last executing test programs: 10m48.969821212s ago: executing program 2 (id=2699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0xa0, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x7, @local, 0x9}, @in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @in6={0xa, 0x4e21, 0x4, @remote}, @in={0x2, 0x4e04, @private=0xa010100}, @in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @local}]}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xde, 0xd2, 0x4e, 0x20, 0x1608, 0x301, 0x49d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x6, 0x10, 0x0, [{{0x9, 0x4, 0x4d, 0x0, 0x2, 0x81, 0x94, 0x57, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m45.610833844s ago: executing program 2 (id=2709): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d706f6c3d6c6f6361ec3d72656c61746976652c646566636f6e74657874b6"]) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) cachestat(r0, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f00000001c0), 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @private2, @mcast1, [@dstopts={0x2b}]}}}}}}}, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x2100, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 10m44.298659296s ago: executing program 2 (id=2714): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x7) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000061c0)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) setresuid(0xee01, 0xee00, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) socket$can_bcm(0x1d, 0x2, 0x2) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaa2aaaaaabb000000000000080045000028ecffffffff059078ac1414bbac1414aa00004e22e85e73cc09c1d2d91b9ba99ce214ba89dd69b7b9df4ffacb853d38d2f3c3d169681fb5180e779f144fa0ae1aca8a3da1e9a4693fd965bc3e0fc7aec1e6e0432a4e834a058cfca54de370b74e0540dfe9", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4], 0x0) 10m43.151242327s ago: executing program 2 (id=2718): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@orangefs={0x14, 0x1, {"308bc688ee1173dc995e8e257e447006"}}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@orangefs={0x14, 0x1, {"308bc688ee1173dc995e8e257e447006"}}, 0x0, 0x0) (async) 10m42.651454974s ago: executing program 2 (id=2721): socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd2}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f00000003c0)={'\x00', 0x2, 0x0, 0xe}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000007d40)=[{}, {}, {}, {}, {}, {}, {}]}) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 10m42.085064999s ago: executing program 2 (id=2727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x0, 0xc8, 0x8, 0x8e0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x8e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x0, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x7fffffff, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x3}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x8, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0xf}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0xa}, {0x0, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0x4b}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x800006}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0xfffff9fe}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xff}, {0xfd, 0x6}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0x80000e, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x7}, {0xfffffff7, 0x9}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0x7ff, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x3}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x6, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb70) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x0, 0x2d11, 0x5, 0x0}) syz_usb_connect(0x0, 0x1ae, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) sched_getaffinity(r3, 0x8, &(0x7f00000000c0)) 10m41.431695071s ago: executing program 32 (id=2727): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x4, &(0x7f0000006680)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x0, 0xc8, 0x8, 0x8e0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x8b0, 0x8e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd, 0x3}, {0x10}, {0x6f0e7d3d, 0x1}, {0x1, 0x3}, {0x9}, {0xb, 0x1}, {0x7fffffff, 0x1}, {0x7, 0x3}, {0x1, 0x2}, {0x4, 0x51495059c89c080}, {0x8}], [{0x60, 0x5}, {0x9, 0x3}, {0x800, 0x9d78}, {0x6, 0x81}, {0x5, 0x7}, {0x0, 0x10001}, {0x2, 0x5}, {0xd, 0xfffffffd}, {0x6, 0x800}, {0x4, 0xf}, {0x80, 0xffff}], 0x2, 0x7}, {[{0x7ec5}, {0x6, 0x2}, {0xe0000, 0x2}, {0x7fffffff, 0x2}, {0xfffffffd, 0x1}, {0x8000, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x7}, {0x4, 0x3}, {0x8, 0x3}], [{0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7fbb, 0x1ff}, {0x2, 0x7}, {0x5, 0x100}, {0x2a, 0x101}, {0x8, 0x6}, {0x4, 0xfffffd46}, {0x91f, 0x3ff}, {0xc, 0x3}], 0xb, 0xa}, {[{0x7, 0x2}, {0x7}, {0x80000001, 0x1}, {0xafa, 0x1}, {0x3}, {0xfffffff8, 0x3}, {0x85, 0x2}, {0xa4b, 0x2}, {0x3, 0x2}, {0xfffff7f0, 0x1}, {0x100}], [{0xb866, 0x42}, {0x200, 0xffffffff}, {0x5, 0x3}, {0x5, 0x400}, {0xf062, 0x2}, {0x80e8, 0x100}, {0xe, 0x9}, {0x7, 0x1}, {0x2, 0x4}, {0x9, 0x80000000}, {0xe1a, 0x3}], 0x2, 0x8}, {[{0x5, 0x3}, {0xcfd, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0xfffff000}, {0x100, 0x3}, {0x9dc, 0x1}, {0x1, 0x2}, {0x8, 0x2}, {0x2, 0x3}, {0x2}], [{0x9, 0x5}, {0x0, 0x36}, {0x5, 0xf}, {0xfffffff9, 0x7}, {0x7, 0x200}, {0xf91, 0x2}, {0x3ff, 0x8}, {0x9, 0xe}, {0x8, 0x8000006}, {0xf, 0x442b}, {0x9, 0xe1f3}], 0x4, 0xb}, {[{0xe0, 0x2}, {0x1, 0x3}, {0x200, 0x1}, {0xb7b, 0x24ad23d8db3ef6a8}, {0x1, 0x2}, {0x1, 0x1}, {0x2a4a}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9, 0x1}], [{0x8001, 0x10000}, {0x3, 0xb}, {0x2, 0x1}, {0x5, 0xc}, {0x4, 0xd23c}, {0x7, 0x1}, {0xeb9, 0xa3d0}, {0xa}, {0x0, 0x2}, {0x9, 0xb6}, {0x7, 0x80000001}], 0x5, 0x4b}, {[{0x8, 0x1}, {0x5, 0x3}, {0x100}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x3}, {}, {0x1, 0x2}, {0x101, 0x2}, {0x4, 0x3}, {0x81, 0x1}], [{0xfffffffd, 0x6}, {0x9, 0x7}, {0x3e8a2173, 0x6}, {0x5, 0x800006}, {0x1, 0x8}, {0x8, 0x5}, {0x9, 0x2}, {0x50bf}, {0x6, 0x3}, {0x1, 0xfffffff7}, {0x2, 0x80000001}], 0x7, 0x1}, {[{0x4, 0x2}, {0x401, 0x3}, {0x5, 0x3}, {0x8, 0x2}, {0x934, 0x1}, {0xfffff9fe}, {0x531, 0x2}, {0x9, 0x1}, {0x3}, {0x75ae, 0x3}, {0x1}], [{0x10, 0x1a}, {0x5}, {0x20000, 0x8001}, {0xfffffff7, 0x8}, {0x80000001, 0x2}, {0xb30d, 0x2}, {0x0, 0x7fffffff}, {0x80, 0x5}, {0xa, 0x8}, {0xee, 0xa}, {0x24c3, 0x437}], 0xb, 0x1}, {[{0x2, 0x1}, {0x9, 0x1}, {}, {0x5, 0x2}, {0xc00}, {0x10001, 0x3}, {0x7f, 0x1}, {0x9, 0x3}, {0x30, 0x1}, {0x5, 0x3}, {0xd}], [{0x7, 0x80000000}, {0x400, 0x3}, {0x9, 0x4}, {0x1, 0x9}, {0x4}, {0x1ff, 0xff}, {0xfd, 0x6}, {0x5, 0x3}, {0x10001, 0x77}, {0x8, 0xb80}, {0x8, 0x1ff}], 0xa, 0x1}, {[{0x8}, {0xfffffbff}, {0x401}, {0xff, 0x2}, {0x80000e, 0x2}, {0x9, 0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x509}, {0x9, 0x3}], [{0x8, 0x4}, {0x9, 0x7}, {0xfffffff7, 0x9}, {0xfff, 0x4}, {0xa2c, 0x4}, {0x6, 0x6b}, {0x5, 0x5}, {0x7, 0xd76}, {0x2, 0x8}, {0x2ea, 0x9}, {0x5, 0x5}], 0x6, 0x3}, {[{0x8001, 0x1}, {0x3, 0x1}, {0x5, 0x2}, {0x5}, {0x8}, {0xc}, {0x2, 0x2}, {0xffff0001, 0x2}, {0x6, 0x3}, {0xe91}, {0x80000001, 0x3}], [{0x1, 0x81}, {0x9, 0x7}, {0x3, 0x7}, {0x401, 0xec}, {0x10001}, {0x0, 0x2}, {0x70, 0x9}, {0xc6, 0x1000}, {0x7ff, 0x708}, {0x7, 0x5}, {0x2, 0x10000}], 0xb, 0x1}, {[{0x8}, {0x4, 0x1}, {0x7}, {0x6, 0x3}, {0x4}, {0xcc, 0x2}, {0x7ff, 0x2}, {0x4, 0x1}, {0xfffffffb, 0x3}, {0x1, 0x3}, {0x6, 0x3}], [{0x63e2df8a, 0x6}, {0x5, 0x2}, {0x2, 0x401}, {0xff, 0x8}, {0x889c, 0x5f}, {0x7d, 0xa14}, {0x0, 0x5}, {0x3, 0x372}, {0xb, 0x6}, {0x0, 0xcaf}, {0x5, 0x4}], 0x6, 0xa}], 0x8}}, @common=@inet=@dscp={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb70) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x0, 0x2d11, 0x5, 0x0}) syz_usb_connect(0x0, 0x1ae, &(0x7f0000000400)=ANY=[@ANYBLOB="12014101338b8c080a113011568b0102030109029c0101000010000904800702a7f0be000905060200020d0006e60fa61dcb0f3061d95fab6bf2839b42d9e3fa95f42f0c0fc8cb2372c8e64a170ca6fb768405dd7ffde5dd9dc9ca190cac7798105a7d275d9f5f58cb49217e396d5dee71b1ba86276b917e2648c736a87822377b3811d82c6ab4aabe7c345a4c8c54846aba693a4a4fedb18bcd03a9fbeb0a201ffd44d732cac550a0eb98cd9631bf907772d8c36bf684e79b6c607e9cf50451d9afafce16d88c72030074c85931c94eea1e77102e2c87d53745ab0d033c17276a7bb1c8c5013416c80009b592271a7d41368e29ea76b455c09692af0e64de8d6b8db05fb4eb4dbd4c2198a5ae58865a8a724292231461d572d8d95fcfeaec2125133a5044ec6f887ada9a5cfa5cb0c91c091c912ff269c6cc89ec5c095d853ec68822da4a073b7f2164edee7950bab4332d9475043613d33d56aa4d5eff750be9d3195ff93467a858629f2856c3de22c628f2773b3d6cd8a85eee03bbdbc4c3cbb91c7883781cad4b8a4630b55ad37a91c2be65fcfaad732df1078e3dd5fff83753d92ff509058202"], 0x0) sched_getaffinity(r3, 0x8, &(0x7f00000000c0)) 15.723772893s ago: executing program 4 (id=5878): socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000013, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000f80)={'syz1\x00', {0x2e4, 0x5, 0x0, 0xd153}, 0x18, [0xaedf, 0x3ff, 0x7f, 0x2, 0x9, 0x5, 0x8, 0x1, 0x1, 0x0, 0xa, 0x4, 0x7, 0x3, 0x7, 0x8, 0x2764, 0x5, 0xe1, 0x2, 0xe8, 0x0, 0xf, 0x578776b1, 0x7, 0x2, 0x8, 0x4, 0x1, 0x400, 0x6, 0x6, 0x4, 0x8, 0x7fc1, 0x401, 0x0, 0x3, 0x7, 0xfc, 0x7, 0x1, 0x58, 0x5f6, 0x1, 0x1, 0x2, 0x8, 0x6, 0x4, 0xffffffff, 0x7fffffff, 0x6, 0x88a, 0x511, 0x7, 0x40, 0x1, 0x7, 0x7, 0x9, 0x6, 0x2], [0x6, 0x6, 0x9f4e, 0x8, 0x4, 0xf891, 0xd69a, 0x4, 0x0, 0xffffffff, 0x53, 0x7, 0x5, 0x1, 0x5, 0x82e, 0x8, 0xffff, 0x810, 0x4, 0x1, 0xedd3, 0x800, 0x7, 0x10001, 0x0, 0xfffffff7, 0x1, 0x3, 0x1, 0xb, 0xfb3, 0x8, 0x2, 0x7, 0x9, 0x4, 0x7f, 0x1, 0x2, 0xe, 0xf0, 0x0, 0x4, 0xd, 0x7, 0x1, 0x0, 0x10, 0x6, 0x2, 0x8000, 0x1bad800, 0x6, 0x7, 0x7ff, 0x0, 0x3, 0xffffffff, 0x0, 0x80000000, 0x8, 0xe, 0x6], [0x2, 0x3, 0x5, 0x2, 0xa4b0, 0x3, 0x0, 0x3, 0x80000001, 0x21a, 0x0, 0x0, 0x9bdf, 0x7fffffff, 0xa3, 0x8, 0x2, 0xb6c, 0x3, 0x1, 0x5, 0x8, 0x5, 0x3, 0x8, 0x9, 0x7, 0xd829, 0x3ff, 0x10, 0xfffffffc, 0x6, 0xc, 0x0, 0x7, 0x49, 0x9, 0x3, 0x5, 0x6, 0x10001, 0xad, 0x9, 0x1, 0x127, 0x7, 0xfffffffa, 0x3b5, 0x81, 0x1, 0x8, 0x4, 0x4, 0x3, 0x0, 0x6, 0x5, 0x473b6ba2, 0x2, 0xb, 0x80, 0x9, 0xfffffffe, 0x7de], [0x0, 0x2, 0x919c, 0x8, 0x4, 0xfffffffc, 0xb557, 0xd25, 0x7, 0x4, 0xfffffffa, 0xc760, 0x164, 0x1000, 0x10, 0x2, 0x6, 0x0, 0x2, 0x2, 0x7, 0x44, 0xe4, 0xf, 0x0, 0x4, 0x6, 0x4ab2, 0x81, 0x4, 0x10001, 0x2, 0xa, 0x3, 0x3, 0xd1aa, 0x81, 0x0, 0x3, 0x380a, 0x3, 0x80000001, 0x4, 0x101, 0x9e, 0x9, 0x4, 0x5, 0x1, 0x40, 0x9, 0x7e, 0x5, 0x2, 0x3, 0x3, 0xffffffa5, 0x5, 0x101, 0x7, 0x1, 0x4, 0xf, 0x9]}, 0x45c) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000002060102ff0c74e25c3400000000a9d4d51aa33ca665f81d9ce24f006e944866"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r9 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000000d40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000200)="a905000400007464f4019e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb00000000", 0xc}], 0x2}}], 0x1, 0x4004040) r10 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x20000) 14.552587049s ago: executing program 4 (id=5880): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/133, 0xcd}], 0x1, 0xa6, 0x200) write$rfkill(r0, &(0x7f0000000240)={0xe0, 0x9, 0x1}, 0x8) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/115) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xff, 0xffff, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x10, 0x40, 0x0, 0x107}}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000003e80)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f0000000340)=""/15, 0xf}], 0x8}, 0x7}, {{&(0x7f0000002b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002bc0)=""/137, 0x89}, {&(0x7f0000002c80)=""/158, 0x9e}, {&(0x7f0000002d40)=""/115, 0x73}, {&(0x7f0000002dc0)=""/128, 0x80}, {&(0x7f0000002e40)=""/85, 0x55}, {&(0x7f0000000840)=""/40, 0x28}, {&(0x7f0000002ec0)=""/180, 0xb4}, {&(0x7f0000002f80)=""/30, 0x1e}], 0x8, &(0x7f0000003040)=""/87, 0xfffffffffffffe73}, 0x9}, {{&(0x7f0000003280)=@qipcrtr, 0x80, &(0x7f0000003300)=[{&(0x7f0000003140)=""/190, 0xbe}, {&(0x7f0000003fc0)=""/255, 0xff}], 0x2}, 0x8}, {{&(0x7f0000003340)=@ax25={{0x3, @netrom}, [@remote, @rose, @bcast, @null, @rose, @default, @rose, @rose]}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000033c0)=""/116, 0x74}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/100, 0x64}, {&(0x7f00000035c0)=""/26, 0x1a}, {&(0x7f0000003600)=""/118, 0x76}, {&(0x7f0000003680)=""/162, 0xa2}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003200)=""/102, 0x66}], 0x8, &(0x7f0000003940)=""/128, 0x80}, 0x4}, {{&(0x7f00000039c0)=@phonet, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003a40)=""/145, 0x91}, {&(0x7f0000003b00)=""/131, 0x83}, {&(0x7f0000003bc0)=""/198, 0xc6}, {&(0x7f0000003cc0)=""/10, 0xa}, {&(0x7f0000003d00)=""/234, 0xea}], 0x5}, 0x7}], 0x5, 0x10000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) 14.240215428s ago: executing program 3 (id=5881): openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) close(r0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x8, 0x7, 0x0, 0x1, 0x3}, 0x50) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 13.248646214s ago: executing program 3 (id=5882): r0 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000540)=""/116, 0x74, 0x80000abe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000e0ff000000000000ff0000bf60010001000000950000000000000000"], &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x4000000000003b4, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x3, 0x3, 0xa, 0x99, 0xc8, 0x9, 0x1, 0x9, 0x0, 0x7, 0xfc, 0x25, 0x9b, 0x1}, 0xe) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001310034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0xfffffffffffffd20}], 0x1) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="03c800e8899fadba28ffb892ecd262d305d61494dcb70aa557c7eb84a0947865574025186d0cc20ec16154041a1007d16e25306e87c47024757cd327afe42bc3cc0fc347c2d9dbb693fa078bb61a9fbadb37dbe690428d43c07a1989d0e503c2b22c1b2b2db1a197c079737db027d554b312fe4a4b8ab7f9e1641b9a79a00ea5681ae0896251b04b9b06def83eb2a86dad6e475aed5306ec0da85a9b77fa4aaba9d909de0cf9705d9166ace03783c8bb6d7a68325fcdbd9f3c92a06792244565fc76cfefa52c5f33764b1965475e83ef84693223f7de7bb8299713edc4ef9c7b78de4e61b9928d20f90cfd974da78fd6b02b0e0fed932d9c4c2cf8e1cba051d20b354dcd80d0b9b55636c9aa9d0424d37ec395b057ea1e5d765d122697c019ada5542acde600b1cffacd68dbac1044a5c3010b4f2f8384462a9abf085a3aabd33d9cc41cb9d8ad306d11f5e18cd5cb9d19cf2082"], 0xec) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000480)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000001080)=@file={0x0, './bus/file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) kexec_load(0x5, 0x0, &(0x7f0000000380), 0x80000) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1b, 0x1}, &(0x7f0000000200)=0x0) timer_settime(r8, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000002c0)) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 10.306748495s ago: executing program 5 (id=5887): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x3f, 0x80842) semget(0x1, 0x4, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffff75, 0x0, 0x1}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000000) read(r3, &(0x7f0000000380)=""/144, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) readahead(0xffffffffffffffff, 0x100, 0x96) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents(r5, &(0x7f00000003c0)=""/202, 0xca) getdents64(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 9.962490395s ago: executing program 4 (id=5889): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000008000a40fffffffc2c0000000b0a010800000000000000000a0001050900010073797a31000000000c0010400000000000000002140000001100010000000000000000000100000a"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xddd0, 0xd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2802, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r3 = memfd_secret(0x0) ftruncate(r3, 0x581) (async, rerun: 64) ftruncate(r3, 0x0) (async, rerun: 64) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) (async) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x40, 0x9, 0x0, 0x54}, {0x0, 0x2, 0xff}, {0x7, 0x4, 0x77, 0x4a7a}, {0x8, 0x0, 0xa, 0x1}]}) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) userfaultfd(0x80001) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r7}, 0xc) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) 9.945792117s ago: executing program 3 (id=5890): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000000000000000000000000001d850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$mixer(0xffffffffffffff9c, 0x0, 0x20200, 0x0) mknod(&(0x7f0000000080)='.