last executing test programs: 13.336310389s ago: executing program 0 (id=158): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10, r3, 'id1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@initdev}, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(r2, &(0x7f0000000240)='./file1/file4/file6\x00', 0x49) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000019300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) socket(0x2c, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 10.759317903s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$kcm(0x2, 0x1, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x6, &(0x7f0000000000)=0xc) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0xb, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x16, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) (async) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x48, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x18, 0x1409, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) (async) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000100)=0x80000002, 0x4) 10.607060351s ago: executing program 1 (id=163): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a320000000014"], 0x88}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000480)={0x2c, 0x0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10.55038548s ago: executing program 0 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r1, 0x0, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x400800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x9, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1ff, 0x1, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x1ff, 0x7, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0xb79, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x12, 0x4, 0x2, 0x7, 0x7fffffff, 0x1, 0x4, 0x10000, 0xe72, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000000, 0x100000001, 0x42, 0x3, 0x9, 0xc5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x10]}) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r5, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 10.263387998s ago: executing program 4 (id=165): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x236, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xff, 0xba2bc2dd26f22195, 0x0, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x1, 0x9}}}}}]}}]}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0xffff}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x7, "490d868e"}, @local=@item_4={0x3, 0x2, 0xf, "3edb206e"}]}}, 0x0}, 0x0) 9.823644584s ago: executing program 3 (id=169): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x8c, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x240040c7}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x240040c7}) io_uring_enter(r3, 0x3516, 0x0, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x4, 0x4]) pread64(r0, &(0x7f00000002c0)=""/85, 0x55, 0x3) 9.791193767s ago: executing program 1 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) socket$inet6(0xa, 0x2, 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000006030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 8.126531973s ago: executing program 1 (id=171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4a8a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() prlimit64(0x0, 0xe, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r6, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="3f44f7def57c100273ea61c02f81773690f43a2b50699252f057a9a2d7edf894a9744e9f51feb8ff810d80fa08a29005f94b41d7f1a69778238a03db8d7d454cf035c65108812baac7a1dbfd560a17157534aa8c2cecc03d632108dc47d644343fc1"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 7.3280222s ago: executing program 2 (id=172): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80000) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x9, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x2}}, 0x18) ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000640)={0x2, r4}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x18, 0xfffffff9, 0x87c0, 0x4, 0x410, 0x1, 0x4, '\x00', 0x0, r5, 0x4, 0x2, 0x1}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in=@private}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000800)=0xe8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r9, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x5) accept$netrom(r4, &(0x7f0000000980)={{0x3, @netrom}, [@bcast, @rose, @bcast, @remote, @rose, @remote, @bcast, @netrom]}, &(0x7f0000000a00)=0x48) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000a40)=0x0) timer_create(0x0, &(0x7f0000000a80)={0x0, 0x2c, 0x2, @tid=r10}, &(0x7f0000000ac0)) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) connect$can_bcm(r5, &(0x7f0000000b00)={0x1d, r1}, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x2c, r11, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000cc0), 0x801, 0x0) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r14, 0x80811501, &(0x7f0000000d40)={0x80}) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r11, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x7c0}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xf}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x624}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000f40)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000f80)={0x0, 0x1, r13}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r15, 0xc01864cd, &(0x7f0000001200)={&(0x7f0000001180)=[r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x7, 0x7ff, 0x7], 0x8, 0x1}) 7.293383935s ago: executing program 4 (id=173): io_setup(0x23, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1, 0x0, 0x8dff}, 0x10002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x27, 0x0, 0x1, 0x10000}, 0x28) 7.209708699s ago: executing program 2 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x8c7, 