last executing test programs: 1m8.968275934s ago: executing program 3 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000002400048020000180080001006f73660014000280080001400000000f080003"], 0x78}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x32}, {[@cipso={0x86, 0x6}]}}}}}}, 0x0) 1m8.712991554s ago: executing program 3 (id=1481): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x401, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x129140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') preadv(r5, &(0x7f0000002400)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xfffffe01, 0x800) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe21, &(0x7f0000006680)) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1m7.407782256s ago: executing program 3 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, 0x0}, 0x48040) 1m7.054514975s ago: executing program 3 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000004680)='ns/uts\x00') r5 = syz_open_dev$sndpcmp(&(0x7f00000046c0), 0x1, 0x200000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004800)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="6e7304510047d4d1d688e367d307a06516e7821ffab38d73c9151ac5e2dd6f8b3e3b0196cd5c042f55db55c68ca9520503759146823d8d773636db879388e6f070171490061f5c256674fd", 0x4b}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="9d7b01", 0x3}, {&(0x7f0000001980)="3b27e13cbe6df51b7c6cb4c6337c5f6ba0adc0d634c0ac511e9666cbe0e1f619a565ec4ff8eba82162c27879ee02bce17a8e4bfdff850c2bbf1e77be2cd3776decb8b499780aa264fb3ebda31ed973867481f103add85789c535646fa5567b7c35cf838327b6e6a253f809f81ede", 0x6e}, {&(0x7f0000001a00)="c66603815752a8507ce09ec67aac83502fe29d71ce64a4c0d4fe3cee2bfa031f98edf71b694b3ee2f4769e795dc1d2ea001f0544b37f54241a6b37683b956e", 0x3f}, {&(0x7f0000001a80)="8111155bcc97146aa238908de9b242ad54dae195296d6ac2b95bd8197c7bcfff797d6789f55cede9a6c67a7776f5724d1d1a1a81e9f3af5ab358e40939aa88b9e376efa3b42e2e4bf8173dc330c733f458e14f3965cafda22f5ad29f62177a8e0030ec9a14d88e12fab1cce937b733421c632502946a18f55c8fb3dcae6df6b8775009baa77e186847a5c4987666c3fe73faf4a51f29c30fee2b6efaff7336bb901da9fb7147ce2b1b5c5af5ac37c44da20a0511a55784727ecae3bd68924667a962c2f6f64e6d039b4786b0a92e61bd0886aaa62c4c160e42dbb88e83", 0xdd}, {&(0x7f0000001b80)="c5469f886c0c223622ca2e6dd8f9736a1be8a6df2e773bcfb6636a690fbab98dc1e2a669d73b4d48791194ab6db691dc238076f4d63de80af26d2e78c2fde618c886db6eb8ee37788121c55aaea9fa77273edf3b4bc26dd45ea94ac5e0dba6ca738f28d5d8f8fcd3effb2515b4f70da656c742d7f58c4c56f32d4647f9ff23ce6ac1670a0140ab5c4ac1d052a2703dee5a8f2f55fac6c0e44949a357e002f398e6aee688af5b287095d3c7125ca5c748f462c9e0dbe0c093c75458e1514a71f97ab14be9e286ac5841716d60ef6f2a95b49dd5430ce9be7a336833ac453fa5b7dd692e1cb9d7ed", 0xe7}, {&(0x7f0000001c80)="e4c716eb2d8979dc98a1650d9466656620ac27230c0802f8d59d93eee0a2323b06f328cbe6a4b629eb5f5c6b4810621dcd4d06c5f08fd46727", 0x39}, {&(0x7f0000001cc0)="15b42c773654692fbffd404136cb844373b5840e7f37440f87dd970d4c766c11db44a7715c6cdc88fdf7226af2534225e3640557771099433373fd41a46b0d531df17fb1b7a810e8a1025022c813fffccbd66af5bd0697c50c6973eddcac7a2d1dda3fa570f49cd3e1b9f8d82b29c35c18c4d8c591cfcc20d7c6e3b67d18fbc141385a3ebbf074fb1c7481da5e403b074031a9405b81f6d3946bfd239115d9f21d84c48e88", 0xa5}, {&(0x7f0000001d80)="9aaa5f44afee193c594cba58ecfc601f5cc4a98c2ce83dbdb5a8b2eb9c75c8a965a74c48812379498bca1ea62f9d3e66f4e731", 0x33}], 0xa, &(0x7f0000004700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [r0, r3, 0xffffffffffffffff, r1, r2, r2, r3, r0, r1, r1]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r3, r0, r4, r5, r2, r3]}}], 0xc8}}], 0x1, 0x24008091) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f00000008c0), 0x0, 0x4, 0x0) connect$unix(r7, &(0x7f00000008c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c46fc04020d60d300000000000099cfb7a14af81fe61b00000038000000a40100791a69ed08051020000100050000820002000000000000007004000000000100000400000006000700060000000300000003000000"], 0x58) socket(0x3, 0x2, 0x20000a) close(r9) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x4000, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000005, 0x0, 0xfffffffe}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="111e00000000feffffff05000000"], 0x21}}, 0xa000000) 1m6.147122429s ago: executing program 3 (id=1490): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) 1m5.94122426s ago: executing program 3 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x41a4, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1217582ffcc0d526e0d85ae6abd48ce03f0300", 0x13}, {&(0x7f0000000400)="ae", 0x1}], 0x2}, 0x30040884) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x41e80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x100088}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x9, 0x1, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 50.818059058s ago: executing program 32 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040400010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x41a4, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1217582ffcc0d526e0d85ae6abd48ce03f0300", 0x13}, {&(0x7f0000000400)="ae", 0x1}], 0x2}, 0x30040884) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x41e80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x100088}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r9, 0x40305829, &(0x7f0000000280)={0x1, 0x2, 0x5, 0x9, 0x1, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 28.054594951s ago: executing program 5 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1fe) close(0xffffffffffffffff) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x102, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000380)) 17.126743841s ago: executing program 5 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1fe) close(0xffffffffffffffff) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x102, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000380)) 6.75705577s ago: executing program 5 (id=1534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4043, 0x1fe) close(0xffffffffffffffff) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x102, 0x0, 0x0, {0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000380)) 6.339079108s ago: executing program 0 (id=1675): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x5ef901, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16], &(0x7f0000000680)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, 0x0) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d1", 0xb1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) fchown(r2, 0x0, 0xee01) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 5.873422717s ago: executing program 1 (id=1676): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x4a}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) unshare(0x8040480) syz_open_dev$sndpcmc(&(0x7f0000004c40), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x25) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000240)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r8, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r8}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 5.720330295s ago: executing program 4 (id=1677): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) getpid() openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xff}, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 5.629566298s ago: executing program 0 (id=1678): socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xfff, 0xfffd7fff, 0x50323234, 0x6, 0xa, [{0x2, 0x6}, {0xc00, 0x5000000}, {0xfffffffa, 0x5de3}, {0x14, 0x4af}, {0x1009, 0x4000069a}, {0x4, 0x3}, {0x9, 0x5}, {0x200, 0x2000017}], 0x7b, 0x5, 0x0, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 5.537324684s ago: executing program 4 (id=1679): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000040)={0x0, 0x0}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="001503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, 0x0, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wg2\x00', 0x100}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.47585249s ago: executing program 0 (id=1680): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000080000008f000000579938a2be315f5d246eba68c42a926d6557537e256d0400fe1f86d89bde4953be2b786aadf8d00b422942647bd312"], 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x3dde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1, 0x400}) 5.005892119s ago: executing program 2 (id=1684): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000fe0600000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b735700", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500ffffff", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.652651723s ago: executing program 2 (id=1685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'geneve1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "9b801fa626270b87991d2e37a13eaa000000000200093bb4c83e787f49659355", "446e0d0fb9079ae357c460edb46e57f20700e3b56ce16711e400d6fee1b700", "05d64ba2349278361a13fa5d0489397b90b4d3ffbdaf41f88896771a54be03db", "d44a9f35a6cf85ebd47357121749cf809fe925de8f135bddba07ee891d45a5ef", "c249dbf490eb72bf5dce7d2225003e5dcc4907e997e2ec42fa0ab05b50be5b6b", "b768c92574b06339bb1ea332", 0x6, 0x0, 0xa, 0x3, 0x5d}}) (async) socket(0x2b, 0x80801, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r3, &(0x7f0000002140)=""/17, 0x11, 0x0) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = getpid() epoll_create1(0x80000) (async) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x102, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r8 = gettid() ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x80108906, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r8}, 0x0) (async) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2a00040, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@access_user}, {@cache_readahead}, {@dfltuid}]}}) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001400010600000000000000002bfa0000e68a431f9044ffea1174606c2d2267e8a934539817b6f801000080fb9b70d6ae7118478db107089e2d204d9c1b93427667b4ab206fb3b8fc7a2e505a8e3dce47147e82eb0e42b1490d1ec2a028462396fd0067570d3d996a78b569e50aa87b60f47a470bc820093785b9e73f99ab917c34e1bebdb542981230d203245b7de6a6d075d281c0f990484ee16befc630632a89a07f1a8dceb4000000000000"], 0x14}}, 0x4048010) 4.452066241s ago: executing program 2 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000"], 0x24, 0x0) 3.596469742s ago: executing program 2 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f0000000200)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="224fedfe340c0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x40, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x40}}, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESDEC=0x0], 0xe) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r8, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff0700040000000100000004004880140001801000108004000f8005000300000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.849965171s ago: executing program 1 (id=1688): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a0677bc45ff810500000000060058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000d081000418e00000004fcff", 0x58}], 0x1) 2.094262519s ago: executing program 0 (id=1689): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x4751, 0x9, 0xa, 0xfffffffa}]}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x200000005c831, 0xffffffffffffffff, 0x7d704000) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) (async, rerun: 32) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) (rerun: 32) write(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') (rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) lseek(r5, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) (async) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000440)={0x0, 0x7f, 0x2, 0x0, 0x10001000}) (async) write$UHID_CREATE2(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a303841033e3cfaa700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000ef68000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053000800030000000b000000080000000100ffff3b9dc493323fbb81b5920e56b85490114039752a922b12da3e3ba532648e24ea48173ab2c0ad65337bd2cb87978b08e2307aa43a68f7fe847cd3ad2759ab0f2fc948e597ace9bc231261cd2f8258a561c971512b66526b1116f48c35f50a903f1a933e0a57961337699fbf62df407574d0c39a47cb9cf11300"/423], 0x16b) 2.040155966s ago: executing program 4 (id=1690): socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0xfff, 0xfffd7fff, 0x50323234, 0x6, 0xa, [{0x2, 0x6}, {0xc00, 0x5000000}, {0xfffffffa, 0x5de3}, {0x14, 0x4af}, {0x1009, 0x4000069a}, {0x4, 0x3}, {0x9, 0x5}, {0x200, 0x2000017}], 0x7b, 0x5, 0x0, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.022363519s ago: executing program 1 (id=1691): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r2 = socket$inet6(0xa, 0x1, 0x84) shutdown(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20000000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) ioperm(0x0, 0x2, 0x7e) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x43) acct(&(0x7f0000000140)='./file0\x00') sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x80, 0x40009975, 0xffffffffffffffff, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 1.868453746s ago: executing program 4 (id=1692): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="c3bb8e88c1f3d2d56b2019a37120af9cd9fcd2b3f61da3cdbb800fba199c1f2122aa4fe3c4f73e3fee180635d9bd0ad8b9bcc24ec292d8e086e1c5382ee1e934a9c1a0337647b13dce5d1e9c1ee647b802762d7fce", 0x55}, {&(0x7f00000003c0)="bda2cd6f6442d6538833e7133ca48f928e2e741e0213324dff65332d428ce100c8f596080fe838cfe8499302487cef1d5c8a96eaeddc09699c49165803ea6bd6d595970c9dc938d0328fc1f525be897a8b974ce7a76d0eee", 0x58}, {&(0x7f0000000440)="9fddb4301e796aab1b39f885845696c2c93677a8220f5399dc82ba2e1bd9b1499a937774921fd325406396b09808e6546318664fa8ccbb00b2502f3f797a5645b117582fbd37b36102cadad595e501e795a38ecc27c5cb3a4c1cf785744fc8", 0x5f}, {&(0x7f00000004c0)="c25d2dfcd54465fc0190efb2f7f10dd4fbe0887325108586c0bb365fb8c7e8090a8a068d0527d7be0539554a4cc64cda2923d34ed206b72ce13425e6a7a125c9bf1e48758753d589eab0d000a53cc696dac28133b27243d809c54f9bf085e49cf9d2535e751754d7ce9e28d5ae1e0167b1c907e63d09eaf99391d1186131a03cfd1bc6a15f786af0eb8149a0cc813f4e70670c42bd530ad1bcc2c9c6c3530ece8565943bf4d5e5a93f5d3d854701168a1cf2afe688d9379bec279169d8dcb11ebd6530a2753397cbdcc0cef1974c8854a1f1f451d69c77306ff210ad5186feada7239b25ec03f60d469067756e12c038dadfacd5b242b688b9", 0xf9}, {&(0x7f00000005c0)="147c0d184b3a212e613fb0279426592a4a2ba4bf9737dc295550b5de65322e0f08f550c0af729fe3253fc29ee0e82f31b145fb76f322944570869c1f66a6503b07d3457f861b6f29128e9540eed507fb51c8bbc93be0cee44e8325897f08549dbb254b80", 0x64}, {0x0}, {&(0x7f0000000780)="56711297a37d45e253efefdfdcefabc3cfa76a0e5c69e18643472b8b5295c1e9b00b89105ba359ead1795f909a90f472de23052a7135e7f0d20ec945e35dfc42e1398ec10024f70df88f31d6b113a1ed5c4ea449e9a2eb6888b9cb00cbb58179e1669f70b7d23bce12a9b035711867f826057b55fcffade7188d371a2e1ff43ede46b8574be850255f40d5a8f3297f07870564dace21b9ed0a63e3f2a8519a06b92585d34fcba8de6fa0df650a89fc3239d271f2d6177fbe12a96d14", 0xbc}, {&(0x7f0000000840)="d35cda719c25ac049e1c5589cb041daf8700289d81ddeda2aa6de1fb26b67d5988f40feb59ccbdac02232902256da78880b26d1f59b4039331f3df91e55a477ec341df89a9b9001c1047757ac36b1204120152e705b938c2b568ef0e55862d2bb2971427f129cb93f314d8871961599113b1", 0x72}], 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0xc0200) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 1.674974705s ago: executing program 0 (id=1693): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x1100, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1.662179264s ago: executing program 2 (id=1694): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x5ef901, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16], &(0x7f0000000680)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, 0x0) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d1", 0xb1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) fchown(r2, 0x0, 0xee01) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x90, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.641636229s ago: executing program 4 (id=1695): mmap(&(0x7f0000adc000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) tgkill(r2, 0xffffffffffffffff, 0xb) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)}, 0x6}], 0x1, 0x40010001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x1, @ANYBLOB="74000000882159a9b421e5500000000000070000a0ff1bc6db", @ANYRES8=r0, @ANYRES32, @ANYRESDEC], 0x50) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000001b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)='.