\x00', 0x40, 0x9) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4, r7}) ppoll(&(0x7f0000000040)=[{r9, 0x2289}], 0x1, 0x0, 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020000000b"], 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.139610335s ago: executing program 3 (id=5893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x9, r5, 0x0, 0x0, 0x3b0}]) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) fcntl$setlease(r4, 0x400, 0x2) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="01000000670700"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24000014) 7.840704687s ago: executing program 0 (id=5894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x7, @vbi={0x0, 0xc00, 0x1, 0x38414262, [0x2, 0xf], [0x5, 0x6], 0x13a}}) 6.790576315s ago: executing program 1 (id=5895): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fgetxattr(r3, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a380)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200004, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x100000001, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f00000000c0)={0x500, 0x4b0, 0x500, 0x1000000, 0x0, 0x6, 0xf, 0x2, {0x7, 0x0, 0x1}, {0x1ff, 0x7}, {0x7, 0x200}, {0x10000, 0x800, 0x1}, 0x1, 0x90, 0x9, 0x1ff, 0x0, 0xfffffffc, 0x7, 0x3d, 0x4, 0x9, 0x8, 0x5, 0x4, 0x200, 0x0, 0x6}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000001c0)={0xd}) 6.692377531s ago: executing program 0 (id=5896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) symlink(0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000380)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffce4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) 6.644964238s ago: executing program 3 (id=5897): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'n\'f;'}, @local=@item_4={0x3, 0x2, 0x8, "5de32d78"}, @main=@item_4={0x3, 0x0, 0x9, ' WbX'}]}}, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket(0x2a, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r4, 0x40085500, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) pipe2$watch_queue(&(0x7f0000000000), 0x80) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) 6.156191114s ago: executing program 1 (id=5898): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="09000000060000"], 0x48) clock_gettime(0x3, &(0x7f00000021c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/resume_offset', 0x123481, 0x127) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38) socket$kcm(0x2, 0x3, 0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r4 = syz_io_uring_setup(0x1181, &(0x7f0000000300)={0x0, 0xe2cc, 0x10100, 0x0, 0xfffffffe}, &(0x7f00000007c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0x6, &(0x7f0000003b80)=0x0) io_pgetevents(r8, 0x5, 0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x0, &(0x7f0000000780)={&(0x7f0000000740)={[0x2]}, 0x8}) 4.51939011s ago: executing program 4 (id=5899): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x7}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8=r0], 0x29) 4.419950972s ago: executing program 0 (id=5900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 4.187544443s ago: executing program 5 (id=5901): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x81, @any, 0x3ff, 0x2}, 0xe) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x4000000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 3.685194033s ago: executing program 5 (id=5902): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, 0x0, 0xc8) r1 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x42) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x2008, 0x0, 0x0, 0x80, 0x0, 0x1}) 3.539435922s ago: executing program 4 (id=5903): syz_open_dev$vcsu(&(0x7f0000000000), 0xb62, 0x1c1080) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000a80)) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0xc, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) 3.538516832s ago: executing program 5 (id=5904): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) io_setup(0xc, &(0x7f0000000100)=0x0) r4 = timerfd_create(0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) sched_getattr(r6, &(0x7f0000000240)={0x38}, 0x38, 0x0) io_submit(r3, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$TFD_IOC_SET_TICKS(r4, 0x40085400, &(0x7f0000000140)=0x2) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$unix(r1, &(0x7f0000012fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x24004005) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @bcast, @null]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xfbf}, {0x0}, {&(0x7f0000000300)="23e747073ad571e9e7ba5cc2e80d9b3028f16707b2ec7248d2553454d6b51cec75e55d69d2eae1a2", 0x28}, {&(0x7f0000000480)="63d6c0eaa863afd7a233f76c6b22fd58e0d65f9fea75789b2996209dd41d174b779c3293aaa9e5848aba40ef75456d636c4b4856f8889412a57afaf87b27e1c4399aa915da87a5391a91d804cc13ee6f2aa4e7e71b63513f0015099a8909434dd763d9d0ec5de818f6dc6f2eb88bc9e9adad3634b370149024ed87ea786379d3ef36a1085f", 0x85}, {&(0x7f0000000180)="c91d495e0a25", 0x6}, {&(0x7f0000000200)='L', 0x1}], 0x6}, 0x20000000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 2.431206172s ago: executing program 5 (id=5905): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setown(r4, 0x8, r2) socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 2.386535834s ago: executing program 1 (id=5906): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async, rerun: 64) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df608", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x4e20, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc}}}}}}}, 0x0) (async) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) getitimer(0x0, &(0x7f0000000800)) (async) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_dellink={0x2c, 0x13, 0x400, 0x0, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000"], 0xf0}}, 0x0) (async, rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) 2.385738919s ago: executing program 3 (id=5907): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x5, 0x0, @void}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0x3b, 0x30, 0xa9, 0x20, 0x77d, 0x4aa, 0xffe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa4, 0x36, 0x10, 0x1, [{{0x9, 0x4, 0xf6, 0x4, 0x1, 0xd, 0x88, 0x9e, 0x52, [], [{{0x9, 0x5, 0x9, 0x3, 0x58, 0xa, 0x7f, 0x81}}]}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) 2.357652797s ago: executing program 0 (id=5908): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x20400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x2f0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x5, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x8008, 0x8, 0x5, 0x4, 0x8, 0x10000, 0xfffffff4]}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) 2.183677619s ago: executing program 0 (id=5909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) setrlimit(0xe, &(0x7f0000000000)={0x4, 0x8}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x15031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.344283842s ago: executing program 4 (id=5910): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x2040) r0 = fsopen(&(0x7f0000000080)='nfsd\x00', 0x0) r1 = fsmount(r0, 0x0, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000140)={0x6a0, r1, 0x1f, {0x1000000000000401, 0x81}, 0x2}, 0x1) ioctl$SNDRV_PCM_IOCTL_LINK(r1, 0x40044160, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000000)={'\x00', 0xf7d6, 0x2, 0xfffffff7}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000200)) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xffffffffffffbffc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) pipe(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000019340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x3}, 0x7, 0x5, 0x9, 0xe, 0x0, 0x0, 0x200}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000007c0), 0x400000000, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000193c0)=""/102400, 0x68c9eb2259306928) socket$nl_route(0x10, 0x3, 0x0) 1.136553886s ago: executing program 1 (id=5911): r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1.079569117s ago: executing program 0 (id=5912): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = getpgid(0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x184) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c00000800018004"], 0x1c}}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = fsmount(r5, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x81, @any, 0x3ff, 0x2}, 0xe) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x4000000) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 957.234611ms ago: executing program 1 (id=5913): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x1}, {0xc, 0x8}, {0xb, 0xff}, {0xa, 0x4}]}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/157, 0x53, 0x9d, 0x1, 0x56a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x200}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0), 0x700}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0xfffd, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000600)={[&(0x7f0000000440)='\x00', &(0x7f0000000480)='pim6reg1\x00', &(0x7f0000000500)=',&\x00', &(0x7f0000000540)='bond_slave_1\x00', &(0x7f0000000580)=',:%{)+\x00', &(0x7f00000005c0)='pim6reg1\x00']}, 0x0, 0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000007, 0x11, 0xffffffffffffffff, 0x80000000) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) 427.265798ms ago: executing program 5 (id=5914): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x7, 0x85, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, 0x8, 0xff, 0x0, '\x00', 0x5, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0xe) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="920a718b51c7cf898dd8b5628866d1016dbea5a8d135d5de8858", 0x1a}], 0x1, 0x4, 0x8000) 0s ago: executing program 1 (id=5915): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8021, 0x0, 0x3f26, 0xf01, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) r4 = syz_open_dev$video4linux(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r8, 0x1276, 0x20000000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r8, @ANYRESHEX=r4], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a300000000008000340000000011400"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r9, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, 0x0) kernel console output (not intermixed with test programs): b:00007faab5ab9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1361.987096][T24628] RAX: ffffffffffffffda RBX: 00007faab4de5fa0 RCX: 00007faab4b8f749 [ 1361.987104][T24628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1361.987110][T24628] RBP: 00007faab5ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.987117][T24628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.987123][T24628] R13: 00007faab4de6038 R14: 00007faab4de5fa0 R15: 00007ffe8ca9b1c8 [ 1361.987137][T24628] [ 1362.197154][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 1362.197165][ T30] audit: type=1400 audit(1767465668.524:11257): avc: denied { read write } for pid=16335 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1362.244584][ T30] audit: type=1400 audit(1767465668.574:11258): avc: denied { read write } for pid=24632 comm="syz.5.5354" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1362.299146][ T30] audit: type=1400 audit(1767465668.614:11259): avc: denied { read write } for pid=16335 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1362.371991][ T30] audit: type=1400 audit(1767465668.624:11260): avc: denied { read } for pid=24634 comm="syz.5.5355" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=0 [ 1362.408949][ T30] audit: type=1400 audit(1767465668.624:11261): avc: denied { create } for pid=24634 comm="syz.5.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1362.431214][ T30] audit: type=1400 audit(1767465668.624:11262): avc: denied { read } for pid=24634 comm="syz.5.5355" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1362.460913][ T30] audit: type=1400 audit(1767465668.634:11263): avc: denied { create } for pid=24634 comm="syz.5.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1362.500342][ T30] audit: type=1400 audit(1767465668.634:11264): avc: denied { read write } for pid=24634 comm="syz.5.5355" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1362.538552][ T30] audit: type=1400 audit(1767465668.634:11265): avc: denied { bpf } for pid=24634 comm="syz.5.5355" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1362.561196][ T30] audit: type=1400 audit(1767465668.644:11266): avc: denied { read write } for pid=16335 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1362.640552][T24650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1362.650142][T24650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1362.659139][T24650] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1364.825838][T24708] bond0: entered promiscuous mode [ 1364.831396][T24708] bond_slave_0: entered promiscuous mode [ 1364.837182][T24708] bond_slave_1: entered promiscuous mode [ 1367.224670][ T30] kauditd_printk_skb: 388 callbacks suppressed [ 1367.224680][ T30] audit: type=1400 audit(1767465673.554:11655): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1367.300447][ T30] audit: type=1400 audit(1767465673.634:11656): avc: denied { prog_load } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1367.329669][ T30] audit: type=1400 audit(1767465673.634:11657): avc: denied { prog_load } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1367.359443][ T30] audit: type=1400 audit(1767465673.634:11658): avc: denied { map_create } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1367.419457][ T30] audit: type=1400 audit(1767465673.654:11659): avc: denied { prog_load } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1367.466210][ T30] audit: type=1400 audit(1767465673.684:11660): avc: denied { read } for pid=24775 comm="syz.4.5405" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 1367.570456][ T30] audit: type=1400 audit(1767465673.694:11661): avc: denied { prog_load } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1367.601143][ T30] audit: type=1400 audit(1767465673.724:11662): avc: denied { create } for pid=24772 comm="syz.1.5404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1367.649660][ T30] audit: type=1400 audit(1767465673.724:11663): avc: denied { mounton } for pid=24775 comm="syz.4.5405" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 1367.689153][T24781] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24781 comm=syz.3.5407 [ 1367.703699][ T30] audit: type=1400 audit(1767465673.724:11664): avc: denied { bpf } for pid=24775 comm="syz.4.5405" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 1367.897652][T24787] [U] [ 1367.900686][T24787] [U] [ 1367.903381][T24787] [U] [ 1367.906070][T24787] [U] [ 1367.933438][T24787] [U] [ 1367.936126][T24787] [U] [ 1367.938786][T24787] [U] [ 1367.941459][T24787] [U] [ 1367.979567][T24787] [U] [ 1367.982252][T24787] [U] [ 1367.984909][T24787] [U] [ 1368.006631][T24786] [U] [ 1368.272176][T24800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1368.637728][T24785] orangefs_mount: mount request failed with -4 [ 1370.265225][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1370.274287][T24837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1370.321709][ T9571] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.330636][ T9571] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.349047][ T9571] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1370.398073][ T9571] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.379300][T24866] FAULT_INJECTION: forcing a failure. [ 1371.379300][T24866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.379334][T24866] CPU: 1 UID: 0 PID: 24866 Comm: syz.4.5431 Tainted: G L syzkaller #0 PREEMPT(full) [ 1371.379363][T24866] Tainted: [L]=SOFTLOCKUP [ 1371.379370][T24866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.379381][T24866] Call Trace: [ 1371.379387][T24866] [ 1371.379395][T24866] dump_stack_lvl+0x16c/0x1f0 [ 1371.379423][T24866] should_fail_ex+0x512/0x640 [ 1371.379454][T24866] _copy_from_user+0x2e/0xd0 [ 1371.379482][T24866] memdup_user+0x6b/0xe0 [ 1371.379501][T24866] strndup_user+0x78/0xe0 [ 1371.379521][T24866] __x64_sys_mount+0x136/0x310 [ 1371.379540][T24866] ? __pfx___x64_sys_mount+0x10/0x10 [ 1371.379566][T24866] do_syscall_64+0xcd/0xf80 [ 1371.379592][T24866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.379610][T24866] RIP: 0033:0x7f4c9438f749 [ 1371.379624][T24866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.379641][T24866] RSP: 002b:00007f4c9515e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1371.379659][T24866] RAX: ffffffffffffffda RBX: 00007f4c945e5fa0 RCX: 00007f4c9438f749 [ 1371.379671][T24866] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000000 [ 1371.379682][T24866] RBP: 00007f4c9515e090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.379693][T24866] R10: 0000000002008000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.379704][T24866] R13: 00007f4c945e6038 R14: 00007f4c945e5fa0 R15: 00007ffd6ca40a08 [ 1371.379729][T24866] [ 1372.229753][ T30] kauditd_printk_skb: 296 callbacks suppressed [ 1372.229770][ T30] audit: type=1400 audit(1767465678.564:11961): avc: denied { create } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 1372.261020][ T30] audit: type=1400 audit(1767465678.594:11962): avc: denied { create } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1372.281190][ T30] audit: type=1400 audit(1767465678.594:11963): avc: denied { prog_load } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1372.302871][ T30] audit: type=1400 audit(1767465678.594:11964): avc: denied { execmem } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1372.323236][ T30] audit: type=1400 audit(1767465678.654:11965): avc: denied { create } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1372.344130][ T30] audit: type=1400 audit(1767465678.664:11966): avc: denied { read write } for pid=24891 comm="syz.5.5451" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 1372.395767][ T30] audit: type=1400 audit(1767465678.664:11967): avc: denied { create } for pid=24891 comm="syz.5.