last executing test programs: 4m25.157132939s ago: executing program 3 (id=112): io_submit(0x0, 0xfffffffffffffcf9, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0x40140921, 0x200000000005) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) r1 = socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) poll(&(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010036bd7000fddbdf25090000003000038005000800fa00000014000200767863616e310000000000000000000008000300030000000800010002000000"], 0x44}}, 0x40) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x90, r4, 0x500, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7e36c104}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x90}}, 0x8000) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 4m24.178206126s ago: executing program 3 (id=117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x68034) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000a80)="391cb6285fa87899b53571d00b155e5156e50668f414c07b618ad9a617e6c449d5e9990097bcf458488233e625ca73d220d3166b037b2cfd129c5d9b6b9b56628233435641f3872215178323ccfd52ae1ba1a7e304fa2a66dbf90e90538ad33f10bf", 0x62}], 0x2, &(0x7f00000003c0)}, 0x680408d1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000057c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) getpid() syz_usb_connect(0x6, 0x0, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(lrw(twofish),blake2s-160-x86)\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="1201000097793b10d10501200029010203010902120001000000000904"], 0x0) 4m21.421170769s ago: executing program 3 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x5}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m20.808598393s ago: executing program 3 (id=127): socket(0x10, 0x3, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240448d5) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0xb20d200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102383, 0x18fef) (async) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x21f) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x200}) (async) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) modify_ldt$write2(0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'gretap0\x00', {0x2}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000001c0)='iso9660\x00', 0x21c000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 4m19.223838441s ago: executing program 3 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c00000000000000000000000080000000010000", @ANYRES32, @ANYBLOB="0400"/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x603, 0x70bd32, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f00000011c0)={0xfc, {"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", 0x1000}}, 0xffbc) 4m18.092335731s ago: executing program 3 (id=134): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102356, 0xfffffed3) r4 = msgget$private(0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x2000, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES32=r7, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="05"], 0x10) 4m2.938481503s ago: executing program 32 (id=134): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102356, 0xfffffed3) r4 = msgget$private(0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x2000, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r5, @ANYRES32=r7, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="05"], 0x10) 21.88779354s ago: executing program 4 (id=908): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000025d6d83f152389d6a12072000057ff98ea9e46dbdedaada869d1ef6cd5256fe65bbd678671576c99c8a00900000032000000fe8018f865", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x6c074) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003cd972c0823398a712e9b010203010902240001000030000904"], &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0}) 16.942978266s ago: executing program 4 (id=921): r0 = socket(0x1d, 0x2, 0x6) r1 = syz_io_uring_setup(0xa8bf, &(0x7f0000000140)={0x0, 0xcff3, 0x20, 0x4, 0xbbdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd, 0x7, {0x0, r1}, 0xe, 0x8}) io_uring_enter(r1, 0x2b8f, 0xf9d0, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r4, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200001d3) mkdir(&(0x7f0000000180)='./file0\x00', 0x41) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, r1, 0x0, &(0x7f0000000300)='./file0\x00'}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b000100000300090400"], 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x31}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)}], 0x1) ioctl(r5, 0x4b8, &(0x7f0000000400)="15e0185428222599f0") r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x40000002, 0x9, 0xfffffffffffffff9, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c2, 0xc595, 0x7, 0x5, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) write$binfmt_aout(r5, 0x0, 0xfdef) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x149) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000300, 0x0, 0x0) 15.072576881s ago: executing program 4 (id=926): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x66, {"c4237962e70766bad104b0b9eeb9b70a00000f32c744240000000080c7442402938b2364c7442406000000000f011424b805000000b90a4200000f01c10f66ca66b82e000f00d0f30fbdddc44295b9ec66baa000ed"}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @out_dx={0x6a, 0x28, {0xbcb5, 0x7, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5ea, 0x7, 0x1ff, 0x800}}, @in_dx={0x69, 0x20, {0x5fc0, 0x2}}, @out_dx={0x6a, 0x28, {0xa448, 0x2, 0x100000000}}, @code={0xa, 0x6b, {"66baa10066ed4298460f01f866ba4200b85b981adaef642e460f01c46764440f01d10f23d366baf80cb81256ce89ef66bafc0c66ed48b80c040000000000000f23c00f21f835010006000f23f8b805000000b94d0200000f01c1"}}, @in_dx={0x69, 0x20, {0xbff9, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x1468, 0x0, 0x80000001}}, @code={0xa, 0x51, {"660f381097920b0000640fc79b0000000066baf80cb8a4f6ed82ef66bafc0cec440f01598e420f01f00f01c3c44189febf00380000400f0966b8d4008ee0d006"}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x3443, 0x6}}, @cpuid={0x64, 0x18, {0x400, 0x1}}, @nested_load_code={0x12e, 0x6c, {0x3, "67410f01cfc461f95b01c481edf903b984010000b8f7f9001bba8c1d316d0f3066670f01dfa1006800000000000048b8f61f0000000000000f23c00f21f835030001000f23f80f01c9c402990291020000000f09"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x2, 0x1, 0x1ff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x806, 0x2, 0x4, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5, 0x3}}], 0x456}) (async) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x66, {"c4237962e70766bad104b0b9eeb9b70a00000f32c744240000000080c7442402938b2364c7442406000000000f011424b805000000b90a4200000f01c10f66ca66b82e000f00d0f30fbdddc44295b9ec66baa000ed"}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x3, 0x5}}, @out_dx={0x6a, 0x28, {0xbcb5, 0x7, 0x4}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x5ea, 0x7, 0x1ff, 0x800}}, @in_dx={0x69, 0x20, {0x5fc0, 0x2}}, @out_dx={0x6a, 0x28, {0xa448, 0x2, 0x100000000}}, @code={0xa, 0x6b, {"66baa10066ed4298460f01f866ba4200b85b981adaef642e460f01c46764440f01d10f23d366baf80cb81256ce89ef66bafc0c66ed48b80c040000000000000f23c00f21f835010006000f23f8b805000000b94d0200000f01c1"}}, @in_dx={0x69, 0x20, {0xbff9, 0x4}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x1468, 0x0, 0x80000001}}, @code={0xa, 0x51, {"660f381097920b0000640fc79b0000000066baf80cb8a4f6ed82ef66bafc0cec440f01598e420f01f00f01c3c44189febf00380000400f0966b8d4008ee0d006"}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x3443, 0x6}}, @cpuid={0x64, 0x18, {0x400, 0x1}}, @nested_load_code={0x12e, 0x6c, {0x3, "67410f01cfc461f95b01c481edf903b984010000b8f7f9001bba8c1d316d0f3066670f01dfa1006800000000000048b8f61f0000000000000f23c00f21f835030001000f23f80f01c9c402990291020000000f09"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro64=0x2400, 0x2, 0x1, 0x1ff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest16=0x806, 0x2, 0x4, 0x7}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x5, 0x3}}], 0x456}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="baf80c66b8ce47a08b66efbafc0cb8fa20ef0f2329ba430066edba610066edea008014000f01c8f3f20f320f086766c7442400c94a00006766c7442402005000006766c744240600000000670f011c24f4", 0x51}], 0x1, 0x11, &(0x7f0000000180)=[@cstype0={0x4, 0x9}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080040"], 0x3c}}, 0x0) 14.888329038s ago: executing program 4 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) r0 = socket(0x2a, 0xb, 0x1ff) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) (async) write$P9_ROPEN(r0, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x80, 0x1, 0x2}}}, 0x18) 14.690488488s ago: executing program 4 (id=930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0xc2c00, 0x7, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r2 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="07010100690300009902000007000000540000007f0000000000000000000000c059bf976ed75a8f1e5778fc3508678b180596fc0c6c5717b5ebb817de0804220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e00"/832], 0x340) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000013c0)={"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"}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0xfffffffffffffd2d, 0xfa00, {&(0x7f0000000480), 0xffffffffffffffff, 0x2}}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x10}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) fcntl$setlease(r2, 0x400, 0x74f7dce967d99242) fcntl$getflags(r1, 0x401) 13.488013969s ago: executing program 4 (id=935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffd8b4}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r5}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1ff}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x40}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.290323413s ago: executing program 33 (id=935): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffd8b4}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0xc89}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x4040000) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x40000c0) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x29, 0x800000000004, @tid=r5}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newnexthop={0x40, 0x68, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1ff}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}]}, 0x40}}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioprio_get$pid(0x3, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.286100296s ago: executing program 0 (id=937): r0 = epoll_create1(0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000440)={'\x00\x00\x00\b', 0x0, 0x6, 0x2, 0x0, 0x1, "00b000", '\x00', "2c0300", '\x00', ["ace000", "808e88e2e9ffffffffff00", "00001864d01b00", "000000026caeb48177954b00"]}) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x4c6, 0x0, 0x0) 11.419586252s ago: executing program 5 (id=941): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x400050}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x94, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x3}, @enter_looper, @dead_binder_done, @dead_binder_done, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fd}, &(0x7f0000000440)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0xc3b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x0, "13ffff000000c1ff8180000000000000000000bef20000008b05000000000001", 0x47504a4d}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdff"], 0xfc}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000002a02af41b16ff867b5b02f5a7fc17d48bfc8ededba4164960ef3fccb11bef6516985d7b0661082cbe0bba9d7bfdbee8858616a0bb1ead75c9c1eee3d4ced5af33908957bb912e576eede2e4dc8e3091a04d8855f"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) syz_usb_connect(0x2, 0x36, &(0x7f0000001a00)=ANY=[@ANYBLOB="120100028b04d610ac0581d1a2b401020301090224000105ff00800904940102fffd010609050c"], &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.36423769s ago: executing program 0 (id=942): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f00000008c0)=""/4096, 0x1000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x5, 0x7, 0x3, 0x3}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b00240e03100309049c080119662194090586d706"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2b, 0x0}, {0x0, 0x0}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x44e, 0x121e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0xffff, 0x7, 0x1, {0x22, 0xd04}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xf7, 0x7}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x5, 0x1, 0x20, 0x4}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) syz_usb_connect$uac1(0x3, 0xbf, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x2, 0x0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xdd}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x5, 0x1, 0xfd}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x8, "11b4b5"}, @selector_unit={0xb, 0x24, 0x5, 0x2, 0x8, "1c7e028fefcb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x3, 0x3, 0x6, "1391743ac2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x1, "eb"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "a3ca9114b6"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xa, 0x1, 0x4, {0x7, 0x25, 0x1, 0x83, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3, 0x1, 0xf3, 0x7, "bc347a4b8a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xb2, 0x3, 0x3, {0x7, 0x25, 0x1, 0x0, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x1, 0xf9, 0x5, 0x8, 0x73}, 0x61, &(0x7f0000000240)={0x5, 0xf, 0x61, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4d, "9dfef4f8ea1c8293038a8f48a3d4828b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x8, 0xa}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x5, 0xf00f, 0x7, [0xff600f, 0xcf, 0x3f, 0x3f00, 0x3f30, 0xc0c0]}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x412, 0x0, 0x7, [0xf]}]}, 0x3, [{0xa4, &(0x7f0000000440)=@string={0xa4, 0x3, "5f9cd3ed923641e51b0504b97a774f5542ffc8d5d88a2a165d05a3c373340721f0d206b19b0a8189c6cadcc354375dfb8196cdfddbb9bd5277d15d8fd513a66f518f5bb51791731f5dc5cbf68e943793b6423eaef44679662aa230d82f780dd6892dff18eac28f8b2f313f61287959469dfd274112a6b226005b4e625ccb0fd9c91106d555d726eec5cd1a5bba0556d2368b4e1698cfeb4dbb2d1bc34872f05ae4a5"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2801}}]}) 10.987671631s ago: executing program 2 (id=944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c040}, 0xc000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r3 = socket(0x2a, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @rand_addr=0x64010102}, 0x5) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 10.154252798s ago: executing program 2 (id=946): r0 = socket(0x2c, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2100000000000000030000000000000044010000", @ANYRES32, @ANYBLOB="a2844eb00000000000000000edffff8e1434d947ae751ccd26138168c2e0dda6e6d5202e3c9a489e94bd68cb414dadca0906000000000000007c3631e811758f2bcb1216899a55054381dcf4992d84e97d8aa3132275d1a6303056e4724b5a9c59cc60f0d63ede3c315bf6d02b5890f57d628387b33c0c4a728c122c8e7dbdca5be0ce8b67850e203f9d714dcac3ada3f4b58b3991c408cacd7ea42b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x4242, 0x11a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r7, &(0x7f0000001400)=""/4076, 0xfffffeea) r8 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r11 = socket$nl_crypto(0x10, 0x3, 0x15) getpeername$netlink(r11, &(0x7f0000000180), &(0x7f0000000300)=0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r8, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x8000, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x12, 0x14, 0x20, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x41, 0x0}, @multicast1}}}}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f0000000040)={0xc, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x5, r2, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) socket$inet6_tcp(0xa, 0x1, 0x0) 8.9602896s ago: executing program 2 (id=947): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, 0x0, 0x0) lsm_get_self_attr(0x66, 0x0, 0x0, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="340300002e00090027bd70000000000004000000bb0018004fbc9f57ee8418c3f3b076e93e980d81ce9092bbe7de4221d1b7acb6ea3dc246f0dbdd1375374d14c8d0b7dbf41cd4506aea75db159ddeb4f68be90b42cd242bd8328b6d85d75f2fec1c0f0f4254bcc7b1031b6ccb7ab94c82f30eef011cbe183f101ef9bf9fbe4a11119845e6e00413ce446aef9cf676f68e0f5d538e6c42144c6d73f1e6b2c322f2e9255705752ca2e453eb9d780a438ae9f237497cb4e515c9c0d6c325f33e4e03e4a434ec9a86391d9d5c4831f4830064021780040011", @ANYBLOB], 0x334}, 0x1, 0x0, 0x0, 0x42804}, 0x4000) syz_usb_connect$cdc_ecm(0x3, 0x67, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYRES64=0x0, @ANYRES32=r2], 0x0) (async, rerun: 32) socket$igmp6(0xa, 0x3, 0x2) (rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x24000, 0x0) (async, rerun: 32) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async) write$nci(r4, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) (async) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) (async, rerun: 64) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000c80)={'nat\x00', 0x0, 0x401, 0x6d, [0x9, 0x8000, 0x5, 0x3451, 