last executing test programs: 3m59.594451481s ago: executing program 0 (id=28): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 3m58.493729847s ago: executing program 0 (id=31): ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000340)) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x230, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, {0x1d0, 0x1, [@m_mirred={0x90, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xc, 0x20000000, 0xa0b, 0x5}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xffffffff, 0x5, 0x10, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4025, 0x4, 0x0, 0x4, 0x3}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd8, 0x20, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1, 0x1, 0x3, 0x7fffffff}}]}, {0x94, 0x6, "e0aea23d6eebeeab55912fc34eaa42db9e333843f06623eebc400332e1193f0aa2ca3bde15a5339fd5c84031b447623e46e977dc90ae5093fbcc0c980afee0982f29e31cd2a86384c5da3fe8e2d0c745e465d5c34d02cc44c9ca17414f1501a3c89b1eadfc2035c01d6134a3da1eb9bfb036f8450b6ecf93ea651e257d49666dc1035d3a661455eba1476b5308c35c11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x64, 0x2, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x1, 0x20000000, 0x81, 0xfff}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xe}]}, {0xf, 0x6, "1df7fae888e399ecc544ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x804}, 0x0) ustat(0x6, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r4, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 3m55.342004515s ago: executing program 0 (id=35): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0xc0098) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={0x0, &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) 3m50.128328472s ago: executing program 0 (id=41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3m41.738658055s ago: executing program 0 (id=59): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x2004, 0x6, 0x3}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000180)="09524c8d869c", 0x6}], 0x2}, 0x24008004) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x64) 3m39.556396003s ago: executing program 0 (id=62): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0xfffffffd, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x3c}}, 0x844) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1f, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x0, "36dad83aea"}]}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES32], 0x0) 3m37.254142208s ago: executing program 32 (id=62): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0xfffffffd, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x3c}}, 0x844) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1f, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x0, "36dad83aea"}]}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES32], 0x0) 23.155210576s ago: executing program 1 (id=455): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 22.170390157s ago: executing program 1 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x18, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x2800}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{}, {0x84e00000, 0x3}]}, 0x18, 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) r7 = msgget$private(0x0, 0x790) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x39, 0x9}, 0x6, 0x9, 0x0, 0xffffffff, 0xc, 0x8a01}) 16.553186789s ago: executing program 4 (id=475): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 15.641755016s ago: executing program 4 (id=478): socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x7c}}, 0x50) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c20000000000000000000800034000000006"], 0x1c}, 0x1, 0x0, 0x0, 0x10024804}, 0x24040808) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) 15.64040438s ago: executing program 1 (id=479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e93589da069ca1c95c9848606f772b085337a7948a4befba4647c3438f6fe6e4e76c467a482e259fe50b9780d6795edee1d217a7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$AUDIT_GET(r0, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x2, 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendto$inet(r4, 0x0, 0x0, 0x4010, 0x0, 0x0) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x12, 0x24, "156375f462ba0167bfeefc9a838d504c65f2d00e6474945f4196e9c7276613de8fb47904"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_ifreq(r3, 0x8990, 0x0) 14.500405778s ago: executing program 4 (id=482): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000005c0)=@get={0x1, &(0x7f00000018c0)=""/4096, 0x3d}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000002740), 0x0, 0x6, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) 13.681365022s ago: executing program 3 (id=483): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r1, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d53049e1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = fsopen(&(0x7f00000004c0)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000680)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) close(r5) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 13.232976804s ago: executing program 4 (id=484): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0xfffffffd, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x3c}}, 0x844) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) syz_emit_ethernet(0x55, &(0x7f0000000280)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1f, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x0, "36dad83aea"}]}}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES32], 0x0) 12.759442128s ago: executing program 3 (id=487): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14002b624100"/17], 0x14}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x14, 0x8001, 0x3, 0x0, 0x3, 0xb}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000081, &(0x7f0000001480)={[{@userxattr}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}, {@uid_gt}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000200)={0x4e, 0x2, 0x3, "11010100001400000100005c4b7c1500000000f100", 0x32315559}) 12.72487326s ago: executing program 2 (id=488): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000300)="21c7d8b2ea3bdf7ba5784778f0b2fb2909167079dc4c61a65e11b3ab3841", 0x1e, 0xfffffffffffffffc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x22) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000480)={'\x00', 0x40, 0xa, 0x1fe, 0x40000004, 0x10}) unlinkat(r4, 0x0, 0x200) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') lseek(r7, 0x2, 0x1) getdents64(r7, 0x0, 0x25) syz_io_uring_setup(0x31c7, 0x0, 0x0, &(0x7f00000005c0)) 11.461474323s ago: executing program 1 (id=490): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) memfd_secret(0x80000) r6 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f0000000280", 0x2a}], 0x1}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) 11.444599006s ago: executing program 2 (id=491): mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x00']) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x24003, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) close(0xffffffffffffffff) 9.56140855s ago: executing program 1 (id=493): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 7.379978416s ago: executing program 5 (id=495): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) 6.829473405s ago: executing program 4 (id=496): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000) r2 = syz_open_dev$vim2m(0x0, 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, 0x0, 0x24004052) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f00000003c0)) fcntl$notify(r5, 0x402, 0x11) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, 0x0) 5.836383023s ago: executing program 5 (id=497): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(0xffffffffffffffff, 0x80) accept$netrom(0xffffffffffffffff, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 5.027246713s ago: executing program 3 (id=498): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r2, 0x3517, 0x173d, 0x42, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) memfd_secret(0x80000) r6 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f0000000280", 0x2a}], 0x1}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f0000000000)) 4.518602263s ago: executing program 5 (id=499): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @empty, 0x8f}, 0x1c) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x1, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x100) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x10, 0x1, 0x1, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x50313459}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1, 0x9, 0x401) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000fddbdf252100000008000300", @ANYRES32=r5], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 3.528704762s ago: executing program 2 (id=500): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 3.427337611s ago: executing program 1 (id=501): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e93589da069ca1c95c9848606f772b085337a7948a4befba4647c3438f6fe6e4e76c467a482e259fe50b9780d6795edee1d217a7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$AUDIT_GET(r0, 0x0, 0x40010) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x2, 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendto$inet(r4, 0x0, 0x0, 0x4010, 0x0, 0x0) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x12, 0x24, "156375f462ba0167bfeefc9a838d504c65f2d00e6474945f4196e9c7276613de8fb47904"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_ifreq(r3, 0x8990, 0x0) 3.426424614s ago: executing program 3 (id=502): syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x82) unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{}, 0x0, &(0x7f0000000b80), 0x1000000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000009f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000c00)=ANY=[@ANYBLOB="28fb5bd6d3ed281d7a65b3c259543f361a5c213ebea3369b36d2b847beb4480c111844172b0de9ba42f2567a82239445ccd73a795d263ca2484a1c12cf95706e0457f8d311edd4f151709254693037f9d70be88da25ea7cd0da3d6c2f6208e799440d658c266330462e40b4a5ab445d4e7ed278e84c3626474d0bff2decbf83ee764a55ffb4fa692ac202ccecd903d49b22ed5235e4bb33df576758c25d9df4caaac46d6bdcac13cd6a49bb1612501b9d1c972413c8e49872f8dd258d636af8c1fb5f5d60c57369618ad769f03e172f3a3a2f394909897e0ffb421f944618cb7bd1a88a8b8eba3849850a064825b96efcfea44ef493320", @ANYRES16], 0xa05c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x5b, &(0x7f0000000040)}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffff4, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.398119862s ago: executing program 3 (id=503): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) 2.368007393s ago: executing program 2 (id=504): sched_setscheduler(0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x3, 0xff}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18820000000000000000000000ba61ea278ec9a73b0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) openat$cgroup_ro(r3, &(0x7f00000006c0)='devices.list\x00', 0x0, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x96}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result={0xfff, 0x75}}, {0x0, 0xff, 0x0, 0x0, @time, {}, {}, @time}], 0x70) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x4) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) 2.115046984s ago: executing program 5 (id=505): syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaef2, 0x0, 0x2, 0x3fdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r0 = socket$inet(0xa, 0x801, 0x8000) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x1, @rand_addr=0x64010101}, 0x10) listen(r0, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = getpid() syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000440)={0x48}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000080)=0x7) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0), 0x8) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r6, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 2.061485283s ago: executing program 4 (id=506): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(adiantum(lrw(serpent),aes-asm,ghash-ce-sync),sha512_m'}, 0x58) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r5 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.26160728s ago: executing program 3 (id=507): iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@host}) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x87) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=r4], 0x90}}, 0x0) sendmmsg(r2, 0x0, 0x0, 0x0) gettid() 1.057472663s ago: executing program 5 (id=508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x4}, @window={0x3, 0x2, 0x800}, @timestamp, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @sack_perm, @sack_perm], 0x8) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x33) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0x8, 0x6) 748.00909ms ago: executing program 2 (id=509): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) 146.853762ms ago: executing program 2 (id=510): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) 0s ago: executing program 5 (id=511): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = getpid() syz_pidfd_open(r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) gettid() syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000002d80)=@deltfilter={0x664, 0x2d, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x7, 0x3}, {0xf, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @filter_kind_options=@f_route={{0xa}, {0x190, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1}]}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_ife={0xb4, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "cc66d38a012f40737324b3d7b7d1c39a5e814c81dd3f0c80ce71e642445adc4bc514c4800b5e2ca075bb474723001ddbd71c7939c2882903aab4da1e4d719f834fe0059b25269b4e7ed1428d8f6ff1aeabae9d05b46e19eb58fe0564d8d3673c9be0b5ab9e60071652cf16909199081eb0014c985b188684398c60e6209810a9dc0e0252ebae7606"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}, @m_bpf={0x4c, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x21, 0x6, "5ec775b30be2147b326af1002837afba496531cd39af84a2ba663596dd"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x70, 0x13, 0x0, 0x0, {{0x9}, {0x4}, {0x42, 0x6, "b7a5cb647105ce3568daad85543f21c753849ef463a243cf9d3455c444a7d8cb9231cc5468c7c2dcd8c87f09a643910be5aac6594f99b98ed94d9a58c058"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x20005}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x45c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffff5f5, 0xc9c0, 0x0, 0xfffffffe, 0x4, 0x0, 0x3, 0x3, 0xffffffff, 0x79ab, 0x80000000, 0x5e6, 0x401, 0x7fffffff, 0xcdf, 0x6, 0x290, 0x6, 0xf, 0x8, 0x9, 0x40, 0x8f, 0x6, 0x830, 0x8, 0x70d, 0x4, 0x260b8235, 0x40, 0x8, 0x2, 0x5, 0x7, 0x1000, 0xfffffffe, 0x2a, 0x587f, 0x9, 0x7, 0x9, 0xfff, 0x7, 0x6, 0x4, 0x1, 0x428, 0x81, 0x2, 0x5, 0x3, 0x1, 0x8, 0x1, 0x3ee, 0x9, 0x5, 0x1, 0x6, 0x400, 0x1, 0x4, 0xa, 0x7, 0xbe2, 0x1, 0x2, 0x7, 0x9, 0x246, 0x0, 0x5a19081b, 0xad60, 0x0, 0x7, 0x3, 0xee, 0x0, 0x3, 0x5, 0x9, 0x4, 0x4, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0xffff, 0x3, 0x401, 0x8, 0x302df170, 0xe, 0x0, 0x9, 0x401, 0x8, 0x3787, 0x4, 0x8, 0x4, 0x1, 0x8, 0xd6f, 0x8000, 0x9, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8001, 0x7, 0x6, 0x69ce, 0x7ff, 0x5, 0x0, 0x2, 0x7ff, 0x4, 0x9, 0x6, 0x2, 0x8, 0x3, 0x6, 0x4, 0x0, 0x7c6d, 0x98a6, 0x0, 0x687c, 0xfff, 0x9, 0x80000000, 0x80000001, 0xaed1, 0x0, 0x3, 0x7, 0xb, 0x8, 0xbf, 0x3, 0x787, 0x5, 0x3ff, 0x2, 0x77737d4f, 0x80000000, 