\x00', 0x2}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x1) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/28, 0x1c) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x10840, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000640)={&(0x7f0000000480)=""/132, 0x84, 0x4, 0xe}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x250) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) 902.10093ms ago: executing program 1 (id=1696): socket(0x2b, 0x1, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYBLOB="d6501abb833079b16e326d0c8334d7b351a228a95e3b3e6fbea57bc99e6f956cf2303f3b2b12623690ec6324b7c953453e48d7e584db0d8c8fc6f0f432f8d83e20027fcee0d3dd0eecbe6d748ed90b19c1dc40f386a25a1090ca79476b1dd5bd29788059bd6ccba29eefb617ded5e274bca3913821a08ce8dae0c6063842215fbbca25e5aaeb4598ac1939c8a8f1b5a15c3e82067a72f36ca6a632f8ad50d6384fe804e753a077c1bae65f80e1f1a724e07d14adae83ce2a17ebdf502ae6ad9f90cf6f06ee0b", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={r3, 0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) syz_io_uring_setup(0x54a9, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c64d2, &(0x7f0000000180)={r4, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) 898.552158ms ago: executing program 4 (id=1697): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x6, 0x3}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$dsp(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xffffffffffffff60, 0x0, 0xfffffffffffffce0, 0x0, 0x0, 0x2663}, 0x40040c1) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="03000000040000000400000001000000000000", @ANYRESHEX, @ANYBLOB], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, 0x0, 0x401}) writev(r5, &(0x7f00000003c0), 0x0) sendto$inet(r3, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) unshare(0x62000200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x8, 'vlan1\x00', {'ip6gretap0\x00'}, 0x10}) 424.365078ms ago: executing program 0 (id=1698): preadv(0xffffffffffffffff, 0x0, 0x0, 0xa3, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002400000204c05d50300000000000109022400010000f00309040025150300000009210800030122200209058103ff03"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x3f01) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001500)='veth1_to_bridge\x00', 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 359.180208ms ago: executing program 2 (id=1699): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000080000008f000000579938a2be315f5d246eba68c42a926d6557537e256d0400fe1f86d89bde4953be2b786aadf8d00b422942647bd312"], 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380"], 0xfc}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x3dde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x1, 0x400}) 260.421285ms ago: executing program 1 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e7"}}, 0x2a) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x44b3}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000006c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x3, 0xc8}}, 0x18}}, 0x0) 0s ago: executing program 1 (id=1701): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x184) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) copy_file_range(r4, &(0x7f0000000080), r3, 0x0, 0xfffffffffffffff8, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) add_key(&(0x7f00000003c0)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 395.289227][ T793] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 395.472249][ T793] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 395.489836][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 395.512901][T10452] usb usb7: usbfs: process 10452 (syz.0.1204) did not claim interface 0 before use [ 395.574806][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.626331][ T793] usb 3-1: config 0 descriptor?? [ 395.666625][ T5934] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 396.322955][ T793] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 396.356596][ T793] [drm:udl_init] *ERROR* Selecting channel failed [ 396.395642][ T793] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 396.437997][ T793] [drm] Initialized udl on minor 2 [ 396.461602][T10467] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 396.487374][ T793] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 396.525204][ T793] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 396.555511][ T5934] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 396.568967][ T793] usb 3-1: USB disconnect, device number 49 [ 396.655678][ T5934] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 397.863855][T10494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 397.975334][T10497] Failed to initialize the IGMP autojoin socket (err -2) [ 398.012041][ T9] usb 2-1: USB disconnect, device number 54 [ 398.308501][T10507] Failed to initialize the IGMP autojoin socket (err -2) [ 398.490379][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1219'. [ 398.928588][T10543] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 398.939916][ T793] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 399.070777][T10545] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 399.140567][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 399.184150][ T793] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 399.252562][ T793] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.596326][ T793] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.678033][ T793] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 399.717720][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.746048][ T793] usb 3-1: Product: syz [ 399.763235][ T793] usb 3-1: Manufacturer: syz [ 399.784277][ T793] usb 3-1: SerialNumber: syz [ 400.385994][ T29] audit: type=1400 audit(1775337868.504:1566): avc: denied { setopt } for pid=10559 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 400.422731][ T29] audit: type=1400 audit(1775337868.504:1567): avc: denied { ioctl } for pid=10559 comm="syz.0.1227" path="socket:[29225]" dev="sockfs" ino=29225 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.790814][ T793] usb 3-1: 0:2 : does not exist [ 401.834811][ T793] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 401.993659][ T793] usb 3-1: USB disconnect, device number 50 [ 402.027274][T10584] block nbd0: NBD_DISCONNECT [ 402.210514][T10582] syzkaller0: entered promiscuous mode [ 402.235499][T10582] syzkaller0: entered allmulticast mode [ 402.300890][T10566] infiniband syz2: set down [ 402.310517][T10566] infiniband syz2: added syzkaller0 [ 402.355755][T10566] syz2: rxe_create_qp: returned err = -2 [ 402.373558][T10595] input: syz1 as /devices/virtual/input/input69 [ 402.413696][T10566] infiniband syz2: Couldn't create ib_mad QP1 [ 402.493707][T10566] infiniband syz2: Couldn't open port 1 [ 402.550580][T10598] /dev/nullb0: Can't open blockdev [ 402.681127][T10566] RDS/IB: syz2: added [ 402.721438][T10566] smc: adding ib device syz2 with port count 1 [ 402.754989][T10566] smc: ib device syz2 port 1 has no pnetid [ 403.699503][ T29] audit: type=1400 audit(1775337871.814:1568): avc: denied { ioctl } for pid=10602 comm="syz.4.1240" path="socket:[29266]" dev="sockfs" ino=29266 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 404.005043][T10620] Failed to initialize the IGMP autojoin socket (err -2) [ 404.375954][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 404.690265][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 404.845329][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 404.899361][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.975442][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.033359][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.075040][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.111039][ T9] usb 3-1: Product: syz [ 405.131875][ T9] usb 3-1: Manufacturer: syz [ 405.149914][ T9] usb 3-1: SerialNumber: syz [ 405.239870][ T5880] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 405.328776][T10519] smc: removing ib device syz2 [ 405.404546][ T5880] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.434797][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.505750][ T5880] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.527487][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 405.579234][ T5880] usb 4-1: Product: syz [ 405.761784][ T5880] usb 4-1: Manufacturer: syz [ 406.910082][ T5880] usb 4-1: SerialNumber: syz [ 407.052116][ T5880] usb 4-1: config 0 descriptor?? [ 407.077399][ T9] usb 3-1: 0:2 : does not exist [ 407.114013][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 407.218832][ T5880] usb 4-1: selecting invalid altsetting 0 [ 407.289893][ T5852] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 407.411023][ T9] usb 3-1: USB disconnect, device number 51 [ 407.533973][ T5880] usb 4-1: USB disconnect, device number 37 [ 407.581278][ T5852] usb 1-1: not running at top speed; connect to a high speed hub [ 407.625910][ T5852] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 407.653569][ T5797] udevd[5797]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 407.724946][ T5852] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 407.929017][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.041525][ T5852] usb 1-1: Product: syz [ 408.060255][ T5852] usb 1-1: Manufacturer: syz [ 408.085140][ T5852] usb 1-1: SerialNumber: syz [ 408.560673][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.593029][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.652093][ T5852] qmi_wwan 1-1:251.0: bogus CDC Union: master=0, slave=26 [ 408.675682][ T5852] qmi_wwan 1-1:251.0: probe with driver qmi_wwan failed with error -22 [ 408.736193][ T5852] usb 1-1: USB disconnect, device number 49 [ 408.829856][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 409.012129][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 409.046033][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 409.071101][ T9] usb 5-1: config 0 has no interface number 0 [ 409.100795][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 409.135623][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 409.179808][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.231474][ T9] usb 5-1: Product: syz [ 409.235661][ T9] usb 5-1: Manufacturer: syz [ 409.268062][ T9] usb 5-1: SerialNumber: syz [ 409.345338][ T9] usb 5-1: config 0 descriptor?? [ 409.396683][T10659] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 409.559839][ T793] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 409.651212][T10659] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 409.719147][T10668] serio: Serial port ptm1 [ 409.747232][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 409.755289][ T793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.772734][ T793] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 409.786946][ T793] usb 1-1: config 1 has no interface number 0 [ 409.793501][ T793] usb 1-1: config 1 interface 93 has no altsetting 0 [ 409.803193][ T793] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a [ 409.816579][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.832807][ T793] usb 1-1: Product: syz [ 409.838861][ T793] usb 1-1: Manufacturer: syz [ 409.862862][ T793] usb 1-1: SerialNumber: syz [ 409.868841][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 409.900763][ T9] asix 5-1:0.188: probe with driver asix failed with error -61 [ 410.018411][ T29] audit: type=1400 audit(1775337878.134:1569): avc: denied { ioctl } for pid=10675 comm="syz.3.1261" path="socket:[30463]" dev="sockfs" ino=30463 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 410.085672][ T5880] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 410.329982][ T5880] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 410.345504][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.412089][ T5880] usb 3-1: config 0 descriptor?? [ 410.495836][T10682] tmpfs: Unknown parameter 'grpquota_énode_hardq†ç]3eÈ' [ 410.670362][T10682] bond2: entered promiscuous mode [ 410.680050][T10682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 410.933831][ T29] audit: type=1400 audit(1775337879.054:1570): avc: denied { ioctl } for pid=10691 comm="syz.3.1263" path="socket:[29586]" dev="sockfs" ino=29586 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 411.265579][ T5880] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 411.290256][ T5880] [drm:udl_init] *ERROR* Selecting channel failed [ 411.357570][ T5880] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 411.392845][ T5880] [drm] Initialized udl on minor 2 [ 411.416811][ T5880] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 411.435579][ T5880] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 411.448408][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 411.459521][ T5880] usb 3-1: USB disconnect, device number 52 [ 411.511794][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 411.654214][ T24] usb 5-1: USB disconnect, device number 41 [ 412.035150][ T29] audit: type=1326 audit(1775337880.154:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.204201][ T29] audit: type=1326 audit(1775337880.154:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.231027][ T29] audit: type=1326 audit(1775337880.154:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.282502][ T29] audit: type=1326 audit(1775337880.154:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.325876][ T29] audit: type=1326 audit(1775337880.154:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.363377][ T29] audit: type=1326 audit(1775337880.154:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.404712][T10724] cgroup: Unknown subsys name 'cpuset' [ 412.448556][ T29] audit: type=1326 audit(1775337880.154:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.509006][ T793] option 1-1:1.93: GSM modem (1-port) converter detected [ 412.662248][ T29] audit: type=1326 audit(1775337880.154:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.4.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f694799c819 code=0x7ffc0000 [ 412.688804][ T793] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 412.709541][ T793] usb 1-1: USB disconnect, device number 50 [ 412.739195][ T793] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 412.750432][T10730] misc userio: Invalid payload size [ 412.762146][ T793] option 1-1:1.93: device disconnected [ 413.069879][ T793] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 413.220458][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 413.237131][ T793] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 413.252089][ T793] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.282547][ T793] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.308730][ T793] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.320105][ T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.338863][ T793] usb 1-1: Product: syz [ 413.350774][ T793] usb 1-1: Manufacturer: syz [ 413.355720][ T793] usb 1-1: SerialNumber: syz [ 413.529807][ T5880] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 413.720005][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 413.952260][ T5880] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.003577][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.084173][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.184982][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.220440][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.248849][ T5880] usb 4-1: Product: syz [ 414.276732][ T5880] usb 4-1: Manufacturer: syz [ 414.353631][ T5880] usb 4-1: SerialNumber: syz [ 415.546897][ T793] usb 1-1: 0:2 : does not exist [ 415.568148][ T793] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 416.661780][T10758] bond1: Unable to set down delay as MII monitoring is disabled [ 417.227626][T10758] bond1 (unregistering): Released all slaves [ 417.278177][ T793] usb 1-1: USB disconnect, device number 51 [ 417.464256][ T5880] usb 4-1: 0:2 : does not exist [ 417.523333][ T5880] usb 4-1: USB disconnect, device number 38 [ 418.006093][T10781] can: request_module (can-proto-0) failed. [ 418.010451][ T5880] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 418.170229][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 418.183567][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.204776][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.234940][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 418.277241][T10788] block nbd1: NBD_DISCONNECT [ 418.299168][ T5880] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 418.337247][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.349821][ T5852] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 418.393179][ T5880] usb 4-1: config 0 descriptor?? [ 418.539988][ T5852] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 418.985396][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.001510][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.020459][ T5880] usbhid 4-1:0.0: can't add hid device: -71 [ 419.045453][ T5880] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 419.049928][ T5852] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 419.072770][ T5880] usb 4-1: USB disconnect, device number 39 [ 419.130161][ T5852] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 419.160351][ T5852] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 419.290151][ T5852] usb 5-1: Manufacturer: syz [ 419.543606][ T5852] usb 5-1: config 0 descriptor?? [ 420.145525][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.188490][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.241962][ T793] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 420.305966][ T793] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 421.110751][T10829] netlink: 'syz.0.1293': attribute type 10 has an invalid length. [ 421.148966][T10829] bond0: (slave wlan1): Opening slave failed [ 421.172517][T10828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.425233][T10816] hid-generic 0000:0000:0000.0021: pid 10816 passed too large report [ 421.470413][ T5852] usbhid 5-1:0.0: can't add hid device: -71 [ 421.486688][ T5852] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 421.536838][ T5852] usb 5-1: USB disconnect, device number 42 [ 421.555921][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 421.555932][ T29] audit: type=1400 audit(1775337889.674:1591): avc: denied { read } for pid=10831 comm="syz.4.1294" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 421.671376][ T29] audit: type=1400 audit(1775337889.714:1592): avc: denied { open } for pid=10831 comm="syz.4.1294" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 421.983639][ T29] audit: type=1400 audit(1775337889.714:1593): avc: denied { ioctl } for pid=10831 comm="syz.4.1294" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 422.292336][T10839] syzkaller0: entered promiscuous mode [ 422.353353][T10839] syzkaller0: entered allmulticast mode [ 425.989905][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 426.178103][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 426.203201][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.281741][ T9] usb 3-1: config 0 descriptor?? [ 427.597039][T10887] Failed to initialize the IGMP autojoin socket (err -2) [ 427.620313][T10888] Failed to initialize the IGMP autojoin socket (err -2) [ 427.646070][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 427.671068][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 427.699465][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 427.721036][ T9] [drm] Initialized udl on minor 2 [ 427.735996][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.764755][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 427.788113][ T5852] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.812343][ T9] usb 3-1: USB disconnect, device number 53 [ 428.062222][ T5852] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 428.361426][ T5859] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 428.825100][T10929] Failed to initialize the IGMP autojoin socket (err -2) [ 429.552157][ T5859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 7936, setting to 1024 [ 429.825469][ T5859] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 429.842055][ T5859] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 429.851204][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.865646][ T5859] usb 1-1: Product: syz [ 429.865701][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1319'. [ 429.902826][T10933] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1319'. [ 429.923301][ T5859] usb 1-1: Manufacturer: syz [ 429.976800][ T5859] usb 1-1: SerialNumber: syz [ 430.001552][T10914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.040045][ T5859] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 430.102184][ T29] audit: type=1400 audit(1775337898.214:1594): avc: denied { firmware_load } for pid=5852 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 430.143769][ T5852] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 432.707792][ T5852] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 432.724545][ T5852] ath9k_htc: Failed to initialize the device [ 433.134339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 433.193638][ T5866] usb 1-1: USB disconnect, device number 52 [ 433.293260][ T5866] usb 1-1: ath9k_htc: USB layer deinitialized [ 433.491190][T10951] tmpfs: Bad value for 'mpol' [ 433.579865][ T793] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 433.652817][T10961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 433.659206][T10961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 433.770224][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 433.791798][ T793] usb 3-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.821437][ T793] usb 3-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 433.857441][ T793] usb 3-1: config 0 interface 0 has no altsetting 0 [ 433.881635][ T793] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 433.913539][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.956408][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.990610][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.003684][ T793] usb 3-1: config 0 descriptor?? [ 434.139817][ T5934] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 434.259444][ T29] audit: type=1400 audit(1775337902.374:1595): avc: denied { create } for pid=10948 comm="syz.2.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 434.360949][ T5934] usb 5-1: device descriptor read/64, error -71 [ 434.464184][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.517858][ T793] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0022/input/input70 [ 434.624119][ T793] sony 0003:054C:03D5.0022: input,hidraw0: USB HID v0.08 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 434.638413][ T5934] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 434.710257][ T793] usb 3-1: USB disconnect, device number 54 [ 434.745633][T10971] fido_id[10971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 434.789854][ T5934] usb 5-1: device descriptor read/64, error -71 [ 434.909804][ T5852] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 434.918663][ T5934] usb usb5-port1: attempt power cycle [ 435.081678][ T5852] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 435.101033][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.124061][ T5852] usb 1-1: config 0 descriptor?? [ 435.153641][ T5852] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 435.375917][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.384582][ T5934] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 435.419656][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.468352][ T5934] usb 5-1: device descriptor read/8, error -71 [ 435.483138][T10976] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 436.201004][ T5934] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 436.341371][ T5852] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 436.390680][ T5934] usb 5-1: device descriptor read/8, error -71 [ 436.727318][ T5934] usb usb5-port1: unable to enumerate USB device [ 436.859685][T10982] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 436.966215][ T5852] cpia1 1-1:0.0: only firmware version 1 is supported (got: 109) [ 437.269715][T10992] input: syz1 as /devices/virtual/input/input71 [ 437.700153][T10992] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 437.741561][ T5852] usb 1-1: USB disconnect, device number 53 [ 438.492323][T11015] netlink: 'syz.0.1342': attribute type 1 has an invalid length. [ 438.517528][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 438.553627][T11015] wireguard: wireguard0: Could not create IPv4 socket [ 438.790375][T11023] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 439.558374][T11027] FAULT_INJECTION: forcing a failure. [ 439.558374][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 439.606461][T11029] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 439.616698][T11027] CPU: 0 UID: 0 PID: 11027 Comm: syz.2.1345 Tainted: G L syzkaller #0 PREEMPT(full) [ 439.616716][T11027] Tainted: [L]=SOFTLOCKUP [ 439.616720][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.616726][T11027] Call Trace: [ 439.616730][T11027] [ 439.616734][T11027] dump_stack_lvl+0x100/0x190 [ 439.616757][T11027] should_fail_ex.cold+0x5/0xa [ 439.616772][T11027] should_failslab+0xc2/0x120 [ 439.616785][T11027] __kmalloc_cache_node_noprof+0x7d/0x770 [ 439.616803][T11027] ? page_pool_create_percpu+0x7a/0xcd0 [ 439.616817][T11027] page_pool_create_percpu+0x7a/0xcd0 [ 439.616830][T11027] bpf_test_run_xdp_live+0x192/0x760 [ 439.616848][T11027] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 439.616868][T11027] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 439.616893][T11027] ? _copy_from_user+0x59/0xd0 [ 439.616905][T11027] ? bpf_test_init.isra.0+0x51/0x100 [ 439.616921][T11027] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 439.616942][T11027] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.616962][T11027] ? fput+0x79/0x100 [ 439.616975][T11027] ? __bpf_prog_get+0x97/0x2a0 [ 439.616990][T11027] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.617006][T11027] __sys_bpf+0x1725/0x4b90 [ 439.617020][T11027] ? __pfx___sys_bpf+0x10/0x10 [ 439.617031][T11027] ? proc_fail_nth_write+0x9f/0x220 [ 439.617047][T11027] ? find_held_lock+0x2b/0x80 [ 439.617071][T11027] ? find_held_lock+0x2b/0x80 [ 439.617091][T11027] ? ksys_write+0x190/0x250 [ 439.617112][T11027] ? __mutex_unlock_slowpath+0x15c/0x790 [ 439.617123][T11027] ? __fget_files+0x215/0x3d0 [ 439.617142][T11027] ? fput+0x79/0x100 [ 439.617154][T11027] ? ksys_write+0x1ac/0x250 [ 439.617164][T11027] ? __pfx_ksys_write+0x10/0x10 [ 439.617176][T11027] __x64_sys_bpf+0x7b/0xc0 [ 439.617188][T11027] ? lockdep_hardirqs_on+0x78/0x100 [ 439.617204][T11027] do_syscall_64+0x106/0xf80 [ 439.617220][T11027] ? clear_bhb_loop+0x40/0x90 [ 439.617233][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.617244][T11027] RIP: 0033:0x7fcd2579c819 [ 439.617253][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.617263][T11027] RSP: 002b:00007fcd265ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.617274][T11027] RAX: ffffffffffffffda RBX: 00007fcd25a15fa0 RCX: 00007fcd2579c819 [ 439.617280][T11027] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 439.617286][T11027] RBP: 00007fcd265ac090 R08: 0000000000000000 R09: 0000000000000000 [ 439.617292][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.617298][T11027] R13: 00007fcd25a16038 R14: 00007fcd25a15fa0 R15: 00007fff09c2d598 [ 439.617311][T11027] [ 440.275461][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1348'. [ 440.356963][T11038] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1348' resets device [ 440.476844][T11054] IPVS: Error during creation of socket; terminating [ 441.473652][T11064] input: syz1 as /devices/virtual/input/input72 [ 441.530188][T11064] sp0: Synchronizing with TNC [ 441.814872][ T5859] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 442.620604][T11068] netlink: 'syz.3.1357': attribute type 4 has an invalid length. [ 442.699802][ T5859] usb 3-1: Using ep0 maxpacket: 16 [ 442.706696][ T5859] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 442.715595][ T5859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.725830][ T5859] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.737282][ T5859] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.746477][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.754483][ T5859] usb 3-1: Product: syz [ 442.758740][ T5859] usb 3-1: Manufacturer: syz [ 442.763462][ T5859] usb 3-1: SerialNumber: syz [ 443.464242][ T5866] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 443.490091][T11084] bond3: Unable to set down delay as MII monitoring is disabled [ 443.688391][ T5866] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 443.713824][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.764632][ T5866] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 443.787667][ T5866] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 443.848973][ T5866] usb 1-1: Manufacturer: syz [ 444.469591][ T5866] usb 1-1: config 0 descriptor?? [ 444.529157][T11084] bond3 (unregistering): Released all slaves [ 445.563845][ T5866] rc_core: IR keymap rc-hauppauge not found [ 445.569940][ T5866] Registered IR keymap rc-empty [ 445.575345][ T5866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 445.616824][ T5866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input73 [ 445.651490][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 445.721705][ T5859] usb 3-1: 0:2 : does not exist [ 445.726849][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 227 [ 445.818925][ T5859] usb 3-1: USB disconnect, device number 55 [ 445.987597][T11110] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 446.643712][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.645130][ T5852] usb 1-1: USB disconnect, device number 54 [ 447.809169][T11127] input: syz1 as /devices/virtual/input/input74 [ 447.975372][T11127] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 448.066245][T11134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.086943][ T29] audit: type=1400 audit(1775337916.204:1596): avc: denied { watch_sb watch_reads } for pid=11128 comm="syz.4.1373" path="/291/blkio.throttle.io_serviced" dev="tmpfs" ino=1580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 448.259814][ T5934] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 448.440942][ T5934] usb 1-1: not running at top speed; connect to a high speed hub [ 448.482556][ T5934] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 448.533444][ T5934] usb 1-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 448.568294][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.610932][ T5934] usb 1-1: Product: syz [ 448.647813][ T5934] usb 1-1: Manufacturer: syz [ 448.786192][ T5934] usb 1-1: SerialNumber: syz [ 449.339274][T11147] random: crng reseeded on system resumption [ 449.362709][ T29] audit: type=1400 audit(1775337917.454:1597): avc: denied { setopt } for pid=11145 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 449.788724][T11133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.870242][T11133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.944804][ T5934] qmi_wwan 1-1:251.0: bogus CDC Union: master=0, slave=26 [ 449.980233][ T5934] qmi_wwan 1-1:251.0: probe with driver qmi_wwan failed with error -22 [ 450.005322][ T5934] usb 1-1: USB disconnect, device number 55 [ 450.960838][T11168] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1382'. [ 450.971317][ T29] audit: type=1400 audit(1775337919.074:1598): avc: denied { mounton } for pid=11164 comm="syz.0.1382" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.168203][T11176] input: syz1 as /devices/virtual/input/input75 [ 452.679979][ T793] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 452.728520][T11176] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 452.874627][ T793] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 452.894006][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.972586][ T793] usb 4-1: config 0 descriptor?? [ 453.294706][ T793] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 453.352232][ T793] [drm:udl_init] *ERROR* Selecting channel failed [ 453.356050][ T29] audit: type=1400 audit(1775337921.474:1599): avc: denied { setopt } for pid=11190 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 453.454429][ T793] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 453.478943][ T793] [drm] Initialized udl on minor 2 [ 453.507116][ T793] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.633473][ T5859] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 453.643588][ T793] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 453.681455][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 453.861756][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 454.125508][ T793] usb 4-1: USB disconnect, device number 40 [ 454.147305][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 454.197039][ T5859] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 454.284381][ T5859] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.310360][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.467464][ T5859] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.505685][ T5859] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.943902][ T5859] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.952993][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.130377][T11211] block nbd1: NBD_DISCONNECT [ 456.200030][T11222] usbtmc 1-1:16.0: simple usb_control_msg returned 0 [ 456.493266][ T5880] usb 1-1: USB disconnect, device number 56 [ 456.529259][T11233] Failed to initialize the IGMP autojoin socket (err -2) [ 456.681696][T11239] Failed to initialize the IGMP autojoin socket (err -2) [ 457.469900][ T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 457.849842][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 457.865459][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 457.891943][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.929814][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.961225][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.016078][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.089864][ T24] usb 1-1: Product: syz [ 458.117229][ T24] usb 1-1: Manufacturer: syz [ 458.149499][ T24] usb 1-1: SerialNumber: syz [ 458.636364][T11261] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 458.844213][T11265] mkiss: ax0: crc mode is auto. [ 459.092613][T11268] bond4: Unable to set down delay as MII monitoring is disabled [ 459.114267][T11268] bond4 (unregistering): Released all slaves [ 460.386444][ T24] usb 1-1: 0:2 : does not exist [ 460.514877][ T24] usb 1-1: USB disconnect, device number 57 [ 460.602955][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.661984][T11257] ISOFS: Unable to identify CD-ROM format. [ 462.513861][ T29] audit: type=1400 audit(1775337930.634:1600): avc: denied { create } for pid=11300 comm="syz.0.