0x66790ffa, 0x4], 0x6, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000c00)=""/109}, &(0x7f0000000ac0)=0x78) (async, rerun: 64) syz_usb_connect$uac1(0x5, 0xc3, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x0, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}, [@extension_unit={0xd, 0x24, 0x8, 0x5, 0x0, 0xb, "8d8553a6f6cc"}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x8, "dd043817"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x5, 0xd, '6n,', "1eb6c5"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xc, 0x1, 0x8, 0x40, "f9ecdc", "b92339"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x47, 0x7, 0x1, {0x7, 0x25, 0x1, 0x81, 0x5, 0x36}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x7, 0x6, "634bf9af5e38"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xfff6, 0xf1, "f72ecc9e1f54e4db"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x71, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80, 0x5, 0x6}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x0, 0x0, 0x4, 0x18, 0x6}, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="050f4700050aaa0a000800030905001c100a0104ffffff00f0050007000000c0000000cfff0000cfff000003100b0b100104040001e1be03f5cbbb21d63907ff00070e100adc53"], 0x3, [{0x83, &(0x7f0000000800)=ANY=[@ANYBLOB="8303d681caf1e85d0a0a9b147fa225cd96623677b63af693959e6e3b2972f53c88324d261a7df1c45d5fe121fcdc2921d3c86808f2c1693e6eb0fedec03c43d059b134e14049954bf64d39d3216b32ae385322a139bb8eef69d86a202e711087a9e43d1467bd2359f748f71867e07c5df8d2f400"/131]}, {0x5d, &(0x7f0000000980)=@string={0x5d, 0x3, "f8d7a6fba2e08f4bc90d7d9624b0665719d433e548ccd163d83f0100f304a5fc1a760400000000000000c3ecb9046874fda90d1b87f49b695c27c84a61dcda0873be10425c1324722fe820fbd5b82bdb3112ab0247d225e5c83ac3"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x458}}]}) (async) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaac3f, 0x14, 0x0, 0x0) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000a00)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x68, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x40) (async, rerun: 64) socket(0x1, 0x3, 0x57) (rerun: 64) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96cf36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbb341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) (rerun: 64) 8.652068413s ago: executing program 2 (id=948): socket(0x2, 0x3, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) (async) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000011000100000000000200000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000180"], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) (async) sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) 8.310724369s ago: executing program 5 (id=949): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x1003, 0x40, 0x1, 0x26e}, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x80, 0x280002) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) r4 = syz_clone3(&(0x7f0000000480)={0x20000, &(0x7f0000000040), 0x0, &(0x7f0000000340)=0x0, {0x40002a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)=0x80) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000003c0)={'veth0_to_team\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x32, 0x3, 0x3, {0x18, @usr_ip6_spec={@empty, @local, 0x3ff, 0x4, 0x8a}, {0x0, @random="7d3cbb0463c9", 0x8000, 0x200, [0x0, 0x6]}, @hdata="8668ae810e1ac0d6bf547065e3ee0bb0f6bcbfbfea375a92fc26f6a278f183f0e6ee0e8d6060d8b5f51ed9326638bffe07baa003", {0x0, @empty, 0x4, 0x9, [0x374d, 0x1]}, 0x200, 0x1ff}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$cont(0xffffffffffffffff, r5, 0x6, 0x400) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r10, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r10, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb1b, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x20000004, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x4, 0xffffffff}, 0xfc, 0x9}}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xffffff74, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000002180), 0x480, 0x0) 8.289890769s ago: executing program 0 (id=950): setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0xa000, 0x800, &(0x7f0000263000/0xa000)=nil) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="090000000700000004", @ANYRES32], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) shmctl$SHM_UNLOCK(r0, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x7ff, 0x4, 0x80009, 0xfffffffe, 0xae8}) 7.563783875s ago: executing program 1 (id=951): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000080)={0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x6e23, 0xffff7fff, @mcast1, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xffffff81, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004001}, 0x40004) sendmsg$nl_route(r4, 0x0, 0x20044000) 6.921576375s ago: executing program 5 (id=952): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f00000002c0)={@private, @dev, @empty}, &(0x7f0000000380)=0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0xfffd, 0x3, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010818"], 0x0, 0x3b, 0x0, 0x0, 0x9}, 0x28) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0xfdc5, 0x1000000, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r5, 0x0, 0x0, 0x8000}]) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r8, 0x7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x3, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x8000, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x1b}}}}}, 0x36) 6.758915205s ago: executing program 1 (id=953): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r5, 0xc11, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x2, 0x1}, {0x5, 0x3}, {0x7a, 0x2}, {0x8, 0x2}], "7ecd4163b8fccf09"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x0, 0x3, 'f'}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc7e}}], 0x68}}], 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.699787787s ago: executing program 5 (id=954): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff3, 0xa, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0x2a35, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0xb, 0xf3, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x1, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0xc, 0x3, 0x80000007, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0x20cb, 0xf9, 0xd, 0x2bf, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x4312, 0x8, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0xffffffff, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x30, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xfff7, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x5, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x9, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x10000000, 0x8005, 0xb, 0x4, 0x5, 0x3, 0x0, 0x2, 0x5, 0x8, 0x86, 0x3, 0x1000000b, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x6, 0x6d01, 0x5, 0x3b, 0x3, 0x1fe, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0x3, 0x203, 0x0, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x4, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x9, 0x8, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x1000009, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x28, &(0x7f0000000100)="4c287bea56504901967e40dc8c55f811acf1642dfa32d5aa12d16735480878d2f5ecf26117b5d835"}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x89e2, &(0x7f0000000340)=@bcast) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r7], 0x0) r9 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xacff, 0x80400, 0x0, 0x21}, 0x0, 0x0) 5.699364137s ago: executing program 1 (id=955): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r1, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x0, @pix_mp={0x5, 0xffffc458, 0x31324d4e, 0x0, 0x6, [{0x8, 0xffffd66f}, {0x9, 0x8}, {0x3, 0x2}, {0x5, 0x7}, {0x2, 0xfffffffd}, {0x6, 0x9}, {0x7, 0x3}, {0x3, 0x4}], 0x5, 0x0, 0x2, 0x2, 0x3}}) (async) symlink(0x0, &(0x7f0000000100)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x1000000000005) (async) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r7 = syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0x412d, 0x100, 0x3, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@un=@abs={0x0, 0x0, 0x4e21}}) (async) io_uring_enter(r7, 0x3516, 0x483, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 5.501421469s ago: executing program 0 (id=956): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = open(&(0x7f0000000380)='./bus\x00', 0xeb40, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000090601020000000000000000000000000900020073797a31000000000500010007000000200007800c0140282a2c0000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r5], 0x2b) sendfile(r8, r5, 0x0, 0x4000000053d2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x0, &(0x7f00000013c0)) 4.762584716s ago: executing program 5 (id=957): syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f6010203010902240001000000000904000002d31a3a00090501"], 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="1af4885fa7db3f5b2451b8dc662f3e0c007e4826efbb670843b2fc549393c4b531e86a2b8ea0e114b72dc218f08a81e157a8aa71123c", 0x36}], 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000340)='\xe8}\xd2bio#(a', 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0xefff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001004010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000002140000001100010000000000000000000300000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r6, &(0x7f00000054c0)=[{{0x0, 0xfffffffffffffeef, 0x0, 0x0, &(0x7f0000000680)}}], 0x1, 0x40000000) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020ac05910240000102030109022d00010a00700409040009010301010809210f006501220e070905810320003b0bab090502032000050206"], &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x3, 0x7, 0x2, 0x10, 0xa}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c01}}, {0x5c, &(0x7f00000004c0)=ANY=[@ANYBLOB="5c0373b3128da96b4b7f30452ec7d4ef4b2a447ed55e64ab1f156a900b26a9225e8916ca961fe3bd8e310332314bc787971636db3a595ca62d226044ce40f06665c60935e2fb06176ea550b850dcf4334d78eef5340cfe2c05ee4fa52b53ecc283edf610d25355277200"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1004}}]}) 3.546340574s ago: executing program 0 (id=958): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='fsi_master_gpio_cmd_abs_addr\x00', r3, 0x0, 0x7fe}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xff, 0x0, &(0x7f0000000e00)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a228394d33d7529687d49ac030f27fdcbc92ea0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x50) 3.464097982s ago: executing program 1 (id=959): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x11, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x400050}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x94, 0x0, &(0x7f0000000740)=[@clear_death={0x400c630f, 0x3}, @enter_looper, @dead_binder_done, @dead_binder_done, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fd}, &(0x7f0000000440)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0xc3b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x0, "13ffff000000c1ff8180000000000000000000bef20000008b05000000000001", 0x47504a4d}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdff"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000002a02af41b16ff867b5b02f5a7fc17d48bfc8ededba4164960ef3fccb11bef6516985d7b0661082cbe0bba9d7bfdbee8858616a0bb1ead75c9c1eee3d4ced5af33908957bb912e576eede2e4dc8e3091a04d8855f"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) syz_usb_connect(0x2, 0x36, &(0x7f0000001a00)=ANY=[@ANYBLOB="120100028b04d610ac0581d1a2b401020301090224000105ff00800904940102fffd010609050c"], &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.295898185s ago: executing program 0 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(0x0, 0x382, 0x100) fcntl$notify(r0, 0x402, 0x80000000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000081}, 0x20008800) r4 = fsopen(&(0x7f00000001c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x5cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x4000000000000a, 0x80000089}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mount(0x0, 0x0, 0x0, 0x1008000, 0x0) timer_create(0x0, 0x0, 0x0) 2.177455582s ago: executing program 2 (id=961): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x9) (async) r1 = creat(0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000240)={0x6, 0x0, [{0x19a, 0x0, 0x7}, {0x95c, 0x0, 0x3}, {0x96c, 0x0, 0xfffffffffffffffd}, {0x9c8, 0x0, 0x9b8}, {0x355, 0x0, 0xf5c}, {0x9fc, 0x0, 0x1ff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpgid(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x40002) prctl$PR_SCHED_CORE(0x3e, 0x4000001, 0xffffffffffffffff, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4000001, 0xffffffffffffffff, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x3d08009, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000080)={0x7f, 0x9, 0x7, 0x8000, 0xb, "01004d00"}) ioctl$sock_ifreq(r4, 0x8920, &(0x7f0000000300)={'veth1_to_batadv\x00', @ifru_names='wlan0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300f7f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767d55757999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be0000000000000000000000000000e9a62ae54c4cfaee2a9dfe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000200)={0x9, 0x3}) (async) ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f0000000200)={0x9, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x4848, 0x20000000000009}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.807454559s ago: executing program 6 (id=936): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) r1 = socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000480)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000ff0700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000402f17340000000000000109022400010000000909040000010300030009210101000122010009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18e684e615348e9c}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x850) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c0, 0x10, 0x1, 0xa, 0x14000000, 0x0, 0xfffffffd, 0x486, 0xffd, 0x7ffe, 0x3, 0x0, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x1, 0x1, 0x3ff, 0x4, 0x200, 0xe2df, 0xaa14, 0x1ff, 0x4, 0x4, 0x80000, 0x6, 0x6]}) syz_usb_control_io(r7, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "20de3f42"}]}}, 0x0}, 0x0) 1.65637002s ago: executing program 2 (id=962): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 386.162324ms ago: executing program 5 (id=963): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='\'', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)="9981", 0x2}], 0x1}}], 0x400000000000003, 0x0) unshare(0x20000) shutdown(r0, 0x1) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b0312", 0x3, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="09000600c6633cc119ab5b0ca3b401e5120668d28bf14f23560e46475860d91b8500c425da810de5b9a8b317a56378abe59983431b2a52f075ccdba61aef8ed22c4711dc4ee1c2546e71bb1126f2fa1912734e661de0cdb6d2db20a9445bf3420c26f3af5fae81aba2561439401911f02a31f71ac1d2edeb3232f97cf1f1f51c46d7eefb24684219cfe93c77c5af18965750f2a43737d9811fd2e453da6f26c801f00a8ea94c2dd7fd7a85", @ANYRES16, @ANYRES8=0x0], 0x44}}, 0x4004010) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000200)='{', 0x1}], 0x1, 0xd) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8c014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 221.756604ms ago: executing program 1 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x4000000) (async) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x800000, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) (async) r2 = fcntl$dupfd(r1, 0x406, r1) socket$inet_mptcp(0x2, 0x1, 0x106) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x6}}, 0x20) read$FUSE(r2, &(0x7f0000002540)={0x2020}, 0x2020) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 0s ago: executing program 1 (id=965): r0 = socket(0x25, 0x3, 0x38) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x0, 0x10, 0xffffffffffffffff, 0x5e20000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x8, 0x8, 'syz0\x00', 0x1}, 0x0, 0x0, 0x10008, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180), 0xffffff23}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000950ef2ba3280c63a000bd18526cf37cdc99c9bfeea6b4f288735330ec304c4efdedcfa86cd3e536e722adcb8600352ab625e25b90feacb0f8bbd953b34c774c52f4afd0b3e72e58c7a2215e8ce7f5799e336e6"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa00b01f000047061befad040000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) unshare(0x64000600) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCSPGRP(r8, 0x8902, 0x0) kernel console output (not intermixed with test programs): t=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 237.085353][ T8114] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 237.243864][ T8114] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 237.777778][ T8114] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 237.821552][ T8114] usb 2-1: media controller created [ 237.837069][ T30] audit: type=1400 audit(1766747946.342:1052): avc: denied { bind } for pid=8170 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.959692][ T30] audit: type=1400 audit(1766747946.342:1053): avc: denied { name_bind } for pid=8170 comm="syz.5.525" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 237.989256][ T30] audit: type=1400 audit(1766747946.342:1054): avc: denied { node_bind } for pid=8170 comm="syz.5.525" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 237.993386][ T8114] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.018604][ T30] audit: type=1400 audit(1766747946.342:1055): avc: denied { mount } for pid=8170 comm="syz.5.525" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 238.175625][ T30] audit: type=1400 audit(1766747946.522:1056): avc: denied { create } for pid=8172 comm="syz.4.