0x180) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000340)="dbf278b12eb20cbeae1827910c2db9aa9ee35a60f0d46d7308b5dd4dfb567d1492de58f2b40c74c911d40b326c10efc0b3698f9abc330de2a08f647ef2f66888e3bd79d4a4f497c0d3e1f263f22e4ce774dac1a3055687b1ae0372949d8566bc4170a9de726f378242cf8c0e9d99ad62b8c043e1da1bf5263f304929a7e928780bc75487eb185afe30fb76e2fce4440f2d13e035c8a57cf6ddf32ca2aebd67b980f01f4a4a2045c9d5e84ae6dae1cd9182bbc5ff09fd284380a4406957", 0xbd}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r6, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000340)="dbf278b12eb20cbeae1827910c2db9aa9ee35a60f0d46d7308b5dd4dfb567d1492de58f2b40c74c911d40b326c10efc0b3698f9abc330de2a08f647ef2f66888e3bd79d4a4f497c0d3e1f263f22e4ce774dac1a3055687b1ae0372949d8566bc4170a9de726f378242cf8c0e9d99ad62b8c043e1da1bf5263f304929a7e928780bc75487eb185afe30fb76e2fce4440f2d13e035c8a57cf6ddf32ca2aebd67b980f01f4a4a2045c9d5e84ae6dae1cd9182bbc5ff09fd284380a4406957", 0xbd}) semget$private(0x0, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x1}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x1}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 5.99582422s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000006feffff7b0af0ff0000000079a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 5.829958946s ago: executing program 4 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = creat(0x0, 0x58) r5 = socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r10, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x54}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x41, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@tail_call, @ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @exit, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @alu={0x3, 0x1, 0xc, 0x9, 0xa, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) splice(r7, &(0x7f0000000280)=0x80, r7, &(0x7f0000000380)=0x1, 0x2, 0x8) 5.779224773s ago: executing program 0 (id=177): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e25, 0xffff, @mcast1, 0x3}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_io_uring_setup(0x4cbf, &(0x7f0000000380)={0x0, 0x64bb, 0x1000, 0x1, 0x4}, &(0x7f0000000400), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800d1}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 5.764194533s ago: executing program 1 (id=178): socket$kcm(0x11, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x0, 0x2, 0x73, 0x10000000003, 0x4}, &(0x7f0000000100)={0x1b, 0x3, 0x6, 0x0, 0x7, 0x400000, 0x0, 0x5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000200)=0x7fffffff) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x7ffe, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x7ffffffc, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x9, 0x3, 0x0, 0x5, 0xff, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x7, 0x80000000, 0x2, 0x3, 0xffffffff, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0xa, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x4, 0x40000005, 0x82f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x401c000, 0x3fe, 0x403, 0x200006, 0x3, 0x9, 0x5, 0x4, 0x5f31, 0x2d, 0x7, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x9, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xffff, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x9, 0x6, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xe, 0x2, 0xfff7fffe, 0x3, 0x2000000a, 0x8, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x7f, 0x3, 0x8000008, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x9, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0x6, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0x1, 0xa620, 0x9, 0x2, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd8, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x800, 0x4000b, 0xaf, 0x0, 0x6, 0xfffffffa, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x5, 0x1, 0xe403, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 5.592945381s ago: executing program 2 (id=179): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x10}}], 0x70) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="060201016a"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x6}, 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0xc, 0x0, 0x34, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) 4.633402409s ago: executing program 3 (id=180): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000100000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 4.471716529s ago: executing program 3 (id=181): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0xdf, 0x8, 0x4, @mcast2, @private2, 0x7, 0x80, 0x5b44, 0x6}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000540)=""/160, 0xa0, 0x0, &(0x7f00000001c0)=""/36, 0x24}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x40080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@private1, @local, @local, 0x5, 0xb, 0x0, 0x100, 0x4, 0x0, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x42, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x8000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000390405007000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="830004002a6000001800128008000100736974000c00028008000300ac14140d"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807"], 0x0) 3.70702177s ago: executing program 2 (id=182): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) close_range(r2, 0xffffffffffffffff, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000007c0)=""/4097, 0x1001) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) sendmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x4ebd710175e518f1, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 2.913666503s ago: executing program 1 (id=183): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b95908d387dbe9abc89b0000ec", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) (async) connect$netrom(r0, &(0x7f00000003c0)={{0x3, @null, 0x3}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @bcast, @default]}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r6}, 0x18) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.695349176s ago: executing program 1 (id=184): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba2bc2dd26f22195, 