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 462.633879][ T29] audit: type=1400 audit(1775337930.634:1601): avc: denied { write } for pid=11300 comm="syz.0.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 462.989754][ T29] audit: type=1400 audit(1775337931.094:1602): avc: denied { bind } for pid=11305 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.053355][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 463.067821][ T29] audit: type=1400 audit(1775337931.094:1603): avc: denied { write } for pid=11305 comm="syz.3.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.337382][T11317] Failed to initialize the IGMP autojoin socket (err -2) [ 463.462317][ T29] audit: type=1400 audit(1775337931.584:1604): avc: denied { bind } for pid=11314 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 463.517195][ T29] audit: type=1400 audit(1775337931.614:1605): avc: denied { write } for pid=11314 comm="syz.1.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 464.769281][ T29] audit: type=1400 audit(1775337932.794:1606): avc: denied { getopt } for pid=11331 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 465.852879][T11347] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 466.237269][T11315] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 466.246899][ T5859] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 466.413881][ T5859] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 466.428049][T11315] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 466.579909][ T5852] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 466.658157][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.796057][ T5852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.813455][ T5859] usb 1-1: config 0 descriptor?? [ 466.931262][ T5852] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 467.098194][ T5852] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 468.860421][ T5859] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 468.870141][ T5859] [drm:udl_init] *ERROR* Selecting channel failed [ 468.883531][ T5852] usb 3-1: string descriptor 0 read error: -71 [ 468.899071][ T5852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.914573][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.931052][ T5852] usb 3-1: can't set config #1, error -71 [ 468.939205][ T5859] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 468.951126][ T5852] usb 3-1: USB disconnect, device number 56 [ 468.961734][ T5859] [drm] Initialized udl on minor 2 [ 469.051056][ T5859] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.063740][ T5859] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 469.080396][ T5866] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 469.088365][ T5866] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 469.096200][ T5859] usb 1-1: USB disconnect, device number 58 [ 469.532802][ T29] audit: type=1400 audit(1775337937.654:1607): avc: denied { ioctl } for pid=11366 comm="syz.1.1437" path="socket:[32950]" dev="sockfs" ino=32950 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 469.745204][ T29] audit: type=1400 audit(1775337937.684:1608): avc: denied { getopt } for pid=11366 comm="syz.1.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 469.829804][ T5852] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 469.969824][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 470.041846][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 470.089004][ T5852] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.119890][ T5852] usb 3-1: config 0 interface 0 has no altsetting 0 [ 470.120505][ T29] audit: type=1804 audit(1775337938.184:1609): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1443" name="/newroot/309/file0" dev="tmpfs" ino=1674 res=1 errno=0 [ 470.200319][ T5852] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 470.253460][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.290105][ T24] usb 4-1: device descriptor read/64, error -71 [ 470.303897][ T5852] usb 3-1: Product: syz [ 470.326706][ T5852] usb 3-1: Manufacturer: syz [ 470.431563][ T5852] usb 3-1: SerialNumber: syz [ 470.452249][ T5852] usb 3-1: config 0 descriptor?? [ 470.494352][ T29] audit: type=1400 audit(1775337938.614:1610): avc: denied { write } for pid=11396 comm="syz.0.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 470.569829][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 470.690863][ T5852] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 470.700815][ T5852] imon 3-1:0.0: unable to initialize intf0, err -90 [ 470.707858][ T5852] imon:imon_probe: failed to initialize context! [ 470.717797][ T5852] imon 3-1:0.0: unable to register, err -19 [ 470.726510][ T24] usb 4-1: device descriptor read/64, error -71 [ 470.780184][ T5852] usb 3-1: USB disconnect, device number 57 [ 470.860787][ T24] usb usb4-port1: attempt power cycle [ 471.260009][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 471.316174][ T24] usb 4-1: device descriptor read/8, error -71 [ 472.365432][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 472.762248][ T29] audit: type=1400 audit(1775337940.884:1611): avc: denied { setopt } for pid=11428 comm="syz.1.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 472.785216][T11430] netlink: 'syz.1.1456': attribute type 8 has an invalid length. [ 472.792988][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 472.804948][T11430] bond0: entered promiscuous mode [ 472.810006][T11430] bond_slave_0: entered promiscuous mode [ 472.815723][T11430] bond_slave_1: entered promiscuous mode [ 472.822509][T11430] gretap0: entered promiscuous mode [ 472.828393][T11430] bond0: left promiscuous mode [ 472.833228][T11430] bond_slave_0: left promiscuous mode [ 472.838794][T11430] bond_slave_1: left promiscuous mode [ 472.853393][T11430] gretap0: left promiscuous mode [ 472.901417][ T793] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 472.980175][ T5915] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 473.054512][ T793] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 473.063960][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.073357][ T793] usb 5-1: Product: syz [ 473.077667][ T793] usb 5-1: Manufacturer: syz [ 473.083328][ T793] usb 5-1: SerialNumber: syz [ 473.093632][ T793] usb 5-1: config 0 descriptor?? [ 473.150794][ T24] usb 4-1: device descriptor read/8, error -71 [ 473.161716][ T5915] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 473.171935][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.184907][ T5915] usb 1-1: config 0 descriptor?? [ 473.260014][ T24] usb usb4-port1: unable to enumerate USB device [ 473.310127][ T29] audit: type=1400 audit(1775337941.424:1612): avc: denied { ioctl } for pid=11426 comm="syz.4.1454" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 473.360425][ T29] audit: type=1400 audit(1775337941.484:1613): avc: denied { create } for pid=11423 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.385714][ T29] audit: type=1400 audit(1775337941.484:1614): avc: denied { write } for pid=11423 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.407027][T11436] IPv6: NLM_F_CREATE should be specified when creating new route [ 473.425184][ T29] audit: type=1400 audit(1775337941.484:1615): avc: denied { read } for pid=11423 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 473.460828][ T5915] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 473.482495][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 473.504825][ T5915] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 473.520514][ T5915] [drm] Initialized udl on minor 2 [ 473.527350][ T5915] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 473.537326][ T5915] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 473.544836][ T793] usb 5-1: Firmware: major: 32, minor: 33, hardware type: RZUSB (3) [ 473.557251][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 473.578454][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 473.587891][ T5915] usb 1-1: USB disconnect, device number 59 [ 473.587907][T11436] ipvlan1: left allmulticast mode [ 473.598900][ T29] audit: type=1400 audit(1775337941.544:1616): avc: denied { ioctl } for pid=11422 comm="syz.0.1453" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 473.654437][T11440] netlink: 'syz.1.1459': attribute type 4 has an invalid length. [ 473.675149][T11440] netlink: 'syz.1.1459': attribute type 3 has an invalid length. [ 473.685544][T11440] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1459'. [ 473.702572][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1459'. [ 473.745542][ T793] usb 5-1: failed to fetch extended address, random address set [ 473.812771][ T793] usb 5-1: USB disconnect, device number 47 [ 474.000688][ T5915] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 474.159810][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 474.173092][ T5915] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 474.182989][ T5915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.197531][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.246758][ T5915] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.273612][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.293713][ T5915] usb 2-1: Product: syz [ 474.302217][ T5915] usb 2-1: Manufacturer: syz [ 474.309166][ T5915] usb 2-1: SerialNumber: syz [ 474.539850][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 474.539892][ T29] audit: type=1400 audit(1775337942.584:1643): avc: denied { create } for pid=11449 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 474.753423][ T29] audit: type=1400 audit(1775337942.594:1644): avc: denied { connect } for pid=11449 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 474.832104][T11459] netlink: 'syz.4.1465': attribute type 3 has an invalid length. [ 474.832905][ T29] audit: type=1400 audit(1775337942.894:1645): avc: denied { mount } for pid=11458 comm="syz.4.1465" name="/" dev="ramfs" ino=33188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 474.891666][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 474.891773][ T5915] usb 2-1: 0:2 : does not exist [ 474.927570][ T29] audit: type=1400 audit(1775337942.934:1646): avc: denied { create } for pid=11458 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 474.938770][T11459] 8021q: adding VLAN 0 to HW filter on device team1 [ 474.963999][ T29] audit: type=1400 audit(1775337942.954:1647): avc: denied { write } for pid=11458 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 474.994592][ T29] audit: type=1400 audit(1775337943.034:1648): avc: denied { create } for pid=11460 comm="syz.3.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.039913][ T29] audit: type=1400 audit(1775337943.084:1649): avc: denied { write } for pid=11463 comm="syz.2.1466" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 475.067654][ T29] audit: type=1400 audit(1775337943.084:1650): avc: denied { open } for pid=11463 comm="syz.2.1466" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 475.698472][ T29] audit: type=1400 audit(1775337943.114:1651): avc: denied { ioctl } for pid=11463 comm="syz.2.1466" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 475.729981][ T793] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 475.749392][ T29] audit: type=1400 audit(1775337943.144:1652): avc: denied { ioctl } for pid=11460 comm="syz.3.1464" path="socket:[34065]" dev="sockfs" ino=34065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.159942][ T5915] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 476.324589][ T793] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 476.345224][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.358928][ T24] usb 2-1: USB disconnect, device number 55 [ 476.377115][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.404819][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.435627][ T793] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.455140][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.474082][ T793] usb 4-1: config 0 descriptor?? [ 476.501415][ T5915] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 476.517813][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.537594][ T5915] usb 1-1: config 0 descriptor?? [ 476.874318][ T5915] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 477.272437][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 477.297384][ T5915] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 477.304372][ T5915] [drm] Initialized udl on minor 2 [ 477.306632][T11485] random: crng reseeded on system resumption [ 477.312979][ T5915] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 477.324621][ T5915] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 477.334679][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 477.346827][ T5915] usb 1-1: USB disconnect, device number 60 [ 477.357318][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 478.213410][ T793] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 478.272360][ T793] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 478.294832][ T793] usb 4-1: USB disconnect, device number 45 [ 478.411724][T11505] Failed to initialize the IGMP autojoin socket (err -2) [ 478.443023][T11504] fido_id[11504]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 478.749510][T11514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 478.855649][T11519] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 480.395985][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 480.396000][ T29] audit: type=1400 audit(1775337948.514:1685): avc: denied { getopt } for pid=11532 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 480.457750][ T5866] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 480.533411][ T29] audit: type=1400 audit(1775337948.644:1686): avc: denied { create } for pid=11536 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 480.866339][ T793] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 480.866890][ T5866] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 480.890444][ T29] audit: type=1400 audit(1775337948.654:1687): avc: denied { create } for pid=11536 comm="syz.2.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 480.911036][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.958269][ T5866] usb 1-1: config 0 descriptor?? [ 480.974571][ T29] audit: type=1400 audit(1775337948.834:1688): avc: denied { read } for pid=11536 comm="syz.2.1484" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.119782][ T793] usb 2-1: Using ep0 maxpacket: 32 [ 481.126373][ T793] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 481.135566][ T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.145732][ T793] usb 2-1: config 0 has no interface number 0 [ 481.153471][ T793] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.167502][ T29] audit: type=1400 audit(1775337948.834:1689): avc: denied { open } for pid=11536 comm="syz.2.1484" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.197862][ T29] audit: type=1400 audit(1775337948.844:1690): avc: denied { ioctl } for pid=11536 comm="syz.2.1484" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 481.301507][ T29] audit: type=1400 audit(1775337948.854:1691): avc: denied { mounton } for pid=11536 comm="syz.2.1484" path="/277/file1" dev="tmpfs" ino=1506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 481.481115][ T793] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 481.490472][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.499507][ T793] usb 2-1: Product: syz [ 481.503718][ T793] usb 2-1: Manufacturer: syz [ 481.508316][ T793] usb 2-1: SerialNumber: syz [ 481.521315][ T793] usb 2-1: config 0 descriptor?? [ 481.538887][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.558220][ T29] audit: type=1400 audit(1775337949.354:1692): avc: denied { execute } for pid=11543 comm="syz.3.1487" name="file0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 481.581189][ T5866] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 481.589693][ T5866] [drm:udl_init] *ERROR* Selecting channel failed [ 481.599347][ T29] audit: type=1400 audit(1775337949.354:1693): avc: denied { execute_no_trans } for pid=11543 comm="syz.3.1487" path="/313/file0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 481.682871][ T5866] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 481.712485][ T5852] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 481.720818][ T29] audit: type=1400 audit(1775337949.744:1694): avc: denied { create } for pid=11550 comm="syz.2.