino=19262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 281.224553][ T30] audit: type=1400 audit(1767364441.470:864): avc: denied { read accept } for pid=8792 comm="syz.2.694" path="socket:[19262]" dev="sockfs" ino=19262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 acpid: input device has been disconnected, fd 3 [ 281.318977][ T8783] Bluetooth: MGMT ver 1.23 [ 281.327091][ T6930] waterforce 0003:1044:7A4D.000C: item fetching failed at offset 0/1 [ 281.335613][ T6930] waterforce 0003:1044:7A4D.000C: hid parse failed with -22 [ 281.343755][ T6930] waterforce 0003:1044:7A4D.000C: probe with driver waterforce failed with error -22 [ 281.421485][ T6278] usb 1-1: USB disconnect, device number 26 [ 281.522214][ T48] usb 2-1: USB disconnect, device number 24 [ 282.214622][ T6930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 282.318407][ T30] audit: type=1400 audit(1767364442.657:865): avc: denied { create } for pid=8823 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 282.447506][ T30] audit: type=1400 audit(1767364442.762:866): avc: denied { write } for pid=8823 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 282.467360][ T30] audit: type=1400 audit(1767364442.772:867): avc: denied { connect } for pid=8823 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 282.853473][ T6930] usb 6-1: Using ep0 maxpacket: 32 [ 282.860011][ T6930] usb 6-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 282.870424][ T6930] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.883441][ T6930] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 282.898214][ T6930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.923316][ T6930] usb 6-1: config 0 descriptor?? [ 284.030070][ T6930] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 284.174262][ T8843] binder: 8839:8843 ioctl 80089419 2000000001c0 returned -22 [ 284.519369][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 284.902711][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.913151][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 284.973855][ T48] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 284.986310][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.031383][ T48] usb 2-1: config 0 descriptor?? [ 285.090580][ T8859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 285.090580][ T8858] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 285.234596][ T8859] bond1: (slave bridge2): making interface the new active one [ 285.255816][ T8859] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 285.299014][ T5926] usb 6-1: USB disconnect, device number 3 [ 285.373088][ T8864] Invalid argument reading file caps for ./file0 [ 285.448877][ T48] waterforce 0003:1044:7A4D.000D: item fetching failed at offset 0/1 [ 285.544723][ T48] waterforce 0003:1044:7A4D.000D: hid parse failed with -22 [ 285.613017][ T48] waterforce 0003:1044:7A4D.000D: probe with driver waterforce failed with error -22 [ 285.655308][ T48] usb 2-1: USB disconnect, device number 25 [ 285.705411][ T30] audit: type=1400 audit(1767364446.205:868): avc: denied { ioctl } for pid=8884 comm="syz.2.720" path="socket:[20185]" dev="sockfs" ino=20185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 285.917619][ T30] audit: type=1400 audit(1767364446.426:869): avc: denied { read } for pid=8892 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.055002][ T8899] dlm: non-version read from control device 172 [ 286.524335][ T30] audit: type=1400 audit(1767364446.583:870): avc: denied { map } for pid=8898 comm="syz.0.726" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 286.711759][ T8903] lo speed is unknown, defaulting to 1000 [ 287.174009][ T8918] tmpfs: Unknown parameter 'usrqouota_iSode_hardli/D_(dڣй!~+Xv"LjG&gI jJi6\hCw\琼q?MAhgk02L@ rejected, failed to enable media [ 310.196459][ T6278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.206516][ T6278] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 310.219514][ T6278] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 310.228817][ T6278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.250237][ T6278] usb 2-1: config 0 descriptor?? [ 310.700129][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.706636][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.776610][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 310.782774][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 310.809050][ T5881] usb 5-1: USB disconnect, device number 26 [ 310.946941][ T6278] waterforce 0003:1044:7A4D.0011: item fetching failed at offset 0/1 [ 310.956710][ T6278] waterforce 0003:1044:7A4D.0011: hid parse failed with -22 [ 310.972783][ T6278] waterforce 0003:1044:7A4D.0011: probe with driver waterforce failed with error -22 [ 311.169613][ T30] audit: type=1400 audit(1767364472.915:907): avc: denied { execute } for pid=9262 comm="syz.1.813" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 311.216128][ T30] audit: type=1400 audit(1767364472.989:908): avc: denied { write } for pid=9285 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 311.294356][ T9286] block device autoloading is deprecated and will be removed. [ 311.790057][ T9303] bridge_slave_0: left allmulticast mode [ 311.795840][ T9303] bridge_slave_0: left promiscuous mode [ 311.805837][ T9303] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.845474][ T6278] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 312.009887][ T6278] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.020309][ T6278] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.031479][ T6278] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 312.040800][ T6278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.048892][ T6278] usb 5-1: SerialNumber: syz [ 312.072092][ T6278] usb 5-1: 0:2 : does not exist [ 312.778343][ T30] audit: type=1400 audit(1767364474.637:909): avc: denied { mount } for pid=9299 comm="syz.4.822" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 312.857421][ T5994] usb 2-1: USB disconnect, device number 29 [ 313.000286][ T30] audit: type=1400 audit(1767364474.837:910): avc: denied { watch } for pid=9299 comm="syz.4.822" path="/188/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 313.028779][ T30] audit: type=1400 audit(1767364474.837:911): avc: denied { watch_sb } for pid=9299 comm="syz.4.822" path="/188/file0" dev="tmpfs" ino=1021 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 314.007797][ T9331] netlink: 64 bytes leftover after parsing attributes in process `syz.5.828'. [ 314.212134][ T30] audit: type=1400 audit(1767364476.138:912): avc: denied { write } for pid=9329 comm="syz.2.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.483762][ T6278] usb 5-1: USB disconnect, device number 27 [ 314.564033][ T30] audit: type=1400 audit(1767364476.516:913): avc: granted { setsecparam } for pid=9343 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 314.642273][ T30] audit: type=1400 audit(1767364476.516:914): avc: denied { map } for pid=9343 comm="syz.1.834" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 315.801107][ T30] audit: type=1400 audit(1767364477.818:915): avc: denied { mount } for pid=9359 comm="syz.1.839" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 315.813602][ T9361] input: syz1 as /devices/virtual/input/input22 [ 315.979509][ T30] audit: type=1400 audit(1767364477.818:916): avc: denied { watch } for pid=9359 comm="syz.1.839" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 316.952910][ T30] audit: type=1400 audit(1767364477.818:917): avc: denied { watch_sb watch_reads } for pid=9359 comm="syz.1.839" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 317.070658][ T9365] mmap: syz.2.838 (9365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 317.366929][ T9364] batadv_slave_1: entered promiscuous mode [ 317.381311][ T9364] batman_adv: batadv0: Adding interface: macvlan2 [ 317.387830][ T9364] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.413427][ T9364] batman_adv: batadv0: Interface activated: macvlan2 [ 318.089750][ T30] audit: type=1400 audit(1767364480.202:918): avc: denied { connect } for pid=9367 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.741458][ T5994] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 318.770023][ T5815] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 318.970007][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 319.045609][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.083670][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.112905][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.124712][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.215072][ T5994] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 319.224212][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.234107][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.244639][ T5815] usb 1-1: Product: syz [ 319.248912][ T5815] usb 1-1: Manufacturer: syz [ 319.253507][ T5815] usb 1-1: SerialNumber: syz [ 319.262835][ T5994] usb 5-1: config 0 descriptor?? [ 319.731134][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.743257][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.350356][ T5815] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 320.422107][ T5815] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 320.458681][ T5815] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 320.969115][ T5815] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 321.190399][ T5815] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 321.269058][ T5815] usb 1-1: USB disconnect, device number 34 [ 321.281232][ T30] audit: type=1400 audit(1767364483.551:919): avc: denied { getopt } for pid=9405 comm="syz.5.