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.281252][ T30] audit: type=1400 audit(1766747946.602:1057): avc: denied { read write } for pid=8170 comm="syz.5.525" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.351779][ T30] audit: type=1400 audit(1766747946.602:1058): avc: denied { open } for pid=8170 comm="syz.5.525" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.438570][ T8114] zl10353_read_register: readreg error (reg=127, ret==-71) [ 238.474454][ T30] audit: type=1400 audit(1766747946.612:1059): avc: denied { ioctl } for pid=8170 comm="syz.5.525" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 238.591116][ T30] audit: type=1400 audit(1766747946.822:1060): avc: denied { write } for pid=8170 comm="syz.5.525" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.680431][ T8114] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 238.963126][ T8114] usb 2-1: USB disconnect, device number 22 [ 239.421670][ T6158] usb 3-1: USB disconnect, device number 35 [ 239.517938][ T8114] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 240.102043][ T8114] usb 2-1: not running at top speed; connect to a high speed hub [ 240.112178][ T8114] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 240.120079][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 240.159606][ T8114] usb 2-1: config 95 has no interface number 0 [ 240.163628][ T8204] netlink: 'syz.2.533': attribute type 5 has an invalid length. [ 240.172984][ T8114] usb 2-1: config 95 interface 1 has no altsetting 0 [ 240.229898][ T8114] usb 2-1: string descriptor 0 read error: -22 [ 240.240484][ T8114] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 240.249590][ T6016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.249755][ T6016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.299750][ T8114] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.329408][ T7437] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.354120][ T7437] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.831153][ T8219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8219 comm=syz.5.536 [ 241.203409][ T6158] usb 2-1: USB disconnect, device number 23 [ 242.303242][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 242.303253][ T30] audit: type=1400 audit(1766747950.812:1082): avc: denied { getopt } for pid=8256 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.336180][ T6158] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 242.349436][ T30] audit: type=1400 audit(1766747950.852:1083): avc: denied { create } for pid=8243 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 242.431074][ T5882] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 242.505104][ T6158] usb 2-1: unable to get BOS descriptor or descriptor too short [ 242.568994][ T6158] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13 [ 242.581075][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 242.599814][ T5882] usb 3-1: config 1 interface 0 altsetting 243 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.612888][ T6158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.628056][ T5882] usb 3-1: config 1 interface 0 altsetting 243 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.641277][ T6158] usb 2-1: Product: syz [ 242.645440][ T6158] usb 2-1: Manufacturer: syz [ 242.650096][ T6158] usb 2-1: SerialNumber: syz [ 242.657844][ T5882] usb 3-1: config 1 interface 0 has no altsetting 0 [ 242.672506][ T5882] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.40 [ 242.686509][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.696333][ T5882] usb 3-1: Product: â³ã¾¬è¹³á‹¬â†¬ß¶à««á‹›Â·ç¥­ï·Žæ¡¸î·‹î§¸ä¹…ꦥ㨓꫃æ­ï‹Ÿë–閄垓ⲛ곳ᓊ꯽æ¯ä´ïŸ–觭좵膨潦ۼ䌒â˜ïꧦ莔龪瓱∱ꆴ馇嚜ꃚㄾ뾔楒늄á¸â„—욛残빕ꉔ嗼傊⃂æ…⦲₰㓜蓕èšëŒ†äœ”䷰裖чᅮ穄ჭ壿æ‹æ©œçƒ«é€°äª”ç餽åŠî¶Œ [ 242.727870][ T5882] usb 3-1: Manufacturer: Љ [ 242.739686][ T5882] usb 3-1: SerialNumber: 3 [ 242.831118][ T6015] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.991752][ T6015] usb 6-1: too many configurations: 162, using maximum allowed: 8 [ 243.010581][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 243.264123][ T6158] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.288295][ T6158] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -2 [ 243.288579][ T6015] usb 6-1: can't read configurations, error -61 [ 243.304619][ T6158] usb 2-1: USB disconnect, device number 24 [ 243.401534][ T5882] usbhid 3-1:1.0: can't add hid device: -71 [ 243.409714][ T5882] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 243.424802][ T5882] usb 3-1: USB disconnect, device number 36 [ 243.501253][ T6015] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 243.595732][ T30] audit: type=1326 audit(1766747952.102:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 243.620488][ T30] audit: type=1326 audit(1766747952.102:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 243.835834][ T8281] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 244.077435][ T30] audit: type=1326 audit(1766747952.102:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.110892][ T30] audit: type=1326 audit(1766747952.102:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.152228][ T30] audit: type=1326 audit(1766747952.102:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.182106][ T6015] usb 6-1: too many configurations: 162, using maximum allowed: 8 [ 244.192813][ T30] audit: type=1326 audit(1766747952.102:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.223670][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 244.231840][ T6015] usb 6-1: can't read configurations, error -61 [ 244.243873][ T6015] usb usb6-port1: attempt power cycle [ 244.255646][ T30] audit: type=1326 audit(1766747952.102:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.357512][ T30] audit: type=1326 audit(1766747952.102:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 244.731410][ T6015] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 244.772345][ T6015] usb 6-1: too many configurations: 162, using maximum allowed: 8 [ 244.774213][ T8289] netlink: 'syz.2.552': attribute type 10 has an invalid length. [ 244.788249][ T8289] netlink: 55 bytes leftover after parsing attributes in process `syz.2.552'. [ 245.548296][ T6015] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 245.583062][ T6015] usb 6-1: can't read configurations, error -61 [ 246.953115][ T8305] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 247.571183][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 247.571227][ T30] audit: type=1400 audit(1766747955.692:1125): avc: denied { kexec_image_load } for pid=8310 comm="syz.4.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 247.672454][ T30] audit: type=1400 audit(1766747956.062:1126): avc: denied { bind } for pid=8308 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.559424][ T30] audit: type=1400 audit(1766747956.062:1127): avc: denied { write } for pid=8308 comm="syz.1.561" path="socket:[17511]" dev="sockfs" ino=17511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.955912][ T30] audit: type=1400 audit(1766747956.472:1128): avc: denied { read write } for pid=8317 comm="syz.2.562" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 248.960306][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.4.563'. [ 249.116592][ T6014] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 249.163290][ T30] audit: type=1400 audit(1766747956.472:1129): avc: denied { open } for pid=8317 comm="syz.2.562" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 249.214085][ T30] audit: type=1400 audit(1766747957.162:1130): avc: denied { create } for pid=8325 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.307821][ T30] audit: type=1400 audit(1766747957.252:1131): avc: denied { read write } for pid=8321 comm="syz.4.563" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 249.308307][ T6014] usb 3-1: Using ep0 maxpacket: 16 [ 249.657484][ T6014] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 249.667321][ T6014] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 249.678538][ T6014] usb 3-1: config 1 has no interface number 1 [ 249.708843][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 249.719128][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.555'. [ 249.746951][ T6014] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 249.787368][ T6014] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 249.798619][ T30] audit: type=1400 audit(1766747957.252:1132): avc: denied { open } for pid=8321 comm="syz.4.563" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 249.841404][ T30] audit: type=1400 audit(1766747957.262:1133): avc: denied { ioctl } for pid=8321 comm="syz.4.563" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 249.870105][ T6014] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.886282][ T6014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.903578][ T6014] usb 3-1: Product: syz [ 249.911186][ T30] audit: type=1400 audit(1766747957.622:1134): avc: denied { map } for pid=8330 comm="syz.5.565" path="socket:[17542]" dev="sockfs" ino=17542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 249.937973][ T6014] usb 3-1: Manufacturer: syz [ 249.948489][ T6014] usb 3-1: SerialNumber: syz [ 250.181081][ T8326] xt_hashlimit: overflow, rate too high: 0 [ 250.211281][ T5926] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.250159][ T6014] usb 3-1: USB disconnect, device number 37 [ 250.410130][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.438910][ T5926] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 250.450832][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.475782][ T5926] usb 5-1: config 0 descriptor?? [ 250.624801][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029ed2c00: rx timeout, send abort [ 250.978217][ T8342] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 251.018284][ T8342] 9p: Bad value for 'wfdno' [ 251.034556][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.125318][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806884c400: rx timeout, send abort [ 251.133708][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888029ed2c00: abort rx timeout. Force session deactivation [ 251.164708][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.215682][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.233019][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.633634][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806884c400: abort rx timeout. Force session deactivation [ 251.882744][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.891246][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 251.997815][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 252.231554][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'. [ 252.232346][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 252.240352][ T8368] netlink: 'syz.5.573': attribute type 5 has an invalid length. [ 252.240373][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.573'. [ 252.321089][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 252.328540][ T5926] steelseries 0003:1038:1410.0009: unknown main item tag 0x0 [ 252.365017][ T5926] steelseries 0003:1038:1410.0009: unexpected long global item [ 252.399577][ T5926] steelseries 0003:1038:1410.0009: parse failed [ 252.407730][ T8368] geneve2: entered promiscuous mode [ 252.429120][ T5926] steelseries 0003:1038:1410.0009: probe with driver steelseries failed with error -22 [ 252.451307][ T8368] geneve2: entered allmulticast mode [ 252.476793][ T5926] usb 5-1: USB disconnect, device number 22 [ 252.541214][ T8379] macvlan1: entered promiscuous mode [ 252.546955][ T8379] macvlan1: entered allmulticast mode [ 252.565581][ T8379] veth1_vlan: entered allmulticast mode [ 252.611270][ T5997] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 252.635778][ T5997] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 252.658821][ T5997] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 252.671223][ T5997] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 252.772197][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 252.772207][ T30] audit: type=1400 audit(1766747961.282:1175): avc: denied { create } for pid=8376 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.894532][ T30] audit: type=1400 audit(1766747961.302:1176): avc: denied { connect } for pid=8376 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.928802][ T30] audit: type=1400 audit(1766747961.322:1177): avc: denied { mount } for pid=8376 comm="syz.1.577" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 253.541423][ T30] audit: type=1400 audit(1766747961.322:1178): avc: denied { connect } for pid=8376 comm="syz.1.577" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 253.562837][ T30] audit: type=1400 audit(1766747961.322:1179): avc: denied { name_connect } for pid=8376 comm="syz.1.577" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 254.501079][ T5927] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 254.741124][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 254.767139][ T5927] usb 6-1: config index 0 descriptor too short (expected 43556, got 36) [ 254.801110][ T5927] usb 6-1: config 122 has too many interfaces: 182, using maximum allowed: 32 [ 254.830218][ T5927] usb 6-1: config 122 has an invalid descriptor of length 117, skipping remainder of the config [ 254.861206][ T5927] usb 6-1: config 122 has 0 interfaces, different from the descriptor's value: 182 [ 254.895139][ T5927] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 254.916027][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.971059][ T5874] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 255.111062][ T5874] usb 3-1: device descriptor read/64, error -71 [ 255.118623][ T8406] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8406 comm=syz.1.584 [ 255.148781][ T30] audit: type=1400 audit(1766747963.652:1180): avc: denied { lock } for pid=8381 comm="syz.5.579" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 255.312653][ T5927] usb 6-1: string descriptor 0 read error: -71 [ 255.336541][ T5927] usb 6-1: USB disconnect, device number 10 [ 255.342140][ T30] audit: type=1400 audit(1766747963.842:1181): avc: denied { create } for pid=8413 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.385846][ T30] audit: type=1400 audit(1766747963.882:1182): avc: denied { write } for pid=8413 comm="syz.1.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 255.414629][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.451659][ T5874] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 256.400598][ T5874] usb 3-1: device descriptor read/64, error -71 [ 256.501025][ T30] audit: type=1400 audit(1766747965.002:1183): avc: denied { write } for pid=8424 comm="syz.0.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 256.567275][ T30] audit: type=1400 audit(1766747965.002:1184): avc: denied { ioctl } for pid=8424 comm="syz.0.588" path="socket:[17795]" dev="sockfs" ino=17795 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 256.619402][ T5874] usb usb3-port1: attempt power cycle [ 256.657570][ T8427] netlink: 'syz.5.589': attribute type 83 has an invalid length. [ 257.925101][ T30] audit: type=1400 audit(1766747965.622:1185): avc: denied { read } for pid=8432 comm="syz.4.591" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 257.926191][ T5882] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.956742][ T5874] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 258.773406][ T30] audit: type=1400 audit(1766747965.632:1186): avc: denied { open } for pid=8432 comm="syz.4.591" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 258.822078][ T30] audit: type=1400 audit(1766747967.332:1187): avc: denied { bind } for pid=8455 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.842476][ T30] audit: type=1400 audit(1766747967.362:1188): avc: denied { listen } for pid=8455 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.867170][ T30] audit: type=1400 audit(1766747967.362:1189): avc: denied { accept } for pid=8455 comm="syz.4.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.886977][ T5882] usb 2-1: device descriptor read/64, error -71 [ 258.923305][ T5874] usb 3-1: device descriptor read/8, error -71 [ 259.141079][ T6014] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 259.586153][ T8467] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 259.831908][ T6015] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 259.848302][ T30] audit: type=1400 audit(1766747968.032:1190): avc: denied { setopt } for pid=8459 comm="syz.2.