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 481.762929][ T5866] [drm] Initialized udl on minor 2 [ 481.775825][ T5866] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.784612][ T5866] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 481.798837][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 481.851660][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 481.875329][ T5866] usb 1-1: USB disconnect, device number 61 [ 481.883693][T11557] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 481.943853][ T5852] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 481.985074][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.033361][ T5852] usb 5-1: config 0 descriptor?? [ 482.151295][ T5915] usb 2-1: USB disconnect, device number 56 [ 482.300695][ T5852] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 482.320676][ T5852] [drm:udl_init] *ERROR* Selecting channel failed [ 482.351830][ T5852] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 482.360471][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 482.374179][ T5852] [drm] Initialized udl on minor 2 [ 482.391950][ T5852] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.410321][ T5852] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 482.425077][ T5859] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 482.433705][ T5859] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 482.480207][ T5852] usb 5-1: USB disconnect, device number 48 [ 482.571127][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 482.663932][ T9] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 482.708267][ T9] usb 4-1: config 0 has no interface number 0 [ 482.869792][ T9] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.885582][ T9] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.905770][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 482.929620][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.956549][ T9] usb 4-1: config 0 descriptor?? [ 483.464599][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 483.586821][T11583] netlink: 'syz.2.1496': attribute type 2 has an invalid length. [ 483.605876][T11586] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1495'. [ 483.628888][ T9] hid (null): global environment stack underflow [ 483.797790][T11590] Failed to initialize the IGMP autojoin socket (err -2) [ 483.860623][ T5915] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 483.982936][T11568] fuse: Bad value for 'fd' [ 484.021207][ T5915] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 484.049274][ T5915] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 484.103368][ T5915] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 484.150921][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.205195][ T5915] usb 3-1: Product: syz [ 484.227856][ T5915] usb 3-1: Manufacturer: syz [ 484.254897][ T5915] usb 3-1: SerialNumber: syz [ 484.297464][ T5915] usb 3-1: config 0 descriptor?? [ 484.377835][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 485.032603][ T5915] usb 3-1: USB disconnect, device number 58 [ 485.319897][ T9] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 485.502910][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 485.502926][ T29] audit: type=1400 audit(1775337953.624:1735): avc: denied { read write } for pid=11621 comm="syz.4.1502" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 485.599381][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 485.639112][ T29] audit: type=1400 audit(1775337953.694:1736): avc: denied { open } for pid=11621 comm="syz.4.1502" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 485.723169][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 485.747519][T11624] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 485.766257][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 485.768972][ T29] audit: type=1400 audit(1775337953.694:1737): avc: denied { mount } for pid=11621 comm="syz.4.1502" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 485.777491][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 485.957374][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.958979][ T29] audit: type=1400 audit(1775337953.814:1738): avc: denied { mount } for pid=11621 comm="syz.4.1502" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 486.072510][ T9] usb 1-1: Product: syz [ 486.084440][ T9] usb 1-1: Manufacturer: syz [ 486.107903][ T9] usb 1-1: SerialNumber: syz [ 486.141199][ T9] usb 1-1: config 0 descriptor?? [ 486.323175][ T5866] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 486.380600][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.426748][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.455813][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.463414][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.470809][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 486.482657][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 486.494421][ T9] imon 1-1:0.0: unable to initialize intf0, err -90 [ 486.512695][ T9] imon:imon_probe: failed to initialize context! [ 486.519139][ T9] imon 1-1:0.0: unable to register, err -19 [ 486.537390][ T29] audit: type=1400 audit(1775337954.654:1739): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 486.621199][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 486.661276][ T5866] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 486.670059][ T9] usb 1-1: USB disconnect, device number 62 [ 486.700694][ T5866] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 486.721038][ T5866] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.749104][ T5866] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 486.768786][ T5866] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 486.790437][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.817275][ T5866] usb 2-1: config 0 descriptor?? [ 486.859808][ T5915] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 487.011459][ T5915] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 487.020634][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.040269][ T5915] usb 5-1: config 0 descriptor?? [ 487.051161][ T29] audit: type=1400 audit(1775337955.164:1740): avc: denied { create } for pid=11650 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 487.269512][T11653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.278271][T11653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.288897][ T5934] usb 2-1: USB disconnect, device number 57 [ 487.296731][ T29] audit: type=1400 audit(1775337955.334:1741): avc: denied { bind } for pid=11650 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 487.746889][ T5915] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 487.776119][ T5915] [drm:udl_init] *ERROR* Selecting channel failed [ 487.889655][ T5915] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 487.910367][ T5915] [drm] Initialized udl on minor 2 [ 487.935488][ T5915] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 487.961280][ T5915] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 487.975015][ T5934] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 487.999488][ T5915] usb 5-1: USB disconnect, device number 49 [ 488.007588][ T5934] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 488.687730][ T29] audit: type=1400 audit(1775337956.804:1742): avc: denied { write } for pid=11660 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.050392][ T29] audit: type=1400 audit(1775337956.804:1743): avc: denied { nlmsg_write } for pid=11660 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 489.148806][ T29] audit: type=1400 audit(1775337957.264:1744): avc: denied { read } for pid=11667 comm="syz.1.1511" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 490.180137][T11652] delete_channel: no stack [ 492.659784][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 492.659799][ T29] audit: type=1400 audit(1775337960.774:1753): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 492.808152][ T29] audit: type=1400 audit(1775337960.924:1754): avc: denied { ioctl } for pid=11693 comm="syz.1.1521" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34744 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 493.274317][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1523'. [ 493.526017][T11709] siw: device registration error -23 [ 493.718864][T11715] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 493.744689][T11715] sch_tbf: peakrate 257 is lower than or equals to rate 5532883085005303327 ! [ 493.819966][ T29] audit: type=1400 audit(1775337961.884:1755): avc: denied { getopt } for pid=11706 comm="syz.4.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 494.041739][ T29] audit: type=1400 audit(1775337961.894:1756): avc: denied { watch watch_reads } for pid=11706 comm="syz.4.1515" path="/proc/1133/fdinfo" dev="proc" ino=34838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 494.509813][ T5934] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 494.597286][ T29] audit: type=1400 audit(1775337962.714:1757): avc: denied { nlmsg_read } for pid=11720 comm="syz.4.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 494.741723][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 494.762449][ T5934] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 494.777985][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.794713][T11724] overlay: ./bus is not a directory [ 494.805762][ T5934] usb 2-1: config 0 has no interface number 0 [ 494.827481][ T5934] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.876936][ T5934] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 494.906358][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.925130][ T5934] usb 2-1: Product: syz [ 494.933010][ T5934] usb 2-1: Manufacturer: syz [ 494.937823][ T5934] usb 2-1: SerialNumber: syz [ 495.684070][ T5934] usb 2-1: config 0 descriptor?? [ 495.699405][ T5934] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 495.712655][ T5934] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 495.902276][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 496.260114][ T5934] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 496.267709][ T5934] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 496.859636][ T29] audit: type=1400 audit(1775337964.974:1758): avc: denied { unlink } for pid=11745 comm="syz.0.1533" name="#1e" dev="tmpfs" ino=1653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 496.942549][ T29] audit: type=1400 audit(1775337965.004:1759): avc: denied { mount } for pid=11745 comm="syz.0.1533" name="/" dev="overlay" ino=1649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 497.013677][ T29] audit: type=1400 audit(1775337965.024:1760): avc: denied { create } for pid=11745 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 497.039857][T11597] Set syz1 is full, maxelem 65536 reached [ 497.080441][ T5852] usb 4-1: USB disconnect, device number 46 [ 497.126936][ T29] audit: type=1400 audit(1775337965.244:1761): avc: denied { getopt } for pid=11745 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 497.223950][ T29] audit: type=1400 audit(1775337965.274:1762): avc: denied { ioctl } for pid=11745 comm="syz.0.1533" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 497.760263][ T5852] usb 2-1: USB disconnect, device number 58 [ 498.059227][ T29] audit: type=1400 audit(1775337966.174:1763): avc: denied { read } for pid=11754 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 498.119808][ T29] audit: type=1400 audit(1775337966.174:1764): avc: denied { open } for pid=11754 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 498.120179][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.173367][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.183607][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.194630][ T29] audit: type=1400 audit(1775337966.184:1765): avc: denied { ioctl } for pid=11754 comm="syz-executor" path="socket:[34975]" dev="sockfs" ino=34975 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 498.229342][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.239265][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.260561][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.321944][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.329450][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.338187][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.345710][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.563494][ T29] audit: type=1400 audit(1775337966.474:1766): avc: denied { mounton } for pid=11754 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 498.665886][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.678870][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.749777][T11771] syz.1.1537 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 498.794961][T11771] ubi31: attaching mtd0 [ 498.849929][T11771] ubi31: scanning is finished [ 498.886613][T11771] ubi31: empty MTD device detected [ 498.917663][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.937677][ T29] audit: type=1400 audit(1775337967.054:1767): avc: denied { mount } for pid=11763 comm="syz.1.1537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 498.961810][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.026661][ T29] audit: type=1400 audit(1775337967.054:1768): avc: denied { mounton } for pid=11763 comm="syz.1.1537" path="/288/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 499.105833][T11770] Failed to initialize the IGMP autojoin socket (err -2) [ 499.134283][T11754] Failed to initialize the IGMP autojoin socket (err -2) [ 499.161365][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.189191][ T29] audit: type=1400 audit(1775337967.054:1769): avc: denied { read } for pid=11763 comm="syz.1.1537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 499.222557][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.310146][T11771] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 499.317731][T11771] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 499.453576][ T29] audit: type=1400 audit(1775337967.054:1770): avc: denied { read } for pid=11763 comm="syz.1.1537" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 499.906505][ T29] audit: type=1400 audit(1775337967.054:1771): avc: denied { open } for pid=11763 comm="syz.1.1537" path="/288/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 499.929203][ T29] audit: type=1400 audit(1775337967.054:1772): avc: denied { read } for pid=11763 comm="syz.1.1537" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 499.959738][T11771] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 499.966783][T11771] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 500.015334][T11771] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 500.025793][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.035787][T11771] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 500.077199][T11771] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1781265769 [ 500.118044][T11771] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 500.153369][T11780] ubi31: background thread "ubi_bgt31d" started, PID 11780 [ 500.178636][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.390585][ T5129] Bluetooth: hci2: command tx timeout [ 500.549235][T11754] chnl_net:caif_netlink_parms(): no params data found [ 500.836365][T11793] netlink: 'syz.4.1544': attribute type 21 has an invalid length. [ 501.142971][T11792] Failed to initialize the IGMP autojoin socket (err -2) [ 501.150842][T11793] netlink: 'syz.4.1544': attribute type 6 has an invalid length. [ 501.158598][T11793] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1544'. [ 501.542086][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.549198][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.567522][T11754] bridge_slave_0: entered allmulticast mode [ 501.583688][T11754] bridge_slave_0: entered promiscuous mode [ 501.604467][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.639910][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.667429][T11754] bridge_slave_1: entered allmulticast mode [ 501.707462][T11754] bridge_slave_1: entered promiscuous mode [ 502.366387][T11754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.449776][ T5129] Bluetooth: hci2: command tx timeout [ 503.082292][T11754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.429898][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 503.429938][ T29] audit: type=1400 audit(1775337971.544:1785): avc: denied { setcheckreqprot } for pid=11818 comm="syz.1.1548" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 503.771913][ T29] audit: type=1400 audit(1775337971.864:1786): avc: denied { setopt } for pid=11831 comm="syz.4.