0x9, 0x3ff, 0x9ac, 0xfffffffe, 0xffffffff, 0x2, 0x80000001, 0x1, 0x0, 0xfffffffe, 0x3, 0xa6, 0x867, 0x0, 0x3, 0xfffffff1, 0x7, 0xff, 0xfff, 0x1000, 0x100, 0xfffffff8, 0x8, 0x2, 0x1000, 0x1a, 0x3, 0xb, 0x54b, 0x1, 0x5, 0x4, 0xfffffff9, 0x30, 0xfffffffd, 0x0, 0x4, 0x3, 0xb2, 0x0, 0x1, 0x6, 0xe, 0x6b0c, 0x5, 0x7fff, 0x7, 0x1000, 0x0, 0xf5, 0x9, 0x7fff, 0x8, 0x0, 0x1, 0x7, 0x800, 0x1, 0x3, 0x81, 0x0, 0x2, 0x8c9a, 0x3, 0x5, 0x5, 0xd0, 0x6, 0x7, 0x6, 0x2, 0x3, 0x5, 0x3, 0x2, 0x9, 0x3, 0x7, 0x7, 0x6, 0x3, 0x6, 0x7ff, 0x66, 0x8, 0x4, 0x8000, 0x7, 0x4409, 0x6, 0x3, 0x3, 0x7, 0x5, 0x2, 0x100, 0x2, 0x7, 0x9, 0x10001, 0x2f, 0x9, 0xd, 0x6a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ca6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x5, 0x4, 0x200, {0x9, 0x0, 0x6, 0x6, 0x6ec6, 0x2}, {0x51, 0x0, 0x4, 0xb, 0x3ff, 0x2}, 0x8001, 0x10, 0x600000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xe07c}]}, 0x664}, 0x1, 0x0, 0x0, 0x2004c000}, 0x48014) gettid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 900295][ T24] usb 2-1: config 0 has no interface number 0 [ 79.907214][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 79.914532][ T30] audit: type=1400 audit(1747070613.386:130): avc: denied { open } for pid=5922 comm="syz.2.9" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 79.952152][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 79.971090][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.979905][ T24] usb 2-1: Product: syz [ 79.985658][ T24] usb 2-1: Manufacturer: syz [ 79.990337][ T24] usb 2-1: SerialNumber: syz [ 79.999358][ T24] usb 2-1: config 0 descriptor?? [ 80.109786][ T2130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.155671][ T30] audit: type=1400 audit(1747070613.646:131): avc: denied { create } for pid=5924 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.197157][ T2130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.347194][ T30] audit: type=1400 audit(1747070613.656:132): avc: denied { bind } for pid=5924 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 80.471044][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.051848][ T30] audit: type=1400 audit(1747070613.666:133): avc: denied { name_bind } for pid=5924 comm="syz.3.4" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.090392][ T30] audit: type=1400 audit(1747070613.666:134): avc: denied { node_bind } for pid=5924 comm="syz.3.4" saddr=172.20.20.20 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 81.123026][ T5928] Lens B: ================= START STATUS ================= [ 81.132301][ T5928] Lens B: Focus, Absolute: 0 [ 81.137648][ T5928] Lens B: ================== END STATUS ================== [ 81.218546][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.263255][ T5930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.317577][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.346489][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.432218][ T30] audit: type=1400 audit(1747070613.696:135): avc: denied { getopt } for pid=5924 comm="syz.3.4" laddr=172.20.20.20 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.494708][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.689521][ T91] cfg80211: failed to load regulatory.db [ 81.773181][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.858856][ T30] audit: type=1400 audit(1747070613.736:136): avc: denied { allowed } for pid=5924 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.892589][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.128701][ T30] audit: type=1400 audit(1747070613.736:137): avc: denied { create } for pid=5924 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.228989][ T5923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 82.301681][ T5817] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.483893][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.549195][ T30] audit: type=1400 audit(1747070613.746:138): avc: denied { map } for pid=5924 comm="syz.3.4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.613773][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.630318][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.671034][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 82.687919][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.721043][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.727262][ T24] usb 2-1: USB disconnect, device number 2 [ 82.730553][ T5817] usb 4-1: config 0 has no interfaces? [ 82.782210][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.823663][ T5817] usb 4-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=b5.17 [ 82.826034][ T5936] openvswitch: netlink: Multiple metadata blocks provided [ 82.886275][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.951648][ T5817] usb 4-1: Product: syz [ 82.998675][ T5817] usb 4-1: Manufacturer: syz [ 83.067051][ T5817] usb 4-1: SerialNumber: syz [ 83.202037][ T5817] usb 4-1: config 0 descriptor?? [ 83.977120][ T5870] usb 3-1: USB disconnect, device number 2 [ 84.903705][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 84.903720][ T30] audit: type=1400 audit(1747070618.416:149): avc: denied { ioctl } for pid=5947 comm="syz.1.13" path="socket:[8232]" dev="sockfs" ino=8232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.144889][ T30] audit: type=1400 audit(1747070618.456:150): avc: denied { read } for pid=5947 comm="syz.1.13" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.347716][ T30] audit: type=1400 audit(1747070618.456:151): avc: denied { open } for pid=5947 comm="syz.1.13" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.722916][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.738153][ T30] audit: type=1400 audit(1747070618.516:153): avc: denied { read write } for pid=5947 comm="syz.1.13" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.997470][ T5943] input: syz1 as /devices/virtual/input/input5 [ 86.009291][ T5943] Zero length message leads to an empty skb [ 86.037104][ T30] audit: type=1400 audit(1747070618.526:154): avc: denied { open } for pid=5947 comm="syz.1.13" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.070784][ T30] audit: type=1400 audit(1747070618.486:152): avc: denied { setopt } for pid=5944 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.111228][ T30] audit: type=1400 audit(1747070618.686:155): avc: denied { setopt } for pid=5933 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.137774][ T30] audit: type=1400 audit(1747070619.006:156): avc: denied { create } for pid=5948 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.300694][ T30] audit: type=1400 audit(1747070619.046:157): avc: denied { read write } for pid=5948 comm="syz.4.5" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.695974][ T30] audit: type=1400 audit(1747070619.056:158): avc: denied { open } for pid=5948 comm="syz.4.5" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 87.096707][ T5979] Cannot find add_set index 0 as target [ 87.471737][ T5979] syz.1.15 (5979): drop_caches: 2 [ 87.794651][ T5983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 87.857114][ T5983] input: syz1 as /devices/virtual/input/input6 [ 88.219242][ T5967] ceph: No mds server is up or the cluster is laggy [ 88.227969][ T24] libceph: connect (1)[c::]:6789 error -101 [ 89.735640][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 89.955416][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 89.955433][ T30] audit: type=1400 audit(1747070623.466:173): avc: denied { create } for pid=5995 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.078816][ T30] audit: type=1400 audit(1747070623.526:174): avc: denied { name_bind } for pid=5989 comm="syz.2.18" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.288307][ T5817] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 90.335381][ T30] audit: type=1400 audit(1747070623.526:175): avc: denied { node_bind } for pid=5989 comm="syz.2.18" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.383231][ T30] audit: type=1400 audit(1747070623.626:176): avc: denied { create } for pid=5999 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.409390][ T30] audit: type=1400 audit(1747070623.636:177): avc: denied { create } for pid=5989 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 90.501347][ T5817] usb 1-1: device descriptor read/64, error -71 [ 90.784493][ T5817] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 90.802792][ T6007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 90.816248][ T30] audit: type=1400 audit(1747070624.316:178): avc: denied { write } for pid=6002 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.874241][ T5870] usb 4-1: USB disconnect, device number 2 [ 90.970626][ T5817] usb 1-1: device descriptor read/64, error -71 [ 91.083781][ T5817] usb usb1-port1: attempt power cycle [ 91.200710][ T30] audit: type=1400 audit(1747070624.626:179): avc: denied { write } for pid=6009 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 91.740762][ T6005] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 91.768795][ T30] audit: type=1400 audit(1747070625.226:180): avc: denied { lock } for pid=6008 comm="syz.3.22" path="socket:[8291]" dev="sockfs" ino=8291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 91.970693][ T5817] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 91.980452][ T30] audit: type=1400 audit(1747070625.476:181): avc: denied { read } for pid=6008 comm="syz.3.22" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.040562][ T5817] usb 1-1: device descriptor read/8, error -71 [ 92.128534][ T30] audit: type=1400 audit(1747070625.476:182): avc: denied { open } for pid=6008 comm="syz.3.22" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.280612][ T5817] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 92.351312][ T5817] usb 1-1: device descriptor read/8, error -71 [ 92.461323][ T5817] usb usb1-port1: unable to enumerate USB device [ 93.069030][ T5869] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 93.780926][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.817812][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.843792][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.853098][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.880638][ T5869] usb 3-1: Product: syz [ 93.887091][ T5869] usb 3-1: Manufacturer: syz [ 93.918166][ T5869] usb 3-1: SerialNumber: syz [ 95.627969][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 95.627986][ T30] audit: type=1326 audit(1747070629.136:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6047 comm="syz.1.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 96.241957][ T30] audit: type=1400 audit(1747070629.286:194): avc: denied { create } for pid=6053 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.261500][ T30] audit: type=1400 audit(1747070629.296:195): avc: denied { setopt } for pid=6053 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.673949][ T6067] overlayfs: missing 'lowerdir' [ 97.041201][ T30] audit: type=1400 audit(1747070630.266:196): avc: denied { create } for pid=6059 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.550693][ T30] audit: type=1400 audit(1747070630.276:197): avc: denied { connect } for pid=6059 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.620796][ T5869] usb 3-1: 0:2 : does not exist [ 97.625775][ T5869] usb 3-1: unit 6 not found! [ 97.730452][ T30] audit: type=1400 audit(1747070630.586:198): avc: denied { create } for pid=6061 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.260566][ T5869] usb 3-1: USB disconnect, device number 3 [ 98.296862][ T6075] syz.0.31 (6075) used greatest stack depth: 18024 bytes left [ 98.510702][ T30] audit: type=1400 audit(1747070631.416:199): avc: denied { firmware_load } for pid=6061 comm="syz.0.31" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 98.587998][ T6069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6069 comm=syz.1.32 [ 98.801113][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.539339][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 99.733920][ T30] audit: type=1400 audit(1747070633.236:200): avc: denied { mount } for pid=6078 comm="syz.0.35" name="/" dev="autofs" ino=7769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.021827][ T30] audit: type=1400 audit(1747070633.256:201): avc: denied { read } for pid=6078 comm="syz.0.35" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.391857][ T30] audit: type=1400 audit(1747070633.256:202): avc: denied { open } for pid=6078 comm="syz.0.35" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.416691][ T30] audit: type=1400 audit(1747070633.256:203): avc: denied { ioctl } for pid=6078 comm="syz.0.35" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 102.441646][ T30] audit: type=1400 audit(1747070633.826:204): avc: denied { create } for pid=6086 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.497927][ T30] audit: type=1400 audit(1747070633.856:205): avc: denied { bind } for pid=6086 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.635288][ T30] audit: type=1400 audit(1747070634.216:206): avc: denied { connect } for pid=6086 comm="syz.4.37" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.686638][ T30] audit: type=1400 audit(1747070634.466:207): avc: denied { write } for pid=6086 comm="syz.4.37" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.966075][ T6097] macvtap1: entered allmulticast mode [ 102.971627][ T6097] veth0_macvtap: entered allmulticast mode [ 103.172976][ T30] audit: type=1400 audit(1747070636.296:208): avc: denied { ioctl } for pid=6091 comm="syz.2.38" path="socket:[8370]" dev="sockfs" ino=8370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.478356][ T30] audit: type=1400 audit(1747070636.836:209): avc: denied { write } for pid=6093 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 103.634018][ T30] audit: type=1400 audit(1747070636.856:210): avc: denied { write } for pid=6093 comm="syz.3.39" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 103.823859][ T30] audit: type=1400 audit(1747070637.336:211): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 103.918062][ T6104] hub 9-0:1.0: USB hub found [ 103.929323][ T6104] hub 9-0:1.0: 1 port detected [ 104.536550][ T6111] ======================================================= [ 104.536550][ T6111] WARNING: The mand mount option has been deprecated and [ 104.536550][ T6111] and is ignored by this kernel. Remove the mand [ 104.536550][ T6111] option from the mount to silence this warning. [ 104.536550][ T6111] ======================================================= [ 105.357451][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.43'. [ 107.423424][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 107.423481][ T30] audit: type=1326 audit(1747070640.316:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 108.310566][ T30] audit: type=1326 audit(1747070640.316:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 108.470516][ T6148] block device autoloading is deprecated and will be removed. [ 108.481241][ T6148] syz.3.50: attempt to access beyond end of device [ 108.481241][ T6148] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.131051][ T6156] netlink: 68 bytes leftover after parsing attributes in process `syz.2.52'. [ 109.565913][ T30] audit: type=1326 audit(1747070640.316:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6124 comm="syz.2.