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 259.897434][ T5882] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 259.911196][ T6014] usb 6-1: Using ep0 maxpacket: 8 [ 259.950123][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.962108][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 259.985052][ T6014] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 260.062659][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.089824][ T6014] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.139511][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.140068][ T6014] usb 6-1: string descriptor 0 read error: -71 [ 260.158910][ T30] audit: type=1400 audit(1766747968.672:1191): avc: denied { create } for pid=8471 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 260.202932][ T6014] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 260.238614][ T6014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.255280][ T30] audit: type=1400 audit(1766747968.692:1192): avc: denied { ioctl } for pid=8471 comm="syz.1.601" path="socket:[17898]" dev="sockfs" ino=17898 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 260.301274][ T6014] usb 6-1: config 0 descriptor?? [ 260.324088][ T6015] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 260.332652][ T6014] usb 6-1: can't set config #0, error -71 [ 260.363450][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.374530][ T6014] usb 6-1: USB disconnect, device number 11 [ 260.393335][ T30] audit: type=1400 audit(1766747968.902:1193): avc: denied { setopt } for pid=8484 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.916443][ T6015] usb 5-1: config 0 descriptor?? [ 261.960787][ T6015] usb 5-1: can't set config #0, error -71 [ 261.961137][ T8491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 262.241468][ T6015] usb 5-1: USB disconnect, device number 23 [ 262.371178][ T30] audit: type=1400 audit(1766747970.862:1194): avc: denied { create } for pid=8492 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 262.592081][ T8500] kvm: kvm [8499]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xf800 [ 262.621632][ T8500] kvm: kvm [8499]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xf800 [ 263.252740][ T8510] netlink: 68 bytes leftover after parsing attributes in process `syz.5.612'. [ 263.280005][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 263.280021][ T30] audit: type=1400 audit(1766747971.782:1198): avc: denied { create } for pid=8508 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 263.311163][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 263.357121][ T30] audit: type=1400 audit(1766747971.842:1199): avc: denied { read } for pid=8508 comm="syz.2.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 263.444835][ T8515] geneve2: entered promiscuous mode [ 263.450748][ T8515] geneve2: entered allmulticast mode [ 263.492406][ T5882] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 263.509674][ T5882] usb 2-1: config 0 has no interface number 0 [ 263.527468][ T5882] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.654561][ T5882] usb 2-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.001883][ T30] audit: type=1400 audit(1766747972.252:1200): avc: denied { create } for pid=8518 comm="syz.0.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 264.025010][ T5882] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 264.047927][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.067405][ T5882] usb 2-1: config 0 descriptor?? [ 264.199203][ T30] audit: type=1400 audit(1766747972.702:1201): avc: denied { mounton } for pid=8524 comm="syz.2.617" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 264.224035][ T8525] tmpfs: Bad value for 'mpol' [ 264.229247][ T8525] tmpfs: Bad value for 'mpol' [ 264.361201][ T6014] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 264.492144][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.511352][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.639817][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'. [ 264.711058][ T6014] usb 5-1: Using ep0 maxpacket: 16 [ 264.716886][ T6014] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.724806][ T6014] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 264.724836][ T6014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.724857][ T6014] usb 5-1: Product: syz [ 264.724874][ T6014] usb 5-1: Manufacturer: syz [ 264.724909][ T6014] usb 5-1: SerialNumber: syz [ 264.727601][ T6014] usb 5-1: config 0 descriptor?? [ 264.742076][ T6014] cypress_m8 5-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 264.743740][ T6014] nokiaca42v2 ttyUSB0: required endpoint is missing [ 264.746907][ T5882] elo 0003:04E7:0030.000A: item fetching failed at offset 6/7 [ 264.747497][ T5882] elo 0003:04E7:0030.000A: parse failed [ 264.747600][ T5882] elo 0003:04E7:0030.000A: probe with driver elo failed with error -22 [ 264.776690][ T30] audit: type=1400 audit(1766747973.052:1202): avc: denied { read write } for pid=8526 comm="syz.2.618" name="radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 264.776732][ T30] audit: type=1400 audit(1766747973.052:1203): avc: denied { open } for pid=8526 comm="syz.2.618" path="/dev/radio0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 264.776757][ T30] audit: type=1400 audit(1766747973.062:1204): avc: denied { write } for pid=8526 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 264.776780][ T30] audit: type=1400 audit(1766747973.162:1205): avc: denied { read } for pid=8526 comm="syz.2.618" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 264.776811][ T30] audit: type=1400 audit(1766747973.162:1206): avc: denied { open } for pid=8526 comm="syz.2.618" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.011570][ T5927] usb 5-1: USB disconnect, device number 24 [ 265.012767][ T5927] cypress_m8 5-1:0.0: device disconnected [ 265.177552][ T30] audit: type=1400 audit(1766747973.682:1207): avc: denied { getopt } for pid=8505 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 265.256537][ T8546] tipc: Started in network mode [ 265.256555][ T8546] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 265.256738][ T8546] tipc: Enabled bearer , priority 10 [ 266.017363][ T5882] usb 2-1: USB disconnect, device number 27 [ 266.607990][ T7041] tipc: Node number set to 10136234 [ 268.919704][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 268.919721][ T30] audit: type=1400 audit(1766747977.422:1212): avc: denied { create } for pid=8581 comm="syz.5.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 269.229025][ T30] audit: type=1400 audit(1766747977.732:1213): avc: denied { mount } for pid=8586 comm="syz.5.632" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 269.303392][ T30] audit: type=1400 audit(1766747977.782:1214): avc: denied { listen } for pid=8595 comm="syz.2.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 269.387733][ T8587] sd 0:0:1:0: PR command failed: 1026 [ 269.402615][ T30] audit: type=1400 audit(1766747977.882:1215): avc: denied { read } for pid=8586 comm="syz.5.632" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 269.433400][ T8587] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 269.458304][ T8587] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 269.521662][ T30] audit: type=1400 audit(1766747977.882:1216): avc: denied { open } for pid=8586 comm="syz.5.632" path="/91/bus/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 269.595129][ T30] audit: type=1400 audit(1766747977.882:1217): avc: denied { ioctl } for pid=8586 comm="syz.5.632" path="/91/bus/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 271.174706][ T30] audit: type=1400 audit(1766747979.682:1218): avc: denied { unmount } for pid=6687 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 271.247692][ T30] audit: type=1400 audit(1766747979.752:1219): avc: denied { name_connect } for pid=8607 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 271.555014][ T30] audit: type=1400 audit(1766747980.052:1220): avc: denied { write } for pid=8609 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.117181][ T8619] Device name cannot be null; rc = [-22] [ 272.571067][ T7041] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 272.755529][ T7041] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 272.841406][ T7041] usb 3-1: config 8 has no interface number 0 [ 272.847498][ T7041] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 272.863100][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 272.877319][ T7041] usb 3-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 272.891266][ T7041] usb 3-1: config 8 interface 177 has no altsetting 0 [ 272.911121][ T7041] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 272.950719][ T7041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.969355][ T30] audit: type=1400 audit(1766747981.472:1221): avc: denied { mount } for pid=8627 comm="syz.0.641" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 273.009079][ T8615] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 273.223310][ T7041] usb 3-1: string descriptor 0 read error: -71 [ 273.737971][ T7041] ir_toy 3-1:8.177: required endpoints not found [ 273.756932][ T7041] usb 3-1: USB disconnect, device number 42 [ 275.790600][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 275.790615][ T30] audit: type=1400 audit(1766747984.292:1223): avc: denied { ioctl } for pid=8652 comm="syz.1.647" path="socket:[19512]" dev="sockfs" ino=19512 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.460740][ T30] audit: type=1400 audit(1766747985.962:1224): avc: denied { relabelfrom } for pid=8680 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 277.657258][ T8686] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 277.973640][ T30] audit: type=1400 audit(1766747986.482:1225): avc: denied { relabelto } for pid=8680 comm="syz.5.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 278.048173][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'. [ 278.065553][ T30] audit: type=1400 audit(1766747986.572:1226): avc: denied { getopt } for pid=8688 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.508935][ T30] audit: type=1400 audit(1766747987.992:1227): avc: denied { accept } for pid=8703 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.726827][ T30] audit: type=1400 audit(1766747987.992:1228): avc: denied { read write } for pid=8703 comm="syz.2.661" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.809008][ T30] audit: type=1400 audit(1766747987.992:1229): avc: denied { open } for pid=8703 comm="syz.2.661" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.868977][ T8713] ip6gre1: entered promiscuous mode [ 279.875315][ T8713] ip6gre1: entered allmulticast mode [ 280.611151][ T30] audit: type=1400 audit(1766747989.102:1230): avc: denied { mount } for pid=8715 comm="syz.2.665" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 280.748822][ T30] audit: type=1400 audit(1766747989.202:1231): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 281.010619][ T30] audit: type=1400 audit(1766747989.512:1232): avc: denied { create } for pid=8720 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 281.192572][ T8729] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 281.621812][ T30] audit: type=1400 audit(1766747990.012:1233): avc: denied { execute_no_trans } for pid=8718 comm="syz.0.666" path="/167/file1" dev="tmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 281.974057][ T30] audit: type=1400 audit(1766747990.072:1234): avc: denied { write } for pid=8720 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 282.245558][ T8735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.271373][ T8735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.051090][ T7041] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 283.396381][ T30] audit: type=1400 audit(1766747991.902:1235): avc: denied { read } for pid=8746 comm="syz.4.673" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.455168][ T30] audit: type=1400 audit(1766747991.932:1236): avc: denied { open } for pid=8746 comm="syz.4.673" path="/115/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.486193][ T30] audit: type=1400 audit(1766747991.932:1237): avc: denied { map } for pid=8746 comm="syz.4.673" path="/115/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.510015][ T8752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 283.521337][ T8752] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 283.564411][ T30] audit: type=1400 audit(1766747992.022:1238): avc: denied { mounton } for pid=8746 comm="syz.4.673" path="/115/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 283.606207][ T8752] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 283.651744][ T8752] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 283.687752][ T8752] overlayfs: d_ino too big (115, ino=9223372036854776445, xinobits=3) [ 283.697369][ T30] audit: type=1400 audit(1766747992.042:1239): avc: denied { getattr } for pid=8746 comm="syz.4.673" name="saved_tgids" dev="tracefs" ino=1193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 283.784041][ T8752] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 284.102244][ T30] audit: type=1400 audit(1766747992.612:1240): avc: denied { write } for pid=8756 comm="syz.2.676" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 284.126333][ T8752] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 284.176431][ T8752] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 284.209052][ T8752] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 284.370360][ T8775] netlink: 'syz.1.681': attribute type 1 has an invalid length. [ 284.546958][ T8778] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 284.989476][ T30] audit: type=1400 audit(1766747993.492:1241): avc: denied { unmount } for pid=5839 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 285.021392][ T7041] usb 3-1: device descriptor read/64, error -71 [ 285.887859][ T8791] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 285.921819][ T7041] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 286.101068][ T7041] usb 3-1: Using ep0 maxpacket: 16 [ 286.132763][ T8780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.151980][ T8780] bond1: (slave bond2): making interface the new active one [ 286.171131][ T8780] bond1: (slave bond2): Enslaving as an active interface with an up link [ 286.213973][ T7041] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.498080][ T8797] No control pipe specified [ 286.539115][ T8797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 286.546197][ T8797] overlayfs: failed to set xattr on upper [ 286.551983][ T8797] overlayfs: ...falling back to redirect_dir=nofollow. [ 286.558850][ T8797] overlayfs: ...falling back to index=off. [ 286.564709][ T8797] overlayfs: ...falling back to uuid=null. [ 286.570571][ T8797] overlayfs: maximum fs stacking depth exceeded [ 287.238402][ T7041] usb 3-1: config 0 interface 0 has no altsetting 0 [ 287.258674][ T7041] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 287.267782][ T7041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.315805][ T7041] usb 3-1: config 0 descriptor?? [ 287.773295][ T7041] usb 3-1: can't set config #0, error -71 [ 287.780523][ T7041] usb 3-1: USB disconnect, device number 44 [ 287.850667][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 287.850682][ T30] audit: type=1400 audit(1766747996.362:1249): avc: denied { setopt } for pid=8799 comm="syz.2.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.987209][ T30] audit: type=1400 audit(1766747996.482:1250): avc: denied { watch } for pid=8804 comm="syz.2.689" path="/proc/495/task" dev="proc" ino=19787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 288.181463][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.201174][ T30] audit: type=1400 audit(1766747996.492:1251): avc: denied { name_bind 0x1000000 } for pid=8803 comm="syz.1.688" path="socket:[18926]" dev="sockfs" ino=18926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 288.261286][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.349410][ T30] audit: type=1400 audit(1766747996.522:1252): avc: denied { read } for pid=8803 comm="syz.1.688" path="socket:[18929]" dev="sockfs" ino=18929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.457374][ T7041] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 288.624809][ T30] audit: type=1400 audit(1766747997.132:1253): avc: denied { ioctl } for pid=8824 comm="syz.1.694" path="socket:[18957]" dev="sockfs" ino=18957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.661144][ T7041] usb 5-1: device descriptor read/64, error -71 [ 288.961071][ T7041] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 289.091082][ T7041] usb 5-1: device descriptor read/64, error -71 [ 289.211390][ T7041] usb usb5-port1: attempt power cycle [ 289.561074][ T7041] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 289.599965][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.609314][ T7041] usb 5-1: device descriptor read/8, error -71 [ 289.852893][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.861107][ T7041] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 289.900779][ T7041] usb 5-1: device descriptor read/8, error -71 [ 290.001132][ T8826] erspan0: entered promiscuous mode [ 290.015198][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 290.030381][ T7041] usb usb5-port1: unable to enumerate USB device [ 290.068724][ T8833] batadv_slave_0: entered promiscuous mode [ 290.090635][ T8832] batadv_slave_0: left promiscuous mode [ 290.389619][ T8842] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 290.870451][ T30] audit: type=1400 audit(1766747999.372:1254): avc: denied { connect } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.896239][ T30] audit: type=1400 audit(1766747999.372:1255): avc: denied { bind } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.965637][ T30] audit: type=1400 audit(1766747999.372:1256): avc: denied { write } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.078777][ T30] audit: type=1400 audit(1766747999.382:1257): avc: denied { getopt } for pid=8837 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 291.489385][ T30] audit: type=1400 audit(1766747999.992:1258): avc: denied { create } for pid=8855 comm="syz.0.