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 503.915931][T11754] team0: Port device team_slave_0 added [ 503.921715][ T29] audit: type=1400 audit(1775337971.864:1787): avc: denied { write } for pid=11831 comm="syz.4.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 503.976762][T11754] team0: Port device team_slave_1 added [ 504.027141][T11845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1554'. [ 504.219945][ T5915] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 504.352144][ T49] bridge_slave_1: left allmulticast mode [ 504.358149][ T49] bridge_slave_1: left promiscuous mode [ 504.391532][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1555'. [ 504.416415][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.423247][ T5915] usb 5-1: Invalid ep0 maxpacket: 16 [ 504.532042][ T5129] Bluetooth: hci2: command tx timeout [ 504.548066][ T49] bridge_slave_0: left allmulticast mode [ 504.563460][ T49] bridge_slave_0: left promiscuous mode [ 504.569222][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.652505][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 504.671428][ T5915] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 505.133645][ T29] audit: type=1326 audit(1775337973.254:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11849 comm="syz.0.1556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f186879c819 code=0x0 [ 505.220634][ T29] audit: type=1400 audit(1775337973.284:1789): avc: denied { sys_module } for pid=11847 comm="syz.1.1555" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 505.276426][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 505.289863][ T29] audit: type=1400 audit(1775337973.394:1790): avc: denied { setopt } for pid=11847 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.329877][ T5915] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.335576][ T5915] usb usb5-port1: attempt power cycle [ 505.440715][ T793] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 505.451192][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.464020][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.477474][ T49] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 505.495409][ T49] bond0 (unregistering): Released all slaves [ 505.543489][T11754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.570027][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.590474][ T793] usb 1-1: device descriptor read/64, error -71 [ 505.598961][T11754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.644770][T11863] Failed to initialize the IGMP autojoin socket (err -2) [ 505.652345][ T49] !: left promiscuous mode [ 505.680067][ T5915] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 505.694363][T11754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.702237][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.711174][ T5915] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.730116][T11754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.774685][ T49] : left promiscuous mode [ 505.879831][ T793] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 505.906068][ T5915] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 505.947659][T11754] hsr_slave_0: entered promiscuous mode [ 505.962388][ T5915] usb 5-1: Invalid ep0 maxpacket: 16 [ 505.965007][T11754] hsr_slave_1: entered promiscuous mode [ 505.974698][T11754] debugfs: 'hsr0' already exists in 'hsr' [ 505.984694][T11754] Cannot create hsr debugfs directory [ 505.984894][ T5915] usb usb5-port1: unable to enumerate USB device [ 506.049845][ T793] usb 1-1: device descriptor read/64, error -71 [ 506.173056][ T793] usb usb1-port1: attempt power cycle [ 506.189495][T11869] block nbd2: NBD_DISCONNECT [ 506.412042][ T29] audit: type=1400 audit(1775337974.534:1791): avc: denied { bind } for pid=11870 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.458114][ T29] audit: type=1400 audit(1775337974.534:1792): avc: denied { listen } for pid=11870 comm="syz.2.1560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 506.495511][ T49] hsr_slave_0: left promiscuous mode [ 506.510962][ T49] hsr_slave_1: left promiscuous mode [ 506.527336][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.540300][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.549851][ T793] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 506.560395][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.590026][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.597846][ T793] usb 1-1: device descriptor read/8, error -71 [ 506.609974][ T5129] Bluetooth: hci2: command tx timeout [ 506.619193][ T49] veth1_macvtap: left promiscuous mode [ 506.636252][ T49] veth0_macvtap: left promiscuous mode [ 506.644759][ T49] veth1_vlan: left promiscuous mode [ 506.651253][ T49] veth0_vlan: left promiscuous mode [ 506.845764][ T793] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 506.855027][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 506.880336][ T793] usb 1-1: device descriptor read/8, error -71 [ 506.889076][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x81 [ 506.904254][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 506.942447][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 506.967714][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 506.976655][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.013038][ T793] usb usb1-port1: unable to enumerate USB device [ 507.019856][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x81 [ 507.066312][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x81 [ 507.099588][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 507.125484][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.157966][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.187786][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x81 [ 507.202583][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 507.242872][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 507.270317][T11875] kvm: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1 [ 507.289563][ T49] team0 (unregistering): Port device team_slave_1 removed [ 507.303305][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.312829][ T49] team0 (unregistering): Port device team_slave_0 removed [ 507.315755][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.364545][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.398994][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 507.411193][ T793] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 507.437604][T11875] kvm_intel: kvm [11874]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x81 [ 507.570399][T11886] block nbd0: NBD_DISCONNECT [ 507.582526][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.592741][ T793] usb 5-1: config 1 interface 0 has no altsetting 0 [ 507.602552][ T793] usb 5-1: string descriptor 0 read error: -22 [ 507.608807][ T793] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.40 [ 507.628249][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.122492][ T29] audit: type=1400 audit(1775337976.244:1793): avc: denied { ioctl } for pid=11879 comm="syz.4.1562" path="socket:[35505]" dev="sockfs" ino=35505 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 508.157655][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.164273][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.171463][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.182572][T11889] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -2 [ 508.212384][ T793] hid (null): invalid report_count -1447239332 [ 508.218572][ T793] hid (null): unknown global tag 0xce [ 508.254142][ T29] audit: type=1400 audit(1775337976.294:1794): avc: denied { create } for pid=11892 comm="syz.0.1567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 508.286182][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.307198][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.346821][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.354976][T11889] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.446842][ T793] hid-corsair-void 0003:1B1C:0A53.0025: invalid report_count -1447239332 [ 508.463570][ T793] hid-corsair-void 0003:1B1C:0A53.0025: item 0 4 1 9 parsing failed [ 508.490238][ T793] hid-corsair-void 0003:1B1C:0A53.0025: parse failed (reason: -22) [ 508.498232][ T793] hid-corsair-void 0003:1B1C:0A53.0025: probe with driver hid-corsair-void failed with error -22 [ 508.592388][T11902] block nbd2: NBD_DISCONNECT [ 508.603671][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 508.603686][ T29] audit: type=1400 audit(1775337976.724:1796): avc: denied { create } for pid=11890 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 508.640683][ T29] audit: type=1400 audit(1775337976.724:1797): avc: denied { setopt } for pid=11890 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 508.726959][T11754] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 508.761657][T11754] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 508.819666][T11754] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 508.848466][T11754] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 509.384869][T11913] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 509.666817][ T29] audit: type=1400 audit(1775337977.784:1798): avc: denied { read } for pid=11915 comm="syz.0.1572" path="socket:[36480]" dev="sockfs" ino=36480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.680374][T11754] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.903485][ T29] audit: type=1400 audit(1775337978.014:1799): avc: denied { write } for pid=11903 comm="syz.2.1570" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 509.905258][T10535] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.932913][T10535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.987560][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.994663][T10518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.011822][ T29] audit: type=1400 audit(1775337978.014:1800): avc: denied { open } for pid=11903 comm="syz.2.1570" path="/298/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 510.149345][ T29] audit: type=1400 audit(1775337978.064:1801): avc: denied { ioctl } for pid=11903 comm="syz.2.1570" path="/298/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 510.179254][ T9] usb 5-1: USB disconnect, device number 54 [ 512.070579][ T29] audit: type=1400 audit(1775337979.994:1802): avc: denied { create } for pid=11932 comm="syz.0.1577" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 512.326373][ T29] audit: type=1400 audit(1775337980.314:1803): avc: denied { unlink } for pid=5804 comm="syz-executor" name="file0" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 513.310016][T11754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.507847][ T29] audit: type=1400 audit(1775337981.624:1804): avc: denied { connect } for pid=11957 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 513.594937][ T29] audit: type=1400 audit(1775337981.624:1805): avc: denied { write } for pid=11957 comm="syz.2.1583" path="socket:[35747]" dev="sockfs" ino=35747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 513.823701][T11971] : entered promiscuous mode [ 514.415973][ T29] audit: type=1400 audit(1775337982.534:1806): avc: denied { read write } for pid=11980 comm="syz.0.1588" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.422037][T11982] program syz.0.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.497174][T11981] block nbd1: NBD_DISCONNECT [ 514.587250][ T29] audit: type=1400 audit(1775337982.534:1807): avc: denied { open } for pid=11980 comm="syz.0.1588" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.665734][ T29] audit: type=1400 audit(1775337982.534:1808): avc: denied { ioctl } for pid=11980 comm="syz.0.1588" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.850086][ T5934] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 515.201586][T11754] veth0_vlan: entered promiscuous mode [ 515.260211][ T29] audit: type=1400 audit(1775337983.384:1809): avc: denied { map } for pid=11988 comm="syz.4.1590" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 515.279830][ T5934] usb 1-1: device descriptor read/64, error -71 [ 515.289248][T11754] veth1_vlan: entered promiscuous mode [ 515.530364][T11754] veth0_macvtap: entered promiscuous mode [ 515.560429][ T5934] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 515.570804][T11754] veth1_macvtap: entered promiscuous mode [ 515.730569][ T5934] usb 1-1: device descriptor read/64, error -71 [ 515.988249][T11754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.068189][T11754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.131870][ T5934] usb usb1-port1: attempt power cycle [ 516.137382][T11754] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 516.509905][ T5934] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 516.575759][ T5934] usb 1-1: device descriptor read/8, error -71 [ 516.849995][ T5934] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 516.934066][ T5934] usb 1-1: device descriptor read/8, error -71 [ 517.115318][ T5934] usb usb1-port1: unable to enumerate USB device [ 517.394791][T11754] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 517.415391][T11754] wireguard: wg0: Could not create IPv4 socket [ 517.425203][T11754] wireguard: wg1: Could not create IPv4 socket [ 517.520832][T11754] wireguard: wg2: Could not create IPv4 socket [ 517.854208][T12017] Failed to initialize the IGMP autojoin socket (err -2) [ 518.603832][T12029] fuse: Unknown parameter 'user_id00000000000000000000' [ 518.659923][ T29] audit: type=1400 audit(1775337986.774:1810): avc: denied { read write } for pid=12028 comm="syz.2.1600" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 518.818454][ T29] audit: type=1400 audit(1775337986.774:1811): avc: denied { open } for pid=12028 comm="syz.2.1600" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 519.337379][ T29] audit: type=1400 audit(1775337986.844:1812): avc: denied { ioctl } for pid=12028 comm="syz.2.1600" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 519.734836][ T5915] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 519.892242][ T5915] usb 3-1: device descriptor read/64, error -71 [ 520.161003][ T5915] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 520.419949][ T5915] usb 3-1: device descriptor read/64, error -71 [ 520.653893][ T5915] usb usb3-port1: attempt power cycle [ 521.202917][ T793] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 521.349843][ T5915] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 521.411485][ T5915] usb 3-1: device descriptor read/8, error -71 [ 521.437262][ T793] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 521.459753][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.488686][ T793] usb 1-1: config 0 descriptor?? [ 521.661751][T12072] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 521.740045][ T5915] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 521.774519][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.784425][ T5915] usb 3-1: device descriptor read/8, error -71 [ 521.855194][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.863786][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.874824][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.882273][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.935255][T12077] Failed to initialize the IGMP autojoin socket (err -2) [ 522.049803][ T5915] usb usb3-port1: unable to enumerate USB device [ 523.068511][T12087] Failed to initialize the IGMP autojoin socket (err -2) [ 523.724369][ T29] audit: type=1400 audit(1775337991.514:1813): avc: denied { write } for pid=12042 comm="syz.2.1603" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 523.826861][ T793] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 523.835055][ T29] audit: type=1400 audit(1775337991.514:1814): avc: denied { open } for pid=12042 comm="syz.2.1603" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 523.861647][ T793] [drm:udl_init] *ERROR* Selecting channel failed [ 523.891676][ T29] audit: type=1400 audit(1775337991.524:1815): avc: denied { map } for pid=12042 comm="syz.2.1603" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 523.974199][ T5819] Bluetooth: hci2: command tx timeout [ 524.179766][ T29] audit: type=1400 audit(1775337991.524:1816): avc: denied { execute } for pid=12042 comm="syz.2.1603" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.189584][ T793] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 524.227594][ T793] [drm] Initialized udl on minor 2 [ 524.236151][ T793] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 524.292468][ T793] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 524.326076][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 524.354196][ T793] usb 1-1: USB disconnect, device number 71 [ 524.365761][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 524.498305][T12103] FAULT_INJECTION: forcing a failure. [ 524.498305][T12103] name failslab, interval 1, probability 0, space 0, times 0 [ 524.542665][T12103] CPU: 1 UID: 0 PID: 12103 Comm: syz.1.1616 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.542694][T12103] Tainted: [L]=SOFTLOCKUP [ 524.542700][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.542710][T12103] Call Trace: [ 524.542715][T12103] [ 524.542721][T12103] dump_stack_lvl+0x100/0x190 [ 524.542754][T12103] should_fail_ex.cold+0x5/0xa [ 524.542777][T12103] ? tomoyo_realpath_from_path+0xb6/0x690 [ 524.542802][T12103] should_failslab+0xc2/0x120 [ 524.542828][T12103] __kmalloc_noprof+0xe0/0x850 [ 524.542858][T12103] tomoyo_realpath_from_path+0xb6/0x690 [ 524.542893][T12103] tomoyo_path_number_perm+0x23c/0x580 [ 524.542914][T12103] ? tomoyo_path_number_perm+0x22e/0x580 [ 524.542940][T12103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 524.542991][T12103] ? find_held_lock+0x2b/0x80 [ 524.543013][T12103] ? __fget_files+0x215/0x3d0 [ 524.543031][T12103] ? hook_file_ioctl_common+0x146/0x410 [ 524.543056][T12103] ? __fget_files+0x21f/0x3d0 [ 524.543079][T12103] security_file_ioctl+0xd3/0x230 [ 524.543106][T12103] __x64_sys_ioctl+0xb7/0x210 [ 524.543135][T12103] do_syscall_64+0x106/0xf80 [ 524.543162][T12103] ? clear_bhb_loop+0x40/0x90 [ 524.543184][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.543201][T12103] RIP: 0033:0x7f814a99c819 [ 524.543216][T12103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.543232][T12103] RSP: 002b:00007f814b772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.543248][T12103] RAX: ffffffffffffffda RBX: 00007f814ac15fa0 RCX: 00007f814a99c819 [ 524.543259][T12103] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 524.543269][T12103] RBP: 00007f814b772090 R08: 0000000000000000 R09: 0000000000000000 [ 524.543279][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.543289][T12103] R13: 00007f814ac16038 R14: 00007f814ac15fa0 R15: 00007ffedf65a688 [ 524.543313][T12103] [ 524.543414][T12103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 525.390074][ T793] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 525.572553][ T793] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 525.598634][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.691121][ T793] usb 1-1: config 0 descriptor?? [ 525.751276][T12077] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 525.812098][T12077] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 525.894958][T12077] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 525.973837][T12077] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 526.049835][ T5819] Bluetooth: hci2: command tx timeout [ 526.091221][ T793] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 526.122540][ T793] [drm:udl_init] *ERROR* Selecting channel failed [ 526.488402][ T793] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 526.525524][ T793] [drm] Initialized udl on minor 2 [ 526.566986][ T793] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.600063][ T793] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 526.631319][ T5934] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 526.647720][ T793] usb 1-1: USB disconnect, device number 72 [ 526.660003][ T5934] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 526.778926][ T29] audit: type=1326 audit(1775337994.894:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12149 comm="syz.2.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd2579c819 code=0x0 [ 527.192539][T12163] Failed to initialize the IGMP autojoin socket (err -2) [ 527.569953][ T5934] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 527.887689][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 527.919279][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 528.217106][ T5819] Bluetooth: hci2: command tx timeout [ 528.217200][ T29] audit: type=1400 audit(1775337996.174:1818): avc: denied { ioctl } for pid=12166 comm="syz.4.1628" path="socket:[37534]" dev="sockfs" ino=37534 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.251264][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.282421][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 528.309821][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 528.331940][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 528.343038][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 528.355965][T12180] tipc: Started in network mode [ 528.361953][T12180] tipc: Node identity 82475007ea48, cluster identity 4711 [ 528.369064][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.383728][T12180] tipc: Enabled bearer , priority 0 [ 528.390410][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 528.402315][T12180] syzkaller0: entered promiscuous mode [ 528.407850][T12180] syzkaller0: entered allmulticast mode [ 528.413835][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 528.426157][T12182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1630'. [ 528.445457][ T5934] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 528.455578][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 528.476866][T12180] tipc: Resetting bearer [ 528.497748][ T5934] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.541832][T12180] tipc: Resetting bearer [ 528.548848][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 528.576845][ T5934] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 528.593192][ T5934] usb 2-1: string descriptor 0 read error: -22 [ 528.599493][ T5934] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 528.610161][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.637633][ T5934] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 528.658689][T12180] tipc: Disabling bearer [ 528.879970][T12197] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1631'. [ 528.919657][ T29] audit: type=1400 audit(1775337997.034:1819): avc: denied { open } for pid=12189 comm="syz.2.1632" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 528.955837][T12197] openvswitch: netlink: Missing key (keys=40, expected=80) [ 529.025190][ T29] audit: type=1400 audit(1775337997.134:1820): avc: denied { bind } for pid=12160 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.045213][T12077] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 529.118398][T12200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.170599][T12077] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 529.197225][T12200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.222219][T12077] wireguard: wg0: Could not create IPv4 socket [ 529.262937][T12077] wireguard: wg1: Could not create IPv4 socket [ 529.264536][T12200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1627'. [ 529.298865][T12200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 529.300563][T12077] wireguard: wg2: Could not create IPv4 socket [ 529.979793][ T5934] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 530.429795][ T29] audit: type=1400 audit(1775337998.394:1821): avc: denied { connect } for pid=12224 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 530.460397][ T5934] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 530.490203][ T29] audit: type=1400 audit(1775337998.454:1822): avc: denied { accept } for pid=12224 comm="syz.0.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 530.533185][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.576483][ T5934] usb 5-1: config 0 descriptor?? [ 530.829493][ T5934] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 530.842825][ T5934] [drm:udl_init] *ERROR* Selecting channel failed [ 530.882903][ T5934] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 530.905943][ T5934] [drm] Initialized udl on minor 2 [ 530.939784][ T5934] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 530.970623][ T5934] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 530.987515][ T793] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 531.004384][ T793] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 531.016641][ T5934] usb 5-1: USB disconnect, device number 55 [ 531.039971][ T793] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 531.089962][ T5129] Bluetooth: hci5: command 0x1003 tx timeout [ 531.096392][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 531.396108][T11755] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.405108][T11755] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.413849][T11755] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.571258][T12251] Failed to initialize the IGMP autojoin socket (err -2) [ 532.374750][T11755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.390501][T11755] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.523850][T12249] Failed to initialize the IGMP autojoin socket (err -2) [ 533.173492][T12267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.231750][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1643'. [ 533.255836][ T5934] usb 2-1: USB disconnect, device number 59 [ 534.019251][T12282] block nbd4: NBD_DISCONNECT [ 534.328594][T12249] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 534.463109][T11755] Bluetooth: hci2: command tx timeout [ 534.663711][T12249] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 534.694368][ T29] audit: type=1400 audit(1775338002.814:1823): avc: denied { ioctl } for pid=12291 comm="syz.2.1650" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 534.811912][T12249] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 534.839103][T12249] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 534.868603][T12294] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 534.874827][T12294] [U] J"—e:ÀÆ" [ 535.027357][T12303] Failed to initialize the IGMP autojoin socket (err -2) [ 536.468012][T12325] netlink: 'syz.4.1656': attribute type 1 has an invalid length. [ 536.539905][T11755] Bluetooth: hci2: command tx timeout [ 536.646308][T12334] syzkaller0: entered promiscuous mode [ 536.672061][T12334] syzkaller0: entered allmulticast mode [ 536.900736][T12332] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 537.093656][ T29] audit: type=1400 audit(1775338005.204:1824): avc: denied { create } for pid=12336 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 537.204986][ T29] audit: type=1400 audit(1775338005.214:1825): avc: denied { write } for pid=12336 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 537.229798][ T5934] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 537.294664][ T29] audit: type=1400 audit(1775338005.254:1826): avc: denied { write } for pid=12336 comm="syz.4.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 537.553241][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 537.561882][T12249] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 537.832318][T12249] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 537.851420][ T5934] usb 2-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.912904][T12249] wireguard: wg0: Could not create IPv4 socket [ 537.942861][T12249] wireguard: wg1: Could not create IPv4 socket [ 537.959495][ T5934] usb 2-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 537.979695][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 537.991663][ T5934] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 538.002814][T12249] wireguard: wg2: Could not create IPv4 socket [ 538.024991][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.061784][ T5934] usb 2-1: config 0 descriptor?? [ 538.373306][ T29] audit: type=1400 audit(1775338006.494:1827): avc: denied { setopt } for pid=12372 comm="syz.0.1662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 538.529897][ T29] audit: type=1400 audit(1775338006.644:1828): avc: denied { write } for pid=12372 comm="syz.0.1662" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 538.703430][T12381] Failed to initialize the IGMP autojoin socket (err -2) [ 539.575664][ T5934] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0026/input/input78 [ 539.590368][T12375] hub 1-0:1.0: USB hub found [ 539.624907][T12375] hub 1-0:1.0: 1 port detected [ 539.631124][ T29] audit: type=1400 audit(1775338007.734:1829): avc: denied { read } for pid=5162 comm="acpid" name="js0" dev="devtmpfs" ino=3950 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.663687][ T29] audit: type=1400 audit(1775338007.734:1830): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3950 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.697338][ T29] audit: type=1400 audit(1775338007.814:1831): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3950 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 539.794007][ T5934] sony 0003:054C:03D5.0026: input,hidraw0: USB HID v0.08 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 539.884217][ T5934] usb 2-1: USB disconnect, device number 60 [ 539.926440][ T24] kernel read not supported for file /media0 (pid: 24 comm: kworker/1:0) [ 540.060416][T12389] fido_id[12389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 540.107221][ T29] audit: type=1400 audit(1775338008.224:1832): avc: denied { create } for pid=12396 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.128486][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 540.140041][ T29] audit: type=1400 audit(1775338008.254:1833): avc: denied { connect } for pid=12396 comm="syz.2.