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 109.669107][ T30] audit: type=1400 audit(1747070643.096:217): avc: denied { sys_module } for pid=6149 comm="syz.4.51" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 109.850684][ T30] audit: type=1400 audit(1747070643.136:218): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.872385][ T30] audit: type=1400 audit(1747070643.136:219): avc: denied { read } for pid=5478 comm="dhcpcd" name="n101" dev="tmpfs" ino=2137 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.896321][ T30] audit: type=1400 audit(1747070643.136:220): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2137 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.015453][ T30] audit: type=1400 audit(1747070643.136:221): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2137 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.054841][ T30] audit: type=1400 audit(1747070643.566:222): avc: denied { create } for pid=6149 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.205863][ T30] audit: type=1400 audit(1747070643.586:223): avc: denied { bind } for pid=6149 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 110.250733][ T5893] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 110.311727][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 110.550408][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.706115][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.722410][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.924099][ T5869] usb 5-1: Using ep0 maxpacket: 32 [ 110.931710][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.992845][ T5869] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 111.150853][ T5893] usb 2-1: string descriptor 0 read error: -71 [ 111.157156][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.170470][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.293175][ T6182] netlink: 68 bytes leftover after parsing attributes in process `syz.2.55'. [ 111.360337][ T5893] usb 2-1: can't set config #1, error -71 [ 111.638235][ T5869] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 111.655603][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.664648][ T5869] usb 5-1: Product: syz [ 111.669604][ T5869] usb 5-1: Manufacturer: syz [ 111.674284][ T5869] usb 5-1: SerialNumber: syz [ 111.815882][ T5893] usb 2-1: USB disconnect, device number 3 [ 111.825405][ T6175] batadv1: entered promiscuous mode [ 112.072682][ T5869] usb 5-1: Cannot retrieve CPort count: -71 [ 112.078656][ T5869] usb 5-1: Cannot retrieve CPort count: -71 [ 112.147791][ T5869] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 112.212548][ T5869] usb 5-1: USB disconnect, device number 2 [ 113.081299][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 113.081324][ T30] audit: type=1400 audit(1747070646.486:238): avc: denied { read write } for pid=6190 comm="syz.4.57" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.312794][ T30] audit: type=1400 audit(1747070646.496:239): avc: denied { open } for pid=6190 comm="syz.4.57" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.902640][ T30] audit: type=1326 audit(1747070647.416:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 114.152299][ T5893] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 114.603862][ T30] audit: type=1326 audit(1747070647.416:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 114.627327][ T30] audit: type=1326 audit(1747070647.416:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 114.650726][ T30] audit: type=1326 audit(1747070647.416:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 114.675078][ T30] audit: type=1326 audit(1747070647.416:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 114.741201][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.960053][ T30] audit: type=1326 audit(1747070647.416:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 115.318843][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.437919][ T30] audit: type=1326 audit(1747070647.416:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 115.480579][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.765479][ T30] audit: type=1326 audit(1747070647.416:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 116.525526][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.620236][ T5893] usb 2-1: string descriptor 0 read error: -71 [ 116.637492][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.661178][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.683890][ T5893] usb 2-1: can't set config #1, error -71 [ 116.703677][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.713761][ T5893] usb 2-1: USB disconnect, device number 4 [ 117.165538][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 118.010936][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.141046][ T6243] netlink: 68 bytes leftover after parsing attributes in process `syz.1.68'. [ 118.758670][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.900653][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.69'. [ 118.924014][ T6251] netlink: 'syz.2.69': attribute type 11 has an invalid length. [ 118.932059][ T6251] netlink: 224 bytes leftover after parsing attributes in process `syz.2.69'. [ 118.955537][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 118.955564][ T30] audit: type=1400 audit(1747070652.396:257): avc: denied { mount } for pid=6244 comm="syz.2.69" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 119.243565][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 119.257697][ T5870] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.328571][ T5932] bridge_slave_1: left allmulticast mode [ 119.354768][ T5932] bridge_slave_1: left promiscuous mode [ 119.423658][ T6254] hub 9-0:1.0: USB hub found [ 119.430818][ T6254] hub 9-0:1.0: 1 port detected [ 120.000687][ T30] audit: type=1400 audit(1747070652.406:258): avc: denied { write } for pid=6244 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 120.022841][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.040601][ T30] audit: type=1400 audit(1747070653.036:259): avc: denied { create } for pid=6248 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 120.067914][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 120.120991][ T30] audit: type=1400 audit(1747070653.596:260): avc: denied { read } for pid=6255 comm="syz.1.71" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.178977][ T30] audit: type=1400 audit(1747070653.596:261): avc: denied { open } for pid=6255 comm="syz.1.71" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.204414][ T30] audit: type=1400 audit(1747070653.616:262): avc: denied { ioctl } for pid=6255 comm="syz.1.71" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.257217][ T5932] bridge_slave_0: left allmulticast mode [ 120.263443][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.270876][ T5870] usb 5-1: unable to read config index 0 descriptor/all [ 120.277853][ T5870] usb 5-1: can't read configurations, error -71 [ 120.327384][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.337160][ T5932] bridge_slave_0: left promiscuous mode [ 120.343062][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.353417][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.374203][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.438555][ T6262] qrtr: Invalid version 0 [ 120.447975][ T6262] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[6262] [ 120.655539][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.810408][ T30] audit: type=1400 audit(1747070653.626:263): avc: denied { create } for pid=6257 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.834394][ T30] audit: type=1400 audit(1747070653.636:264): avc: denied { create } for pid=6257 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.869797][ T30] audit: type=1400 audit(1747070653.646:265): avc: denied { connect } for pid=6257 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 120.892635][ T30] audit: type=1400 audit(1747070653.646:266): avc: denied { bind } for pid=6257 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.500427][ T6264] random: crng reseeded on system resumption [ 122.027920][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.043656][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.054215][ T5932] bond0 (unregistering): Released all slaves [ 122.091682][ T6269] veth0_vlan: entered allmulticast mode [ 122.108705][ T6270] veth0_vlan: left promiscuous mode [ 122.115713][ T6270] veth0_vlan: entered promiscuous mode [ 122.207393][ T6265] vlan2: entered allmulticast mode [ 122.212568][ T6265] vlan1: entered allmulticast mode [ 122.217658][ T6265] veth0_vlan: entered allmulticast mode [ 122.224153][ T6265] bridge0: port 3(vlan2) entered blocking state [ 122.230433][ T6265] bridge0: port 3(vlan2) entered disabled state [ 122.237806][ T6265] vlan2: entered promiscuous mode [ 122.242914][ T6265] vlan1: entered promiscuous mode [ 122.248518][ T6265] bridge0: port 3(vlan2) entered blocking state [ 122.255551][ T6265] bridge0: port 3(vlan2) entered forwarding state [ 122.880604][ T55] Bluetooth: hci1: command tx timeout [ 123.996084][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 123.996100][ T30] audit: type=1326 audit(1747070657.506:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 124.062830][ T30] audit: type=1326 audit(1747070657.506:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 124.114234][ T30] audit: type=1326 audit(1747070657.506:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 124.170671][ T30] audit: type=1326 audit(1747070657.506:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 124.314705][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 124.796043][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 124.969066][ T55] Bluetooth: hci1: command tx timeout [ 125.173963][ T5932] hsr_slave_0: left promiscuous mode [ 125.470889][ T5899] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 125.758475][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.79'. [ 126.031482][ T5932] hsr_slave_1: left promiscuous mode [ 126.040020][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.083156][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.113395][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.129815][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.193059][ T5932] veth1_macvtap: left promiscuous mode [ 126.200082][ T5932] veth0_macvtap: left promiscuous mode [ 126.212342][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.213129][ T5932] veth1_vlan: left promiscuous mode [ 126.233751][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.253456][ T5932] veth0_vlan: left promiscuous mode [ 126.264738][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.307226][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.382894][ T5899] usb 3-1: Product: syz [ 126.388079][ T5899] usb 3-1: Manufacturer: syz [ 126.416427][ T5899] usb 3-1: SerialNumber: syz [ 127.028135][ T5899] usb 3-1: can't set config #1, error -71 [ 127.043451][ T55] Bluetooth: hci1: command tx timeout [ 127.052203][ T5899] usb 3-1: USB disconnect, device number 4 [ 127.240732][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 127.335636][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.83'. [ 127.480584][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 127.489732][ T5893] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.504722][ T5893] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 127.529491][ T5893] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 127.550128][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.574793][ T5893] usb 5-1: Product: syz [ 127.585637][ T5893] usb 5-1: Manufacturer: syz [ 127.600210][ T5893] usb 5-1: SerialNumber: syz [ 127.668742][ T6339] netlink: 596 bytes leftover after parsing attributes in process `syz.2.84'. [ 127.672086][ T30] audit: type=1400 audit(1747070661.176:287): avc: denied { write } for pid=6332 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.824743][ T5893] usb 5-1: Limiting number of CPorts to U8_MAX [ 127.847875][ T30] audit: type=1400 audit(1747070661.176:288): avc: denied { nlmsg_write } for pid=6332 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.872212][ T5893] usb 5-1: Not enough endpoints found in device, aborting! [ 127.929326][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 127.999751][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 128.039098][ T30] audit: type=1400 audit(1747070661.536:289): avc: denied { ioctl } for pid=6324 comm="syz.4.82" path="socket:[9425]" dev="sockfs" ino=9425 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.391945][ T6337] netlink: 'syz.2.84': attribute type 29 has an invalid length. [ 129.400108][ T55] Bluetooth: hci1: command tx timeout [ 129.411400][ T5817] usb 5-1: USB disconnect, device number 5 [ 129.841448][ T6345] netlink: 'syz.3.85': attribute type 29 has an invalid length. [ 130.029931][ T30] audit: type=1400 audit(1747070663.486:290): avc: denied { read } for pid=6351 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 130.091630][ T30] audit: type=1400 audit(1747070663.526:291): avc: denied { create } for pid=6351 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 130.346613][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 130.729475][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.747797][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.764996][ T6259] bridge_slave_0: entered allmulticast mode [ 130.775384][ T6259] bridge_slave_0: entered promiscuous mode [ 130.783886][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.792835][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.800118][ T6259] bridge_slave_1: entered allmulticast mode [ 130.816003][ T6259] bridge_slave_1: entered promiscuous mode [ 131.822401][ T6378] syz.1.89: attempt to access beyond end of device [ 131.822401][ T6378] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.308056][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.389742][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.832913][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850118][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.059602][ T6393] netlink: 68 bytes leftover after parsing attributes in process `syz.3.95'. [ 133.299791][ T6259] team0: Port device team_slave_0 added [ 133.482437][ T6259] team0: Port device team_slave_1 added [ 134.064152][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.083484][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.305813][ T6406] netlink: 596 bytes leftover after parsing attributes in process `syz.4.97'. [ 134.501503][ T30] audit: type=1326 audit(1747070667.856:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 134.577394][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.650710][ T30] audit: type=1326 audit(1747070667.856:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 134.683392][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.713867][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.754375][ T5893] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 134.798441][ T30] audit: type=1326 audit(1747070667.856:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 134.908036][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.944689][ T30] audit: type=1326 audit(1747070667.856:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 134.971025][ T30] audit: type=1326 audit(1747070667.856:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 134.987926][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.015562][ T30] audit: type=1326 audit(1747070667.856:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 135.082099][ T30] audit: type=1326 audit(1747070667.856:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 135.092654][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.125104][ T30] audit: type=1326 audit(1747070667.856:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6375 