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.740008][ T8870] tipc: Trying to set illegal importance in message [ 293.195934][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 293.207828][ T8875] syzkaller0: entered promiscuous mode [ 293.213417][ T8875] syzkaller0: entered allmulticast mode [ 294.591472][ T30] audit: type=1800 audit(1766748003.072:1259): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.707" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 295.373027][ T8892] overlayfs: conflicting options: nfs_export=on,index=off [ 295.482161][ T30] audit: type=1400 audit(1766748003.992:1260): avc: denied { create } for pid=8887 comm="syz.1.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 295.739250][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 296.282352][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 297.409527][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'. [ 297.731155][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 297.731207][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 298.933939][ T8942] No control pipe specified [ 298.948409][ T8829] Set syz1 is full, maxelem 65536 reached [ 298.966031][ T30] audit: type=1400 audit(1766748007.472:1261): avc: denied { ioctl } for pid=8943 comm="syz.1.723" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 299.846264][ T30] audit: type=1400 audit(1766748007.912:1262): avc: denied { watch } for pid=8948 comm="syz.1.724" path="/144/file0" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 300.251541][ T30] audit: type=1400 audit(1766748007.912:1263): avc: denied { watch_sb watch_reads } for pid=8948 comm="syz.1.724" path="/144/file0" dev="tmpfs" ino=825 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.148177][ T8970] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.729'. [ 301.622223][ T30] audit: type=1326 audit(1766748010.132:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.1.728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737138f749 code=0x0 [ 301.708737][ T30] audit: type=1400 audit(1766748010.212:1265): avc: denied { getopt } for pid=8969 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.428581][ T30] audit: type=1400 audit(1766748010.932:1266): avc: denied { getopt } for pid=8987 comm="syz.2.733" laddr=fe80::10 faddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 302.452401][ T30] audit: type=1400 audit(1766748010.952:1267): avc: denied { ioctl } for pid=8987 comm="syz.2.733" path="socket:[20438]" dev="sockfs" ino=20438 ioctlcmd=0x8b30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 302.842380][ T30] audit: type=1400 audit(1766748011.342:1268): avc: denied { mounton } for pid=8995 comm="syz.4.734" path="/122/file0" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 302.865160][ T8996] fuse: Unknown parameter 'fïôAd' [ 303.725210][ T9006] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 304.104157][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 304.120233][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 304.187734][ T30] audit: type=1326 audit(1766748012.692:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 304.238728][ T9029] erspan1: entered allmulticast mode [ 304.273464][ T30] audit: type=1326 audit(1766748012.722:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 304.318110][ T9029] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 304.339713][ T9029] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 304.347712][ T30] audit: type=1326 audit(1766748012.722:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.1.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 304.611111][ T7041] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 305.173376][ T7041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 305.186339][ T7041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.196266][ T7041] usb 6-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 305.199492][ T9042] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 305.205558][ T7041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.211984][ T7041] usb 6-1: config 0 descriptor?? [ 305.600124][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 305.600135][ T30] audit: type=1400 audit(1766748014.102:1280): avc: denied { ioctl } for pid=9053 comm="syz.2.749" path="socket:[20689]" dev="sockfs" ino=20689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 305.730143][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 306.442746][ T9054] bridge_slave_1: left allmulticast mode [ 306.449924][ T9054] bridge_slave_1: left promiscuous mode [ 306.455739][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 306.463019][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 306.504434][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.528025][ T7041] usbhid 6-1:0.0: can't add hid device: -32 [ 306.536040][ T7041] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 306.548181][ T7041] usb 6-1: USB disconnect, device number 12 [ 306.578907][ T9054] bridge_slave_0: left allmulticast mode [ 306.599457][ T9054] bridge_slave_0: left promiscuous mode [ 306.627954][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.710687][ T9100] netlink: 'syz.4.760': attribute type 2 has an invalid length. [ 307.781050][ T977] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 307.985787][ T977] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 308.565203][ T977] usb 6-1: config 0 has no interface number 0 [ 308.602737][ T977] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=ff.d1 [ 308.637368][ T977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.671414][ T977] usb 6-1: Product: syz [ 308.676369][ T30] audit: type=1326 audit(1766748017.182:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9107 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 308.676538][ T977] usb 6-1: Manufacturer: syz [ 308.726710][ T30] audit: type=1326 audit(1766748017.182:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9107 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f737138f749 code=0x7ffc0000 [ 308.741082][ T977] usb 6-1: SerialNumber: syz [ 308.781244][ T7041] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 308.942527][ T7041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.973583][ T7041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.489147][ T7041] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.498460][ T7041] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.520039][ T7041] usb 5-1: Manufacturer: syz [ 309.533631][ T7041] usb 5-1: config 0 descriptor?? [ 309.546541][ T977] usb 6-1: config 0 descriptor?? [ 309.593611][ T977] usb_ehset_test 6-1:0.244: probe with driver usb_ehset_test failed with error -32 [ 309.829795][ T977] usb 6-1: USB disconnect, device number 13 [ 309.982603][ T30] audit: type=1400 audit(1766748018.492:1283): avc: denied { read write } for pid=9117 comm="syz.1.765" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 310.006492][ T30] audit: type=1400 audit(1766748018.522:1284): avc: denied { open } for pid=9117 comm="syz.1.765" path="/154/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 310.335049][ T30] audit: type=1400 audit(1766748018.842:1285): avc: denied { write } for pid=9123 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 310.577930][ T30] audit: type=1400 audit(1766748019.082:1286): avc: denied { getopt } for pid=9132 comm="syz.0.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.597562][ T9134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=9134 comm=syz.0.768 [ 310.836908][ T30] audit: type=1400 audit(1766748019.342:1287): avc: denied { ioctl } for pid=9138 comm="syz.5.767" path="/dev/video0" dev="devtmpfs" ino=930 ioctlcmd=0x5662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 311.093262][ T30] audit: type=1400 audit(1766748019.602:1288): avc: denied { read } for pid=9148 comm="syz.2.771" path="socket:[20853]" dev="sockfs" ino=20853 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 311.229834][ T7041] usbhid 5-1:0.0: can't add hid device: -71 [ 311.250589][ T7041] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.284585][ T7041] usb 5-1: USB disconnect, device number 29 [ 311.391836][ T7420] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x16 [ 313.139279][ T9161] IPVS: You probably need to specify IP address on multicast interface. [ 313.141045][ T90] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 313.148399][ T9161] IPVS: Error connecting to the multicast addr [ 313.163408][ T9180] overlayfs: failed to clone upperpath [ 313.178625][ T9179] overlayfs: failed to clone upperpath [ 313.236378][ T9182] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 313.245211][ T30] audit: type=1400 audit(1766748021.752:1289): avc: denied { write } for pid=9181 comm="syz.1.778" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 313.423563][ T30] audit: type=1400 audit(1766748021.902:1290): avc: denied { create } for pid=9181 comm="syz.1.778" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 313.426484][ T30] audit: type=1400 audit(1766748021.902:1291): avc: denied { associate } for pid=9181 comm="syz.1.778" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 313.543178][ T30] audit: type=1400 audit(1766748021.902:1292): avc: denied { mounton } for pid=9181 comm="syz.1.778" path="/157/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 313.561031][ T90] usb 6-1: Using ep0 maxpacket: 8 [ 313.801063][ T30] audit: type=1400 audit(1766748021.912:1293): avc: denied { add_name } for pid=9181 comm="syz.1.778" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 313.801531][ T30] audit: type=1400 audit(1766748021.912:1294): avc: denied { setattr } for pid=9181 comm="syz.1.778" name="work" dev="tmpfs" ino=907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 313.981393][ T7041] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 314.121265][ T30] audit: type=1400 audit(1766748021.912:1295): avc: denied { write open } for pid=9181 comm="syz.1.778" path=2F202864656C6574656429 dev="tmpfs" ino=908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 314.121732][ T30] audit: type=1400 audit(1766748021.912:1296): avc: denied { create } for pid=9181 comm="syz.1.778" name="#23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 314.436278][ T90] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 314.455320][ T90] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.476745][ T90] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.483154][ T7041] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 314.491500][ T90] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.495469][ T7041] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 314.550696][ T9192] team0: Port device team_slave_0 removed [ 314.561533][ T90] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.567599][ T7041] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 314.600109][ T7041] usb 5-1: config 220 has no interface number 2 [ 314.606560][ T7041] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 314.625977][ T90] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 314.650402][ T90] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.699723][ T7041] usb 5-1: config 220 interface 0 has no altsetting 0 [ 314.719083][ T7041] usb 5-1: config 220 interface 76 has no altsetting 0 [ 314.737154][ T7041] usb 5-1: config 220 interface 1 has no altsetting 0 [ 314.755833][ T7041] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 314.771004][ T7041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.795767][ T7041] usb 5-1: Product: syz [ 314.812389][ T7041] usb 5-1: Manufacturer: syz [ 314.817081][ T7041] usb 5-1: SerialNumber: syz [ 314.922473][ T90] usb 6-1: usb_control_msg returned -71 [ 314.928071][ T90] usbtmc 6-1:16.0: can't read capabilities [ 314.931739][ T9207] random: crng reseeded on system resumption [ 314.958554][ T9207] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9207 comm=syz.5.784 [ 314.971032][ T9208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=9208 comm=syz.5.784 [ 314.986560][ T9207] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62 sclass=netlink_xfrm_socket pid=9207 comm=syz.5.784 [ 315.000686][ T9208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62 sclass=netlink_xfrm_socket pid=9208 comm=syz.5.784 [ 315.030903][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.040531][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.080230][ T7041] usb 5-1: selecting invalid altsetting 0 [ 315.126048][ T7041] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 315.145172][ T7041] uvcvideo 5-1:220.0: No valid video chain found. [ 315.182859][ T7041] usb 5-1: selecting invalid altsetting 0 [ 315.185356][ T90] usb 6-1: USB disconnect, device number 14 [ 315.220848][ T7041] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 315.308129][ T7041] usb 5-1: USB disconnect, device number 30 [ 315.605173][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 315.721269][ T90] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 315.771472][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 315.870693][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 315.921334][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 315.922434][ T5926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.928282][ T90] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 315.935805][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.935831][ T5926] usb 3-1: SerialNumber: syz [ 316.144460][ T90] usb 6-1: can't read configurations, error -61 [ 316.161139][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.185008][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.194492][ T5926] usb 3-1: USB disconnect, device number 45 [ 316.312813][ T90] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 316.501036][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 316.508224][ T90] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 316.517532][ T90] usb 6-1: can't read configurations, error -61 [ 316.648483][ T90] usb usb6-port1: attempt power cycle [ 316.666698][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 316.666711][ T30] audit: type=1400 audit(1766748025.172:1317): avc: denied { getopt } for pid=9241 comm="syz.1.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.857281][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061097][ T90] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 317.123513][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 317.137632][ T90] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 317.145736][ T90] usb 6-1: can't read configurations, error -61 [ 317.352333][ T90] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 317.392347][ T90] usb 6-1: Using ep0 maxpacket: 16 [ 317.404705][ T90] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 317.416195][ T90] usb 6-1: can't read configurations, error -61 [ 317.424805][ T90] usb usb6-port1: unable to enumerate USB device [ 317.496114][ T9253] netlink: 156 bytes leftover after parsing attributes in process `syz.2.797'. [ 318.187958][ T9263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 319.545049][ T30] audit: type=1400 audit(1766748028.052:1318): avc: denied { read } for pid=9269 comm="syz.2.802" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.575343][ T30] audit: type=1400 audit(1766748028.052:1319): avc: denied { open } for pid=9269 comm="syz.2.802" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.607263][ T30] audit: type=1400 audit(1766748028.082:1320): avc: denied { ioctl } for pid=9269 comm="syz.2.802" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.636199][ T30] audit: type=1400 audit(1766748028.082:1321): avc: denied { set_context_mgr } for pid=9269 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 319.660757][ T9275] binder: BINDER_SET_CONTEXT_MGR already set [ 319.671120][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.800'. [ 319.690515][ T9273] bridge_slave_1: left allmulticast mode [ 319.704304][ T9275] binder: 9269:9275 ioctl 4018620d 200000000500 returned -16 [ 319.709447][ T9273] bridge_slave_1: left promiscuous mode [ 319.721381][ T9273] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.794752][ T9273] bridge_slave_0: left allmulticast mode [ 319.800865][ T9273] bridge_slave_0: left promiscuous mode [ 319.831438][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.853844][ T30] audit: type=1400 audit(1766748028.172:1322): avc: denied { write } for pid=9269 comm="syz.2.802" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 319.972052][ T30] audit: type=1400 audit(1766748028.172:1323): avc: denied { map } for pid=9269 comm="syz.2.802" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 320.104388][ T30] audit: type=1400 audit(1766748028.252:1324): avc: denied { getopt } for pid=9269 comm="syz.2.