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 1372.434230][ T30] audit: type=1400 audit(1767465678.754:11968): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1372.488465][ T30] audit: type=1400 audit(1767465678.764:11969): avc: denied { read write } for pid=16318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1372.514552][ T30] audit: type=1400 audit(1767465678.804:11970): avc: denied { create } for pid=24895 comm="syz.0.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 1372.780835][T24916] FAULT_INJECTION: forcing a failure. [ 1372.780835][T24916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.808164][T24916] CPU: 1 UID: 0 PID: 24916 Comm: syz.0.5458 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.808185][T24916] Tainted: [L]=SOFTLOCKUP [ 1372.808190][T24916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1372.808196][T24916] Call Trace: [ 1372.808200][T24916] [ 1372.808205][T24916] dump_stack_lvl+0x16c/0x1f0 [ 1372.808223][T24916] should_fail_ex+0x512/0x640 [ 1372.808248][T24916] _copy_from_iter+0x2a4/0x16c0 [ 1372.808282][T24916] ? __pfx__copy_from_iter+0x10/0x10 [ 1372.808313][T24916] ? __pfx___might_resched+0x10/0x10 [ 1372.808327][T24916] file_tty_write.constprop.0+0x487/0x9b0 [ 1372.808345][T24916] vfs_write+0x7d3/0x11d0 [ 1372.808360][T24916] ? __pfx_tty_write+0x10/0x10 [ 1372.808374][T24916] ? __pfx_vfs_write+0x10/0x10 [ 1372.808386][T24916] ? find_held_lock+0x2b/0x80 [ 1372.808412][T24916] ksys_write+0x12a/0x250 [ 1372.808425][T24916] ? __pfx_ksys_write+0x10/0x10 [ 1372.808443][T24916] do_syscall_64+0xcd/0xf80 [ 1372.808459][T24916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.808470][T24916] RIP: 0033:0x7faab4b8f749 [ 1372.808480][T24916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.808491][T24916] RSP: 002b:00007faab5ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1372.808501][T24916] RAX: ffffffffffffffda RBX: 00007faab4de5fa0 RCX: 00007faab4b8f749 [ 1372.808508][T24916] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000009 [ 1372.808515][T24916] RBP: 00007faab5ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.808521][T24916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1372.808528][T24916] R13: 00007faab4de6038 R14: 00007faab4de5fa0 R15: 00007ffe8ca9b1c8 [ 1372.808542][T24916] [ 1376.631579][T25012] FAULT_INJECTION: forcing a failure. [ 1376.631579][T25012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1376.807487][T25012] CPU: 0 UID: 0 PID: 25012 Comm: syz.1.5491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1376.807517][T25012] Tainted: [L]=SOFTLOCKUP [ 1376.807523][T25012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1376.807534][T25012] Call Trace: [ 1376.807540][T25012] [ 1376.807546][T25012] dump_stack_lvl+0x16c/0x1f0 [ 1376.807574][T25012] should_fail_ex+0x512/0x640 [ 1376.807604][T25012] copy_fpstate_to_sigframe+0x827/0xad0 [ 1376.807634][T25012] ? do_raw_spin_lock+0x12c/0x2b0 [ 1376.807660][T25012] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1376.807693][T25012] ? posixtimer_deliver_signal+0x1c7/0x6b0 [ 1376.807720][T25012] ? x86_task_fpu+0x5f/0x90 [ 1376.807745][T25012] get_sigframe+0x4a8/0x9c0 [ 1376.807772][T25012] ? __pfx_get_sigframe+0x10/0x10 [ 1376.807795][T25012] ? rcu_is_watching+0x12/0xc0 [ 1376.807811][T25012] ? _raw_spin_unlock_irq+0x23/0x50 [ 1376.807831][T25012] ? siginfo_layout+0x177/0x290 [ 1376.807866][T25012] x64_setup_rt_frame+0x129/0xcf0 [ 1376.807896][T25012] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1376.807922][T25012] ? __mutex_unlock_slowpath+0x161/0x790 [ 1376.807949][T25012] arch_do_signal_or_restart+0x5da/0x7e0 [ 1376.807974][T25012] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1376.808005][T25012] ? fput+0x70/0xf0 [ 1376.808025][T25012] exit_to_user_mode_loop+0x8c/0x540 [ 1376.808053][T25012] do_syscall_64+0x4ee/0xf80 [ 1376.808077][T25012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.808094][T25012] RIP: 0033:0x7fc8a478e1ff [ 1376.808108][T25012] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1376.808125][T25012] RSP: 002b:00007fc8a55ab030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1376.808140][T25012] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007fc8a478e1ff [ 1376.808151][T25012] RDX: 0000000000000001 RSI: 00007fc8a55ab090 RDI: 0000000000000003 [ 1376.808161][T25012] RBP: 00007fc8a55ab090 R08: 0000000000000000 R09: 00007fc8a55aadf7 [ 1376.808172][T25012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1376.808183][T25012] R13: 00007fc8a49e6038 R14: 00007fc8a49e5fa0 R15: 00007ffe213fed08 [ 1376.808209][T25012] [ 1377.249897][ T30] kauditd_printk_skb: 328 callbacks suppressed [ 1377.249913][ T30] audit: type=1400 audit(1767465683.584:12299): avc: denied { create } for pid=25019 comm="syz.1.5494" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 1377.293255][ T30] audit: type=1400 audit(1767465683.604:12300): avc: denied { create } for pid=25016 comm="syz.5.5493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1377.330563][ T30] audit: type=1400 audit(1767465683.664:12301): avc: denied { write } for pid=25016 comm="syz.5.5493" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1377.464244][ T30] audit: type=1400 audit(1767465683.794:12302): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1377.582379][ T30] audit: type=1400 audit(1767465683.904:12303): avc: denied { create } for pid=25025 comm="syz.4.5495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 1377.669519][ T30] audit: type=1400 audit(1767465683.984:12304): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1377.796532][ T30] audit: type=1400 audit(1767465684.124:12305): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1377.893368][ T30] audit: type=1400 audit(1767465684.174:12306): avc: denied { read write } for pid=25030 comm="syz.4.5497" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1377.968225][ T30] audit: type=1400 audit(1767465684.184:12307): avc: denied { create } for pid=25030 comm="syz.4.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 1378.008233][ T30] audit: type=1400 audit(1767465684.184:12308): avc: denied { execute } for pid=25030 comm="syz.4.5497" name="file2" dev="tmpfs" ino=2316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 1378.845667][T25049] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5503'. [ 1378.855441][T25049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1380.512884][T25066] netlink: 'syz.5.5509': attribute type 39 has an invalid length. [ 1382.272305][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 1382.272320][ T30] audit: type=1400 audit(1767465688.604:12458): avc: denied { allowed } for pid=25104 comm="syz.1.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 1382.312863][ T30] audit: type=1400 audit(1767465688.644:12459): avc: denied { read write } for pid=25106 comm="syz.5.5525" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 1382.362134][ T30] audit: type=1400 audit(1767465688.694:12460): avc: denied { create } for pid=25106 comm="syz.5.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1382.401354][ T30] audit: type=1400 audit(1767465688.694:12461): avc: denied { create } for pid=25106 comm="syz.5.5525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 1382.421299][ T30] audit: type=1400 audit(1767465688.714:12462): avc: denied { read write } for pid=18127 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1382.768210][ T30] audit: type=1400 audit(1767465689.084:12463): avc: denied { read } for pid=25112 comm="syz.1.5526" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 1382.815067][ T30] audit: type=1400 audit(1767465689.094:12464): avc: denied { create } for pid=25112 comm="syz.1.5526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1382.837127][ T30] audit: type=1400 audit(1767465689.144:12465): avc: denied { read write } for pid=18127 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1382.889445][ T30] audit: type=1400 audit(1767465689.164:12466): avc: denied { prog_load } for pid=25115 comm="syz.0.5527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1382.918113][T25121] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5528'. [ 1382.933211][ T30] audit: type=1400 audit(1767465689.264:12467): avc: denied { map_create } for pid=25117 comm="syz.0.5529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1383.015025][T25125] bridge0: entered promiscuous mode [ 1383.025263][T25125] bridge0: left promiscuous mode [ 1383.118714][T25131] xt_policy: output policy not valid in PREROUTING and INPUT [ 1384.411659][T11236] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1384.787063][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5551'. [ 1386.450029][T11236] Bluetooth: hci3: command 0x1003 tx timeout [ 1386.457847][ T5815] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1387.347772][ T30] kauditd_printk_skb: 507 callbacks suppressed [ 1387.347784][ T30] audit: type=1400 audit(1767465693.674:12975): avc: denied { read write } for pid=16335 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1387.456933][ T30] audit: type=1400 audit(1767465693.784:12976): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1387.495156][ T30] audit: type=1400 audit(1767465693.814:12977): avc: denied { read write } for pid=16318 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1387.546374][T25246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=25246 comm=syz.5.5574 [ 1387.575637][ T30] audit: type=1400 audit(1767465693.864:12978): avc: denied { read write } for pid=25243 comm="syz.3.5576" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 1387.629438][ T30] audit: type=1400 audit(1767465693.864:12979): avc: denied { prog_load } for pid=25243 comm="syz.3.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1387.668652][ T30] audit: type=1400 audit(1767465693.864:12980): avc: denied { map_create } for pid=25243 comm="syz.3.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1387.775305][ T30] audit: type=1400 audit(1767465693.864:12981): avc: denied { prog_load } for pid=25243 comm="syz.3.5576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1387.919914][ T30] audit: type=1400 audit(1767465693.874:12982): avc: denied { read write } for pid=25242 comm="syz.5.5574" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 1387.990126][ T30] audit: type=1400 audit(1767465693.874:12983): avc: denied { create } for pid=25242 comm="syz.5.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 1388.035269][ T30] audit: type=1400 audit(1767465693.874:12984): avc: denied { create } for pid=25242 comm="syz.5.5574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1388.432332][T25274] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5587'. [ 1388.715311][T25286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=25286 comm=syz.0.5590 [ 1389.980120][T25336] futex_wake_op: syz.0.5611 tries to shift op by -1; fix this program [ 1391.427443][T25372] bridge1: entered allmulticast mode [ 1392.012550][T25394] netlink: 'syz.1.5634': attribute type 1 has an invalid length. [ 1392.354342][ T30] kauditd_printk_skb: 364 callbacks suppressed [ 1392.354358][ T30] audit: type=1400 audit(1767465698.684:13349): avc: denied { read write } for pid=25408 comm="syz.4.5639" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 1392.385367][ T30] audit: type=1400 audit(1767465698.684:13350): avc: denied { create } for pid=25408 comm="syz.4.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 1392.394830][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5640'. [ 1392.423212][ T30] audit: type=1400 audit(1767465698.684:13351): avc: denied { prog_load } for pid=25408 comm="syz.4.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1392.445528][ T30] audit: type=1400 audit(1767465698.694:13352): avc: denied { read write } for pid=18311 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1392.470260][ T30] audit: type=1400 audit(1767465698.714:13353): avc: denied { create } for pid=25410 comm="syz.3.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 1392.490685][ T30] audit: type=1400 audit(1767465698.754:13354): avc: denied { prog_load } for pid=25412 comm="syz.4.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1392.512302][ T30] audit: type=1400 audit(1767465698.754:13355): avc: denied { name_bind } for pid=25412 comm="syz.4.5641" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 1392.535752][ T30] audit: type=1400 audit(1767465698.754:13356): avc: denied { execmem } for pid=25412 comm="syz.4.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1392.555307][ T30] audit: type=1400 audit(1767465698.774:13357): avc: denied { create } for pid=25410 comm="syz.3.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=0 [ 1392.575296][ T30] audit: type=1400 audit(1767465698.774:13358): avc: denied { prog_load } for pid=25410 comm="syz.3.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 1395.445253][T25473] 9p: Bad value for 'rfdno' [ 1395.649663][ T5862] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1395.839484][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1395.862243][ T5862] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1395.871720][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.304329][ T5862] usb 4-1: Product: syz [ 1396.308673][ T5862] usb 4-1: Manufacturer: syz [ 1396.314832][ T5862] usb 4-1: SerialNumber: syz [ 1396.322505][ T5862] usb 4-1: config 0 descriptor?? [ 1396.839510][T25496] program syz.3.5663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1396.860701][T25496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.870914][T25496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.433917][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 1397.433930][ T30] audit: type=1400 audit(1767465703.764:13519): avc: denied { create } for pid=25495 comm="syz.5.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1397.478340][ T30] audit: type=1400 audit(1767465703.794:13520): avc: denied { map } for pid=25495 comm="syz.5.5667" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1397.633364][ T30] audit: type=1400 audit(1767465703.794:13521): avc: denied { read write } for pid=25495 comm="syz.5.5667" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1397.687235][ T30] audit: type=1400 audit(1767465704.014:13522): avc: denied { open } for pid=25502 comm="syz.0.5669" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1397.713896][ T30] audit: type=1400 audit(1767465704.044:13523): avc: denied { ioctl } for pid=25502 comm="syz.0.5669" path="/dev/ptyq5" dev="devtmpfs" ino=124 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1397.812852][T16787] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1397.880434][T17177] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1397.901985][ T30] audit: type=1400 audit(1767465704.044:13524): avc: denied { create } for pid=25502 comm="syz.0.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1397.979427][T16787] usb 6-1: Using ep0 maxpacket: 8 [ 1397.985262][ T30] audit: type=1400 audit(1767465704.044:13525): avc: denied { ioctl } for pid=25502 comm="syz.0.5669" path="socket:[94387]" dev="sockfs" ino=94387 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1398.024904][T16787] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1398.025441][ T30] audit: type=1400 audit(1767465704.044:13526): avc: denied { module_request } for pid=25502 comm="syz.0.5669" kmod="net-pf-10-proto-0-type-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1398.033266][T16787] usb 6-1: config 0 has no interface number 0 [ 1398.062848][ T30] audit: type=1400 audit(1767465704.124:13527): avc: denied { write } for pid=25502 comm="syz.0.