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 135.490760][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.062451][ T5893] usb 2-1: string descriptor 0 read error: -71 [ 136.069354][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.203885][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.330829][ T5817] usb 4-1: Using ep0 maxpacket: 32 [ 136.346947][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.365767][ T5817] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 136.367089][ T6259] hsr_slave_0: entered promiscuous mode [ 136.379897][ T5817] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 136.401007][ T5893] usb 2-1: can't set config #1, error -71 [ 136.410820][ T5893] usb 2-1: USB disconnect, device number 5 [ 136.414158][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.417663][ T6259] hsr_slave_1: entered promiscuous mode [ 136.492421][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 136.670815][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.749209][ T6259] Cannot create hsr debugfs directory [ 136.854734][ T5817] usb 4-1: Product: syz [ 136.858945][ T5817] usb 4-1: Manufacturer: syz [ 136.863604][ T5817] usb 4-1: SerialNumber: syz [ 137.183900][ T5817] usb 4-1: Limiting number of CPorts to U8_MAX [ 137.191349][ T5817] usb 4-1: Not enough endpoints found in device, aborting! [ 137.343067][ T6446] syz.2.103: attempt to access beyond end of device [ 137.343067][ T6446] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 138.144056][ T5938] usb 4-1: USB disconnect, device number 3 [ 138.296669][ T30] audit: type=1400 audit(1747070671.806:300): avc: denied { read } for pid=6449 comm="syz.2.105" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 138.400665][ T30] audit: type=1400 audit(1747070671.836:301): avc: denied { open } for pid=6449 comm="syz.2.105" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 139.092661][ T6259] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 139.130951][ T6259] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 139.336369][ T6463] batadv1: entered promiscuous mode [ 139.356165][ T6259] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 139.768802][ T6259] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.064503][ T6475] netlink: 596 bytes leftover after parsing attributes in process `syz.1.108'. [ 140.357186][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.836871][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.857315][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.865215][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.954104][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 141.023676][ T52] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 141.263053][ T52] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.384732][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.397438][ T52] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 141.424549][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.431744][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.450224][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.466834][ T52] usb 4-1: Product: syz [ 141.479811][ T52] usb 4-1: Manufacturer: syz [ 141.505056][ T52] usb 4-1: SerialNumber: syz [ 142.385114][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.604661][ T30] audit: type=1326 audit(1747070676.116:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 142.680676][ T30] audit: type=1326 audit(1747070676.116:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 142.928751][ T30] audit: type=1326 audit(1747070676.116:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 142.953064][ T30] audit: type=1326 audit(1747070676.116:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 142.980293][ T30] audit: type=1326 audit(1747070676.116:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.223369][ T6519] netlink: 68 bytes leftover after parsing attributes in process `syz.2.115'. [ 143.456360][ T30] audit: type=1326 audit(1747070676.116:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.533372][ T52] usb 4-1: 0:2 : does not exist [ 143.610618][ T52] usb 4-1: unit 6 not found! [ 143.670089][ T52] usb 4-1: USB disconnect, device number 4 [ 143.690429][ T30] audit: type=1326 audit(1747070676.116:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.753525][ T30] audit: type=1326 audit(1747070676.116:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.777301][ T30] audit: type=1326 audit(1747070676.116:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.802244][ T30] audit: type=1326 audit(1747070676.116:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6474 comm="syz.4.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 143.867753][ T6517] batadv1: entered promiscuous mode [ 143.891178][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.968386][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.381356][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 144.420709][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.602463][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 144.627728][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 144.638133][ T5869] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 144.666909][ T5869] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 144.676355][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.698253][ T5869] usb 3-1: Product: syz [ 144.713913][ T5869] usb 3-1: Manufacturer: syz [ 144.820808][ T5869] usb 3-1: SerialNumber: syz [ 145.022684][ T6259] veth0_vlan: entered promiscuous mode [ 145.055692][ T5869] usb 3-1: Limiting number of CPorts to U8_MAX [ 145.076576][ T6259] veth1_vlan: entered promiscuous mode [ 145.094583][ T5869] usb 3-1: Not enough endpoints found in device, aborting! [ 145.235887][ T6259] veth0_macvtap: entered promiscuous mode [ 145.261823][ T10] usb 3-1: USB disconnect, device number 5 [ 145.307762][ T6259] veth1_macvtap: entered promiscuous mode [ 145.376342][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.510385][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.544049][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.556025][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.570026][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.587807][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.106201][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.210553][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.236640][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.403991][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.442421][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.511564][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.544644][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.555893][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.615365][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.758646][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.838040][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.962192][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.081150][ T6582] netlink: 596 bytes leftover after parsing attributes in process `syz.1.123'. [ 147.656695][ T6576] batadv1: entered promiscuous mode [ 148.250772][ T5893] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 148.690786][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 148.690801][ T30] audit: type=1400 audit(1747070682.196:362): avc: denied { search } for pid=5478 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=8609 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.951878][ T6604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.126'. [ 149.171864][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.187191][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.211818][ T6259] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.213188][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.237939][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.250645][ T6259] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.268153][ T5893] usb 2-1: Product: syz [ 149.273190][ T6259] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.290688][ T5893] usb 2-1: Manufacturer: syz [ 149.300689][ T5893] usb 2-1: SerialNumber: syz [ 149.305481][ T6259] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.498082][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.543348][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.707158][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.734711][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.760466][ T5893] usb 2-1: 0:2 : does not exist [ 150.819962][ T5893] usb 2-1: unit 6 not found! [ 150.872274][ T30] audit: type=1400 audit(1747070684.376:363): avc: denied { mounton } for pid=6259 comm="syz-executor" path="/root/syzkaller.ZCtYfH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 150.918975][ T5893] usb 2-1: USB disconnect, device number 6 [ 151.443549][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.701458][ T30] audit: type=1326 audit(1747070685.206:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.2.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 152.241509][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 152.933662][ T6652] netlink: 'syz.2.135': attribute type 15 has an invalid length. [ 152.941807][ T6652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.135'. [ 153.312245][ T5938] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 153.797931][ T5938] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.942025][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.962833][ T5938] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.972190][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.980916][ T6662] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 155.127935][ T5938] usb 6-1: Product: syz [ 155.187821][ T6654] netlink: 500 bytes leftover after parsing attributes in process `syz.1.134'. [ 155.379949][ T6651] batadv1: entered promiscuous mode [ 155.511405][ T5938] usb 6-1: Manufacturer: syz [ 155.557420][ T5938] usb 6-1: SerialNumber: syz [ 155.570718][ T6662] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 155.787692][ T5938] usb 6-1: 0:2 : does not exist [ 155.794754][ T5938] usb 6-1: unit 6 not found! [ 156.039218][ T6674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.137'. [ 156.520240][ T5938] usb 6-1: USB disconnect, device number 2 [ 157.069532][ T30] audit: type=1400 audit(1747070690.436:365): avc: denied { bind } for pid=6680 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.092636][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.093568][ T30] audit: type=1400 audit(1747070690.436:366): avc: denied { setopt } for pid=6680 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.474378][ T30] audit: type=1400 audit(1747070690.446:367): avc: denied { accept } for pid=6680 comm="syz.2.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.630586][ T30] audit: type=1400 audit(1747070690.446:368): avc: denied { write } for pid=6680 comm="syz.2.141" path="socket:[10525]" dev="sockfs" ino=10525 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 157.880747][ T5893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.986093][ T6703] batadv1: entered promiscuous mode [ 158.031841][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 158.044146][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 158.061735][ T5893] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 158.082767][ T5893] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 158.103703][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.121670][ T5893] usb 6-1: Product: syz [ 158.126180][ T5893] usb 6-1: Manufacturer: syz [ 158.136127][ T5893] usb 6-1: SerialNumber: syz [ 158.357987][ T5893] usb 6-1: Limiting number of CPorts to U8_MAX [ 158.375237][ T5893] usb 6-1: Not enough endpoints found in device, aborting! [ 158.562984][ T5893] usb 6-1: USB disconnect, device number 3 [ 159.456423][ T6760] syz.5.142: attempt to access beyond end of device [ 159.456423][ T6760] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.570810][ T30] audit: type=1400 audit(1747070694.076:369): avc: denied { associate } for pid=6765 comm="syz.2.148" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 161.190022][ T30] audit: type=1400 audit(1747070694.086:370): avc: denied { write } for pid=6765 comm="syz.2.148" name="pfkey" dev="proc" ino=4026532916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 161.363804][ T6783] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 161.446843][ T6779] netlink: 500 bytes leftover after parsing attributes in process `syz.4.149'. [ 161.509896][ T6783] netlink: 'syz.4.149': attribute type 29 has an invalid length. [ 161.551690][ T30] audit: type=1400 audit(1747070695.046:371): avc: denied { ioctl } for pid=6785 comm="syz.1.150" path="socket:[11314]" dev="sockfs" ino=11314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 161.671042][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 161.850563][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 161.915254][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 161.938987][ T5893] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 161.963711][ T5893] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 161.974853][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.984827][ T5893] usb 6-1: Product: syz [ 161.990377][ T5893] usb 6-1: Manufacturer: syz [ 162.001536][ T5893] usb 6-1: SerialNumber: syz [ 162.263855][ T5893] usb 6-1: Limiting number of CPorts to U8_MAX [ 162.294382][ T5893] usb 6-1: Not enough endpoints found in device, aborting! [ 162.301971][ T30] audit: type=1326 audit(1747070695.796:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.3.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 162.466314][ T5893] usb 6-1: USB disconnect, device number 4 [ 162.566844][ T30] audit: type=1326 audit(1747070696.076:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.4.