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 320.230030][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'. [ 320.647582][ T30] audit: type=1400 audit(1766748029.152:1325): avc: denied { ioctl } for pid=9296 comm="syz.5.810" path="socket:[21152]" dev="sockfs" ino=21152 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.831066][ T90] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 320.843368][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 321.003510][ T90] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 321.063071][ T90] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 321.186754][ T90] usb 2-1: config 220 has no interface number 2 [ 321.195060][ T90] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 321.273221][ T90] usb 2-1: config 220 interface 0 has no altsetting 0 [ 321.452501][ T90] usb 2-1: config 220 interface 76 has no altsetting 0 [ 321.459454][ T90] usb 2-1: config 220 interface 1 has no altsetting 0 [ 321.469055][ T90] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 321.478314][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.486432][ T90] usb 2-1: Product: syz [ 321.490665][ T90] usb 2-1: Manufacturer: syz [ 321.495366][ T90] usb 2-1: SerialNumber: syz [ 321.587563][ T30] audit: type=1400 audit(1766748030.082:1326): avc: denied { getopt } for pid=9314 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 322.182945][ T90] usb 2-1: selecting invalid altsetting 0 [ 322.198276][ T90] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 322.206070][ T90] uvcvideo 2-1:220.0: No valid video chain found. [ 322.206086][ T30] audit: type=1400 audit(1766748030.682:1327): avc: denied { setopt } for pid=9291 comm="syz.1.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.691874][ T90] usb 2-1: selecting invalid altsetting 0 [ 322.697636][ T90] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 323.413384][ T90] usb 2-1: USB disconnect, device number 28 [ 323.817299][ T9349] tipc: Enabling of bearer rejected, failed to enable media [ 323.891161][ T90] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 324.214548][ T90] usb 2-1: Using ep0 maxpacket: 32 [ 324.306993][ T90] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 324.360382][ T90] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 324.457609][ T90] usb 2-1: config 1 has no interface number 1 [ 324.505107][ T90] usb 2-1: too many endpoints for config 1 interface 5 altsetting 249: 41, using maximum allowed: 30 [ 324.644618][ T90] usb 2-1: config 1 interface 5 altsetting 249 has 0 endpoint descriptors, different from the interface descriptor's value: 41 [ 324.766456][ T90] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 324.775490][ T30] audit: type=1400 audit(1766748033.272:1328): avc: denied { mount } for pid=9357 comm="syz.5.824" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 324.801194][ T90] usb 2-1: config 1 interface 5 has no altsetting 0 [ 324.932729][ T90] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.390700][ T90] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.402448][ T90] usb 2-1: Product: syz [ 325.406748][ T90] usb 2-1: Manufacturer: syz [ 325.418180][ T90] usb 2-1: SerialNumber: syz [ 325.457949][ T30] audit: type=1400 audit(1766748033.962:1329): avc: denied { ioctl } for pid=9364 comm="syz.0.826" path="socket:[21366]" dev="sockfs" ino=21366 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 325.566279][ T30] audit: type=1400 audit(1766748034.012:1330): avc: denied { ioctl } for pid=9364 comm="syz.0.826" path="socket:[21368]" dev="sockfs" ino=21368 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.725538][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.961104][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.571098][ T30] audit: type=1400 audit(1766748035.062:1331): avc: denied { map } for pid=9382 comm="syz.2.831" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 326.700063][ T90] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 326.780605][ T90] usb 2-1: USB disconnect, device number 29 [ 326.888939][ T30] audit: type=1400 audit(1766748035.382:1332): avc: denied { setopt } for pid=9391 comm="syz.0.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 327.181083][ T5874] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 327.373258][ T5874] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 327.411096][ T5874] usb 6-1: config 0 has no interface number 0 [ 327.417894][ T5874] usb 6-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 327.419814][ T9401] netlink: 40 bytes leftover after parsing attributes in process `syz.0.835'. [ 327.531009][ T5874] usb 6-1: config 0 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 225 [ 327.565980][ T5874] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 327.721814][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.855764][ T9410] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 328.230318][ T5874] usb 6-1: config 0 descriptor?? [ 328.250317][ T9389] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 328.251088][ T5926] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 328.268919][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 328.533026][ T5874] usb 6-1: string descriptor 0 read error: -71 [ 328.564535][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.592662][ T5926] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 328.600098][ T5874] keyspan 6-1:0.168: Keyspan 2 port adapter converter detected [ 328.648360][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.649223][ T5874] keyspan 6-1:0.168: found no endpoint descriptor for endpoint 1 [ 328.691583][ T5926] usb 3-1: config 0 descriptor?? [ 328.722285][ T5874] keyspan 6-1:0.168: found no endpoint descriptor for endpoint 84 [ 328.726688][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 328.784204][ T5874] keyspan 6-1:0.168: found no endpoint descriptor for endpoint 2 [ 328.820033][ T5874] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 328.857286][ T5874] keyspan 6-1:0.168: found no endpoint descriptor for endpoint 88 [ 328.897117][ T5874] keyspan 6-1:0.168: found no endpoint descriptor for endpoint 6 [ 328.926816][ T5926] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.946517][ T5926] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.947528][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.977290][ T5874] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 329.005897][ T5926] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.016169][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.039643][ T9427] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 329.060725][ T5874] usb 6-1: USB disconnect, device number 19 [ 329.130908][ T5874] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 329.222504][ T5874] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 329.248460][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 329.281311][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 329.310433][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 329.344904][ T5874] keyspan 6-1:0.168: device disconnected [ 329.377917][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 329.407614][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 329.433075][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 329.501376][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 329.551593][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 329.561198][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 329.583855][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 329.603140][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 329.633781][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 329.645255][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 329.671076][ T7041] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 329.779838][ T5926] pwc: Registered as video103. [ 329.786808][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 329.798933][ T30] audit: type=1400 audit(1766748038.312:1333): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2995 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 329.824284][ T5926] usb 3-1: USB disconnect, device number 46 [ 330.299926][ T30] audit: type=1400 audit(1766748038.342:1334): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2995 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.326734][ T30] audit: type=1400 audit(1766748038.342:1335): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2995 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 330.451090][ T7041] usb 5-1: Using ep0 maxpacket: 32 [ 330.474775][ T7041] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 330.507692][ T7041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.550459][ T7041] usb 5-1: config 0 descriptor?? [ 330.758937][ T30] audit: type=1400 audit(1766748039.262:1336): avc: denied { mount } for pid=9449 comm="syz.5.850" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 330.788423][ T30] audit: type=1400 audit(1766748039.292:1337): avc: denied { watch watch_reads } for pid=9449 comm="syz.5.850" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 330.824545][ T7041] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 330.840429][ T7041] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 330.841845][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'. [ 330.853119][ T7041] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 330.867489][ T7041] usb 5-1: media controller created [ 330.892036][ T30] audit: type=1400 audit(1766748039.392:1338): avc: denied { lock } for pid=9452 comm="syz.1.851" path="socket:[21805]" dev="sockfs" ino=21805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 330.937252][ T7041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.021723][ T30] audit: type=1400 audit(1766748039.472:1339): avc: denied { append } for pid=9452 comm="syz.1.851" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.099579][ T30] audit: type=1400 audit(1766748039.472:1340): avc: denied { write } for pid=9452 comm="syz.1.851" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.167637][ T30] audit: type=1400 audit(1766748039.472:1341): avc: denied { ioctl } for pid=9452 comm="syz.1.851" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.274097][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.286947][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.304991][ T30] audit: type=1400 audit(1766748039.472:1342): avc: denied { map } for pid=9452 comm="syz.1.851" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 331.348960][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.367452][ T9458] : entered promiscuous mode [ 331.433131][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.682416][ T9476] afs: Unknown parameter 'dYú×x¢Ríù^' [ 331.902239][ T7041] az6027: usb out operation failed. (-71) [ 331.908797][ T7041] stb0899_attach: Driver disabled by Kconfig [ 331.917138][ T7041] az6027: no front-end attached [ 331.917138][ T7041] [ 331.945122][ T7041] az6027: usb out operation failed. (-71) [ 331.963182][ T7041] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 332.057855][ T7041] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 332.072372][ T7041] dvb-usb: schedule remote query interval to 400 msecs. [ 332.079446][ T7041] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 332.104464][ T7041] usb 5-1: USB disconnect, device number 31 [ 332.233250][ T7041] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 332.293139][ T9488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.858'. [ 332.331098][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 332.341194][ T9490] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 332.415676][ T9490] No such timeout policy "syz1" [ 332.751033][ T5889] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 332.765019][ T9494] binder: 9491:9494 ioctl c0306201 0 returned -14 [ 333.007761][ T5889] usb 2-1: unable to get BOS descriptor or descriptor too short [ 333.017079][ T5889] usb 2-1: config 3 has no interfaces? [ 333.035908][ T5889] usb 2-1: New USB device found, idVendor=2100, idProduct=9e58, bcdDevice=be.ee [ 333.061963][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.083286][ T5889] usb 2-1: Product: syz [ 333.097730][ T5889] usb 2-1: Manufacturer: syz [ 333.115027][ T5889] usb 2-1: SerialNumber: syz [ 333.339172][ T5889] usb 2-1: USB disconnect, device number 30 [ 334.501046][ T977] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 334.707218][ T5889] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 334.767050][ T977] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.776839][ T977] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 334.881884][ T9531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.341225][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 335.346479][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 335.346494][ T30] audit: type=1400 audit(1766748043.362:1352): avc: denied { create } for pid=9527 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 335.382648][ T5889] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 335.418364][ T5889] usb 5-1: config 0 has no interface number 0 [ 335.435015][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=b3.be [ 335.451118][ T30] audit: type=1400 audit(1766748043.382:1353): avc: denied { ioctl } for pid=9527 comm="syz.1.869" path="socket:[21928]" dev="sockfs" ino=21928 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 335.477206][ T5889] usb 5-1: New USB device strings: Mfr=164, Product=196, SerialNumber=3 [ 335.594945][ T5889] usb 5-1: Product: syz [ 335.599503][ T5889] usb 5-1: Manufacturer: syz [ 335.604272][ T5889] usb 5-1: SerialNumber: syz [ 335.611173][ T5889] usb 5-1: config 0 descriptor?? [ 335.616332][ T30] audit: type=1400 audit(1766748043.412:1354): avc: denied { create } for pid=9527 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 335.638040][ T5889] smsc95xx v2.0.0 [ 335.671151][ T30] audit: type=1400 audit(1766748043.422:1355): avc: denied { setopt } for pid=9527 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 335.813817][ T9536] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 336.430844][ T30] audit: type=1400 audit(1766748043.432:1356): avc: denied { bind } for pid=9527 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 336.522297][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.561017][ T977] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.574395][ T977] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.621355][ T5889] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 336.644394][ T5889] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 336.656827][ T5889] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 336.668364][ T5889] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 336.696562][ T977] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.704481][ T5889] usb 5-1: USB disconnect, device number 32 [ 336.796303][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.874'. [ 336.811234][ T7041] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 337.058091][ T977] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.077144][ T9545] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 337.086025][ T9545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.171024][ T7041] usb 2-1: Using ep0 maxpacket: 16 [ 337.178031][ T7041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.223291][ T977] usb 3-1: Product: syz [ 337.225523][ T7041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.228607][ T977] usb 3-1: Manufacturer: syz [ 337.292327][ T7041] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.312451][ T7041] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 337.321850][ T977] usb 3-1: can't set config #1, error -71 [ 337.327380][ T9551] ceph: No mds server is up or the cluster is laggy [ 337.337546][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 337.344646][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 337.351316][ T7041] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 337.359509][ T7041] usb 2-1: Manufacturer: syz [ 337.375961][ T7041] usb 2-1: config 0 descriptor?? [ 337.397882][ T977] usb 3-1: USB disconnect, device number 47 [ 338.343096][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.567357][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.629803][ T9541] netlink: 'syz.1.872': attribute type 1 has an invalid length. [ 338.949932][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 339.047953][ T30] audit: type=1400 audit(1766748047.542:1357): avc: denied { bind } for pid=9560 comm="syz.4.