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.109502][T17177] usb 2-1: Using ep0 maxpacket: 32 [ 1398.114742][T16787] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1398.152412][T16787] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1398.165639][T16787] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1398.176855][T16787] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1398.190668][T17177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1398.201724][T17177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1398.228781][T17177] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1398.237887][T17177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.248802][T16787] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1398.260189][T16787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.268372][T16787] usb 6-1: Product: syz [ 1398.280044][T16787] usb 6-1: Manufacturer: syz [ 1398.284717][T16787] usb 6-1: SerialNumber: syz [ 1398.301221][T17177] usb 2-1: config 0 descriptor?? [ 1398.307887][T16787] usb 6-1: config 0 descriptor?? [ 1398.315268][T17177] hub 2-1:0.0: USB hub found [ 1398.417201][ T5862] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1398.424165][ T5862] gspca_sunplus: reg_w_riv err -71 [ 1398.439684][ T30] audit: type=1400 audit(1767465704.124:13528): avc: denied { read } for pid=25502 comm="syz.0.5669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.460154][ T5862] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1398.461909][ T5862] usb 4-1: USB disconnect, device number 63 [ 1399.611162][T17177] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1399.650363][T25522] Cannot find set identified by id 0 to match [ 1399.816222][T17177] usbhid 2-1:0.0: can't add hid device: -71 [ 1399.822558][T17177] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1399.850897][T17177] usb 2-1: USB disconnect, device number 74 [ 1401.009511][T16787] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1401.029122][T16787] usb 6-1: USB disconnect, device number 22 [ 1401.676100][T25544] 9p: Bad value for 'rfdno' [ 1401.726530][T25548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1401.809234][T25549] x_tables: unsorted entry at hook 2 [ 1402.033744][T25553] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5680'. [ 1402.063850][T25549] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5680'. [ 1402.376203][T25557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25557 comm=syz.4.5683 [ 1402.646034][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1402.646050][ T30] audit: type=1400 audit(1767465708.974:13552): avc: denied { create } for pid=25560 comm="syz.0.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1402.724881][ T30] audit: type=1400 audit(1767465709.004:13553): avc: denied { getopt } for pid=25560 comm="syz.0.5686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1402.859419][ T30] audit: type=1400 audit(1767465709.184:13554): avc: denied { read write } for pid=25563 comm="syz.0.5687" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1403.143006][ T3958] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.171454][ T30] audit: type=1400 audit(1767465709.214:13555): avc: denied { open } for pid=25563 comm="syz.0.5687" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1403.647737][ T30] audit: type=1400 audit(1767465709.214:13556): avc: denied { ioctl } for pid=25563 comm="syz.0.5687" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1403.734692][ T30] audit: type=1400 audit(1767465709.214:13557): avc: denied { read write } for pid=25563 comm="syz.0.5687" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1403.770679][ T3958] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.829673][ T30] audit: type=1400 audit(1767465709.214:13558): avc: denied { open } for pid=25563 comm="syz.0.5687" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1403.861593][T11236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1403.871522][T11236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1403.879268][T11236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1403.962638][T11236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1403.971068][T11236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1403.984320][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1403.991574][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1404.000299][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1404.007967][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1404.038398][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1404.521089][ T30] audit: type=1400 audit(1767465709.354:13559): avc: denied { ioctl } for pid=25559 comm="syz.3.5685" path="socket:[94563]" dev="sockfs" ino=94563 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1404.592370][ T30] audit: type=1400 audit(1767465709.354:13560): avc: denied { ioctl } for pid=25559 comm="syz.3.5685" path="socket:[94564]" dev="sockfs" ino=94564 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1404.622099][T25586] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5690'. [ 1404.635216][ T3958] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.698959][ T3958] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.709195][ T30] audit: type=1326 audit(1767465710.134:13561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.0.5690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faab4b8f749 code=0x0 [ 1405.399561][ T3958] bridge_slave_1: left allmulticast mode [ 1405.419733][ T3958] bridge_slave_1: left promiscuous mode [ 1405.427435][ T3958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.499119][T25601] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5695'. [ 1406.266707][ T5815] Bluetooth: hci1: command tx timeout [ 1406.276954][ T3958] bridge_slave_0: left allmulticast mode [ 1406.283021][ T3958] bridge_slave_0: left promiscuous mode [ 1406.288720][ T3958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.563706][T22882] Bluetooth: hci1: command tx timeout [ 1408.920130][ T3958] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1408.928239][ T3958] geneve2 (unregistering): left promiscuous mode [ 1409.172992][T18621] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1409.187044][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1409.187060][ T30] audit: type=1400 audit(1767465715.514:13568): avc: denied { create } for pid=25630 comm="syz.5.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1409.213133][ T30] audit: type=1400 audit(1767465715.524:13569): avc: denied { setopt } for pid=25630 comm="syz.5.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1409.234121][ T30] audit: type=1400 audit(1767465715.524:13570): avc: denied { bind } for pid=25630 comm="syz.5.5700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1409.253652][ T30] audit: type=1400 audit(1767465715.524:13571): avc: denied { name_bind } for pid=25630 comm="syz.5.5700" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1409.254136][ T3958] bond1 (unregistering): (slave wlan0): Releasing active interface [ 1409.274661][ T30] audit: type=1400 audit(1767465715.524:13572): avc: denied { node_bind } for pid=25630 comm="syz.5.5700" saddr=172.30.0.6 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1409.306216][ T30] audit: type=1400 audit(1767465715.634:13573): avc: denied { ioctl } for pid=25630 comm="syz.5.5700" path="socket:[94713]" dev="sockfs" ino=94713 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1409.306264][ T3958] bond1 (unregistering): Released all slaves [ 1409.374224][T18621] usb 1-1: config 0 has no interfaces? [ 1409.384822][T18621] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1409.393900][T18621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.407081][T18621] usb 1-1: config 0 descriptor?? [ 1409.429960][ T3958] bond0 (unregistering): Released all slaves [ 1409.443270][T25610] netem: incorrect ge model size [ 1409.448851][T25610] netem: change failed [ 1409.506135][T25616] syzkaller0: entered promiscuous mode [ 1409.513671][T25616] syzkaller0: entered allmulticast mode [ 1409.531541][ T3958] tipc: Left network mode [ 1409.532240][T25576] chnl_net:caif_netlink_parms(): no params data found [ 1409.629416][T18621] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1409.703565][ T30] audit: type=1400 audit(1767465716.034:13574): avc: denied { write } for pid=25627 comm="syz.0.5699" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1409.759435][T18621] usb 6-1: device descriptor read/64, error -71 [ 1410.039413][T18621] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1410.180985][T18621] usb 6-1: device descriptor read/64, error -71 [ 1410.289808][T18621] usb usb6-port1: attempt power cycle [ 1410.609997][T22882] Bluetooth: hci1: command tx timeout [ 1410.710156][T18621] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1410.739057][T18621] usb 6-1: device descriptor read/8, error -71 [ 1410.980114][T18621] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1411.018382][T18621] usb 6-1: device descriptor read/8, error -71 [ 1411.133497][T18621] usb usb6-port1: unable to enumerate USB device [ 1411.322309][T25576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.339057][T25576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.355932][T25576] bridge_slave_0: entered allmulticast mode [ 1411.375410][T25576] bridge_slave_0: entered promiscuous mode [ 1411.390752][ T3958] hsr_slave_0: left promiscuous mode [ 1411.396441][ T3958] hsr_slave_1: left promiscuous mode [ 1411.409928][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.426702][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.445733][ T30] audit: type=1400 audit(1767465717.774:13575): avc: denied { getattr } for pid=25650 comm="syz.3.5704" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1411.446172][ T3958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.586623][ T3958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.611585][ T3958] veth1_macvtap: left promiscuous mode [ 1411.671704][ T3958] veth0_macvtap: left promiscuous mode [ 1411.678997][ T3958] veth1_vlan: left promiscuous mode [ 1411.685876][ T30] audit: type=1400 audit(1767465717.984:13576): avc: denied { create } for pid=25650 comm="syz.3.5704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1411.825368][T18621] usb 1-1: USB disconnect, device number 41 [ 1412.218488][ T30] audit: type=1400 audit(1767465718.544:13577): avc: denied { watch watch_reads } for pid=25658 comm="syz.3.5705" path="/602/file0" dev="tmpfs" ino=3164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1412.529486][ T6006] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1412.697003][T22882] Bluetooth: hci1: command tx timeout [ 1412.780524][ T6006] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1412.792312][ T6006] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1412.828100][ T6006] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1412.858450][ T6006] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1412.873968][ T6006] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1413.066603][T25677] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5708'. [ 1413.084167][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1413.126409][ T6006] usb 1-1: Product: syz [ 1413.304626][ T6006] usb 1-1: Manufacturer: syz [ 1413.314757][ T6006] usb 1-1: SerialNumber: syz [ 1413.326365][ T6006] usb 1-1: config 0 descriptor?? [ 1413.350006][T25657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1413.365255][ T6006] usb 1-1: selecting invalid altsetting 0 [ 1413.603081][T25657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.625623][T25657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.757502][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.766944][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.774847][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.782751][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.791192][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.799109][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.807469][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.816686][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.909986][ T3958] team0 (unregistering): Port device team_slave_1 removed [ 1413.919701][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1413.928372][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1414.003537][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1414.016577][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1414.027651][T25657] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1414.109173][T25690] netlink: 300 bytes leftover after parsing attributes in process `syz.5.5712'. [ 1414.325495][T18621] usb 1-1: USB disconnect, device number 42 [ 1414.354531][ T3958] team0 (unregistering): Port device team_slave_0 removed [ 1414.769488][T18621] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1414.950991][T18621] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1414.962698][T18621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1414.973881][T18621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1414.984044][T18621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1414.997491][T18621] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1415.006616][T18621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.020145][T18621] usb 1-1: config 0 descriptor?? [ 1415.060661][T25576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.067889][T25576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.075133][T25576] bridge_slave_1: entered allmulticast mode [ 1415.081947][T25576] bridge_slave_1: entered promiscuous mode [ 1415.137365][T25576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.167728][T25576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.206970][T25695] FAULT_INJECTION: forcing a failure. [ 1415.206970][T25695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.224278][T25695] CPU: 1 UID: 0 PID: 25695 Comm: syz.1.5714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.224308][T25695] Tainted: [L]=SOFTLOCKUP [ 1415.224315][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1415.224326][T25695] Call Trace: [ 1415.224333][T25695] [ 1415.224340][T25695] dump_stack_lvl+0x16c/0x1f0 [ 1415.224371][T25695] should_fail_ex+0x512/0x640 [ 1415.224403][T25695] _copy_from_user+0x2e/0xd0 [ 1415.224431][T25695] copy_msghdr_from_user+0x98/0x160 [ 1415.224451][T25695] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1415.224483][T25695] ___sys_sendmsg+0xfe/0x1d0 [ 1415.224503][T25695] ? __pfx____sys_sendmsg+0x10/0x10 [ 1415.224551][T25695] __sys_sendmsg+0x16d/0x220 [ 1415.224570][T25695] ? __pfx___sys_sendmsg+0x10/0x10 [ 1415.224609][T25695] do_syscall_64+0xcd/0xf80 [ 1415.224635][T25695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.224654][T25695] RIP: 0033:0x7fc8a478f749 [ 1415.224669][T25695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.224687][T25695] RSP: 002b:00007fc8a55ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.224705][T25695] RAX: ffffffffffffffda RBX: 00007fc8a49e5fa0 RCX: 00007fc8a478f749 [ 1415.224717][T25695] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1415.224729][T25695] RBP: 00007fc8a55ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.224740][T25695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.224751][T25695] R13: 00007fc8a49e6038 R14: 00007fc8a49e5fa0 R15: 00007ffe213fed08 [ 1415.224781][T25695] [ 1415.468518][T25576] team0: Port device team_slave_0 added [ 1415.635571][T25576] team0: Port device team_slave_1 added [ 1416.247883][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1416.247898][ T30] audit: type=1400 audit(1767465722.394:13587): avc: denied { create } for pid=25692 comm="syz.0.