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 321.320396][ T5815] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 321.445311][ T30] audit: type=1400 audit(1767364483.645:920): avc: denied { module_load } for pid=9407 comm="syz.0.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 321.445386][ T9408] Invalid ELF header type: 3 != 1 [ 321.629788][ T5994] usbhid 5-1:0.0: can't add hid device: -71 [ 321.642673][ T30] audit: type=1400 audit(1767364483.792:921): avc: denied { ioctl } for pid=9407 comm="syz.0.850" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 321.670286][ T5994] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.680747][ T5994] usb 5-1: USB disconnect, device number 28 [ 321.708698][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 321.721662][ T5134] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 321.865558][ T9417] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 322.360742][ T9423] netlink: 35 bytes leftover after parsing attributes in process `syz.5.855'. [ 322.741819][ T5994] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 323.363681][ T5994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.376746][ T5994] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 323.395167][ T30] audit: type=1400 audit(1767364485.777:922): avc: denied { ioctl } for pid=9435 comm="syz.4.859" path="socket:[22969]" dev="sockfs" ino=22969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 323.459013][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.472165][ T30] audit: type=1400 audit(1767364485.819:923): avc: denied { append } for pid=9435 comm="syz.4.859" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 323.511167][ T5994] usb 2-1: config 0 descriptor?? [ 323.954715][ T30] audit: type=1400 audit(1767364486.354:924): avc: denied { setopt } for pid=9444 comm="syz.0.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 323.997116][ T5994] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 324.045555][ T5994] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input23 [ 324.186251][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.600054][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.622518][ T5994] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 324.969073][ T5994] usb 2-1: USB disconnect, device number 30 acpid: input device has been disconnected, fd 3 [ 325.164802][ T9463] program syz.0.865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.278307][ T30] audit: type=1400 audit(1767364487.761:925): avc: denied { create } for pid=9466 comm="syz.2.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 325.703648][ T30] audit: type=1400 audit(1767364488.202:926): avc: denied { listen } for pid=9478 comm="syz.2.872" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 325.740701][ T9480] overlayfs: failed to clone lowerpath [ 326.364780][ T30] audit: type=1400 audit(1767364488.905:927): avc: denied { accept } for pid=9478 comm="syz.2.872" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.626409][ T9491] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 326.644622][ T9491] netlink: 'syz.0.873': attribute type 4 has an invalid length. [ 326.668069][ T5859] lo speed is unknown, defaulting to 1000 [ 326.674021][ T5859] syz0: Port: 1 Link ACTIVE [ 327.075428][ T5881] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 327.105483][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.866'. [ 327.136372][ T9468] bond0: entered promiscuous mode [ 327.155025][ T9468] bond_slave_0: entered promiscuous mode [ 327.190034][ T9468] bond_slave_1: entered promiscuous mode [ 327.213738][ T9468] batadv0: entered promiscuous mode [ 327.236496][ T9468] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 327.246589][ T5881] usb 1-1: device descriptor read/64, error -71 [ 327.468214][ T5859] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 327.503701][ T5881] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 327.647909][ T30] audit: type=1400 audit(1767364490.249:928): avc: denied { create } for pid=9523 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 327.649569][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.684855][ T5881] usb 1-1: device descriptor read/64, error -71 [ 327.693412][ T30] audit: type=1400 audit(1767364490.291:929): avc: denied { write } for pid=9523 comm="syz.5.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 327.713895][ T5859] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 327.724158][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.751814][ T5859] usb 2-1: config 0 descriptor?? [ 327.827910][ T5881] usb usb1-port1: attempt power cycle [ 327.893135][ T30] audit: type=1400 audit(1767364490.501:930): avc: denied { setopt } for pid=9525 comm="syz.2.