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.118793][ T9571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.872'. [ 339.658867][ T30] audit: type=1400 audit(1766748048.162:1358): avc: denied { read } for pid=9574 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 339.784901][ T9541] bond3: entered promiscuous mode [ 339.809375][ T9541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.849634][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 339.945834][ T30] audit: type=1400 audit(1766748048.452:1359): avc: denied { write } for pid=9578 comm="syz.0.880" path="socket:[23064]" dev="sockfs" ino=23064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.112330][ T7041] usbhid 2-1:0.0: can't add hid device: -71 [ 340.118272][ T7041] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.130063][ T7041] usb 2-1: USB disconnect, device number 31 [ 341.272086][ T5881] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 341.416945][ T30] audit: type=1400 audit(1766748049.902:1360): avc: denied { map } for pid=9594 comm="syz.5.878" path="socket:[22042]" dev="sockfs" ino=22042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 341.491063][ T30] audit: type=1400 audit(1766748049.922:1361): avc: denied { connect } for pid=9594 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 341.641372][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 341.658252][ T5881] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 341.677661][ T5881] usb 2-1: config 179 has no interface number 0 [ 341.689926][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 341.704254][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 341.743552][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.755646][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 341.767287][ T5897] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 342.600144][ T5881] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 342.645475][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 342.673397][ T5881] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 342.700434][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.725590][ T5897] usb 5-1: Product: syz [ 342.736303][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.745866][ T5897] usb 5-1: Manufacturer: syz [ 342.752451][ T5897] usb 5-1: SerialNumber: syz [ 342.775279][ T9591] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 342.817472][ T5897] usb 5-1: config 0 descriptor?? [ 343.122365][ T5897] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 344.664648][ T5926] usb 2-1: USB disconnect, device number 32 [ 344.664758][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 344.679486][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 344.991321][ T9635] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 345.384668][ T5881] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 345.399306][ T5897] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 345.439749][ T5897] usb 5-1: USB disconnect, device number 33 [ 345.508366][ T30] audit: type=1400 audit(1766748054.012:1362): avc: denied { override_creds } for pid=9637 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 345.681464][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 345.747336][ T30] audit: type=1400 audit(1766748054.252:1363): avc: denied { setattr } for pid=9640 comm="syz.5.896" name="route" dev="proc" ino=4026533960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 345.773897][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 345.805626][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 345.836252][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.868243][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.899508][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.928176][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.212059][ T5881] usb 3-1: GET_CAPABILITIES returned 0 [ 346.270344][ T5881] usbtmc 3-1:16.0: can't read capabilities [ 346.986364][ T5881] usb 3-1: USB disconnect, device number 48 [ 347.101057][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 347.307647][ T5874] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 347.342496][ T5874] usb 5-1: config 0 has no interface number 0 [ 347.365915][ T5874] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 347.396598][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.432389][ T5874] usb 5-1: Product: syz [ 347.436562][ T5874] usb 5-1: Manufacturer: syz [ 347.472206][ T5874] usb 5-1: SerialNumber: syz [ 348.230122][ T5874] usb 5-1: config 0 descriptor?? [ 349.211958][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 349.443767][ T5874] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 349.549133][ T9678] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 350.069752][ T5874] usb 5-1: USB disconnect, device number 34 [ 351.497243][ T5874] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 352.621494][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 352.629063][ T5874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 352.665158][ T5874] usb 3-1: can't read configurations, error -61 [ 352.861396][ T5874] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 352.915771][ T9705] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 352.982388][ T30] audit: type=1400 audit(1766748061.492:1364): avc: denied { read write } for pid=9706 comm="syz.5.914" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 353.051160][ T30] audit: type=1400 audit(1766748061.512:1365): avc: denied { open } for pid=9706 comm="syz.5.914" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 353.071048][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 353.111071][ T30] audit: type=1400 audit(1766748061.512:1366): avc: denied { ioctl } for pid=9706 comm="syz.5.914" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 353.211390][ T5874] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 353.322853][ T5874] usb 3-1: can't read configurations, error -61 [ 353.347301][ T5874] usb usb3-port1: attempt power cycle [ 353.436801][ T30] audit: type=1400 audit(1766748061.942:1367): avc: denied { connect } for pid=9714 comm="syz.5.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 353.491765][ T30] audit: type=1400 audit(1766748061.972:1368): avc: denied { write } for pid=9714 comm="syz.5.916" path="socket:[23549]" dev="sockfs" ino=23549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 353.693341][ T5874] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 353.741433][ T7041] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 353.792450][ T5874] usb 3-1: Using ep0 maxpacket: 32 [ 353.892744][ T7041] usb 5-1: Using ep0 maxpacket: 8 [ 353.942646][ T7041] usb 5-1: unable to get BOS descriptor or descriptor too short [ 354.007453][ T7041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.086205][ T7041] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=9b.2e [ 354.123443][ T7041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.174215][ T7041] usb 5-1: Product: syz [ 354.197236][ T7041] usb 5-1: Manufacturer: syz [ 354.209492][ T7041] usb 5-1: SerialNumber: syz [ 354.219323][ T5874] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 354.223157][ T7041] usb 5-1: config 0 descriptor?? [ 354.232631][ T5874] usb 3-1: config 0 has no interface number 0 [ 354.239619][ T5874] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 354.246942][ T7041] comedi comedi5: Wrong number of endpoints [ 354.257668][ T7041] ni6501 5-1:0.0: driver 'ni6501' failed to auto-configure device. [ 354.259868][ T5874] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 354.274738][ T6015] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 354.283120][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.292751][ T5874] usb 3-1: Product: syz [ 354.297024][ T5874] usb 3-1: Manufacturer: syz [ 354.302641][ T5874] usb 3-1: SerialNumber: syz [ 354.317215][ T5874] usb 3-1: config 0 descriptor?? [ 354.324577][ T9717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.442316][ T7041] usb 5-1: USB disconnect, device number 35 [ 354.452818][ T6015] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 354.534758][ T9717] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.550346][ T6015] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.586800][ T6015] usb 6-1: config 0 descriptor?? [ 355.031004][ T7041] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 355.185636][ T7041] usb 2-1: not running at top speed; connect to a high speed hub [ 355.205600][ T7041] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 355.219400][ T7041] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 355.234595][ T7041] usb 2-1: config 5 has no interface number 0 [ 355.242038][ T7041] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 355.254322][ T7041] usb 2-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.267942][ T7041] usb 2-1: config 5 interface 148 has no altsetting 0 [ 355.278635][ T7041] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 355.289009][ T7041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.297530][ T7041] usb 2-1: Product: syz [ 355.304748][ T7041] usb 2-1: Manufacturer: syz [ 355.309505][ T7041] usb 2-1: SerialNumber: syz [ 355.617170][ T6015] usb 6-1: Cannot set autoneg [ 355.623940][ T6015] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 355.771716][ T5889] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 355.899217][ T5926] usb 6-1: USB disconnect, device number 20 [ 355.932080][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 355.946400][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.961273][ T5889] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 355.970578][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 355.979059][ T5889] usb 5-1: Product: syz [ 355.984643][ T5889] usb 5-1: Manufacturer: syz [ 355.989396][ T5889] usb 5-1: SerialNumber: syz [ 355.998472][ T5889] usb 5-1: config 0 descriptor?? [ 356.006484][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 356.012674][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 356.190678][ T9712] Process accounting resumed [ 356.446034][ T5926] usb 5-1: USB disconnect, device number 36 [ 356.552631][ T9717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.687353][ T5874] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 356.703859][ T5874] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 356.716417][ T5874] asix 3-1:0.188: probe with driver asix failed with error -71 [ 356.756238][ T5874] usb 3-1: USB disconnect, device number 51 [ 356.971247][ T5926] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 357.006871][ T9765] netlink: zone id is out of range [ 357.012285][ T9765] netlink: zone id is out of range [ 357.017516][ T9765] netlink: zone id is out of range [ 357.025687][ T9765] netlink: zone id is out of range [ 357.030898][ T9765] netlink: zone id is out of range [ 357.082088][ T9765] netlink: zone id is out of range [ 357.104901][ T9765] netlink: zone id is out of range [ 357.110207][ T9765] netlink: zone id is out of range [ 357.145643][ T9765] netlink: zone id is out of range [ 357.147380][ T5926] usb 6-1: unable to get BOS descriptor or descriptor too short [ 357.180659][ T5926] usb 6-1: not running at top speed; connect to a high speed hub [ 357.197526][ T9771] overlayfs: failed to create directory ./file0/index (errno: 1); mounting read-only [ 357.207816][ T9771] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 357.226219][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.238479][ T5926] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.253495][ T5926] usb 6-1: string descriptor 0 read error: -22 [ 357.267154][ T5926] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.290261][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.347853][ T5926] usb 6-1: 0:2 : does not exist [ 358.140774][ T7041] ipheth 2-1:5.148: Unable to find endpoints [ 358.152563][ T7041] usb 2-1: USB disconnect, device number 33 [ 358.214149][ T30] audit: type=1400 audit(1766748066.722:1369): avc: denied { mounton } for pid=9754 comm="syz.5.924" path="/proc/567/cgroup" dev="proc" ino=23833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 358.273251][ T30] audit: type=1400 audit(1766748066.752:1370): avc: denied { remount } for pid=9754 comm="syz.5.924" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 358.543681][ T7433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.653794][ T7433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.749191][ T7433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.812958][ T30] audit: type=1400 audit(1766748067.322:1371): avc: denied { block_suspend } for pid=9792 comm="syz.0.937" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 358.892840][ T9755] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 358.933649][ T9755] bond2 (unregistering): Released all slaves [ 358.949591][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.960076][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.968428][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.978160][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.988347][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.005308][ T30] audit: type=1400 audit(1766748067.512:1372): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 359.053651][ T7433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.128387][ T5926] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 359.143111][ T5926] usb 6-1: Warning! Unlikely big volume range (=13262), cval->res is probably wrong. [ 359.165361][ T5926] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/13262/1 [ 359.187070][ T5926] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 359.212193][ T5926] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 359.281650][ T5926] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 359.320541][ T5926] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 359.360295][ T5926] usb 6-1: USB disconnect, device number 21 [ 359.701234][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 359.928384][ T7433] bridge_slave_1: left allmulticast mode [ 359.948178][ T7433] bridge_slave_1: left promiscuous mode [ 359.962262][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.972712][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.938'. [ 360.001238][ T7433] bridge_slave_0: left allmulticast mode [ 360.015716][ T7433] bridge_slave_0: left promiscuous mode [ 360.033799][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.512439][ T7433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.524781][ T7433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.535825][ T7433] bond0 (unregistering): Released all slaves [ 361.011446][ T52] Bluetooth: hci4: command tx timeout [ 361.062662][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.071049][ T5926] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 361.082176][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.090006][ T9797] bridge_slave_0: entered allmulticast mode [ 361.116477][ T9797] bridge_slave_0: entered promiscuous mode [ 361.147505][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.172064][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.189626][ T9797] bridge_slave_1: entered allmulticast mode [ 361.203981][ T9797] bridge_slave_1: entered promiscuous mode [ 361.232420][ T5926] usb 6-1: not running at top speed; connect to a high speed hub [ 361.246193][ T30] audit: type=1400 audit(1766748069.752:1373): avc: denied { bind } for pid=9823 comm="syz.2.