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1416.286650][T18621] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1416.368788][T25576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.420649][T18621] usb 1-1: USB disconnect, device number 43 [ 1416.433732][T25576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.492772][T25576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.540304][T25576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.555195][T25576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.588530][T25576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.701226][T25576] hsr_slave_0: entered promiscuous mode [ 1416.709016][T25576] hsr_slave_1: entered promiscuous mode [ 1416.718131][T25576] debugfs: 'hsr0' already exists in 'hsr' [ 1416.724920][T25576] Cannot create hsr debugfs directory [ 1416.839453][T25520] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1416.899458][T18621] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1417.040693][T25520] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1417.069639][T25520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.077653][T25520] usb 4-1: Product: syz [ 1417.077670][T25520] usb 4-1: Manufacturer: syz [ 1417.510773][T18621] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1417.510800][T18621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1417.510814][T18621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1417.510827][T18621] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1417.510849][T18621] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1417.510862][T18621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.512133][T18621] usb 2-1: config 0 descriptor?? [ 1417.515438][ T30] audit: type=1400 audit(1767465723.474:13588): avc: denied { getopt } for pid=25711 comm="syz.5.5720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1417.525657][ T30] audit: type=1400 audit(1767465723.854:13589): avc: denied { setopt } for pid=25714 comm="syz.0.5721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1417.526184][ T30] audit: type=1400 audit(1767465723.854:13590): avc: denied { write } for pid=25714 comm="syz.0.5721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1417.567839][T25520] usb 4-1: SerialNumber: syz [ 1417.864869][T25520] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1418.079751][ T30] audit: type=1400 audit(1767465724.204:13591): avc: denied { firmware_load } for pid=5862 comm="kworker/0:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1418.199882][ T30] audit: type=1400 audit(1767465724.204:13592): avc: denied { write } for pid=25719 comm="syz.5.5723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1418.229839][ T5862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1418.264515][T18621] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1418.367932][ T30] audit: type=1400 audit(1767465724.694:13593): avc: denied { name_connect } for pid=25719 comm="syz.5.5723" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1418.549651][ T30] audit: type=1400 audit(1767465724.794:13594): avc: denied { create } for pid=25725 comm="syz.0.5724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1418.569788][ T30] audit: type=1400 audit(1767465724.794:13595): avc: denied { map } for pid=25725 comm="syz.0.5724" path="socket:[94945]" dev="sockfs" ino=94945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1418.775773][ T30] audit: type=1400 audit(1767465724.794:13596): avc: denied { read } for pid=25725 comm="syz.0.5724" path="socket:[94945]" dev="sockfs" ino=94945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1419.335637][ T5862] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1419.401793][ T5862] ath9k_htc: Failed to initialize the device [ 1419.438567][ T5862] usb 4-1: ath9k_htc: USB layer deinitialized [ 1419.444867][T16353] usb 2-1: USB disconnect, device number 75 [ 1419.505923][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5726'. [ 1420.263342][T25576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1421.448249][T25576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1421.498445][T25520] usb 4-1: USB disconnect, device number 64 [ 1421.509239][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1421.509253][ T30] audit: type=1400 audit(1767465727.834:13602): avc: denied { unmount } for pid=16318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1421.558163][T25576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1421.601431][T25576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1421.893961][ T30] audit: type=1400 audit(1767465728.224:13603): avc: denied { ioctl } for pid=25754 comm="syz.3.5730" path="socket:[96344]" dev="sockfs" ino=96344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1422.327703][T25576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.378248][T25576] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.410643][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.417721][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.436849][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.443969][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.536170][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.553025][T25576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1422.623908][ T30] audit: type=1400 audit(1767465728.944:13604): avc: denied { bind } for pid=25768 comm="syz.1.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1423.184346][ T30] audit: type=1400 audit(1767465729.514:13605): avc: denied { nlmsg_read } for pid=25770 comm="syz.5.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1423.327477][T25576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1423.348980][ T30] audit: type=1400 audit(1767465729.674:13606): avc: denied { read write } for pid=25782 comm="syz.0.5737" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1423.470438][ T30] audit: type=1400 audit(1767465729.704:13607): avc: denied { open } for pid=25782 comm="syz.0.5737" path="/588/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1423.579406][ T30] audit: type=1400 audit(1767465729.704:13608): avc: denied { mount } for pid=25782 comm="syz.0.5737" name="/" dev="pstore" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1423.682706][ T30] audit: type=1400 audit(1767465729.714:13609): avc: denied { unmount } for pid=16664 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1423.768319][ T30] audit: type=1400 audit(1767465729.934:13610): avc: denied { write } for pid=25790 comm="syz.1.5739" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1423.833255][ T30] audit: type=1400 audit(1767465729.934:13611): avc: denied { open } for pid=25790 comm="syz.1.5739" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1423.860158][T25576] veth0_vlan: entered promiscuous mode [ 1423.940220][T25576] veth1_vlan: entered promiscuous mode [ 1424.040784][T25576] veth0_macvtap: entered promiscuous mode [ 1424.111314][T25576] veth1_macvtap: entered promiscuous mode [ 1424.222702][T25576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.256851][T25576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.293562][ T6622] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.308831][ T6622] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.331061][ T6622] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.351091][ T6622] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.386451][T25808] kAFS: unable to lookup cell 'Þ({^ú@' [ 1424.564415][T25812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5744'. [ 1424.633821][T25812] netlink: 'syz.0.5744': attribute type 10 has an invalid length. [ 1424.663202][T25812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5744'. [ 1424.725374][T25813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5744'. [ 1424.872672][ T9785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.889840][ T9785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.061973][ T6622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.352303][ T6622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.904046][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1426.904062][ T30] audit: type=1400 audit(1767465732.974:13626): avc: denied { append } for pid=25821 comm="syz.4.5688" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1427.005082][T25833] team0: No ports can be present during mode change [ 1427.039667][ T30] audit: type=1400 audit(1767465733.264:13627): avc: denied { read } for pid=25821 comm="syz.4.5688" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1427.152781][ T30] audit: type=1400 audit(1767465733.264:13628): avc: denied { open } for pid=25821 comm="syz.4.5688" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1428.735343][ T30] audit: type=1400 audit(1767465735.064:13629): avc: denied { read write } for pid=25846 comm="syz.5.5753" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 1428.771082][ T5815] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1428.792447][ T5815] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1428.809887][ T5815] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1428.822240][ T5815] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1428.831157][ T5815] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1428.857243][ T30] audit: type=1400 audit(1767465735.064:13630): avc: denied { open } for pid=25846 comm="syz.5.5753" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 1429.026266][ T30] audit: type=1400 audit(1767465735.104:13631): avc: denied { ioctl } for pid=25846 comm="syz.5.5753" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 1429.064833][T25850] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1429.071355][T25850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1429.079288][T25850] vhci_hcd vhci_hcd.0: Device attached [ 1429.459518][T17135] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1429.479545][T18621] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1429.545496][ T30] audit: type=1400 audit(1767465735.124:13632): avc: denied { connect } for pid=25846 comm="syz.5.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1429.642162][ T30] audit: type=1400 audit(1767465735.184:13633): avc: denied { bind } for pid=25851 comm="syz.1.5754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1429.760469][T18621] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 1429.768715][T18621] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.794387][T16353] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 1429.804596][T16353] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 1429.805471][ T30] audit: type=1400 audit(1767465735.184:13634): avc: denied { setopt } for pid=25851 comm="syz.1.5754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1429.812171][T18621] usb 5-1: config 0 has no interfaces? [ 1429.812205][T18621] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 1429.812226][T18621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.813380][T16353] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 1429.877396][T18621] usb 5-1: config 0 descriptor?? [ 1429.892587][T16353] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1429.912435][ T30] audit: type=1400 audit(1767465735.344:13635): avc: denied { write } for pid=25851 comm="syz.1.5754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1430.096224][T25853] usb 41-1: recv xbuf, 0 [ 1430.116459][ T1159] vhci_hcd vhci_hcd.4: stop threads [ 1430.121844][ T1159] vhci_hcd vhci_hcd.4: release socket [ 1430.164145][ T1159] vhci_hcd vhci_hcd.4: disconnect device [ 1430.367523][T18621] usb 5-1: string descriptor 0 read error: -71 [ 1430.382668][T18621] usb 5-1: USB disconnect, device number 101 [ 1430.964663][T25845] chnl_net:caif_netlink_parms(): no params data found [ 1431.120073][T22882] Bluetooth: hci3: command tx timeout [ 1431.139762][T11236] Bluetooth: hci1: command tx timeout [ 1431.512695][T25845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.562070][T25845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.595380][T25894] overlayfs: missing 'lowerdir' [ 1431.630765][T25845] bridge_slave_0: entered allmulticast mode [ 1432.155209][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1432.155227][ T30] audit: type=1400 audit(1767465737.984:13642): avc: denied { create } for pid=25891 comm="syz.1.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1432.317081][T25845] bridge_slave_0: entered promiscuous mode [ 1432.325468][T25845] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.332726][T25845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.339902][T25845] bridge_slave_1: entered allmulticast mode [ 1432.347146][T25845] bridge_slave_1: entered promiscuous mode [ 1432.629471][ T30] audit: type=1400 audit(1767465737.984:13643): avc: denied { connect } for pid=25891 comm="syz.1.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1433.066150][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5762'. [ 1433.199494][T11236] Bluetooth: hci3: command tx timeout [ 1433.474938][T25845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.577488][T25845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1433.718069][T25845] team0: Port device team_slave_0 added [ 1433.759020][T25845] team0: Port device team_slave_1 added [ 1434.052258][T25845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.060210][T25845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.140951][T25845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.273783][T25845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.307228][T25845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.334054][T25845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.757330][T25845] hsr_slave_0: entered promiscuous mode [ 1434.763811][T25845] hsr_slave_1: entered promiscuous mode [ 1434.868673][T25845] debugfs: 'hsr0' already exists in 'hsr' [ 1435.251904][T11236] Bluetooth: hci3: command tx timeout [ 1435.319736][T25845] Cannot create hsr debugfs directory [ 1435.664810][T25845] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.703501][ T30] audit: type=1400 audit(1767465742.034:13644): avc: denied { write } for pid=25931 comm="syz.1.5772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1435.747900][T25845] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.826616][T25845] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.909793][T25928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1436.867845][T25845] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.130941][T17135] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1437.174009][T25951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1437.216592][T25951] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5777'. [ 1437.236693][ T30] audit: type=1400 audit(1767465743.564:13645): avc: denied { create } for pid=25953 comm="syz.4.5776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1437.339838][T11236] Bluetooth: hci3: command tx timeout [ 1437.419436][T17135] usb 2-1: Using ep0 maxpacket: 16 [ 1437.430005][T17135] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 1437.439809][T17135] usb 2-1: config 0 has no interface number 0 [ 1437.447536][T17135] usb 2-1: config 0 interface 185 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1437.458733][T17135] usb 2-1: config 0 interface 185 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1437.478881][T25845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1437.492858][T17135] usb 2-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=e0.f6 [ 1437.521990][T17135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.585718][T17135] usb 2-1: Product: syz [ 1437.594126][T25957] 9p: Bad value for 'rfdno' [ 1437.609178][T17135] usb 2-1: Manufacturer: syz [ 1437.609880][T25845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1437.674531][T25845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1437.692363][T25845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1437.702600][T17135] usb 2-1: SerialNumber: syz [ 1437.725827][T17135] usb 2-1: config 0 descriptor?? [ 1437.860946][T25943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1437.868140][T25943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1438.111599][T25520] usb 2-1: USB disconnect, device number 76 [ 1438.179657][T25845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1438.296244][T25845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1438.324536][T25845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1438.365863][T25845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1438.661317][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.668397][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1438.700450][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.707513][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1439.069774][ T30] audit: type=1400 audit(1767465745.394:13646): avc: denied { unmount } for pid=25576 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1439.874211][T25981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25981 comm=syz.0.5781 [ 1440.056864][T25845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.109096][ T30] audit: type=1400 audit(1767465746.434:13647): avc: denied { create } for pid=25983 comm="syz.4.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1440.176902][ T30] audit: type=1400 audit(1767465746.434:13648): avc: denied { write } for pid=25983 comm="syz.4.5783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1440.180462][T25845] veth0_vlan: entered promiscuous mode [ 1440.274035][T25845] veth1_vlan: entered promiscuous mode [ 1440.347412][T25845] veth0_macvtap: entered promiscuous mode [ 1440.363970][T25845] veth1_macvtap: entered promiscuous mode [ 1440.399559][T25845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.414839][T25845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.428217][ T8799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.462330][ T8799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.573985][ T8799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.805047][ T8799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.856819][ T8799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.873934][ T8799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.898871][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1440.904747][ T8799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1440.920622][ T8799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.929700][T17135] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1440.968957][T25996] netlink: 'syz.5.5787': attribute type 10 has an invalid length. [ 1440.976809][T25996] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1441.023510][T25996] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1441.066022][ T30] audit: type=1400 audit(1767465747.394:13649): avc: denied { relabelfrom } for pid=25997 comm="syz.1.