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.153201][ T5859] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 328.183153][ T5859] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0013/input/input24 [ 328.199123][ T5881] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 328.238561][ T5881] usb 1-1: device descriptor read/8, error -71 [ 328.308535][ T5859] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 328.345682][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.364825][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.495020][ T5881] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 328.534210][ T5881] usb 1-1: device descriptor read/8, error -71 [ 328.608558][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 328.628341][ T30] audit: type=1400 audit(1767364491.278:931): avc: denied { read } for pid=9528 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 328.659359][ T30] audit: type=1400 audit(1767364491.310:932): avc: denied { getopt } for pid=9529 comm="syz.5.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 328.660059][ T5881] usb usb1-port1: unable to enumerate USB device [ 328.695394][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.5.887'. [ 328.789002][ T5959] usb 2-1: USB disconnect, device number 31 [ 329.549365][ T30] audit: type=1400 audit(1767364492.244:933): avc: denied { read } for pid=9545 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.580924][ T30] audit: type=1400 audit(1767364492.265:934): avc: denied { connect } for pid=9545 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 329.727106][ T9555] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 329.844666][ T9555] bond1 (unregistering): Released all slaves [ 330.229046][ T30] audit: type=1400 audit(1767364492.916:935): avc: denied { read } for pid=9563 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 acpid: input device has been disconnected, fd 3 [ 330.301898][ T30] audit: type=1400 audit(1767364492.916:936): avc: denied { write } for pid=9563 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 330.589827][ T48] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 330.589885][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 330.973438][ T9577] netlink: 'syz.1.896': attribute type 7 has an invalid length. [ 331.012793][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.047945][ T48] usb 1-1: not running at top speed; connect to a high speed hub [ 331.067045][ T48] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config Stopping sshd: [ 331.080036][ T48] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 331.119458][ T48] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 331.133944][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.147591][ T48] usb 1-1: Product: syz stopped /usr/sbin/sshd (pid 5573) [ 331.176607][ T48] usb 1-1: Manufacturer: syz OK [ 331.190642][ T48] usb 1-1: SerialNumber: syz [ 331.219323][ T5859] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 331.227186][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. Stopping crond: [ 332.054642][ T9593] autofs: Unknown parameter 'fd0xffffffffffffffff' [ 332.064273][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 332.073153][ T5859] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 332.102182][ T9594] 9p: Bad value for 'rfdno' [ 332.108982][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. stopped /usr/sbin/crond (pid 5552) OK [ 332.238428][ T5859] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 332.266418][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.305315][ T5859] usb 6-1: Product: syz [ 332.309884][ T5859] usb 6-1: Manufacturer: syz [ 332.587689][ T5859] usb 6-1: SerialNumber: syz [ 332.604848][ T5859] usb 6-1: config 0 descriptor?? [ 332.642633][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 332.642671][ T30] audit: type=1400 audit(1767364495.488:939): avc: denied { map } for pid=9587 comm="syz.4.900" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.718912][ T5859] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 332.761693][ T30] audit: type=1400 audit(1767364495.499:940): avc: denied { execute } for pid=9587 comm="syz.4.900" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 332.902679][ T48] usb 1-1: USB disconnect, device number 39 [ 332.905784][ T9609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.960803][ T9197] udevd[9197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.001140][ T30] audit: type=1400 audit(1767364495.541:941): avc: denied { getopt } for pid=9603 