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 163.092229][ T6813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.969045][ T30] audit: type=1400 audit(1747070697.466:374): avc: denied { watch } for pid=6820 comm="syz.3.155" path="/31" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.325311][ T30] audit: type=1400 audit(1747070697.466:375): avc: denied { watch_sb watch_reads } for pid=6820 comm="syz.3.155" path="/31" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.794569][ T30] audit: type=1400 audit(1747070697.526:376): avc: denied { unlink } for pid=6820 comm="syz.3.155" name="#1" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.597924][ T30] audit: type=1400 audit(1747070697.536:377): avc: denied { mount } for pid=6820 comm="syz.3.155" name="/" dev="overlay" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 166.785346][ T30] audit: type=1400 audit(1747070700.296:378): avc: denied { wake_alarm } for pid=6841 comm="syz.1.167" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.810781][ T5870] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 167.400594][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 167.454226][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 167.510941][ T5870] usb 6-1: unable to get BOS descriptor or descriptor too short [ 167.656201][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 167.665237][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 167.822262][ T6863] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.938641][ T5870] usb 6-1: unable to read config index 0 descriptor/all [ 167.946710][ T5870] usb 6-1: can't read configurations, error -71 [ 168.069135][ T30] audit: type=1400 audit(1747070701.576:379): avc: denied { read append } for pid=6868 comm="syz.5.161" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.113773][ T30] audit: type=1400 audit(1747070701.576:380): avc: denied { open } for pid=6868 comm="syz.5.161" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.209343][ T30] audit: type=1400 audit(1747070701.616:381): avc: denied { ioctl } for pid=6868 comm="syz.5.161" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.404765][ T6878] netlink: 68 bytes leftover after parsing attributes in process `syz.2.162'. [ 168.785062][ T5870] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.794868][ T30] audit: type=1400 audit(1747070701.616:382): avc: denied { read write } for pid=6868 comm="syz.5.161" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.020934][ T30] audit: type=1400 audit(1747070701.616:383): avc: denied { open } for pid=6868 comm="syz.5.161" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 169.043964][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 169.065466][ T5870] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 169.093594][ T5870] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 169.420298][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.439544][ T5870] usb 6-1: config 0 descriptor?? [ 169.658883][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 170.139082][ T6870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.161'. [ 170.148087][ T6870] tipc: Started in network mode [ 170.153165][ T6870] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 170.206847][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 170.241478][ T5893] usb 6-1: USB disconnect, device number 6 [ 170.593154][ T6904] Failed to initialize the IGMP autojoin socket (err -2) [ 170.798405][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.140744][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 171.158011][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.178417][ T30] audit: type=1326 audit(1747070704.646:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 171.178555][ T10] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 171.230624][ T30] audit: type=1326 audit(1747070704.646:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 172.125772][ T30] audit: type=1326 audit(1747070704.646:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 172.150436][ T30] audit: type=1326 audit(1747070704.646:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 172.181342][ T30] audit: type=1326 audit(1747070704.646:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6871 comm="syz.4.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 172.408591][ T10] usb 4-1: string descriptor 0 read error: -71 [ 172.431808][ T10] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 172.488425][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.857738][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 172.929328][ T10] usb 4-1: can't set config #7, error -71 [ 173.121825][ T10] usb 4-1: USB disconnect, device number 5 [ 173.187975][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 173.301670][ T5870] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 173.362895][ T5870] usb 6-1: config 0 has no interface number 0 [ 173.369024][ T5870] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.501091][ T5870] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.772163][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.242700][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 174.530579][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 174.530595][ T30] audit: type=1326 audit(1747070707.956:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 174.560930][ T5870] usb 6-1: config 0 descriptor?? [ 174.570182][ T30] audit: type=1326 audit(1747070707.956:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 174.663852][ T5870] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 174.680638][ T30] audit: type=1326 audit(1747070707.956:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 174.744785][ T30] audit: type=1326 audit(1747070707.956:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 174.906911][ T30] audit: type=1326 audit(1747070707.956:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 175.951261][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.990395][ T30] audit: type=1326 audit(1747070707.956:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 176.016642][ T30] audit: type=1326 audit(1747070707.956:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 176.273373][ T30] audit: type=1326 audit(1747070707.956:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6936 comm="syz.3.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 176.493550][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 176.528425][ T5867] usb 2-1: device descriptor read/all, error -71 [ 176.554254][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.564943][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.110699][ T6974] bridge0: port 3(vlan2) entered disabled state [ 177.169846][ T6974] bridge0: port 3(vlan2) entered blocking state [ 177.177016][ T6974] bridge0: port 3(vlan2) entered forwarding state [ 177.524707][ T6974] Failed to initialize the IGMP autojoin socket (err -2) [ 178.278002][ T10] usb 6-1: USB disconnect, device number 7 [ 179.670204][ T30] audit: type=1400 audit(1747070712.856:459): avc: denied { create } for pid=6983 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 180.182806][ T30] audit: type=1400 audit(1747070712.866:460): avc: denied { getopt } for pid=6983 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.743088][ T7015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7015 comm=syz.2.187 [ 181.762128][ T30] audit: type=1326 audit(1747070715.106:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7001 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 183.794607][ T7015] mmap: syz.2.187 (7015) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.978980][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'. [ 186.084146][ T30] audit: type=1400 audit(1747070718.486:462): avc: denied { ioctl } for pid=7052 comm="syz.1.195" path="socket:[11662]" dev="sockfs" ino=11662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.176527][ T30] audit: type=1400 audit(1747070719.046:463): avc: denied { bind } for pid=7052 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.196385][ T30] audit: type=1400 audit(1747070719.066:464): avc: denied { write } for pid=7052 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.398643][ T7064] netlink: 'syz.4.197': attribute type 29 has an invalid length. [ 186.409291][ T7064] netlink: 'syz.4.197': attribute type 29 has an invalid length. [ 186.419208][ T7064] netlink: 500 bytes leftover after parsing attributes in process `syz.4.197'. [ 187.441197][ T30] audit: type=1326 audit(1747070720.716:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 187.489028][ T30] audit: type=1326 audit(1747070720.726:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 187.677076][ T30] audit: type=1326 audit(1747070720.726:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7062 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 189.190795][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 190.220602][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 190.242366][ T7105] netlink: 'syz.4.206': attribute type 11 has an invalid length. [ 190.250235][ T7105] netlink: 224 bytes leftover after parsing attributes in process `syz.4.206'. [ 192.076272][ T7123] netlink: 68 bytes leftover after parsing attributes in process `syz.4.208'. [ 192.809123][ T7130] kernel profiling enabled (shift: 7) [ 194.524367][ T30] audit: type=1326 audit(1747070727.936:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7128 comm="syz.4.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 194.548235][ T7139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.443973][ T5824] Bluetooth: hci1: link tx timeout [ 195.445372][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.449236][ T5824] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.463360][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.480846][ T30] audit: type=1400 audit(1747070728.356:469): avc: denied { connect } for pid=7133 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.514439][ T30] audit: type=1400 audit(1747070728.366:470): avc: denied { write } for pid=7133 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 195.567558][ T30] audit: type=1400 audit(1747070728.466:471): avc: denied { shutdown } for pid=7133 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.870286][ T30] audit: type=1326 audit(1747070730.296:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 196.920880][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 197.208258][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 197.215549][ T5893] usb 6-1: unable to get BOS descriptor or descriptor too short [ 197.257376][ T5893] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 197.372159][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'. [ 197.393553][ T7173] netlink: 'syz.1.220': attribute type 11 has an invalid length. [ 197.401512][ T7173] netlink: 224 bytes leftover after parsing attributes in process `syz.1.220'. [ 197.777627][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 197.778605][ T5124] Bluetooth: hci3: command 0x0406 tx timeout [ 197.785804][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 197.798144][ T5825] Bluetooth: hci4: command 0x0406 tx timeout [ 197.804331][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 197.833049][ T5893] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 197.870248][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.879372][ T5893] usb 6-1: Product: syz [ 197.883958][ T5893] usb 6-1: Manufacturer: syz [ 197.888734][ T5893] usb 6-1: SerialNumber: syz [ 198.181785][ T7179] netlink: 68 bytes leftover after parsing attributes in process `syz.2.221'. [ 198.584328][ T5893] usb 6-1: Limiting number of CPorts to U8_MAX [ 198.600955][ T5893] usb 6-1: Not enough endpoints found in device, aborting! [ 198.636861][ T5893] usb 6-1: USB disconnect, device number 8 [ 199.327715][ T30] audit: type=1400 audit(1747070732.826:473): avc: denied { mount } for pid=7186 comm="syz.2.223" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 199.418821][ T7192] overlayfs: failed to clone upperpath [ 200.102543][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.225'. [ 200.270688][ T7206] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 200.297434][ T7206] netlink: 'syz.3.215': attribute type 29 has an invalid length. [ 200.314582][ T7206] netlink: 500 bytes leftover after parsing attributes in process `syz.3.215'. [ 200.746495][ T30] audit: type=1326 audit(1747070734.246:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7195 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 200.923734][ T7216] Bluetooth: MGMT ver 1.23 [ 202.656219][ T30] audit: type=1326 audit(1747070736.096:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 203.770696][ T30] audit: type=1326 audit(1747070736.096:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7222 comm="syz.2.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 204.670712][ T30] audit: type=1400 audit(1747070737.766:477): avc: denied { map } for pid=7236 comm="syz.4.233" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.930667][ T30] audit: type=1400 audit(1747070737.796:478): avc: denied { execute } for pid=7236 comm="syz.4.233" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 205.767293][ T30] audit: type=1326 audit(1747070739.276:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.021054][ T30] audit: type=1326 audit(1747070739.276:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.045110][ T30] audit: type=1326 audit(1747070739.276:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.069769][ T30] audit: type=1326 audit(1747070739.276:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.093799][ T30] audit: type=1326 audit(1747070739.276:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.118484][ T30] audit: type=1326 audit(1747070739.276:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.143408][ T30] audit: type=1326 audit(1747070739.276:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.210847][ T30] audit: type=1326 audit(1747070739.276:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.234891][ T30] audit: type=1326 audit(1747070739.276:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.259778][ T30] audit: type=1326 audit(1747070739.276:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.3.234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 207.816803][ T7283] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 208.038769][ T7283] evm: overlay not supported [ 209.566494][ T7290] batadv1: entered promiscuous mode [ 210.567681][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 210.589300][ T7309] netlink: 'syz.3.244': attribute type 11 has an invalid length. [ 210.597135][ T7309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.244'. [ 213.170717][ T5870] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.620807][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 213.682709][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 213.726603][ T5870] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 213.938749][ T5870] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 213.948334][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.963746][ T5870] usb 2-1: Product: syz [ 213.967952][ T5870] usb 2-1: Manufacturer: syz [ 213.974086][ T5870] usb 2-1: SerialNumber: syz [ 214.663694][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 214.663709][ T30] audit: type=1326 audit(1747070748.076:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7332 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 215.127397][ T5870] usb 2-1: Cannot retrieve CPort count: -71 [ 215.133417][ T5870] usb 2-1: Cannot retrieve CPort count: -71 [ 215.139346][ T5870] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 215.153540][ T5870] usb 2-1: USB disconnect, device number 9 [ 217.384248][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.5.258'. [ 217.406262][ T7379] netlink: 'syz.5.258': attribute type 11 has an invalid length. [ 217.414122][ T7379] netlink: 224 bytes leftover after parsing attributes in process `syz.5.258'. [ 218.720908][ T7391] netlink: 68 bytes leftover after parsing attributes in process `syz.5.262'. [ 219.513959][ T7401] batadv1: entered promiscuous mode [ 220.038418][ T53] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 220.453527][ T5899] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 220.462818][ T30] audit: type=1326 audit(1747070753.976:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7384 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16478e969 code=0x7fc00000 [ 220.681132][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 220.692270][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short [ 220.881352][ T5899] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 220.913129][ T5899] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 220.935822][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.966144][ T5899] usb 6-1: Product: syz [ 220.983894][ T5899] usb 6-1: Manufacturer: syz [ 221.063913][ T5899] usb 6-1: SerialNumber: syz [ 221.188386][ T30] audit: type=1400 audit(1747070754.586:517): avc: denied { relabelfrom } for pid=7412 comm="syz.2.265" name="" dev="pipefs" ino=12269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 221.476739][ T5899] usb 6-1: Limiting number of CPorts to U8_MAX [ 221.504658][ T5899] usb 6-1: Not enough endpoints found in device, aborting! [ 221.758595][ T5870] usb 6-1: USB disconnect, device number 9 [ 222.261098][ T30] audit: type=1400 audit(1747070755.756:518): avc: denied { ioctl } for pid=7438 comm="syz.2.269" path="socket:[12603]" dev="sockfs" ino=12603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.222304][ T30] audit: type=1400 audit(1747070756.736:519): avc: denied { create } for pid=7440 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 224.873833][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 226.123959][ T7462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.274'. [ 226.437374][ T30] audit: type=1400 audit(1747070759.936:520): avc: denied { connect } for pid=7456 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 226.587654][ T30] audit: type=1400 audit(1747070759.936:521): avc: denied { read write } for pid=7456 comm="syz.1.273" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 227.145649][ T30] audit: type=1400 audit(1747070759.946:522): avc: denied { ioctl open } for pid=7456 comm="syz.1.273" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 227.180151][ T7481] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 227.370392][ T30] audit: type=1326 audit(1747070760.796:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7476 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 227.397375][ T7481] veth0_macvtap: left promiscuous mode [ 227.691482][ T7481] batman_adv: batadv0: Adding interface: macvtap0 [ 227.701713][ T7481] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.741711][ T7481] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 228.136788][ T7496] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 231.016325][ T7535] netlink: 68 bytes leftover after parsing attributes in process `syz.3.289'. [ 232.224554][ T7533] Failed to initialize the IGMP autojoin socket (err -2) [ 234.162083][ T30] audit: type=1400 audit(1747070767.656:524): avc: denied { connect } for pid=7547 comm="syz.1.