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 540.278132][T12401] bond3: Unable to set down delay as MII monitoring is disabled [ 540.292769][T12401] bond3 (unregistering): Released all slaves [ 540.319551][T12405] block nbd4: NBD_DISCONNECT [ 540.517827][ T29] audit: type=1400 audit(1775338008.604:1834): avc: denied { mount } for pid=12404 comm="syz.1.1670" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 540.543899][T12412] kAFS: unable to lookup cell 'ÿ' [ 540.557612][T12412] kAFS: unable to lookup cell '(,c¾Ì' [ 540.631374][T12412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.682634][T12419] kernel profiling enabled (shift: 9) [ 540.692990][ T29] audit: type=1400 audit(1775338008.784:1835): avc: denied { create } for pid=12416 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 540.789612][ T29] audit: type=1400 audit(1775338008.834:1836): avc: denied { write } for pid=12416 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 540.824035][T12427] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 540.856732][ T29] audit: type=1400 audit(1775338008.844:1837): avc: denied { read } for pid=12416 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 540.902427][T12430] openvswitch: netlink: Missing key (keys=2020040, expected=100) [ 540.945248][ T29] audit: type=1400 audit(1775338008.844:1838): avc: denied { ioctl } for pid=12416 comm="syz.2.1672" path="socket:[39940]" dev="sockfs" ino=39940 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 541.006608][ T29] audit: type=1400 audit(1775338008.844:1839): avc: denied { setattr } for pid=12416 comm="syz.2.1672" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 541.099797][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 541.249756][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 541.279013][ T9] usb 3-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.326211][ T9] usb 3-1: config 0 interface 0 altsetting 37 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.326245][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 541.326272][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 541.434413][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.459580][ T9] usb 3-1: config 0 descriptor?? [ 542.019140][ T9] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0027/input/input79 [ 542.169213][ T9] sony 0003:054C:03D5.0027: input,hidraw0: USB HID v0.08 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 542.265240][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.274208][ T9] usb 3-1: USB disconnect, device number 63 [ 542.288243][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.304444][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.320363][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.327891][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 542.338297][T12451] misc userio: The device must be registered before sending interrupts [ 542.366163][T12447] Failed to initialize the IGMP autojoin socket (err -2) [ 542.399293][T12448] fido_id[12448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 542.754650][T12473] block nbd2: NBD_DISCONNECT [ 542.769880][ T24] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 542.777505][ T5934] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 542.852222][ T29] audit: type=1400 audit(1775338010.974:1840): avc: denied { write } for pid=12476 comm="syz.2.1682" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 542.940698][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 542.953328][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 542.973019][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.983737][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 543.000495][ T5934] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 543.009323][ T5934] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.029817][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.038864][ T24] usb 5-1: config 0 has no interface number 0 [ 543.050107][ T24] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.071850][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.082358][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.090625][ T5934] usb 1-1: Product: syz [ 543.094902][ T5934] usb 1-1: Manufacturer: syz [ 543.099524][ T5934] usb 1-1: SerialNumber: syz [ 543.108217][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 543.119861][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.135347][ T24] usb 5-1: Product: syz [ 543.139554][ T24] usb 5-1: Manufacturer: syz [ 543.144842][ T24] usb 5-1: SerialNumber: syz [ 543.160693][ T24] usb 5-1: config 0 descriptor?? [ 543.162446][T12485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1684'. [ 543.168747][ T24] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 543.209314][ T24] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 543.356936][T12447] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 543.372607][ T24] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 543.414002][T12447] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 543.431392][T12447] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 543.455291][T12447] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 543.666077][ T24] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 543.737142][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 543.855586][T12462] wg2: entered promiscuous mode [ 544.451186][T11755] Bluetooth: hci2: command tx timeout [ 545.845824][T12516] openvswitch: netlink: IP tunnel dst address not specified [ 545.875865][ T5934] usb 1-1: 0:2 : does not exist [ 545.876863][ T9] usb 5-1: USB disconnect, device number 56 [ 545.916177][ T5934] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 545.927271][ T9] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 546.019041][ T29] audit: type=1400 audit(1775338014.134:1841): avc: denied { map } for pid=12522 comm="syz.0.1689" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 546.094333][ T5934] usb 1-1: USB disconnect, device number 73 [ 546.129132][ T29] audit: type=1400 audit(1775338014.134:1842): avc: denied { execute } for pid=12522 comm="syz.0.1689" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 546.195703][T12533] block nbd4: NBD_DISCONNECT [ 546.277688][ T29] audit: type=1400 audit(1775338014.214:1843): avc: denied { create } for pid=12528 comm="syz.1.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 546.535063][T11755] Bluetooth: hci2: command tx timeout [ 547.100592][ T29] audit: type=1400 audit(1775338015.214:1844): avc: denied { write } for pid=12539 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 547.602378][T12567] Failed to initialize the IGMP autojoin socket (err -2) [ 547.805899][T12447] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 547.853906][T12447] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 547.875739][T12447] wireguard: wg0: Could not create IPv4 socket [ 547.884736][ T5934] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 547.892439][ T793] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 547.906438][T12447] wireguard: wg1: Could not create IPv4 socket [ 547.923147][T12447] wireguard: wg2: Could not create IPv4 socket [ 548.113535][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 548.118696][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 548.126781][ T5934] usb 1-1: config 0 interface 0 altsetting 37 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.138242][ T793] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 548.609749][ C1] ------------[ cut here ]------------ [ 548.615473][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 548.622144][ C1] WARNING: kernel/workqueue.c:2270 at __queue_work+0xd08/0x1150, CPU#1: syz.1.1701/12582 [ 548.631937][ C1] Modules linked in: [ 548.635953][ C1] CPU: 1 UID: 0 PID: 12582 Comm: syz.1.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 548.646888][ C1] Tainted: [L]=SOFTLOCKUP [ 548.651198][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 548.661256][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 548.666623][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 78 d9 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 05 39 00 90 0f 0b 90 e9 b2 f5 [ 548.686220][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010046 [ 548.692262][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007237151 [ 548.700207][ C1] RDX: ffff8880388db978 RSI: ffffffff8a84c960 RDI: ffffffff90dcd170 [ 548.708151][ C1] RBP: ffff8880391b8a70 R08: 0000000000000005 R09: 0000000000000000 [ 548.716096][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880388db800 [ 548.724046][ C1] R13: 1ffff9200014118f R14: ffffffff81d00910 R15: 0000000000000001 [ 548.731997][ C1] FS: 00007f8148bf66c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 548.740901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.747460][ C1] CR2: 000056238a98dce8 CR3: 0000000048d3d000 CR4: 00000000003526f0 [ 548.755409][ C1] Call Trace: [ 548.758664][ C1] [ 548.761493][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 548.767278][ C1] call_timer_fn+0x19a/0x670 [ 548.771858][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 548.776960][ C1] ? __run_timers+0x560/0xb30 [ 548.781625][ C1] ? __run_timers+0x560/0xb30 [ 548.786287][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 548.792078][ C1] __run_timers+0x570/0xb30 [ 548.796575][ C1] ? __pfx___run_timers+0x10/0x10 [ 548.801584][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 548.806591][ C1] run_timer_base+0x114/0x190 [ 548.811250][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 548.816431][ C1] run_timer_softirq+0x1a/0x50 [ 548.821184][ C1] handle_softirqs+0x1eb/0x9e0 [ 548.825975][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 548.831264][ C1] __irq_exit_rcu+0xef/0x150 [ 548.835844][ C1] irq_exit_rcu+0x9/0x30 [ 548.840073][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 548.845695][ C1] [ 548.848603][ C1] [ 548.851510][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 548.857475][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 548.863869][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 fd 50 f6 48 89 df e8 be 4d 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 6e 41 f6 65 8b 05 5e 5e 7a 08 85 c0 74 16 5b [ 548.883458][ C1] RSP: 0018:ffffc9000d40f758 EFLAGS: 00000246 [ 548.889496][ C1] RAX: 0000000000000006 RBX: ffff888040d82400 RCX: 0000000000000040 [ 548.897440][ C1] RDX: 0000000000000000 RSI: ffffffff8de7a701 RDI: ffffffff8c1b1e20 [ 548.905386][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 548.913330][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888079413dc0 [ 548.921275][ C1] R13: 0000000000000246 R14: ffff888040d823e8 R15: ffffc9000d40f8d8 [ 548.929229][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 548.934668][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 548.940016][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 548.945981][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 548.951156][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 548.956850][ C1] ? __lock_acquire+0x4a5/0x2630 [ 548.961765][ C1] ? irqentry_exit+0x180/0x670 [ 548.966507][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 548.971694][ C1] ? iovec_from_user+0xda/0x140 [ 548.976531][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 548.981444][ C1] ____sys_recvmsg+0x5b3/0x640 [ 548.986190][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 548.991713][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 548.996976][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 549.001808][ C1] ? kfree+0x2ec/0x6b0 [ 549.005855][ C1] ? irqentry_exit+0x180/0x670 [ 549.010630][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 549.015293][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 549.020490][ C1] ? __pfx___might_resched+0x10/0x10 [ 549.025774][ C1] do_recvmmsg+0x301/0x760 [ 549.030182][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 549.035104][ C1] ? do_futex+0x192/0x350 [ 549.039429][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 549.044356][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 549.049372][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 549.054990][ C1] do_syscall_64+0x106/0xf80 [ 549.059566][ C1] ? clear_bhb_loop+0x40/0x90 [ 549.064225][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.070106][ C1] RIP: 0033:0x7f814a99c819 [ 549.074504][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.094090][ C1] RSP: 002b:00007f8148bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 549.102481][ C1] RAX: ffffffffffffffda RBX: 00007f814ac16090 RCX: 00007f814a99c819 [ 549.110428][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 549.118372][ C1] RBP: 00007f814aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 549.126313][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 549.134267][ C1] R13: 00007f814ac16128 R14: 00007f814ac16090 R15: 00007ffedf65a688 [ 549.142220][ C1] [ 549.145213][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 549.152471][ C1] CPU: 1 UID: 0 PID: 12582 Comm: syz.1.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.163383][ C1] Tainted: [L]=SOFTLOCKUP [ 549.167697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 549.177729][ C1] Call Trace: [ 549.180989][ C1] [ 549.183819][ C1] dump_stack_lvl+0x100/0x190 [ 549.188485][ C1] vpanic+0x552/0x970 [ 549.192451][ C1] ? __pfx_vpanic+0x10/0x10 [ 549.196932][ C1] panic+0xd1/0xe0 [ 549.200627][ C1] ? __pfx_panic+0x10/0x10 [ 549.205066][ C1] ? check_panic_on_warn+0x1f/0x90 [ 549.210168][ C1] check_panic_on_warn.cold+0x19/0x34 [ 549.215527][ C1] ? __queue_work+0xd08/0x1150 [ 549.220276][ C1] __warn.cold+0x191/0x348 [ 549.224672][ C1] __report_bug+0x296/0x3d0 [ 549.229156][ C1] ? __queue_work+0xd08/0x1150 [ 549.233895][ C1] ? __pfx___report_bug+0x10/0x10 [ 549.238900][ C1] ? unix_dgram_recvmsg+0xd0/0x110 [ 549.243985][ C1] ? ____sys_recvmsg+0x5b3/0x640 [ 549.248895][ C1] ? ___sys_recvmsg+0x16a/0x1a0 [ 549.253719][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 549.258999][ C1] ? look_up_lock_class+0x64/0x120 [ 549.264093][ C1] report_bug_entry+0xe1/0x290 [ 549.268846][ C1] ? __queue_work+0xd0c/0x1150 [ 549.273586][ C1] handle_bug+0x1cd/0x2a0 [ 549.277889][ C1] exc_invalid_op+0x17/0x50 [ 549.282374][ C1] asm_exc_invalid_op+0x1a/0x20 [ 549.287197][ C1] RIP: 0010:__queue_work+0xd0c/0x1150 [ 549.292545][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 04 04 00 00 48 8d 3d 78 d9 0c 0f 48 8b 75 18 <67> 48 0f b9 3a e9 2a f7 ff ff e8 15 05 39 00 90 0f 0b 90 e9 b2 f5 [ 549.312222][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00010046 [ 549.318263][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff11007237151 [ 549.326207][ C1] RDX: ffff8880388db978 RSI: ffffffff8a84c960 RDI: ffffffff90dcd170 [ 549.334155][ C1] RBP: ffff8880391b8a70 R08: 0000000000000005 R09: 0000000000000000 [ 549.342107][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880388db800 [ 549.350053][ C1] R13: 1ffff9200014118f R14: ffffffff81d00910 R15: 0000000000000001 [ 549.358000][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 549.363790][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 549.369054][ C1] ? __queue_work+0xcda/0x1150 [ 549.373806][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 549.379588][ C1] call_timer_fn+0x19a/0x670 [ 549.384162][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 549.389256][ C1] ? __run_timers+0x560/0xb30 [ 549.393920][ C1] ? __run_timers+0x560/0xb30 [ 549.398595][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 549.404378][ C1] __run_timers+0x570/0xb30 [ 549.408875][ C1] ? __pfx___run_timers+0x10/0x10 [ 549.413883][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 549.418889][ C1] run_timer_base+0x114/0x190 [ 549.423546][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 549.428733][ C1] run_timer_softirq+0x1a/0x50 [ 549.433474][ C1] handle_softirqs+0x1eb/0x9e0 [ 549.438220][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 549.443493][ C1] __irq_exit_rcu+0xef/0x150 [ 549.448059][ C1] irq_exit_rcu+0x9/0x30 [ 549.452277][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 549.457887][ C1] [ 549.460805][ C1] [ 549.463711][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 549.469664][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 549.476062][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 fd 50 f6 48 89 df e8 be 4d 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 65 6e 41 f6 65 8b 05 5e 5e 7a 08 85 c0 74 16 5b [ 549.495651][ C1] RSP: 0018:ffffc9000d40f758 EFLAGS: 00000246 [ 549.501788][ C1] RAX: 0000000000000006 RBX: ffff888040d82400 RCX: 0000000000000040 [ 549.509737][ C1] RDX: 0000000000000000 RSI: ffffffff8de7a701 RDI: ffffffff8c1b1e20 [ 549.517690][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 549.525636][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888079413dc0 [ 549.533588][ C1] R13: 0000000000000246 R14: ffff888040d823e8 R15: ffffc9000d40f8d8 [ 549.541539][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 549.546988][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 549.552336][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 549.558294][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 549.563483][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 549.569178][ C1] ? __lock_acquire+0x4a5/0x2630 [ 549.574088][ C1] ? irqentry_exit+0x180/0x670 [ 549.578829][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 549.584009][ C1] ? iovec_from_user+0xda/0x140 [ 549.588837][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 549.593749][ C1] ____sys_recvmsg+0x5b3/0x640 [ 549.598488][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 549.604018][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 549.609290][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 549.614116][ C1] ? kfree+0x2ec/0x6b0 [ 549.618168][ C1] ? irqentry_exit+0x180/0x670 [ 549.622914][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 549.627567][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 549.632753][ C1] ? __pfx___might_resched+0x10/0x10 [ 549.638023][ C1] do_recvmmsg+0x301/0x760 [ 549.642418][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 549.647333][ C1] ? do_futex+0x192/0x350 [ 549.651644][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 549.656556][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 549.661570][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 549.667098][ C1] do_syscall_64+0x106/0xf80 [ 549.671676][ C1] ? clear_bhb_loop+0x40/0x90 [ 549.676340][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.682205][ C1] RIP: 0033:0x7f814a99c819 [ 549.686606][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.706199][ C1] RSP: 002b:00007f8148bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 549.714594][ C1] RAX: ffffffffffffffda RBX: 00007f814ac16090 RCX: 00007f814a99c819 [ 549.722549][ C1] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000003 [ 549.730491][ C1] RBP: 00007f814aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 549.738435][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 549.746393][ C1] R13: 00007f814ac16128 R14: 00007f814ac16090 R15: 00007ffedf65a688 [ 549.754351][ C1] [ 549.757466][ C1] Kernel Offset: disabled [ 549.761762][ C1] Rebooting in 86400 seconds..