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.064305][ T30] audit: type=1400 audit(1767364495.709:942): avc: denied { read write } for pid=9600 comm="syz.1.902" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 333.146212][ T30] audit: type=1400 audit(1767364495.709:943): avc: denied { open } for pid=9600 comm="syz.1.902" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 333.208196][ T30] audit: type=1400 audit(1767364495.709:944): avc: denied { ioctl } for pid=9600 comm="syz.1.902" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 Stopping dhcpcd... [ 333.802083][ T5859] gspca_zc3xx: reg_w_i err -71 [ 333.931346][ T5959] usb 1-1: new high-speed USB device number 40 using dummy_hcd stopped /sbin/dhcpcd (pid 5477) [ 334.085600][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 334.100045][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.258086][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.400269][ T5959] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.447244][ T5859] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 334.520630][ T5959] usb 1-1: Manufacturer: syz [ 334.786250][ T5959] usb 1-1: config 0 descriptor?? [ 334.919218][ T5859] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 334.989024][ T5859] usb 6-1: USB disconnect, device number 8 [ 335.267938][ T9618] random: crng reseeded on system resumption [ 335.303249][ T30] audit: type=1400 audit(1767364498.250:945): avc: denied { write } for pid=9616 comm="syz.0.904" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 335.380228][ T5859] usb 1-1: USB disconnect, device number 40 [ 335.397597][ T30] audit: type=1400 audit(1767364498.250:946): avc: denied { open } for pid=9616 comm="syz.0.904" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 335.468261][ T30] audit: type=1400 audit(1767364498.260:947): avc: denied { ioctl } for pid=9616 comm="syz.0.904" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 Stopping network: [ 336.199482][ T30] audit: type=1400 audit(1767364499.226:948): avc: denied { accept } for pid=9658 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 436.950858][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 436.957841][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9659/1:b..l P9676/1:b..l [ 436.967355][ C0] rcu: (detected by 0, t=10502 jiffies, g=32061, q=237 ncpus=2) [ 436.975072][ C0] task:dhcpcd-run-hook state:R running task stack:26776 pid:9676 tgid:9676 ppid:5478 task_flags:0x400000 flags:0x00080001 [ 436.989565][ C0] Call Trace: [ 436.992848][ C0] [ 436.995776][ C0] ? __schedule+0x10b9/0x6150 [ 437.000456][ C0] __schedule+0x1139/0x6150 [ 437.004974][ C0] ? __pfx___schedule+0x10/0x10 [ 437.009833][ C0] ? mark_held_locks+0x49/0x80 [ 437.014604][ C0] preempt_schedule_irq+0x51/0x90 [ 437.019628][ C0] irqentry_exit+0x1d8/0x8c0 [ 437.024222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 437.030198][ C0] RIP: 0010:lock_acquire+0x79/0x330 [ 437.035393][ C0] Code: 82 74 02 00 00 8b 35 ba eb ee 0e 85 f6 0f 85 8d 00 00 00 48 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 38 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 65 8b 05 45 b4 18 12 [ 437.054994][ C0] RSP: 0018:ffffc90003437298 EFLAGS: 00000282 [ 437.061062][ C0] RAX: 0000000000000000 RBX: ffffffff8e3c96a0 RCX: 0000000013d622c6 [ 437.069029][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ee5 RDI: ffffffff8bf2b400 [ 437.076999][ C0] RBP: 0000000000000002 R08: 00000000accd7842 R09: 000000002accd784 [ 437.084965][ C0] R10: 0000000000000002 R11: ffff88802e178b30 R12: 0000000000000000 [ 437.092930][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.100910][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.107069][ C0] unwind_next_frame+0xd1/0x20b0 [ 437.112026][ C0] ? unwind_next_frame+0xbd/0x20b0 [ 437.117137][ C0] ? exc_page_fault+0x64/0xc0 [ 437.121819][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.127968][ C0] arch_stack_walk+0x94/0x100 [ 437.132656][ C0] ? exc_page_fault+0x64/0xc0 [ 437.137345][ C0] stack_trace_save+0x8e/0xc0 [ 437.142021][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 437.147391][ C0] ? rcu_is_watching+0x12/0xc0 [ 437.152149][ C0] ? trace_mm_page_alloc+0x11b/0x180 [ 437.157437][ C0] kasan_save_stack+0x33/0x60 [ 437.162113][ C0] ? kasan_save_stack+0x33/0x60 [ 437.166972][ C0] ? kasan_save_track+0x14/0x30 [ 437.171822][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 437.176841][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 437.182467][ C0] ? ptlock_alloc+0x1f/0x70 [ 437.186972][ C0] ? pte_alloc_one+0x84/0x3d0 [ 437.191664][ C0] ? __do_fault+0x320/0x490 [ 437.196181][ C0] ? do_fault+0x111c/0x1ad0 [ 437.200688][ C0] ? __handle_mm_fault+0x1919/0x2bb0 [ 437.205983][ C0] ? handle_mm_fault+0x3fe/0xad0 [ 437.210929][ C0] ? do_user_addr_fault+0x7a6/0x1370 [ 437.216226][ C0] ? exc_page_fault+0x64/0xc0 [ 437.220961][ C0] kasan_save_track+0x14/0x30 [ 437.225654][ C0] __kasan_slab_alloc+0x89/0x90 [ 437.230518][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 437.235993][ C0] ? ptlock_alloc+0x1f/0x70 [ 437.240514][ C0] ? ptlock_alloc+0x1f/0x70 [ 437.245031][ C0] ptlock_alloc+0x1f/0x70 [ 437.249386][ C0] pte_alloc_one+0x84/0x3d0 [ 437.253906][ C0] __do_fault+0x320/0x490 [ 437.258246][ C0] do_fault+0x111c/0x1ad0 [ 437.262587][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 437.268040][ C0] ? __pmd_alloc+0x6aa/0x9c0 [ 437.272634][ C0] __handle_mm_fault+0x1919/0x2bb0 [ 437.277760][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 437.283241][ C0] ? find_vma+0xbf/0x140 [ 437.287491][ C0] ? __pfx_find_vma+0x10/0x10 [ 437.292188][ C0] handle_mm_fault+0x3fe/0xad0 [ 437.296974][ C0] do_user_addr_fault+0x7a6/0x1370 [ 437.302110][ C0] ? rcu_is_watching+0x12/0xc0 [ 437.306911][ C0] exc_page_fault+0x64/0xc0 [ 437.311441][ C0] asm_exc_page_fault+0x26/0x30 [ 437.316294][ C0] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 437.322107][ C0] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 437.341714][ C0] RSP: 0018:ffffc90003437b98 EFLAGS: 00050206 [ 437.347792][ C0] RAX: 0000000000000000 RBX: ffff8880491f9118 RCX: 0000000000000ff8 [ 437.355771][ C0] RDX: ffff88802e178000 RSI: ffffffff825d389e RDI: 0000562678428008 [ 437.363757][ C0] RBP: 0000562678427000 R08: 00000000ffffffff R09: 00000000ffffffff [ 437.371744][ C0] R10: 0000000000000001 R11: ffff88802e178b30 R12: 0000562678428010 [ 437.379726][ C0] R13: 0000000000000008 R14: ffff8880491f9138 R15: 00007ffffffff000 [ 437.387703][ C0] ? elf_load+0x5de/0x780 [ 437.392038][ C0] elf_load+0x5f5/0x780 [ 437.396201][ C0] load_elf_binary+0x1422/0x4fe0 [ 437.401155][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 437.406434][ C0] ? find_held_lock+0x2b/0x80 [ 437.411116][ C0] ? bprm_execve+0x8a1/0x1620 [ 437.415797][ C0] bprm_execve+0x8c2/0x1620 [ 437.420303][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 437.425237][ C0] ? copy_strings.isra.0+0x4a7/0x990 [ 437.430528][ C0] do_execveat_common.isra.0+0x4a5/0x610 [ 437.436164][ C0] __x64_sys_execve+0x8e/0xb0 [ 437.440841][ C0] do_syscall_64+0xcd/0xf80 [ 437.445351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.451242][ C0] RIP: 0033:0x7fbe3fd72107 [ 437.455656][ C0] RSP: 002b:00007fbe3fbdbe68 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 437.464062][ C0] RAX: ffffffffffffffda RBX: 00007ffd4315bf10 RCX: 00007fbe3fd72107 [ 437.472027][ C0] RDX: 0000555afe4494c0 RSI: 00007ffd4315c100 RDI: 0000555af56f36bd [ 437.479991][ C0] RBP: 00007fbe3fbdbff0 R08: 0000000000000000 R09: 0000000000000000 [ 437.488044][ C0] R10: 0000000000000008 R11: 0000000000000202 R12: 0000000000000001 [ 437.496011][ C0] R13: 00007ffd4315bbf0 R14: 00007fbe3fbdbf20 R15: 0000000000000040 [ 437.503997][ C0] [ 437.507014][ C0] task:syz.2.911 state:R running task stack:26888 pid:9659 tgid:9658 ppid:5813 task_flags:0x40044c flags:0x00080001 [ 437.520514][ C0] Call Trace: [ 437.523784][ C0] [ 437.526711][ C0] ? __schedule+0x10b9/0x6150 [ 437.531388][ C0] __schedule+0x1139/0x6150 [ 437.535922][ C0] ? __pfx___schedule+0x10/0x10 [ 437.540774][ C0] ? find_held_lock+0x2b/0x80 [ 437.545454][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 437.550826][ C0] preempt_schedule_common+0x44/0xc0 [ 437.556118][ C0] preempt_schedule_thunk+0x16/0x30 [ 437.561317][ C0] _raw_spin_unlock+0x3e/0x50 [ 437.565995][ C0] unmap_page_range+0x1047/0x43c0 [ 437.571045][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 437.576416][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 437.581361][ C0] ? uprobe_munmap+0x20/0x600 [ 437.586038][ C0] unmap_single_vma+0x153/0x240 [ 437.590898][ C0] unmap_vmas+0x218/0x470 [ 437.595233][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 437.600084][ C0] ? mas_next_slot+0x12d3/0x1cb0 [ 437.605041][ C0] exit_mmap+0x1b0/0xb60 [ 437.609288][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 437.614057][ C0] ? __lock_acquire+0x436/0x2890 [ 437.619005][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 437.624554][ C0] __mmput+0x12a/0x410 [ 437.628627][ C0] mmput+0x62/0x70 [ 437.632350][ C0] do_exit+0x7d7/0x2bd0 [ 437.636500][ C0] ? __pfx___might_resched+0x10/0x10 [ 437.641782][ C0] ? __pfx_do_exit+0x10/0x10 [ 437.646370][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 437.651403][ C0] ? find_held_lock+0x2b/0x80 [ 437.656088][ C0] do_group_exit+0xd3/0x2a0 [ 437.660592][ C0] get_signal+0x2671/0x26d0 [ 437.665107][ C0] ? __pfx_get_signal+0x10/0x10 [ 437.669957][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 437.675244][ C0] ? __pfx___file_ref_put+0x10/0x10 [ 437.680458][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 437.686007][ C0] ? fput+0xcf/0xf0 [ 437.689806][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 437.695981][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 437.701275][ C0] do_syscall_64+0x4ee/0xf80 [ 437.705866][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.711752][ C0] RIP: 0033:0x7f658518f749 [ 437.716156][ C0] RSP: 002b:00007f65860fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.724560][ C0] RAX: 0000000000000001 RBX: 00007f65853e5fa0 RCX: 00007f658518f749 [ 437.732524][ C0] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 437.740486][ C0] RBP: 00007f6585213f91 R08: 0000000000000000 R09: 0000000000000000 [ 437.748459][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.756423][ C0] R13: 00007f65853e6038 R14: 00007f65853e5fa0 R15: 00007ffdbc14c1d8 [ 437.764405][ C0] [ 437.767414][ C0] rcu: rcu_preempt kthread starved for 10583 jiffies! g32061 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 437.778596][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 437.788551][ C0] rcu: RCU grace-period kthread stack dump: [ 437.794421][ C0] task:rcu_preempt state:R running task stack:28408 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 437.807921][ C0] Call Trace: [ 437.811189][ C0] [ 437.814112][ C0] ? __schedule+0x10b9/0x6150 [ 437.818788][ C0] __schedule+0x1139/0x6150 [ 437.823307][ C0] ? __pfx___schedule+0x10/0x10 [ 437.828150][ C0] ? find_held_lock+0x2b/0x80 [ 437.832833][ C0] ? schedule+0x2d7/0x3a0 [ 437.837164][ C0] schedule+0xe7/0x3a0 [ 437.841231][ C0] schedule_timeout+0x123/0x290 [ 437.846084][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 437.851451][ C0] ? __pfx_process_timeout+0x10/0x10 [ 437.856735][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 437.862538][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 437.867996][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 437.872763][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 437.878045][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.883244][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 437.888174][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 437.893024][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 437.898829][ C0] rcu_gp_kthread+0x26d/0x380 [ 437.903506][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 437.908706][ C0] ? rcu_is_watching+0x12/0xc0 [ 437.913460][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 437.918656][ C0] ? __kthread_parkme+0x19e/0x250 [ 437.923672][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 437.928865][ C0] kthread+0x3c5/0x780 [ 437.932931][ C0] ? __pfx_kthread+0x10/0x10 [ 437.937545][ C0] ? rcu_is_watching+0x12/0xc0 [ 437.942307][ C0] ? __pfx_kthread+0x10/0x10 [ 437.946898][ C0] ret_from_fork+0x983/0xb10 [ 437.951484][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 437.956593][ C0] ? __switch_to+0x7af/0x10d0 [ 437.961271][ C0] ? __pfx_kthread+0x10/0x10 [ 437.965862][ C0] ret_from_fork_asm+0x1a/0x30 [ 437.970645][ C0] [ 437.973652][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 437.979982][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.990478][ C0] Tainted: [L]=SOFTLOCKUP [ 437.994788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 438.004830][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 438.010465][ C0] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 438.030154][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 438.036220][ C0] RAX: 0000000000f1a033 RBX: 0000000000000000 RCX: ffffffff8b7816d9 [ 438.044187][ C0] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 438.052148][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 438.060112][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 438.068081][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 438.076042][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 438.084967][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 438.091542][ C0] CR2: 000000110c36117e CR3: 000000003529b000 CR4: 00000000003526f0 [ 438.099514][ C0] Call Trace: [ 438.102784][ C0] [ 438.105703][ C0] default_idle+0x13/0x20 [ 438.110044][ C0] default_idle_call+0x6c/0xb0 [ 438.114806][ C0] do_idle+0x38d/0x510 [ 438.118881][ C0] ? __pfx_do_idle+0x10/0x10 [ 438.123483][ C0] cpu_startup_entry+0x4f/0x60 [ 438.128252][ C0] rest_init+0x16b/0x2b0 [ 438.132498][ C0] ? acpi_subsystem_init+0x133/0x180 [ 438.137781][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 438.143321][ C0] start_kernel+0x3ef/0x4d0 [ 438.147830][ C0] x86_64_start_reservations+0x18/0x30 [ 438.153291][ C0] x86_64_start_kernel+0x130/0x190 [ 438.158406][ C0] common_startup_64+0x13e/0x148 [ 438.163352][ C0]