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.184333][ T7555] syz.1.292 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 237.267601][ T7596] netlink: 68 bytes leftover after parsing attributes in process `syz.5.302'. [ 238.641703][ T30] audit: type=1400 audit(1747070772.086:525): avc: denied { sqpoll } for pid=7597 comm="syz.2.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 240.096536][ T30] audit: type=1400 audit(1747070773.576:526): avc: denied { create } for pid=7609 comm="syz.2.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.263140][ T7617] tipc: Enabling of bearer rejected, failed to enable media [ 240.296206][ T7626] batadv1: entered promiscuous mode [ 242.614549][ T7642] tipc: Started in network mode [ 242.619528][ T7642] tipc: Node identity ac14140f, cluster identity 4711 [ 242.629141][ T7642] tipc: Enabling of bearer rejected, failed to enable media [ 243.005206][ T30] audit: type=1400 audit(1747070776.516:527): avc: denied { ioctl } for pid=7637 comm="syz.1.312" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.120807][ T30] audit: type=1400 audit(1747070777.626:528): avc: denied { read } for pid=7651 comm="syz.5.318" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 244.252487][ T30] audit: type=1400 audit(1747070777.626:529): avc: denied { open } for pid=7651 comm="syz.5.318" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 244.730346][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.316'. [ 245.883564][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 246.225636][ T7674] batadv1: entered promiscuous mode [ 246.489614][ T7677] batadv1: entered promiscuous mode [ 246.743039][ T7680] batadv1: entered promiscuous mode [ 248.071368][ T30] audit: type=1326 audit(1747070781.576:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7670 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 249.239612][ T7699] batadv1: entered promiscuous mode [ 250.340756][ T52] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 250.494591][ T7725] binder: 7720:7725 ioctl c018620b 0 returned -14 [ 250.890379][ T30] audit: type=1400 audit(1747070784.006:531): avc: denied { ioctl } for pid=7720 comm="syz.1.330" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.030652][ T30] audit: type=1400 audit(1747070784.366:532): avc: denied { ioctl } for pid=7710 comm="syz.3.327" path="socket:[13056]" dev="sockfs" ino=13056 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 251.212908][ T30] audit: type=1400 audit(1747070784.436:533): avc: denied { write } for pid=7710 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 251.384551][ T7731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.331'. [ 251.714036][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.724194][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.736728][ T52] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.990675][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.998697][ T52] usb 5-1: Product: syz [ 252.060421][ T52] usb 5-1: Manufacturer: syz [ 252.076015][ T52] usb 5-1: SerialNumber: syz [ 252.860215][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 253.552694][ T7765] batadv1: entered promiscuous mode [ 253.644230][ T52] usb 5-1: 0:2 : does not exist [ 253.660244][ T52] usb 5-1: unit 6 not found! [ 253.677254][ T30] audit: type=1400 audit(1747070787.186:534): avc: denied { create } for pid=7761 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 253.844777][ T52] usb 5-1: USB disconnect, device number 6 [ 254.390861][ T30] audit: type=1400 audit(1747070787.506:535): avc: denied { set_context_mgr } for pid=7761 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 254.592830][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.640570][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.776969][ T7779] batadv1: entered promiscuous mode [ 254.868779][ T5893] usb 4-1: device descriptor read/64, error -71 [ 255.010311][ T7784] kAFS: No cell specified [ 255.034024][ T7784] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 255.069176][ T7784] veth0_macvtap: left promiscuous mode [ 255.109154][ T7784] batman_adv: batadv0: Adding interface: macvtap0 [ 255.130781][ T5893] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 255.153891][ T7784] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.212044][ T7784] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 255.320773][ T5893] usb 4-1: device descriptor read/64, error -71 [ 255.437391][ T5893] usb usb4-port1: attempt power cycle [ 255.606159][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.613218][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.780524][ T30] audit: type=1326 audit(1747070789.276:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3065b8e969 code=0x7fc00000 [ 255.863826][ T30] audit: type=1326 audit(1747070789.276:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3065b8e969 code=0x7fc00000 [ 255.890556][ T5893] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 255.964050][ T5893] usb 4-1: device descriptor read/8, error -71 [ 256.277046][ T7805] netlink: 68 bytes leftover after parsing attributes in process `syz.1.343'. [ 257.984743][ T30] audit: type=1400 audit(1747070791.466:538): avc: denied { bind } for pid=7802 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.125179][ T30] audit: type=1400 audit(1747070791.466:539): avc: denied { write } for pid=7802 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 259.066029][ T7820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.346'. [ 260.707439][ T7829] batadv1: entered promiscuous mode [ 261.545635][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.351'. [ 261.775937][ T30] audit: type=1400 audit(1747070795.276:540): avc: denied { append } for pid=7831 comm="syz.5.351" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.806988][ T7843] batadv1: entered promiscuous mode [ 261.919405][ T7848] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 261.926266][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.034900][ T7853] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.046898][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 262.120896][ T7848] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 262.127532][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.169503][ T7853] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 262.176137][ T7853] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.218326][ T5867] vhci_hcd: vhci_device speed not set [ 262.220535][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 262.284829][ T7860] batadv1: entered promiscuous mode [ 262.386206][ T5867] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 262.762022][ T7853] vhci_hcd vhci_hcd.0: Device attached [ 262.856717][ T7848] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 262.863355][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.930637][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 262.980622][ T7848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.019775][ T7848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.100341][ T7848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 263.464841][ T7848] vhci_hcd vhci_hcd.0: port 0 already used [ 263.999375][ T30] audit: type=1400 audit(1747070797.506:541): avc: denied { execute } for pid=7847 comm="syz.4.353" path="/72/cpu.stat" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.022020][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.219324][ T7864] vhci_hcd: connection closed [ 264.221328][ T7857] vhci_hcd: connection closed [ 264.226852][ T7854] vhci_hcd: connection closed [ 264.272233][ T7849] vhci_hcd: connection reset by peer [ 264.431040][ T81] vhci_hcd: stop threads [ 264.489981][ T81] vhci_hcd: release socket [ 264.673752][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 264.698788][ T30] audit: type=1400 audit(1747070798.106:542): avc: denied { read write } for pid=7877 comm="syz.1.359" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 264.721682][ T81] vhci_hcd: disconnect device [ 264.746473][ T81] vhci_hcd: stop threads [ 264.753923][ T81] vhci_hcd: release socket [ 265.008881][ T81] vhci_hcd: disconnect device [ 265.067617][ T81] vhci_hcd: stop threads [ 265.117633][ T30] audit: type=1400 audit(1747070798.106:543): avc: denied { open } for pid=7877 comm="syz.1.359" path="/77/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.159686][ T81] vhci_hcd: release socket [ 265.212239][ T81] vhci_hcd: disconnect device [ 265.346125][ T30] audit: type=1400 audit(1747070798.116:544): avc: denied { ioctl } for pid=7877 comm="syz.1.359" path="/77/file0/file0" dev="fuse" ino=5 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.370622][ T30] audit: type=1326 audit(1747070798.196:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7873 comm="syz.5.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3065b8e969 code=0x7fc00000 [ 265.409837][ T30] audit: type=1400 audit(1747070798.916:546): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 265.412609][ T81] vhci_hcd: stop threads [ 265.490462][ T81] vhci_hcd: release socket [ 265.500564][ T81] vhci_hcd: disconnect device [ 265.680578][ T30] audit: type=1400 audit(1747070799.166:547): avc: denied { setopt } for pid=7889 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.903598][ T7896] batadv1: entered promiscuous mode [ 266.239478][ T30] audit: type=1400 audit(1747070799.356:548): avc: denied { create } for pid=7887 comm="syz.4.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.320045][ T7899] netlink: 32 bytes leftover after parsing attributes in process `syz.3.363'. [ 267.781831][ T5938] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 267.795646][ T7911] batadv1: entered promiscuous mode [ 267.831327][ T5867] vhci_hcd: vhci_device speed not set [ 267.926284][ T7914] 9pnet: Unknown protocol version 9p20\++} [ 267.972907][ T5938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.098120][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.113352][ T5938] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.123848][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.133285][ T5938] usb 5-1: Product: syz [ 268.137465][ T5938] usb 5-1: Manufacturer: syz [ 268.144514][ T5938] usb 5-1: SerialNumber: syz [ 268.256297][ T30] audit: type=1400 audit(1747070801.766:549): avc: denied { write } for pid=7913 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 268.631048][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 268.952572][ T30] audit: type=1400 audit(1747070802.246:550): avc: denied { create } for pid=7920 comm="syz.2.367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.027774][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 269.389244][ T7926] netlink: 'syz.5.368': attribute type 29 has an invalid length. [ 269.405812][ T7926] netlink: 'syz.5.368': attribute type 29 has an invalid length. [ 269.431636][ T7926] netlink: 500 bytes leftover after parsing attributes in process `syz.5.368'. [ 269.458892][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 269.537496][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 269.717159][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.722291][ T30] audit: type=1400 audit(1747070803.226:551): avc: denied { unlink } for pid=5815 comm="syz-executor" name="file0" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.750954][ T7918] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.232254][ T5938] usb 5-1: 0:2 : does not exist [ 270.252485][ T5938] usb 5-1: unit 6 not found! [ 270.603292][ T30] audit: type=1400 audit(1747070804.006:552): avc: denied { open } for pid=7937 comm="syz.5.371" path="/dev/ttyqe" dev="devtmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 271.030122][ T30] audit: type=1326 audit(1747070804.156:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 271.064149][ T30] audit: type=1326 audit(1747070804.156:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 271.150346][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.229273][ T30] audit: type=1326 audit(1747070804.156:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 271.254251][ T30] audit: type=1326 audit(1747070804.156:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.2.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 271.845024][ T30] audit: type=1400 audit(1747070804.236:557): avc: denied { write } for pid=7937 comm="syz.5.371" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 272.019705][ T5938] usb 5-1: USB disconnect, device number 7 [ 272.038201][ T30] audit: type=1400 audit(1747070804.996:558): avc: denied { execute } for pid=7939 comm="syz.4.372" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.832971][ T7963] batadv1: entered promiscuous mode [ 273.505287][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 273.505303][ T30] audit: type=1400 audit(1747070806.916:561): avc: denied { create } for pid=7953 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 273.629340][ T30] audit: type=1400 audit(1747070806.916:562): avc: denied { bind } for pid=7953 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 273.766362][ T5893] usb 4-1: USB disconnect, device number 10 [ 273.789325][ T30] audit: type=1400 audit(1747070806.916:563): avc: denied { listen } for pid=7953 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 273.918619][ T30] audit: type=1400 audit(1747070806.916:564): avc: denied { accept } for pid=7953 comm="syz.4.