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1441.080946][T17135] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1441.105665][ T30] audit: type=1400 audit(1767465747.414:13650): avc: denied { relabelto } for pid=25997 comm="syz.1.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1441.109136][T17135] usb 5-1: not running at top speed; connect to a high speed hub [ 1441.168742][T17135] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 1441.187056][T17135] usb 5-1: config 129 has no interface number 0 [ 1441.205867][T17135] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1441.286948][T17135] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1441.298784][T17135] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1441.312587][T17135] usb 5-1: config 129 interface 28 has no altsetting 0 [ 1441.322957][T17135] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1441.334847][T17135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.343356][T17135] usb 5-1: Product: syz [ 1441.350438][T17135] usb 5-1: Manufacturer: syz [ 1441.355031][T17135] usb 5-1: SerialNumber: syz [ 1441.466418][T25991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1441.770648][T25991] netlink: 'syz.4.5786': attribute type 7 has an invalid length. [ 1441.866576][T25991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5786'. [ 1442.035430][T17135] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 1442.043925][T17135] etas_es58x 5-1:129.28: could not retrieve the product info string [ 1442.189868][T17135] usb 5-1: USB disconnect, device number 102 [ 1442.253585][ T30] audit: type=1400 audit(1767465748.474:13651): avc: denied { getopt } for pid=26013 comm="syz.1.5791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1442.355399][T17135] etas_es58x 5-1:129.28: Disconnecting syz syz [ 1444.147360][T22882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1444.158907][T22882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1444.231976][T22882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1444.239922][T22882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1444.247486][T22882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1444.314770][T26027] netlink: 'syz.4.5794': attribute type 10 has an invalid length. [ 1444.333498][T26027] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5794'. [ 1444.557245][T26038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5799'. [ 1444.617593][T26038] netlink: 'syz.5.5799': attribute type 10 has an invalid length. [ 1444.649495][T26038] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5799'. [ 1444.663270][T26046] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5799'. [ 1444.838038][T26023] chnl_net:caif_netlink_parms(): no params data found [ 1445.000590][ T30] audit: type=1400 audit(1767465751.184:13652): avc: denied { ioctl } for pid=26050 comm="syz.4.5802" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1445.701821][ T30] audit: type=1400 audit(1767465752.034:13653): avc: denied { read } for pid=26063 comm="syz.5.5805" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1445.839417][T26060] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1446.296024][T22882] Bluetooth: hci4: command tx timeout [ 1447.963944][T26085] overlay: Unknown parameter 'uid>00000000000000060928' [ 1447.979411][ T30] audit: type=1400 audit(1767465754.294:13654): avc: denied { mount } for pid=26084 comm="syz.1.5808" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1448.054668][ T30] audit: type=1400 audit(1767465754.384:13655): avc: denied { unmount } for pid=18127 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1448.085862][T26023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.109752][T26023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.139933][T26023] bridge_slave_0: entered allmulticast mode [ 1448.163681][T26023] bridge_slave_0: entered promiscuous mode [ 1448.172059][T26023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.179139][T26023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.186772][T26023] bridge_slave_1: entered allmulticast mode [ 1448.193986][T26023] bridge_slave_1: entered promiscuous mode [ 1448.215353][T26087] netlink: 'syz.1.5809': attribute type 10 has an invalid length. [ 1448.229906][T26087] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1448.258326][ T30] audit: type=1400 audit(1767465754.584:13656): avc: denied { bind } for pid=26088 comm="syz.4.5810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1448.326342][ T30] audit: type=1400 audit(1767465754.614:13657): avc: denied { name_bind } for pid=26088 comm="syz.4.5810" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1448.370653][T22882] Bluetooth: hci4: command tx timeout [ 1448.381806][T26023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.388620][ T30] audit: type=1400 audit(1767465754.614:13658): avc: denied { node_bind } for pid=26088 comm="syz.4.5810" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1448.401156][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5811'. [ 1448.426919][T26023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.545824][T26091] netlink: 'syz.4.5811': attribute type 10 has an invalid length. [ 1448.553917][T26091] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5811'. [ 1448.606074][T26091] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5811'. [ 1448.619742][ T30] audit: type=1400 audit(1767465754.954:13659): avc: denied { bind } for pid=26097 comm="syz.5.5813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1448.656074][ T30] audit: type=1400 audit(1767465754.984:13660): avc: denied { read } for pid=26096 comm="syz.3.5814" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1448.709933][ T30] audit: type=1400 audit(1767465754.984:13661): avc: denied { open } for pid=26096 comm="syz.3.5814" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1448.797441][T26101] overlayfs: workdir and upperdir must be separate subtrees [ 1448.831825][ T30] audit: type=1400 audit(1767465754.984:13662): avc: denied { ioctl } for pid=26096 comm="syz.3.5814" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1448.930248][ T5882] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1449.044078][T26023] team0: Port device team_slave_0 added [ 1449.090794][T26091] veth0_to_batadv: entered allmulticast mode [ 1449.109004][T26023] team0: Port device team_slave_1 added [ 1449.160939][ T30] audit: type=1400 audit(1767465755.484:13663): avc: denied { getopt } for pid=26103 comm="syz.3.5815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1449.313631][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 1449.416042][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.463783][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.474641][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1449.493750][ T5882] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1449.509294][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.523682][ T5882] usb 6-1: config 0 descriptor?? [ 1449.611653][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5815'. [ 1449.636211][ T6622] bridge_slave_1: left allmulticast mode [ 1449.644782][ T6622] bridge_slave_1: left promiscuous mode [ 1449.655947][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.667390][ T6622] bridge_slave_0: left allmulticast mode [ 1449.675069][ T6622] bridge_slave_0: left promiscuous mode [ 1449.683815][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.849659][T16787] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1449.976888][ T5882] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1449.988388][ T5882] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1450.001764][T16787] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1450.019623][T16787] usb 4-1: config 0 interface 0 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1450.033064][ T5882] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1450.040165][ T5882] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1450.048252][T16787] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1450.057815][ T5882] shield 0003:0955:7214.001C: unknown main item tag 0x0 [ 1450.065724][T16787] usb 4-1: New USB device found, idVendor=046d, idProduct=cd1f, bcdDevice= 0.00 [ 1450.080701][ T5882] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 1450.088524][T16787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.109049][T16787] usb 4-1: config 0 descriptor?? [ 1450.118312][ T5882] shield 0003:0955:7214.001C: Registered Thunderstrike controller [ 1450.134846][ T5882] shield 0003:0955:7214.001C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1450.177833][ T6622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.192238][ T6622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.208307][ T6622] bond0 (unregistering): Released all slaves [ 1450.231726][T26023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1450.239137][T26023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.267668][T26023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1450.293213][T26023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1450.305464][T26023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1450.389676][T26023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1450.449381][T22882] Bluetooth: hci4: command tx timeout [ 1450.512235][T26116] mkiss: ax0: crc mode is auto. [ 1450.621157][T26023] hsr_slave_0: entered promiscuous mode [ 1450.634522][T26023] hsr_slave_1: entered promiscuous mode [ 1450.651338][T26023] debugfs: 'hsr0' already exists in 'hsr' [ 1450.669213][T26023] Cannot create hsr debugfs directory [ 1450.674724][T18621] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1450.717294][ T6622] hsr_slave_0: left promiscuous mode [ 1450.735739][ T6622] hsr_slave_1: left promiscuous mode [ 1450.771567][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.798122][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.859694][T18621] usb 2-1: Using ep0 maxpacket: 32 [ 1450.867816][T18621] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1450.885534][T16787] usb 4-1: string descriptor 0 read error: -71 [ 1450.893854][T16787] usb 4-1: USB disconnect, device number 65 [ 1450.908662][T18621] usb 2-1: config 0 has an invalid interface number: 36 but max is 0 [ 1450.930443][T18621] usb 2-1: config 0 has an invalid interface number: 5 but max is 0 [ 1450.944249][T26113] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1450.958068][ T5862] usb 6-1: USB disconnect, device number 27 [ 1450.984459][T18621] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1450.984481][T26113] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1451.079579][T18621] usb 2-1: config 0 has no interface number 0 [ 1451.097941][T18621] usb 2-1: config 0 has no interface number 1 [ 1451.189457][T18621] usb 2-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1451.369086][T26113] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1451.375807][T18621] usb 2-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 1451.380647][T26113] shield 0003:0955:7214.001C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1451.419502][T18621] usb 2-1: config 0 interface 5 altsetting 156 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 1451.449690][T18621] usb 2-1: config 0 interface 36 has no altsetting 0 [ 1451.459486][T18621] usb 2-1: config 0 interface 5 has no altsetting 0 [ 1451.502817][T18621] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 1451.511872][T18621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.549770][T18621] usb 2-1: Product: syz [ 1451.563012][T18621] usb 2-1: Manufacturer: syz [ 1451.569005][T18621] usb 2-1: SerialNumber: syz [ 1451.592643][T18621] usb 2-1: config 0 descriptor?? [ 1452.507289][ T5862] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1452.531190][T22882] Bluetooth: hci4: command tx timeout [ 1452.671700][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1452.674812][T18621] usb 2-1: USB disconnect, device number 77 [ 1452.711709][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1452.859553][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1452.876763][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1452.989632][ T5862] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1453.348078][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.383171][ T5862] usb 6-1: config 0 descriptor?? [ 1453.645093][T26143] 9p: Bad value for 'rfdno' [ 1453.680704][ T6622] team0 (unregistering): Port device team_slave_1 removed [ 1453.829679][ T6622] team0 (unregistering): Port device team_slave_0 removed [ 1453.950253][ T5862] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1454.371223][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1454.371262][ T30] audit: type=1400 audit(1767465760.704:13671): avc: denied { write } for pid=26121 comm="syz.5.5820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1454.597663][T18621] usb 6-1: USB disconnect, device number 28 [ 1455.065542][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1455.076394][T26149] netlink: 'syz.1.5826': attribute type 10 has an invalid length. [ 1455.084216][T26149] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1455.099398][T26149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1455.291797][ T30] audit: type=1400 audit(1767465761.624:13672): avc: denied { block_suspend } for pid=26148 comm="syz.4.5827" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.780363][ T5862] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1455.991770][ T5862] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 1456.018033][ T5862] usb 6-1: config 0 has no interface number 0 [ 1456.029221][T26023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1456.037416][ T5862] usb 6-1: New USB device found, idVendor=19d2, idProduct=0067, bcdDevice=f6.da [ 1456.052260][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.064367][T26165] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 4, id = 0 [ 1456.074286][T26023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1456.092178][ T5862] usb 6-1: config 0 descriptor?? [ 1456.118580][T26023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1456.126952][ T5862] hub 6-1:0.63: bad descriptor, ignoring hub [ 1456.138054][ T5862] hub 6-1:0.63: probe with driver hub failed with error -5 [ 1456.151390][T26023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1456.159101][ T5862] option 6-1:0.63: GSM modem (1-port) converter detected [ 1457.113460][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5834'. [ 1457.122466][T26179] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1457.156845][ T30] audit: type=1400 audit(1767465763.424:13673): avc: denied { bind } for pid=26175 comm="syz.4.