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 361.275617][ T5926] usb 6-1: config 5 has an invalid interface number: 148 but max is 0 [ 361.284026][ T5926] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 361.295653][ T5926] usb 6-1: config 5 has no interface number 0 [ 361.302211][ T5926] usb 6-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 361.312683][ T5926] usb 6-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.326420][ T5926] usb 6-1: config 5 interface 148 has no altsetting 0 [ 361.336051][ T5926] usb 6-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 361.356336][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.365629][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.377683][ T5926] usb 6-1: Product: syz [ 361.382557][ T5926] usb 6-1: Manufacturer: syz [ 361.393318][ T5926] usb 6-1: SerialNumber: syz [ 361.420309][ T7433] hsr_slave_0: left promiscuous mode [ 361.432214][ T7433] hsr_slave_1: left promiscuous mode [ 361.438095][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.467673][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.506557][ T7433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.514214][ T7433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.547778][ T7433] veth1_macvtap: left promiscuous mode [ 361.556625][ T7433] veth0_macvtap: left promiscuous mode [ 361.563245][ T7433] veth1_vlan: left promiscuous mode [ 361.568749][ T7433] veth0_vlan: left promiscuous mode [ 361.611223][ T5927] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 361.787137][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.825088][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.856627][ T5927] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 361.866557][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.874883][ T5927] usb 2-1: Product: syz [ 361.879491][ T5927] usb 2-1: Manufacturer: syz [ 361.884282][ T5927] usb 2-1: SerialNumber: syz [ 361.918826][ T5927] usb 2-1: config 0 descriptor?? [ 361.935935][ T5927] usb 2-1: ucan: probing device on interface #0 [ 361.942668][ T5927] usb 2-1: ucan: invalid EP count (0) [ 361.950019][ T5927] usb 2-1: ucan: probe failed; try to update the device firmware [ 362.027237][ T30] audit: type=1400 audit(1766748070.532:1374): avc: denied { append } for pid=9829 comm="syz.2.946" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.320486][ T7433] team0 (unregistering): Port device team_slave_1 removed [ 362.378448][ T7433] team0 (unregistering): Port device team_slave_0 removed [ 362.897444][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.016741][ T9833] vlan2: entered allmulticast mode [ 363.023045][ T9833] bond_slave_1: entered allmulticast mode [ 363.091083][ T52] Bluetooth: hci4: command tx timeout [ 363.120271][ T9837] netlink: 'syz.2.947': attribute type 23 has an invalid length. [ 363.135182][ T9797] team0: Port device team_slave_0 added [ 363.146097][ T9797] team0: Port device team_slave_1 added [ 363.206758][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.224639][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.252373][ T9839] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 363.277410][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.342058][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.359149][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.396898][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.735096][ T5926] ipheth 6-1:5.148: Unable to find endpoints [ 363.775323][ T5926] usb 6-1: USB disconnect, device number 22 [ 363.822186][ T9797] hsr_slave_0: entered promiscuous mode [ 363.838907][ T9797] hsr_slave_1: entered promiscuous mode [ 363.845859][ T9797] debugfs: 'hsr0' already exists in 'hsr' [ 363.854233][ T9797] Cannot create hsr debugfs directory [ 364.388625][ T7041] usb 2-1: USB disconnect, device number 34 [ 364.580087][ T9863] netlink: 'syz.5.949': attribute type 10 has an invalid length. [ 364.588549][ T9863] netlink: 40 bytes leftover after parsing attributes in process `syz.5.949'. [ 364.878796][ T9863] batman_adv: batadv0: Adding interface: virt_wifi0 [ 364.885901][ T9863] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.911751][ T9863] batman_adv: batadv0: Interface activated: virt_wifi0 [ 365.096245][ T9797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.147103][ T9797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 365.181472][ T52] Bluetooth: hci4: command tx timeout [ 365.198040][ T9797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 365.230580][ T9797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 365.476514][ T9882] overlayfs: failed to clone upperpath [ 365.535411][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.594963][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.631873][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.639039][ T7042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.033820][ T7042] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.040906][ T7042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.200623][ T9797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.241649][ T9797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.502881][ T30] audit: type=1400 audit(1766748075.002:1375): avc: denied { ioctl } for pid=9891 comm="syz.5.954" path="/dev/input/event3" dev="devtmpfs" ino=967 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 366.655076][ T30] audit: type=1400 audit(1766748075.162:1376): avc: denied { ioctl } for pid=9891 comm="syz.5.954" path="socket:[22517]" dev="sockfs" ino=22517 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 367.251053][ T52] Bluetooth: hci4: command tx timeout [ 367.741946][ T7041] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 367.766031][ T9906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.956'. [ 368.280577][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.341886][ T7041] usb 6-1: Using ep0 maxpacket: 16 [ 368.366623][ T7041] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.390688][ T7041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.407987][ T7041] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 368.423780][ T7041] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 368.474005][ T7041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.521350][ T7041] usb 6-1: Product: syz [ 368.531388][ T7041] usb 6-1: Manufacturer: syz [ 368.546918][ T7041] usb 6-1: SerialNumber: syz [ 368.558556][ T7041] usb 6-1: config 0 descriptor?? [ 368.581622][ T7041] peak_usb 6-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 368.599266][ T7041] peak_usb 6-1:0.0: unable to read PCAN-USB serial number (err -8) [ 368.673854][ T7041] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -8 [ 368.817641][ T9902] sg_write: data in/out 1530911619/2 bytes for SCSI command 0x8e-- guessing data in; [ 368.817641][ T9902] program syz.5.957 not setting count and/or reply_len properly [ 368.890883][ T9797] veth0_vlan: entered promiscuous mode [ 368.905660][ T9797] veth1_vlan: entered promiscuous mode [ 368.940166][ T9797] veth0_macvtap: entered promiscuous mode [ 368.960061][ T9797] veth1_macvtap: entered promiscuous mode [ 368.985662][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.002346][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.017307][ T7420] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.033849][ T7420] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.066031][ T7420] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.121777][ T7041] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 369.246407][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.256804][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.439198][ T7420] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.487964][ T7041] usb 2-1: not running at top speed; connect to a high speed hub [ 369.599217][ T7041] usb 2-1: config 5 has an invalid interface number: 148 but max is 0 [ 369.611104][ T7041] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 369.626612][ T7041] usb 2-1: config 5 has no interface number 0 [ 369.633706][ T7041] usb 2-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 369.655235][ T7041] usb 2-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 369.671538][ T7041] usb 2-1: config 5 interface 148 has no altsetting 0 [ 369.692584][ T7041] usb 2-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 369.709250][ T7041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.731554][ T7041] usb 2-1: Product: syz [ 369.750503][ T7041] usb 2-1: Manufacturer: syz [ 369.754628][ T7442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.769523][ T7041] usb 2-1: SerialNumber: syz [ 369.779323][ T7442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.868204][ T7442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.907882][ T7442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.926536][ T30] audit: type=1400 audit(1766748078.432:1377): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/root/syzkaller.IvPLC4/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 370.002771][ T30] audit: type=1400 audit(1766748078.432:1378): avc: denied { mount } for pid=9797 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 370.044447][ T30] audit: type=1400 audit(1766748078.432:1379): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/root/syzkaller.IvPLC4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 370.127248][ T30] audit: type=1400 audit(1766748078.492:1380): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/root/syzkaller.IvPLC4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 370.165599][ T30] audit: type=1400 audit(1766748078.542:1381): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 370.197494][ T30] audit: type=1400 audit(1766748078.542:1382): avc: denied { mounton } for pid=9797 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 371.624474][ T90] usb 6-1: USB disconnect, device number 23 [ 371.745068][ T7041] ipheth 2-1:5.148: Unable to find endpoints [ 371.791092][ T977] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 371.824570][ T7041] usb 2-1: USB disconnect, device number 35 [ 371.842118][ T9059] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 371.878494][ T9942] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR [ 371.931032][ T977] usb 3-1: device descriptor read/64, error -71 [ 372.006023][ T30] audit: type=1400 audit(1766748080.512:1383): avc: denied { create } for pid=9948 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 372.042661][ T9059] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.248887][ T9059] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.248919][ T9059] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 372.248932][ T9059] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.251861][ T9059] usb 7-1: config 0 descriptor?? [ 372.421165][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 477.460912][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 477.467898][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7431/1:b..l [ 477.476285][ C0] rcu: (detected by 0, t=10502 jiffies, g=32117, q=282 ncpus=2) [ 477.484001][ C0] task:kworker/u8:33 state:R running task stack:25480 pid:7431 tgid:7431 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 477.498703][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 477.504993][ C0] Call Trace: [ 477.508270][ C0] [ 477.511195][ C0] ? __schedule+0x10b9/0x6150 [ 477.515879][ C0] __schedule+0x1139/0x6150 [ 477.520399][ C0] ? __pfx___schedule+0x10/0x10 [ 477.525260][ C0] ? mark_held_locks+0x49/0x80 [ 477.530036][ C0] preempt_schedule_irq+0x51/0x90 [ 477.535068][ C0] irqentry_exit+0x1d8/0x8c0 [ 477.539670][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 477.545664][ C0] RIP: 0010:__orc_find+0x65/0xf0 [ 477.550608][ C0] Code: eb 0c 48 8d 6b 04 49 89 df 49 39 ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 <48> 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 [ 477.570218][ C0] RSP: 0018:ffffc9000f6c7410 EFLAGS: 00000202 [ 477.576286][ C0] RAX: ffffffff912fbdec RBX: ffffffff90a76ac4 RCX: dffffc0000000000 [ 477.584253][ C0] RDX: 0000000000000001 RSI: 0000000000000002 RDI: ffffffff90a76a9c [ 477.592219][ C0] RBP: ffffffff90a76ac0 R08: ffffffff912fbe52 R09: 00000000921ae62f [ 477.600195][ C0] R10: 0000000000000002 R11: 000000000001288d R12: ffffffff90a76ac8 [ 477.608161][ C0] R13: ffffffff82288d8e R14: ffffffff90a76a9c R15: ffffffff90a76abc [ 477.616131][ C0] ? __kasan_slab_free+0x5e/0x80 [ 477.621102][ C0] ? __kasan_slab_free+0x5e/0x80 [ 477.626047][ C0] unwind_next_frame+0x2ec/0x20b0 [ 477.631080][ C0] ? __kasan_slab_free+0x5f/0x80 [ 477.636027][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 477.642187][ C0] arch_stack_walk+0x94/0x100 [ 477.646876][ C0] ? __kasan_slab_free+0x5f/0x80 [ 477.651822][ C0] stack_trace_save+0x8e/0xc0 [ 477.656503][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 477.661881][ C0] ? __lock_acquire+0x436/0x2890 [ 477.666824][ C0] kasan_save_stack+0x33/0x60 [ 477.671499][ C0] ? kasan_save_stack+0x33/0x60 [ 477.676351][ C0] ? kasan_save_track+0x14/0x30 [ 477.681204][ C0] ? kasan_save_free_info+0x3b/0x60 [ 477.686412][ C0] ? __kasan_slab_free+0x5f/0x80 [ 477.691397][ C0] kasan_save_track+0x14/0x30 [ 477.696081][ C0] kasan_save_free_info+0x3b/0x60 [ 477.701115][ C0] __kasan_slab_free+0x5f/0x80 [ 477.705885][ C0] kfree+0x2f8/0x6e0 [ 477.709775][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.714978][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 477.721326][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 477.727668][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 477.733848][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 477.740386][ C0] ? kcov_remote_start+0x399/0x680 [ 477.745509][ C0] ieee80211_iface_work+0xe28/0x1350 [ 477.750799][ C0] ? rcu_is_watching+0x12/0xc0 [ 477.755569][ C0] cfg80211_wiphy_work+0x3fb/0x560 [ 477.760698][ C0] process_one_work+0x9ba/0x1b20 [ 477.765650][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 477.771290][ C0] ? __pfx_process_one_work+0x10/0x10 [ 477.776679][ C0] ? assign_work+0x1a0/0x250 [ 477.781280][ C0] worker_thread+0x6c8/0xf10 [ 477.785889][ C0] ? __pfx_worker_thread+0x10/0x10 [ 477.791005][ C0] kthread+0x3c5/0x780 [ 477.795079][ C0] ? __pfx_kthread+0x10/0x10 [ 477.799667][ C0] ? rcu_is_watching+0x12/0xc0 [ 477.804431][ C0] ? __pfx_kthread+0x10/0x10 [ 477.809026][ C0] ret_from_fork+0x983/0xb10 [ 477.813624][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 477.818741][ C0] ? __switch_to+0x7af/0x10d0 [ 477.823422][ C0] ? __pfx_kthread+0x10/0x10 [ 477.828021][ C0] ret_from_fork_asm+0x1a/0x30 [ 477.832809][ C0] [ 477.835822][ C0] rcu: rcu_preempt kthread starved for 10538 jiffies! g32117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 477.847010][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 477.856968][ C0] rcu: RCU grace-period kthread stack dump: [ 477.862841][ C0] task:rcu_preempt state:R running task stack:29096 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 477.876365][ C0] Call Trace: [ 477.879638][ C0] [ 477.882565][ C0] ? __schedule+0x10b9/0x6150 [ 477.887252][ C0] __schedule+0x1139/0x6150 [ 477.891756][ C0] ? __lock_acquire+0x436/0x2890 [ 477.896703][ C0] ? __mod_timer+0x8f2/0xd30 [ 477.901311][ C0] ? __pfx___schedule+0x10/0x10 [ 477.906167][ C0] ? find_held_lock+0x2b/0x80 [ 477.910857][ C0] ? schedule+0x2d7/0x3a0 [ 477.915195][ C0] schedule+0xe7/0x3a0 [ 477.919273][ C0] schedule_timeout+0x123/0x290 [ 477.924126][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 477.929497][ C0] ? __pfx_process_timeout+0x10/0x10 [ 477.934789][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 477.940611][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 477.946082][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 477.950855][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 477.956145][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.961350][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 477.966292][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 477.971153][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 477.976967][ C0] rcu_gp_kthread+0x26d/0x380 [ 477.981652][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 477.986852][ C0] ? rcu_is_watching+0x12/0xc0 [ 477.991612][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.996818][ C0] ? __kthread_parkme+0x19e/0x250 [ 478.001845][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 478.007052][ C0] kthread+0x3c5/0x780 [ 478.011126][ C0] ? __pfx_kthread+0x10/0x10 [ 478.015721][ C0] ? rcu_is_watching+0x12/0xc0 [ 478.020483][ C0] ? __pfx_kthread+0x10/0x10 [ 478.025078][ C0] ret_from_fork+0x983/0xb10 [ 478.029672][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 478.034786][ C0] ? __switch_to+0x7af/0x10d0 [ 478.039469][ C0] ? __pfx_kthread+0x10/0x10 [ 478.044062][ C0] ret_from_fork_asm+0x1a/0x30 [ 478.048851][ C0] [ 478.051859][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 478.058168][ C0] Sending NMI from CPU 0 to CPUs 1: [ 478.063379][ C1] NMI backtrace for cpu 1 [ 478.063403][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 478.063430][ C1] Tainted: [L]=SOFTLOCKUP [ 478.063436][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.063447][ C1] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 478.063472][ C1] Code: 46 e6 77 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 56 e5 77 0a e9 41 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8 [ 478.063490][ C1] RSP: 0018:ffffc90000197b28 EFLAGS: 00000002 [ 478.063504][ C1] RAX: 0000000000000001 RBX: ffffffff818bd7bb RCX: ffffffff81c707ef [ 478.063517][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf23 RDI: ffffffff8bf2b400 [ 478.063529][ C1] RBP: ffff8880b853ac80 R08: 0000000000000001 R09: 0000000000000001 [ 478.063541][ C1] R10: ffffffff9088b4d7 R11: ffff88801decaff0 R12: ffff8880b853ac80 [ 478.063553][ C1] R13: ffff888028530000 R14: 0000000000000000 R15: dffffc0000000000 [ 478.063566][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 478.063583][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.063595][ C1] CR2: 00007f53ee762da9 CR3: 00000000776dc000 CR4: 00000000003526f0 [ 478.063608][ C1] Call Trace: [ 478.063614][ C1] [ 478.063619][ C1] RIP: 0010:sched_core_balance+0x9d/0xe70 [ 478.063642][ C1] Code: a0 96 3c 8e e8 44 23 0e 00 e8 8f 2f ec 09 5b 85 c0 0f 85 f3 09 00 00 48 89 ef e8 ae 3c ff ff e8 f9 30 3b 00 fb 48 63 44 24 50 <48> c7 c3 80 5c b4 93 48 89 44 24 08 48 83 f8 07 0f 87 66 0d 00 00 [ 478.063659][ C1] RSP: 0018:ffffc90000197b58 EFLAGS: 00000202 [ 478.063672][ C1] ? sched_core_balance+0x97/0xe70 [ 478.063695][ C1] ? lock_acquire+0x179/0x330 [ 478.063717][ C1] ? xfd_validate_state+0x61/0x180 [ 478.063739][ C1] finish_task_switch.isra.0+0x458/0xbd0 [ 478.063769][ C1] ? __schedule+0x10b9/0x6150 [ 478.063791][ C1] __schedule+0x1141/0x6150 [ 478.063820][ C1] ? __pfx___schedule+0x10/0x10 [ 478.063841][ C1] ? __schedule+0x1183/0x6150 [ 478.063863][ C1] schedule_idle+0x5c/0x90 [ 478.063884][ C1] do_idle+0x2b3/0x510 [ 478.063912][ C1] ? __pfx_do_idle+0x10/0x10 [ 478.063942][ C1] cpu_startup_entry+0x4f/0x60 [ 478.063969][ C1] start_secondary+0x21d/0x2d0 [ 478.063987][ C1] ? __pfx_start_secondary+0x10/0x10 [ 478.064009][ C1] common_startup_64+0x13e/0x148 [ 478.064038][ C1] [ 479.686831][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.699228][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16