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 274.555865][ T7978] binder: 7968:7978 ioctl c018620c 200000000700 returned -1 [ 274.638925][ T7987] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 274.651323][ T7987] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 274.704715][ T7987] netlink: 500 bytes leftover after parsing attributes in process `syz.2.381'. [ 275.531094][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 278.830631][ T5869] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 279.260582][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 279.277408][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 279.292746][ T5869] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 279.317621][ T5869] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 279.337129][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.346927][ T30] audit: type=1326 audit(1747070812.846:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 279.351867][ T5869] usb 6-1: Product: syz [ 279.409832][ T5869] usb 6-1: Manufacturer: syz [ 279.416606][ T30] audit: type=1326 audit(1747070812.846:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 279.427289][ T5869] usb 6-1: SerialNumber: syz [ 279.451490][ T30] audit: type=1326 audit(1747070812.846:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 279.477709][ T30] audit: type=1326 audit(1747070812.846:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 279.850836][ T5869] usb 6-1: Limiting number of CPorts to U8_MAX [ 279.922802][ T5869] usb 6-1: Not enough endpoints found in device, aborting! [ 280.246018][ T5869] usb 6-1: USB disconnect, device number 10 [ 280.265972][ T30] audit: type=1326 audit(1747070812.846:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 280.370870][ T30] audit: type=1326 audit(1747070812.846:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0006b8e969 code=0x7fc00000 [ 281.243035][ T8079] netlink: 68 bytes leftover after parsing attributes in process `syz.2.396'. [ 281.702010][ T8080] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 281.783260][ T8080] netlink: 'syz.4.395': attribute type 29 has an invalid length. [ 281.831472][ T8080] netlink: 500 bytes leftover after parsing attributes in process `syz.4.395'. [ 282.391828][ T8088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.398'. [ 284.482511][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 284.486976][ T8106] capability: warning: `syz.4.403' uses deprecated v2 capabilities in a way that may be insecure [ 284.551314][ T5893] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 284.964493][ T5893] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.657074][ T5893] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.675628][ T5893] usb 6-1: string descriptor 0 read error: -71 [ 286.690978][ T5893] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.700030][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.800703][ T5893] usb 6-1: can't set config #1, error -71 [ 286.810808][ T5893] usb 6-1: USB disconnect, device number 11 [ 287.132797][ T8126] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 288.402399][ T8139] netlink: 68 bytes leftover after parsing attributes in process `syz.1.410'. [ 288.966147][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.411'. [ 289.578703][ T8155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.408'. [ 290.136419][ T8154] batadv1: entered promiscuous mode [ 290.460927][ T8171] netlink: 596 bytes leftover after parsing attributes in process `syz.3.413'. [ 291.139401][ T8166] netlink: 'syz.3.413': attribute type 29 has an invalid length. [ 291.152746][ T8169] netlink: 'syz.3.413': attribute type 29 has an invalid length. [ 291.388883][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 291.631072][ T8186] batadv1: entered promiscuous mode [ 296.610847][ T8226] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 297.032251][ T8230] netlink: 68 bytes leftover after parsing attributes in process `syz.2.422'. [ 297.172031][ T8231] netlink: 68 bytes leftover after parsing attributes in process `syz.5.424'. [ 297.797142][ T8240] batadv1: entered promiscuous mode [ 298.525986][ T8248] netlink: 'syz.4.427': attribute type 29 has an invalid length. [ 298.539195][ T8248] netlink: 'syz.4.427': attribute type 29 has an invalid length. [ 298.548912][ T8248] netlink: 500 bytes leftover after parsing attributes in process `syz.4.427'. [ 298.825704][ T8257] batadv1: entered promiscuous mode [ 298.910184][ T8259] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 298.954163][ T8259] fuse: Bad value for 'fd' [ 299.249410][ T30] audit: type=1400 audit(1747070832.736:571): avc: denied { ioctl } for pid=8260 comm="syz.4.432" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 299.787072][ T30] audit: type=1400 audit(1747070833.296:572): avc: denied { mount } for pid=8267 comm="syz.3.433" name="/" dev="ramfs" ino=15673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 299.810964][ T8268] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 299.834693][ T30] audit: type=1400 audit(1747070833.336:573): avc: denied { mounton } for pid=8269 comm="syz.2.434" path="/106/file0" dev="tmpfs" ino=571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 300.978996][ T8288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.436'. [ 302.147721][ T8298] netlink: 68 bytes leftover after parsing attributes in process `syz.2.439'. [ 303.160746][ T30] audit: type=1400 audit(1747070836.666:574): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 304.199168][ T30] audit: type=1326 audit(1747070837.556:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 304.345284][ T30] audit: type=1326 audit(1747070837.556:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 304.472102][ T8316] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 304.577173][ T8323] batadv1: entered promiscuous mode [ 304.828010][ T30] audit: type=1326 audit(1747070837.556:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 304.828474][ T8316] netlink: 'syz.3.442': attribute type 29 has an invalid length. [ 304.876623][ T30] audit: type=1326 audit(1747070837.556:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.2.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 305.480862][ T8329] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 305.513065][ T8316] netlink: 500 bytes leftover after parsing attributes in process `syz.3.442'. [ 307.266142][ T8365] netlink: 68 bytes leftover after parsing attributes in process `syz.1.449'. [ 307.621465][ T30] audit: type=1400 audit(1747070841.126:579): avc: denied { setopt } for pid=8361 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 308.530738][ T30] audit: type=1400 audit(1747070841.136:580): avc: denied { getopt } for pid=8361 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.794032][ T8376] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 308.951788][ T8378] netlink: 68 bytes leftover after parsing attributes in process `syz.3.451'. [ 309.161591][ T30] audit: type=1326 audit(1747070842.236:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8336 comm="syz.2.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 310.304013][ T8395] lo speed is unknown, defaulting to 1000 [ 310.310295][ T8395] lo speed is unknown, defaulting to 1000 [ 310.322634][ T8395] lo speed is unknown, defaulting to 1000 [ 310.351398][ T8395] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 310.377889][ T8395] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 310.686559][ T8395] lo speed is unknown, defaulting to 1000 [ 310.722847][ T8395] lo speed is unknown, defaulting to 1000 [ 310.730614][ T8395] lo speed is unknown, defaulting to 1000 [ 310.737177][ T8395] lo speed is unknown, defaulting to 1000 [ 310.743755][ T8395] lo speed is unknown, defaulting to 1000 [ 311.037663][ T8372] overlayfs: missing 'lowerdir' [ 311.806525][ T8411] 9pnet_fd: Insufficient options for proto=fd [ 311.833825][ T30] audit: type=1400 audit(1747070845.336:582): avc: denied { setattr } for pid=8409 comm="syz.1.459" name="NETLINK" dev="sockfs" ino=15175 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.161198][ T8417] netlink: 'syz.5.458': attribute type 29 has an invalid length. [ 312.172394][ T8417] netlink: 'syz.5.458': attribute type 29 has an invalid length. [ 312.181756][ T8417] netlink: 500 bytes leftover after parsing attributes in process `syz.5.458'. [ 313.180578][ T30] audit: type=1400 audit(1747070846.636:583): avc: denied { ioctl } for pid=8409 comm="syz.1.459" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 314.724750][ T8427] Failed to initialize the IGMP autojoin socket (err -2) [ 314.724857][ T30] audit: type=1400 audit(1747070848.236:584): avc: denied { map } for pid=8425 comm="syz.4.463" path="socket:[15205]" dev="sockfs" ino=15205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 314.724887][ T30] audit: type=1400 audit(1747070848.236:585): avc: denied { read } for pid=8425 comm="syz.4.463" path="socket:[15205]" dev="sockfs" ino=15205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.043687][ T8442] batadv1: entered promiscuous mode [ 315.321349][ T8449] veth0_vlan: entered allmulticast mode [ 315.774391][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 315.841332][ T8447] syzkaller0: entered promiscuous mode [ 315.841347][ T8447] syzkaller0: entered allmulticast mode [ 315.873188][ T30] audit: type=1400 audit(1747070849.386:586): avc: denied { mount } for pid=8444 comm="syz.4.467" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 315.898634][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.948549][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.357158][ T30] audit: type=1400 audit(1747070849.836:587): avc: denied { bind } for pid=8453 comm="syz.2.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.710771][ T8463] netlink: 'syz.5.471': attribute type 29 has an invalid length. [ 316.711256][ T8463] netlink: 'syz.5.471': attribute type 29 has an invalid length. [ 316.711587][ T8463] netlink: 500 bytes leftover after parsing attributes in process `syz.5.471'. [ 317.045288][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045362][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444328][ T8469] batadv1: entered promiscuous mode [ 317.510682][ T8435] tty tty1: ldisc open failed (-12), clearing slot 0 [ 318.090567][ T30] audit: type=1326 audit(1747070851.576:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 318.333196][ T30] audit: type=1326 audit(1747070851.576:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 318.684994][ T30] audit: type=1326 audit(1747070851.576:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.094926][ T30] audit: type=1326 audit(1747070851.576:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.118147][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.124622][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 319.124961][ T30] audit: type=1326 audit(1747070851.576:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.155577][ T30] audit: type=1326 audit(1747070851.576:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.182442][ T30] audit: type=1326 audit(1747070851.576:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.249793][ T30] audit: type=1326 audit(1747070851.576:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.296382][ T30] audit: type=1326 audit(1747070851.576:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 319.319743][ T30] audit: type=1326 audit(1747070851.576:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8465 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98e969 code=0x7fc00000 [ 320.450637][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.740589][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 320.752542][ T5867] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.761292][ T5867] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 320.784052][ T5867] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 320.794230][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.805660][ T5867] usb 2-1: Product: syz [ 320.809807][ T5867] usb 2-1: Manufacturer: syz [ 320.816051][ T5867] usb 2-1: SerialNumber: syz [ 321.043802][ T5867] usb 2-1: Limiting number of CPorts to U8_MAX [ 321.054217][ T5867] usb 2-1: Not enough endpoints found in device, aborting! [ 321.273172][ T5938] usb 2-1: USB disconnect, device number 10 [ 322.535005][ T8531] batadv1: entered promiscuous mode [ 322.869900][ T5938] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 324.489107][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 324.489142][ T30] audit: type=1400 audit(1747070857.996:628): avc: granted { setsecparam } for pid=8517 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 325.393820][ T30] audit: type=1400 audit(1747070858.846:629): avc: denied { read } for pid=8544 comm="syz.5.494" path="socket:[16388]" dev="sockfs" ino=16388 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 326.518660][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 326.891772][ T5938] usb 5-1: device descriptor read/all, error -71 [ 326.961007][ T8553] batadv1: entered promiscuous mode [ 327.353768][ T8558] 9pnet: Unknown protocol version 9p20\++} [ 327.638151][ T8562] overlayfs: failed to clone upperpath [ 327.722434][ T8563] lo speed is unknown, defaulting to 1000 [ 327.738209][ T8563] lo speed is unknown, defaulting to 1000 [ 327.748072][ T8563] lo speed is unknown, defaulting to 1000 [ 328.143345][ T8563] infiniband sz1: set active [ 328.148149][ T8563] infiniband sz1: added lo [ 328.155582][ T8563] sz1: rxe_create_qp: returned err = -2 [ 328.161431][ T8563] infiniband sz1: Couldn't create ib_mad QP1 [ 328.167982][ T8563] infiniband sz1: Couldn't open port 1 [ 328.208436][ T8563] RDS/IB: sz1: added [ 328.212831][ T8563] smc: adding ib device sz1 with port count 1 [ 328.219083][ T8563] smc: ib device sz1 port 1 has pnetid [ 328.226776][ T8563] lo speed is unknown, defaulting to 1000 [ 328.325559][ T8563] lo speed is unknown, defaulting to 1000 [ 328.422372][ T8563] lo speed is unknown, defaulting to 1000 [ 328.534596][ T5899] lo speed is unknown, defaulting to 1000 [ 328.556866][ T5893] lo speed is unknown, defaulting to 1000 [ 328.588062][ T8563] lo speed is unknown, defaulting to 1000 [ 328.683398][ T8563] lo speed is unknown, defaulting to 1000 [ 329.300732][ T30] audit: type=1326 audit(1747070862.796:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8555 comm="syz.4.