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1457.397789][T26023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.424012][T26023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.443353][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.450435][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.462021][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.469069][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.490781][T26023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1457.502852][T26023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.504946][ T30] audit: type=1400 audit(1767465763.424:13674): avc: denied { name_bind } for pid=26175 comm="syz.4.5834" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1457.587169][ T30] audit: type=1400 audit(1767465763.424:13675): avc: denied { node_bind } for pid=26175 comm="syz.4.5834" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1457.659507][ T30] audit: type=1400 audit(1767465763.654:13676): avc: denied { watch watch_reads } for pid=26175 comm="syz.4.5834" path="/23" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1458.303712][ T30] audit: type=1400 audit(1767465764.214:13677): avc: denied { prog_load } for pid=26188 comm="syz.4.5836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1458.341837][ T30] audit: type=1400 audit(1767465764.214:13678): avc: denied { bpf } for pid=26188 comm="syz.4.5836" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1458.364654][ T30] audit: type=1400 audit(1767465764.214:13679): avc: denied { perfmon } for pid=26188 comm="syz.4.5836" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1458.406755][ T30] audit: type=1400 audit(1767465764.214:13680): avc: denied { prog_run } for pid=26188 comm="syz.4.5836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1458.483185][T26023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.534140][T26195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5838'. [ 1458.623026][T26198] netlink: 'syz.5.5838': attribute type 10 has an invalid length. [ 1458.642338][T16590] usb 6-1: USB disconnect, device number 29 [ 1458.647215][T26023] veth0_vlan: entered promiscuous mode [ 1458.649138][T16590] option 6-1:0.63: device disconnected [ 1458.658533][T26023] veth1_vlan: entered promiscuous mode [ 1459.213415][T26203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5838'. [ 1459.271870][T26198] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5838'. [ 1459.404265][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1459.404282][ T30] audit: type=1400 audit(1767465765.734:13704): avc: denied { read write } for pid=26205 comm="syz.1.5839" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1459.454319][ T30] audit: type=1400 audit(1767465765.764:13705): avc: denied { open } for pid=26205 comm="syz.1.5839" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1459.454365][ T30] audit: type=1400 audit(1767465765.764:13706): avc: denied { mounton } for pid=26205 comm="syz.1.5839" path="/534/file0" dev="tmpfs" ino=2873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1459.454405][ T30] audit: type=1400 audit(1767465765.764:13707): avc: denied { mount } for pid=26205 comm="syz.1.5839" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1459.463416][T26023] veth0_macvtap: entered promiscuous mode [ 1459.485553][T26023] veth1_macvtap: entered promiscuous mode [ 1459.531214][ T30] audit: type=1400 audit(1767465765.864:13708): avc: denied { write } for pid=26205 comm="syz.1.5839" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1459.595923][T26023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.598730][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1459.614701][T26023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.627620][ T30] audit: type=1400 audit(1767465765.874:13709): avc: denied { create } for pid=26204 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.694497][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.720597][ T30] audit: type=1400 audit(1767465765.874:13710): avc: denied { bind } for pid=26204 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.740888][ T30] audit: type=1400 audit(1767465765.874:13711): avc: denied { setopt } for pid=26204 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.762084][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.776416][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.792283][ T30] audit: type=1400 audit(1767465765.874:13712): avc: denied { accept } for pid=26204 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.837409][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.875678][ T30] audit: type=1400 audit(1767465765.874:13713): avc: denied { write } for pid=26204 comm="syz.4.5840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1459.932509][ T550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.945782][ T550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.357053][ T550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.375842][ T550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.479528][ T5976] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1461.202935][T26240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1461.229741][ T5976] usb 2-1: device descriptor read/64, error -71 [ 1461.239293][T26240] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1461.346162][T26240] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1461.392090][T26240] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1461.531400][T26240] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1461.542728][ T5976] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1461.760303][ T5976] usb 2-1: device descriptor read/64, error -71 [ 1461.790301][T26240] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1461.870529][ T5976] usb usb2-port1: attempt power cycle [ 1462.249457][ T5976] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1462.423796][ T5976] usb 2-1: device descriptor read/8, error -71 [ 1462.447334][T26240] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1462.580683][T26240] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1462.750033][ T5976] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1462.828128][ T5976] usb 2-1: device descriptor read/8, error -71 [ 1462.830857][T26240] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1462.941031][ T5976] usb usb2-port1: unable to enumerate USB device [ 1462.944714][T11236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1462.959279][T11236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1462.967578][T11236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1462.985702][T11236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1462.996709][T11236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1463.020919][T17414] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.034455][T17414] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.126934][T17414] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.152765][T17414] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.249886][T11236] Bluetooth: hci1: command 0x0c1a tx timeout [ 1463.257541][T17414] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.299537][T17414] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.377549][T17414] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.409646][T11236] Bluetooth: hci3: command 0x0c1a tx timeout [ 1463.421910][T17414] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.685070][T26255] chnl_net:caif_netlink_parms(): no params data found [ 1463.805757][T17414] bridge_slave_1: left allmulticast mode [ 1463.819363][T17414] bridge_slave_1: left promiscuous mode [ 1463.835081][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.856460][T17414] bridge_slave_0: left allmulticast mode [ 1463.867595][T17414] bridge_slave_0: left promiscuous mode [ 1463.881681][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.308613][T17414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.318183][T17414] bond_slave_0: left promiscuous mode [ 1464.329052][T17414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.341222][T17414] bond_slave_1: left promiscuous mode [ 1464.347843][T17414] bond0 (unregistering): Released all slaves [ 1464.361484][T26255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.369296][T26255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.378162][T26255] bridge_slave_0: entered allmulticast mode [ 1464.384954][T26255] bridge_slave_0: entered promiscuous mode [ 1464.456804][ T6106] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1464.466963][T26255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.477903][T26255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.486522][T26255] bridge_slave_1: entered allmulticast mode [ 1464.493772][T26255] bridge_slave_1: entered promiscuous mode [ 1464.526662][T26291] netlink: 'syz.0.5858': attribute type 10 has an invalid length. [ 1464.531479][T11236] Bluetooth: hci4: command 0x0c1a tx timeout [ 1464.541214][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1464.541227][ T30] audit: type=1400 audit(1767465770.874:13776): avc: denied { setopt } for pid=26292 comm="syz.4.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1464.573795][T26291] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5858'. [ 1464.593755][T26255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.602897][ T30] audit: type=1400 audit(1767465770.894:13777): avc: denied { bind } for pid=26292 comm="syz.4.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1464.605716][T26255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.638588][T18621] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1464.659058][ T30] audit: type=1400 audit(1767465770.894:13778): avc: denied { name_bind } for pid=26292 comm="syz.4.5857" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1464.662064][ T6106] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.716091][ T6106] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1464.716411][ T30] audit: type=1400 audit(1767465770.894:13779): avc: denied { node_bind } for pid=26292 comm="syz.4.5857" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1464.754397][T26255] team0: Port device team_slave_0 added [ 1464.766213][ T6106] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.819397][T18621] usb 4-1: Using ep0 maxpacket: 8 [ 1464.830636][ T6106] usb 2-1: config 0 descriptor?? [ 1464.895579][ T30] audit: type=1400 audit(1767465770.894:13780): avc: denied { write } for pid=26292 comm="syz.4.5857" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1464.953128][ T30] audit: type=1400 audit(1767465770.904:13781): avc: denied { read } for pid=26292 comm="syz.4.5857" path="socket:[101394]" dev="sockfs" ino=101394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1465.071151][T26255] team0: Port device team_slave_1 added [ 1465.092957][T11236] Bluetooth: hci0: command tx timeout [ 1465.178460][T17414] hsr_slave_0: left promiscuous mode [ 1465.191424][T17414] hsr_slave_1: left promiscuous mode [ 1465.191521][T18621] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1465.206099][ T6106] pwc: Askey VC010 type 2 USB webcam detected. [ 1465.213629][T18621] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.221083][T17414] veth1_macvtap: left promiscuous mode [ 1465.229422][T18621] usb 4-1: config 8 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1465.238510][T17414] veth0_macvtap: left promiscuous mode [ 1465.242370][T18621] usb 4-1: config 8 interface 0 has no altsetting 0 [ 1465.260898][T18621] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1465.270052][T18621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.278071][T18621] usb 4-1: Product: syz [ 1465.282389][T18621] usb 4-1: Manufacturer: syz [ 1465.287652][T18621] usb 4-1: SerialNumber: syz [ 1465.330326][T11236] Bluetooth: hci1: command 0x0c1a tx timeout [ 1465.413866][ T6106] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1465.430084][ T6106] pwc: recv_control_msg error -32 req 02 val 2700 [ 1465.445414][ T6106] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1465.453875][ T6106] pwc: recv_control_msg error -32 req 04 val 1000 [ 1465.454353][ T30] audit: type=1400 audit(1767465771.784:13782): avc: denied { wake_alarm } for pid=26285 comm="syz.1.5855" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1465.499496][T11236] Bluetooth: hci3: command 0x0c1a tx timeout [ 1465.526882][ T30] audit: type=1400 audit(1767465771.814:13783): avc: denied { read } for pid=26285 comm="syz.1.5855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1465.611223][ T6106] pwc: recv_control_msg error -32 req 04 val 1300 [ 1465.630066][ T6106] pwc: recv_control_msg error -32 req 04 val 1400 [ 1465.848910][ T6106] pwc: recv_control_msg error -32 req 02 val 2000 [ 1465.876489][ T6106] pwc: recv_control_msg error -32 req 02 val 2100 [ 1465.893861][ T6106] pwc: recv_control_msg error -32 req 04 val 1500 [ 1465.905766][T26306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.918470][T26306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.925298][ T6106] pwc: recv_control_msg error -32 req 02 val 2500 [ 1465.966462][ T6106] pwc: recv_control_msg error -32 req 02 val 2400 [ 1466.197754][T17414] team0 (unregistering): Port device team_slave_1 removed [ 1466.260018][T17414] team0 (unregistering): Port device team_slave_0 removed [ 1466.610574][ T5862] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1466.619455][T11236] Bluetooth: hci4: command 0x0c1a tx timeout [ 1466.654916][T26255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.662037][T26255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.688507][T26255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.729594][T26255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.736710][T26255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.763522][T26255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.785711][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 1466.794002][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1466.857968][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1466.888234][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1466.913949][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1466.960514][ T30] audit: type=1400 audit(1767465773.294:13784): avc: denied { create } for pid=26309 comm="syz.4.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1466.997858][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1467.022930][T26255] hsr_slave_0: entered promiscuous mode [ 1467.029574][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.038970][T26255] hsr_slave_1: entered promiscuous mode [ 1467.050662][T26255] debugfs: 'hsr0' already exists in 'hsr' [ 1467.239993][T11236] Bluetooth: hci0: command tx timeout [ 1467.333241][ T30] audit: type=1400 audit(1767465773.444:13785): avc: denied { append } for pid=26309 comm="syz.4.5862" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1467.359017][T26255] Cannot create hsr debugfs directory [ 1467.400888][ T6106] pwc: recv_control_msg error -71 req 02 val 2600 [ 1467.409406][T11236] Bluetooth: hci1: command 0x0c1a tx timeout [ 1467.427884][ T5862] usb 1-1: GET_CAPABILITIES returned 0 [ 1467.433404][ T5862] usbtmc 1-1:16.0: can't read capabilities [ 1467.444028][T26311] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1467.444963][ T6106] pwc: recv_control_msg error -71 req 02 val 2900 [ 1467.503178][ T6106] pwc: recv_control_msg error -71 req 02 val 2800 [ 1467.531587][ T6106] pwc: recv_control_msg error -71 req 04 val 1100 [ 1467.555975][ T6106] pwc: recv_control_msg error -71 req 04 val 1200 [ 1467.569817][T11236] Bluetooth: hci3: command 0x0c1a tx timeout [ 1467.574605][ T6106] pwc: Registered as video103. [ 1467.636393][ T6106] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input40 [ 1467.653974][ T5862] usb 1-1: USB disconnect, device number 44 [ 1467.724616][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5864'. [ 1467.727352][ T6106] usb 2-1: USB disconnect, device number 82 [ 1467.758538][T26317] netlink: 'syz.4.5864': attribute type 10 has an invalid length. [ 1467.773873][T26317] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5864'. [ 1467.785933][T26317] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5864'. [ 1468.065527][T26255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1468.090833][T26255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1468.101371][ T6106] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1468.133332][T26255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1468.146085][T26255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1468.284616][T18621] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.292625][ T6106] usb 2-1: Using ep0 maxpacket: 16 [ 1468.314556][ T6106] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.325179][T18621] usb 4-1: selecting invalid altsetting 0 [ 1468.335255][ T6106] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1468.357824][ T6106] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1468.383045][T18621] snd-usb-audio 4-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 1468.398155][ T6106] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.419221][T26334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1468.490315][T26255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1468.514472][ T6106] usb 2-1: Product: syz [ 1468.521655][T18621] usb 4-1: USB disconnect, device number 67 [ 1468.533923][ T6106] usb 2-1: Manufacturer: syz [ 1468.536918][T26255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1468.545334][ T6106] usb 2-1: SerialNumber: syz [ 1468.689712][T11236] Bluetooth: hci4: command 0x0c1a tx timeout [ 1468.723106][T17412] bridge0: port 1(bridge_slave_0) entered blocking state [ 1468.730223][T17412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1468.948077][ T6106] usb 2-1: 0:2 : does not exist [ 1468.953125][ T6106] usb 2-1: unit 9 not found! [ 1468.955021][T17412] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.964824][T17412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1468.998534][ T6106] usb 2-1: USB disconnect, device number 83 [ 1469.283438][T26353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1469.410341][T11236] Bluetooth: hci0: command tx timeout [ 1469.713270][T26255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.914364][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1469.914380][ T30] audit: type=1400 audit(1767465776.244:13804): avc: denied { read } for pid=26362 comm="syz.1.