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e5b78e969 code=0x7fc00000 [ 330.242324][ T8582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.499'. [ 330.784725][ T30] audit: type=1400 audit(1747070864.296:631): avc: denied { write } for pid=8588 comm="syz.3.502" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 331.659281][ T30] audit: type=1400 audit(1747070865.166:632): avc: denied { connect } for pid=8598 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.823416][ T5870] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 331.841845][ T8601] batadv1: entered promiscuous mode [ 331.987287][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.639230][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 332.908990][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.928260][ T5870] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 332.942622][ T5870] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 332.967304][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.978092][ T5870] usb 2-1: Product: syz [ 332.982505][ T5870] usb 2-1: Manufacturer: syz [ 332.987372][ T5870] usb 2-1: SerialNumber: syz [ 333.160773][ T5869] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 333.728850][ T5870] usb 2-1: Cannot retrieve CPort count: -110 [ 333.742559][ T5870] usb 2-1: Cannot retrieve CPort count: -110 [ 333.748594][ T5870] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 333.999545][ T5869] usb 4-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 334.004722][ T8620] batadv1: entered promiscuous mode [ 334.076672][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.377834][ T5869] usb 4-1: config 0 descriptor?? [ 334.388198][ T5869] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 334.396852][ T5869] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 334.533752][ T8627] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 486.116185][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.4.506:8607] [ 486.116211][ C0] Modules linked in: [ 486.116221][ C0] irq event stamp: 532362 [ 486.116228][ C0] hardirqs last enabled at (532361): [] irqentry_exit+0x3b/0x90 [ 486.116259][ C0] hardirqs last disabled at (532362): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 486.116284][ C0] softirqs last enabled at (532360): [] handle_softirqs+0x5be/0x8e0 [ 486.116308][ C0] softirqs last disabled at (532251): [] __irq_exit_rcu+0x109/0x170 [ 486.116352][ C0] CPU: 0 UID: 0 PID: 8607 Comm: syz.4.506 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 486.116373][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.116384][ C0] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 486.116416][ C0] Code: 89 ee e8 be 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 486.116433][ C0] RSP: 0018:ffffc9001de77358 EFLAGS: 00000246 [ 486.116447][ C0] RAX: 0000000000080000 RBX: ffff8880b853f740 RCX: ffffc9000d515000 [ 486.116459][ C0] RDX: 0000000000080000 RSI: ffffffff81af1973 RDI: 0000000000000005 [ 486.116470][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 486.116480][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ee9 [ 486.116491][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b040 [ 486.116503][ C0] FS: 00007f9e5c5b56c0(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 486.116520][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.116532][ C0] CR2: 00002000000c8030 CR3: 0000000028b16000 CR4: 00000000003526f0 [ 486.116543][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.116553][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.116564][ C0] Call Trace: [ 486.116570][ C0] [ 486.116591][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 486.116617][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 486.116639][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 486.116660][ C0] flush_tlb_mm_range+0x322/0x1780 [ 486.116683][ C0] ? page_table_check_clear+0x548/0xb30 [ 486.116705][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 486.116723][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 486.116749][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 486.116773][ C0] ptep_clear_flush+0x136/0x180 [ 486.116796][ C0] do_wp_page+0x17c6/0x58e0 [ 486.116826][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 486.116850][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.116868][ C0] ? ___pte_offset_map+0x1bc/0x540 [ 486.116894][ C0] __handle_mm_fault+0x1ada/0x2a40 [ 486.116926][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 486.116966][ C0] ? find_vma+0xbf/0x140 [ 486.116985][ C0] ? __pfx_find_vma+0x10/0x10 [ 486.117008][ C0] handle_mm_fault+0x3fe/0xad0 [ 486.117037][ C0] do_user_addr_fault+0x7a6/0x1370 [ 486.117059][ C0] ? rcu_is_watching+0x12/0xc0 [ 486.117081][ C0] exc_page_fault+0x5c/0xc0 [ 486.117103][ C0] asm_exc_page_fault+0x26/0x30 [ 486.117119][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 486.117142][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 486.117158][ C0] RSP: 0018:ffffc9001de779f8 EFLAGS: 00050246 [ 486.117171][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000c8030 [ 486.117182][ C0] RDX: 0000000000080000 RSI: ffffffff893dfd83 RDI: 0000000000000005 [ 486.117192][ C0] RBP: ffffc9001de77d98 R08: 0000000000000005 R09: 0000000000000000 [ 486.117203][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 486.117213][ C0] R13: 00002000000c8000 R14: ffffc9001de77ddc R15: 0000000000000002 [ 486.117233][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 486.117260][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 486.117286][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 486.117318][ C0] ? kfree+0x252/0x4d0 [ 486.117347][ C0] ___sys_recvmsg+0x114/0x1a0 [ 486.117366][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 486.117384][ C0] ? irqentry_exit+0x3b/0x90 [ 486.117425][ C0] ? __pfx___might_resched+0x10/0x10 [ 486.117453][ C0] do_recvmmsg+0x2fe/0x740 [ 486.117476][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 486.117492][ C0] ? lock_vma_under_rcu+0x47d/0x970 [ 486.117518][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 486.117553][ C0] ? find_held_lock+0x2b/0x80 [ 486.117575][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 486.117596][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 486.117624][ C0] do_syscall_64+0xcd/0x260 [ 486.117647][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.117664][ C0] RIP: 0033:0x7f9e5b78e969 [ 486.117683][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.117699][ C0] RSP: 002b:00007f9e5c5b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 486.117715][ C0] RAX: ffffffffffffffda RBX: 00007f9e5b9b6080 RCX: 00007f9e5b78e969 [ 486.117728][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 486.117738][ C0] RBP: 00007f9e5b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 486.117749][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 486.117759][ C0] R13: 0000000000000001 R14: 00007f9e5b9b6080 R15: 00007ffc3b7625a8 [ 486.117784][ C0] [ 486.117796][ C0] Sending NMI from CPU 0 to CPUs 1: [ 486.657929][ C1] NMI backtrace for cpu 1 [ 486.657946][ C1] CPU: 1 UID: 0 PID: 8627 Comm: syz.4.506 Not tainted 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 486.657965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.657974][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x2b/0x80 [ 486.658000][ C1] Code: 0f 1e fa 55 48 89 f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8e 28 f6 48 89 df e8 7e e2 28 f6 f7 c5 00 02 00 00 75 23 9c <58> f6 c4 02 75 37 bf 01 00 00 00 e8 d5 4e 19 f6 65 8b 05 1e 74 34 [ 486.658015][ C1] RSP: 0018:ffffc90000a08d30 EFLAGS: 00000046 [ 486.658028][ C1] RAX: 0000000000000001 RBX: ffffffff9adbd278 RCX: ffffffff81985ec3 [ 486.658038][ C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffffff9adbd278 [ 486.658048][ C1] RBP: 0000000000000006 R08: 0000000000000000 R09: fffffbfff35b7a4f [ 486.658058][ C1] R10: ffffffff9adbd27b R11: 0000000000000000 R12: 0000000000000001 [ 486.658068][ C1] R13: dffffc0000000000 R14: ffff88805d0ce340 R15: 1ffff920001411ac [ 486.658078][ C1] FS: 00007f9e5c5526c0(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 486.658094][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.658104][ C1] CR2: 0000001b2ef05ff8 CR3: 0000000028b16000 CR4: 00000000003526f0 [ 486.658114][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.658123][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.658132][ C1] Call Trace: [ 486.658140][ C1] [ 486.658148][ C1] debug_object_deactivate+0x1ec/0x3a0 [ 486.658173][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 486.658195][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 486.658219][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.658239][ C1] __hrtimer_run_queues+0x46f/0xad0 [ 486.658259][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 486.658274][ C1] ? read_tsc+0x9/0x20 [ 486.658297][ C1] hrtimer_interrupt+0x397/0x8e0 [ 486.658318][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 486.658337][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 486.658357][ C1] [ 486.658362][ C1] [ 486.658367][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.658385][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 486.658403][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 8e 28 f6 48 89 df e8 7e e2 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 d5 4e 19 f6 65 8b 05 1e 74 34 08 85 c0 74 16 5b [ 486.658418][ C1] RSP: 0018:ffffc9001df57ca8 EFLAGS: 00000246 [ 486.658430][ C1] RAX: 0000000000000006 RBX: ffff8880b8427840 RCX: 0000000000000007 [ 486.658439][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe198b RDI: ffffffff8bf483a0 [ 486.658449][ C1] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000001 [ 486.658458][ C1] R10: ffffffff9084f717 R11: 0000000000000000 R12: 0000000000000000 [ 486.658468][ C1] R13: 1bc16d196a494747 R14: dffffc0000000000 R15: ffff8880b8427840 [ 486.658486][ C1] clock_was_set+0x599/0x870 [ 486.658505][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 486.658521][ C1] ? rcu_is_watching+0x12/0xc0 [ 486.658537][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 486.658556][ C1] do_settimeofday64+0x323/0x4d0 [ 486.658577][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 486.658595][ C1] ? bpf_lsm_capable+0x9/0x10 [ 486.658608][ C1] ? handler_ir+0x10e/0x300 [ 486.658631][ C1] ? capable+0xd4/0x110 [ 486.658648][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 486.658670][ C1] __x64_sys_clock_settime+0x1be/0x2a0 [ 486.658685][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 486.658700][ C1] ? rcu_is_watching+0x12/0xc0 [ 486.658720][ C1] do_syscall_64+0xcd/0x260 [ 486.658740][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.658756][ C1] RIP: 0033:0x7f9e5b78e969 [ 486.658769][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.658784][ C1] RSP: 002b:00007f9e5c552038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 486.658798][ C1] RAX: ffffffffffffffda RBX: 00007f9e5b9b6320 RCX: 00007f9e5b78e969 [ 486.658808][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 486.658817][ C1] RBP: 00007f9e5b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 486.658826][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.658835][ C1] R13: 0000000000000000 R14: 00007f9e5b9b6320 R15: 00007ffc3b7625a8 [ 486.658852][ C1] [ 486.658920][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 487.096468][ C0] CPU: 0 UID: 0 PID: 8607 Comm: syz.4.506 Tainted: G L 6.15.0-rc6-syzkaller #0 PREEMPT(full) [ 487.108195][ C0] Tainted: [L]=SOFTLOCKUP [ 487.112517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.122576][ C0] Call Trace: [ 487.125862][ C0] [ 487.128705][ C0] dump_stack_lvl+0x3d/0x1f0 [ 487.133305][ C0] panic+0x71c/0x800 [ 487.137207][ C0] ? __pfx_panic+0x10/0x10 [ 487.141636][ C0] ? __pfx__printk+0x10/0x10 [ 487.146240][ C0] ? nmi_backtrace_stall_check+0x6e/0x540 [ 487.151970][ C0] ? irq_work_queue+0xce/0x100 [ 487.156743][ C0] ? watchdog_timer_fn+0x5f2/0x7d0 [ 487.161858][ C0] ? watchdog_timer_fn+0x5e5/0x7d0 [ 487.166976][ C0] watchdog_timer_fn+0x603/0x7d0 [ 487.171924][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 487.177387][ C0] __hrtimer_run_queues+0x5ea/0xad0 [ 487.182608][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 487.188330][ C0] ? read_tsc+0x9/0x20 [ 487.192415][ C0] hrtimer_interrupt+0x397/0x8e0 [ 487.197371][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 487.203377][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 487.209023][ C0] [ 487.211951][ C0] [ 487.214878][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.220865][ C0] RIP: 0010:smp_call_function_many_cond+0x4a5/0x1290 [ 487.227551][ C0] Code: 89 ee e8 be 12 0c 00 85 ed 74 48 48 8b 44 24 20 49 89 c4 83 e0 07 49 c1 ec 03 48 89 c5 4d 01 f4 83 c5 03 e8 5d 17 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 de 0b 00 00 8b 43 08 31 [ 487.247194][ C0] RSP: 0018:ffffc9001de77358 EFLAGS: 00000246 [ 487.253271][ C0] RAX: 0000000000080000 RBX: ffff8880b853f740 RCX: ffffc9000d515000 [ 487.261247][ C0] RDX: 0000000000080000 RSI: ffffffff81af1973 RDI: 0000000000000005 [ 487.269223][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 487.277287][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170a7ee9 [ 487.285359][ C0] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff8880b843b040 [ 487.293355][ C0] ? smp_call_function_many_cond+0x4a3/0x1290 [ 487.299443][ C0] ? smp_call_function_many_cond+0x4a3/0x1290 [ 487.305539][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 487.310761][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 487.316234][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 487.321377][ C0] flush_tlb_mm_range+0x322/0x1780 [ 487.326498][ C0] ? page_table_check_clear+0x548/0xb30 [ 487.332051][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 487.338048][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 487.343621][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 487.348617][ C0] ptep_clear_flush+0x136/0x180 [ 487.353502][ C0] do_wp_page+0x17c6/0x58e0 [ 487.358031][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 487.362896][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.368272][ C0] ? ___pte_offset_map+0x1bc/0x540 [ 487.373412][ C0] __handle_mm_fault+0x1ada/0x2a40 [ 487.378546][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.384032][ C0] ? find_vma+0xbf/0x140 [ 487.388284][ C0] ? __pfx_find_vma+0x10/0x10 [ 487.392976][ C0] handle_mm_fault+0x3fe/0xad0 [ 487.397761][ C0] do_user_addr_fault+0x7a6/0x1370 [ 487.402885][ C0] ? rcu_is_watching+0x12/0xc0 [ 487.407660][ C0] exc_page_fault+0x5c/0xc0 [ 487.412176][ C0] asm_exc_page_fault+0x26/0x30 [ 487.417048][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 487.422779][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 487.442397][ C0] RSP: 0018:ffffc9001de779f8 EFLAGS: 00050246 [ 487.448469][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000c8030 [ 487.456790][ C0] RDX: 0000000000080000 RSI: ffffffff893dfd83 RDI: 0000000000000005 [ 487.464764][ C0] RBP: ffffc9001de77d98 R08: 0000000000000005 R09: 0000000000000000 [ 487.472737][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 487.480710][ C0] R13: 00002000000c8000 R14: ffffc9001de77ddc R15: 0000000000000002 [ 487.488696][ C0] ? ____sys_recvmsg+0x2e3/0x6b0 [ 487.493653][ C0] ____sys_recvmsg+0x2ee/0x6b0 [ 487.498433][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 487.503737][ C0] ? kfree+0x252/0x4d0 [ 487.507825][ C0] ___sys_recvmsg+0x114/0x1a0 [ 487.512509][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 487.517721][ C0] ? irqentry_exit+0x3b/0x90 [ 487.522333][ C0] ? __pfx___might_resched+0x10/0x10 [ 487.527631][ C0] do_recvmmsg+0x2fe/0x740 [ 487.532058][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 487.536998][ C0] ? lock_vma_under_rcu+0x47d/0x970 [ 487.542212][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 487.547530][ C0] ? find_held_lock+0x2b/0x80 [ 487.552224][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 487.557258][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 487.562820][ C0] do_syscall_64+0xcd/0x260 [ 487.567334][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.573233][ C0] RIP: 0033:0x7f9e5b78e969 [ 487.577649][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.597268][ C0] RSP: 002b:00007f9e5c5b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 487.605698][ C0] RAX: ffffffffffffffda RBX: 00007f9e5b9b6080 RCX: 00007f9e5b78e969 [ 487.613686][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 487.621662][ C0] RBP: 00007f9e5b810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 487.629649][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 487.637630][ C0] R13: 0000000000000001 R14: 00007f9e5b9b6080 R15: 00007ffc3b7625a8 [ 487.645634][ C0] [ 488.729065][ C0] Shutting down cpus with NMI [ 488.734018][ C0] Kernel Offset: disabled [ 488.738361][ C0] Rebooting in 86400 seconds..