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1469.967403][T26364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1469.982159][T26364] netlink: 'syz.1.5877': attribute type 5 has an invalid length. [ 1469.999019][T26364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5877'. [ 1470.125169][T26364] geneve3: entered promiscuous mode [ 1470.132927][T26364] geneve3: entered allmulticast mode [ 1470.144964][ T550] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1470.156250][ T550] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1470.173831][ T30] audit: type=1400 audit(1767465776.504:13805): avc: denied { create } for pid=26369 comm="syz.4.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1470.314524][ T550] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1470.323289][ T550] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1470.334008][ T30] audit: type=1400 audit(1767465776.664:13806): avc: denied { create } for pid=26336 comm="syz.3.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1470.869436][T26113] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1471.353267][T26382] loop7: detected capacity change from 0 to 16384 [ 1471.393466][T26113] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.418082][T26113] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1471.434284][T26113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.435361][T26255] veth0_vlan: entered promiscuous mode [ 1471.442401][T26113] usb 2-1: Product: syz [ 1471.451984][T26113] usb 2-1: Manufacturer: syz [ 1471.457395][T26113] usb 2-1: SerialNumber: syz [ 1471.489779][T22882] Bluetooth: hci0: command tx timeout [ 1471.577122][T26113] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1471.595631][T26255] veth1_vlan: entered promiscuous mode [ 1471.646995][T26255] veth0_macvtap: entered promiscuous mode [ 1471.656897][T26255] veth1_macvtap: entered promiscuous mode [ 1471.676439][T26255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1471.688521][T26255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1471.781784][ T8799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.799479][ T8799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.834118][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.846972][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.862514][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.036496][ T30] audit: type=1400 audit(1767465778.344:13807): avc: denied { getopt } for pid=26385 comm="syz.3.5881" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1472.349428][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.394329][T26113] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1472.407996][T26113] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1472.418012][T26113] usb 2-1: media controller created [ 1472.424278][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.435184][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.470602][T26113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1472.762935][T22882] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1472.763592][T26396] netlink: 'syz.3.5882': attribute type 4 has an invalid length. [ 1472.768004][T26113] usb 2-1: USB disconnect, device number 84 [ 1472.889376][ T30] audit: type=1400 audit(1767465779.204:13808): avc: denied { create } for pid=26391 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1473.066216][ T30] audit: type=1400 audit(1767465779.214:13809): avc: denied { bind } for pid=26391 comm="syz.5.5848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1473.409693][T11236] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1474.504109][ T30] audit: type=1400 audit(1767465780.684:13810): avc: denied { read write } for pid=26400 comm="syz.1.5884" name="video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1474.625785][ T30] audit: type=1400 audit(1767465780.684:13811): avc: denied { open } for pid=26400 comm="syz.1.5884" path="/dev/video2" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1474.725040][ T30] audit: type=1400 audit(1767465780.704:13812): avc: denied { ioctl } for pid=26400 comm="syz.1.5884" path="/dev/video2" dev="devtmpfs" ino=932 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1474.793839][ T30] audit: type=1400 audit(1767465780.704:13813): avc: denied { sqpoll } for pid=26400 comm="syz.1.5884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1474.955480][T26409] ptrace attach of "./syz-executor exec"[26410] was attempted by "./syz-executor exec"[26409] [ 1476.135236][T17135] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 1476.705070][T17135] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1477.666220][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1477.693059][T17135] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1477.705405][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1477.781602][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1478.333470][ T30] audit: type=1400 audit(1767465784.514:13814): avc: denied { ioctl } for pid=26440 comm="syz.3.5893" path="socket:[101209]" dev="sockfs" ino=101209 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1478.364193][T17135] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1478.371656][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1478.393217][T17135] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1478.408141][ T30] audit: type=1400 audit(1767465784.524:13815): avc: denied { connect } for pid=26440 comm="syz.3.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1479.059602][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1479.090092][ T30] audit: type=1400 audit(1767465784.524:13816): avc: denied { write } for pid=26440 comm="syz.3.5893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1479.111952][T17135] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1479.200516][ T30] audit: type=1400 audit(1767465785.464:13817): avc: denied { mounton } for pid=26450 comm="syz.1.5895" path="/545/file0" dev="tmpfs" ino=2929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1479.293757][ T30] audit: type=1400 audit(1767465785.624:13818): avc: denied { read } for pid=26450 comm="syz.1.5895" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1479.345142][ T30] audit: type=1400 audit(1767465785.624:13819): avc: denied { open } for pid=26450 comm="syz.1.5895" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1479.496890][ T30] audit: type=1400 audit(1767465785.624:13820): avc: denied { ioctl } for pid=26450 comm="syz.1.5895" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1480.493404][T17177] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1480.511600][ T30] audit: type=1400 audit(1767465785.944:13821): avc: denied { getopt } for pid=26453 comm="syz.0.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1480.532173][ T30] audit: type=1400 audit(1767465785.974:13822): avc: denied { setopt } for pid=26453 comm="syz.0.5896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1481.376381][T17177] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1481.387929][T17177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1481.400615][T17177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1481.411218][T17177] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1481.424240][ T30] audit: type=1400 audit(1767465787.744:13823): avc: denied { bind } for pid=26462 comm="syz.4.5899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1481.459425][T17177] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1481.480965][T17177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.489466][T11236] Bluetooth: hci1: unexpected subevent 0x01 length: 37 > 18 [ 1481.502437][T17177] usb 4-1: config 0 descriptor?? [ 1481.611839][T17135] usb 6-1: unable to read config index 2 descriptor/start: -71 [ 1481.620759][T17135] usb 6-1: can't read configurations, error -71 [ 1482.193951][T17177] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1482.799129][T26479] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5904'. [ 1483.393343][T26113] usb 4-1: USB disconnect, device number 68 [ 1483.489084][T26488] Device name cannot be null; rc = [-22] [ 1483.508395][T26488] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 1483.521561][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1483.521576][ T30] audit: type=1400 audit(1767465789.854:13831): avc: denied { create } for pid=26489 comm="syz.1.5906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1483.975549][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.319538][T16814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.348476][T16814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.386481][T16814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.416845][T16814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.458813][T16814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.489731][T16814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.662927][ T62] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1484.704097][T26113] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1484.849224][ T6622] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1484.900286][ T30] audit: type=1400 audit(1767465791.234:13832): avc: denied { read } for pid=26506 comm="syz.1.5913" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1485.389420][T26113] usb 4-1: Using ep0 maxpacket: 32 [ 1485.400738][ T30] audit: type=1400 audit(1767465791.234:13833): avc: denied { open } for pid=26506 comm="syz.1.5913" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1485.426510][T26113] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1485.486578][T26509] xt_NFQUEUE: number of total queues is 0 [ 1485.732622][T26113] usb 4-1: config 164 has an invalid interface number: 246 but max is 0 [ 1485.741096][ T6236] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1485.771709][T26113] usb 4-1: config 164 has no interface number 0 [ 1485.785334][T26513] netlink: 'syz.5.5914': attribute type 322 has an invalid length. [ 1485.796758][T17414] ------------[ cut here ]------------ [ 1485.802362][T17414] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x4d5/0x580, CPU#1: kworker/u8:35/17414 [ 1485.813184][T17414] Modules linked in: [ 1485.817630][T17414] CPU: 1 UID: 0 PID: 17414 Comm: kworker/u8:35 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.828860][T17414] Tainted: [L]=SOFTLOCKUP [ 1485.829367][T26113] usb 4-1: config 164 interface 246 has no altsetting 0 [ 1485.833585][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1485.850550][T17414] Workqueue: cfg80211 cfg80211_event_work [ 1485.856297][T17414] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 1485.861247][T26113] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice= f.fe [ 1485.862474][T17414] Code: ff ff e8 8e 82 ea f6 90 0f 0b 90 e9 58 fe ff ff e8 d0 57 54 f7 e9 22 fc ff ff e8 66 57 54 f7 e9 66 fc ff ff e8 6c 82 ea f6 90 <0f> 0b 90 e9 6f fc ff ff e8 5e 82 ea f6 90 0f 0b e8 d6 57 54 f7 e9 [ 1485.883530][T26113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.893033][T17414] RSP: 0018:ffffc90003147a60 EFLAGS: 00010293 [ 1485.893055][T17414] RAX: 0000000000000000 RBX: ffff88807aa74d90 RCX: 0000000000000006 [ 1485.893069][T17414] RDX: ffff88809494c980 RSI: ffffffff8ad46644 RDI: ffffffff8bf2b480 [ 1485.893083][T17414] RBP: ffffc90003147b10 R08: 0000000000000001 R09: 0000000000000001 [ 1485.893096][T17414] R10: ffffffff9088b9d7 R11: ffff88809494d4b0 R12: ffff88807aa74000 [ 1485.893110][T17414] R13: 1ffff92000628f50 R14: 0000000000000000 R15: ffffc90003147aa0 [ 1485.893123][T17414] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 1485.893142][T17414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1485.893156][T17414] CR2: 0000001b2d623ffc CR3: 00000000485da000 CR4: 00000000003526f0 [ 1485.893169][T17414] Call Trace: [ 1485.893177][T17414] [ 1485.893189][T17414] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1485.893218][T17414] ? mark_held_locks+0x49/0x80 [ 1485.893245][T17414] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 1485.893270][T17414] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 1485.971265][T26113] usb 4-1: Product: syz [ 1485.971285][T26113] usb 4-1: Manufacturer: syz [ 1485.971301][T26113] usb 4-1: SerialNumber: syz [ 1485.975023][T17414] cfg80211_process_rdev_events+0x9f/0x130 [ 1486.020010][T17414] cfg80211_event_work+0x37/0x70 [ 1486.024956][T17414] process_one_work+0x9ba/0x1b20 [ 1486.029952][T17414] ? __pfx_process_one_work+0x10/0x10 [ 1486.035367][T17414] ? assign_work+0x1a0/0x250 [ 1486.039998][T17414] worker_thread+0x6c8/0xf10 [ 1486.044605][T17414] ? __kthread_parkme+0x19e/0x250 [ 1486.049667][T17414] ? __pfx_worker_thread+0x10/0x10 [ 1486.054796][T17414] kthread+0x3c5/0x780 [ 1486.058868][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.063499][T17414] ? rcu_is_watching+0x12/0xc0 [ 1486.068279][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.072901][T17414] ret_from_fork+0x983/0xb10 [ 1486.077887][T17414] ? __pfx_ret_from_fork+0x10/0x10 [ 1486.083343][T17414] ? __switch_to+0x7af/0x10d0 [ 1486.088061][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.092701][T17414] ret_from_fork_asm+0x1a/0x30 [ 1486.097483][T17414] [ 1486.100519][T17414] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1486.107794][T17414] CPU: 1 UID: 0 PID: 17414 Comm: kworker/u8:35 Tainted: G L syzkaller #0 PREEMPT(full) [ 1486.118986][T17414] Tainted: [L]=SOFTLOCKUP [ 1486.123304][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1486.133356][T17414] Workqueue: cfg80211 cfg80211_event_work [ 1486.139082][T17414] Call Trace: [ 1486.142357][T17414] [ 1486.145279][T17414] dump_stack_lvl+0x3d/0x1f0 [ 1486.149875][T17414] vpanic+0x640/0x6f0 [ 1486.153853][T17414] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 1486.159392][T17414] panic+0xca/0xd0 [ 1486.163113][T17414] ? __pfx_panic+0x10/0x10 [ 1486.167531][T17414] ? check_panic_on_warn+0x1f/0xb0 [ 1486.172646][T17414] check_panic_on_warn+0xab/0xb0 [ 1486.177585][T17414] __warn+0x108/0x3c0 [ 1486.181570][T17414] __report_bug+0x2a0/0x520 [ 1486.186071][T17414] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 1486.191619][T17414] ? __pfx___report_bug+0x10/0x10 [ 1486.196649][T17414] ? __lock_acquire+0x436/0x2890 [ 1486.201594][T17414] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 1486.207136][T17414] report_bug+0xb2/0x220 [ 1486.211371][T17414] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 1486.216906][T17414] handle_bug+0x127/0x260 [ 1486.221228][T17414] exc_invalid_op+0x17/0x50 [ 1486.225718][T17414] asm_exc_invalid_op+0x1a/0x20 [ 1486.230549][T17414] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 1486.236686][T17414] Code: ff ff e8 8e 82 ea f6 90 0f 0b 90 e9 58 fe ff ff e8 d0 57 54 f7 e9 22 fc ff ff e8 66 57 54 f7 e9 66 fc ff ff e8 6c 82 ea f6 90 <0f> 0b 90 e9 6f fc ff ff e8 5e 82 ea f6 90 0f 0b e8 d6 57 54 f7 e9 [ 1486.256278][T17414] RSP: 0018:ffffc90003147a60 EFLAGS: 00010293 [ 1486.262331][T17414] RAX: 0000000000000000 RBX: ffff88807aa74d90 RCX: 0000000000000006 [ 1486.270283][T17414] RDX: ffff88809494c980 RSI: ffffffff8ad46644 RDI: ffffffff8bf2b480 [ 1486.278239][T17414] RBP: ffffc90003147b10 R08: 0000000000000001 R09: 0000000000000001 [ 1486.286190][T17414] R10: ffffffff9088b9d7 R11: ffff88809494d4b0 R12: ffff88807aa74000 [ 1486.294142][T17414] R13: 1ffff92000628f50 R14: 0000000000000000 R15: ffffc90003147aa0 [ 1486.302103][T17414] ? __cfg80211_ibss_joined+0x4d4/0x580 [ 1486.307640][T17414] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 1486.313519][T17414] ? mark_held_locks+0x49/0x80 [ 1486.318269][T17414] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 1486.324321][T17414] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 1486.330206][T17414] cfg80211_process_rdev_events+0x9f/0x130 [ 1486.335995][T17414] cfg80211_event_work+0x37/0x70 [ 1486.340920][T17414] process_one_work+0x9ba/0x1b20 [ 1486.345853][T17414] ? __pfx_process_one_work+0x10/0x10 [ 1486.351214][T17414] ? assign_work+0x1a0/0x250 [ 1486.355797][T17414] worker_thread+0x6c8/0xf10 [ 1486.360381][T17414] ? __kthread_parkme+0x19e/0x250 [ 1486.365387][T17414] ? __pfx_worker_thread+0x10/0x10 [ 1486.370482][T17414] kthread+0x3c5/0x780 [ 1486.374537][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.379112][T17414] ? rcu_is_watching+0x12/0xc0 [ 1486.383856][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.388432][T17414] ret_from_fork+0x983/0xb10 [ 1486.393006][T17414] ? __pfx_ret_from_fork+0x10/0x10 [ 1486.398109][T17414] ? __switch_to+0x7af/0x10d0 [ 1486.402779][T17414] ? __pfx_kthread+0x10/0x10 [ 1486.407353][T17414] ret_from_fork_asm+0x1a/0x30 [ 1486.412115][T17414] [ 1486.415368][T17414] Kernel Offset: disabled [ 1486.419670][T17414] Rebooting in 86400 seconds..