0x0, [{{0x9, 0x4, 0x0, 0xe5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xc, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfe, 0x2, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x7, "490d868e"}, @local=@item_4={0x3, 0x2, 0x7, "3edb206e"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x19, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0xb, 0x59, {0x59, 0x22, "852ed790fc5c206949845654c1b5158cb21a7b2cc60027d44995cf3caceece8051d3b61e6e9caa74894b98916c3a58e45c113214f38d31ae2d707ad43867a75d8bbbc638e893526a7df2c6f22793510a3183bb79a02d61"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfd653701dfb7651a}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000d20000007f74feb9332233900ea03b2915c8c194fcca7f5d7eddb45e17067b345dd24217412e7ec1bcad1307c39774b536589875d2dba2c2a922b20f003febe6b5bf77e4d3aae8ebea7963b5cb8f4317ccdaf538b70b1ca5d0e517ce7370a394392115210278fe64c5beb06d3b23e64c911b5f1c8ac65482db8a6627d05c1686af1005945a073eebc04b683ceb0dd2f0c7a2406b42cb456b16cdad6af11d115bbfbf262c632f2710a1aa30bbc5a9ec5708167937f86871985e19c9b37ca780f41a6b08c2ab6362dba312f70eb0deb37c51ea17f27ff7"], &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0xc0, 0x5, 0x6, "845c7f701909"}, &(0x7f0000000340)={0x40, 0x5, 0x3, "14cd9f"}}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x155, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x20, 0x20, 0xfb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "d3"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6c1c, 0x2, 0x1, 0xf2}, {0x6, 0x24, 0x1a, 0x80, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0x3, 0x3, [0x4, 0x5, 0x9, 0x1ff]}, @mdlm_detail={0xb4, 0x24, 0x13, 0x80, "9b02a6c7b17be26f5ee63942d30a338cf02c63f06e23a3558120ea35c28929619e8ee953032ba9eccafd4407a5a0807c076387804beefbed63b9a8f898c970c0fdad465ce915719b3bfa02d265131186b0309fb342aa2ca95c1d49b7eda5a738915db70acbcd1283fecef5698fddc43aae71ed085c5b0263afa0d629572bee1465dd12fef26b13d368ce073e238a390f9fa19267d160be0895215a97df1a40d75c548f828f6f9013e559db77d94213a8"}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x0, [0x10]}, @mdlm={0x15, 0x24, 0x12, 0x8001}, @dmm={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x93, 0xe9}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x87, 0xd5, 0x9, 0x8, 0x3}, 0x113, &(0x7f0000000580)={0x5, 0xf, 0x113, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x6c, 0xf00, 0xfff8, [0x0, 0x3f, 0x3f0f, 0xff00cf]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "80491ac09ecf75af0be0fe4cd368ed8c"}, @generic={0xde, 0x10, 0xa, "579690ebb917112a2bfab0ef14cc0f84ff638a6483f52876cf1619797301ed674b64326083d4b1f59db8d1ea1c0ffbad05d89eb5b775039b033ecfd2c8c24d2ea58ee3c1081e415b1c3e05806a9034c32c793a9d0eb0230fd8d666e2fe3f9281acc9eef540f7ac45d75640f60a7f548cb611e1ff49cdac1434c7d910dabdfe84dbfd0576b9be60b54e53edcf39dbdc96779156aea6788c405a0a2636a70d46371a371d27acbd75080c0e47abf8f883f025c9cb82c5b3c289ed756ec7d4b37b97c03e1a7541de1111da674003c2d9f792ffa8ad804a4062477da420"}]}, 0x7, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4b, &(0x7f0000000700)=@string={0x4b, 0x3, "d18e141a37d3553b41272da40653694d94d11c4fdc3330323a0a70b1de46125e5a191d2ca4ce5487fab471da0e843693f2a96ee135c57e0297cbde7a69f36828bea49963d872747cd6"}}, {0x4f, &(0x7f0000000780)=@string={0x4f, 0x3, "bc5e4f983a8f079bab3dfdef77c9b543fc29efc714a52e6b0f3091d1576e883d6efe02df7a95ea9ece75107d768e9ea4537db1b7e02751a53a7be4a5ec51a29a6524ca4c6bbb417edc93127dc7"}}, {0xf, &(0x7f0000000800)=@string={0xf, 0x3, "27fefddca3cee018727606b00a"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc01}}, {0x93, &(0x7f00000008c0)=@string={0x93, 0x3, "c82fbf61c5ef7b850055df9c58d7a673f6e641f2574f5d01e8f8e24bf4ddfcb48e62543656e2134a0a21f3eda00ec4f65d36b90fb982ce173390663283b4499801ace47a183739f67d1a26af886d58f3cc1cfe8b0e9b279201d5a80a8ab16770b326bc90d5db7ed99ace774de3c106b71cec973342d291f00cc353caf90f275cd13063fa4c86fa8bc06bf47c3c2b6b56a0"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000b80)={0x14, &(0x7f0000000a40)={0x0, 0x3b, 0xd0, {0xd0, 0x0, "61af04192928161309a68f9b8ee242200175f12908d772d92db03d6b1ead7cd20c37b6d5fbe9f97c4109731369f8a20d2bcd34139d8f9d0299e0e19db3e034c434569942514ad83111227cc239e861458c1c8183653e6f84d4c851ece2541f2fd9846f62ec26399e9d27b441df0262a081930e968eab21e26a17da241bfcb1eb24e9c2fcd3ef78706ed1210503ca410e192bdbeeaf535d065891441db3c133f6bf878f10f4c9bc0116a735daaccda18e7bd7303c36ec6f525fc8f44861a22ac97a8245d2922e754454acf9311086"}}, &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000bc0)={0x20, 0x12, 0xc6, "ca4b10447403137467361a7eed6b93f3215308601d77c59b469f2504dbef970d528e8317e45061efc6ee2aabfa7faa002c4d5b3c573cbd8950bc1ac081eadb551990790dfe7cdee592309516729188afe09a842d604aac72334b81330c49a51f5167e819d6e011303c8d56b2a8c74bf1ce44b18b32bd930741532953c6fcc14a374a65d7d32bc0d40017f54fab266d8c67c6f90b817b1fd486b772a45adfa590d5f18029fbf67be6bd8ca9fe8539f7f396920261f5827905b6c3a57ead2a8aa0d51593311661"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0x9, 0x2, 0x5d15, 0x9, 0x2, 0x9, 0x5, 0xe96, 0x6, 0x7, 0x3, 0x8037}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, 0x3}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000e40)={0x20, 0x89, 0x2, 0x1}}) 2.459004509s ago: executing program 0 (id=185): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0x10, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x8000, 0x40, 0x7, 0x9}}) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x4, r1, 0x1, 0x9, 0x6, @broadcast}, 0x14) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x8, 0x7, 0x1, 0x2, 0xa, 0x2, 0x9}, &(0x7f00000002c0)=0x9c) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r4, &(0x7f0000000340)=0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000380)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000000400)={'team_slave_0\x00', {0x2, 0x0, @multicast2}}) getsockname(r0, &(0x7f0000000440)=@rc={0x1f, @none}, &(0x7f00000004c0)=0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000500)={r4}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f0000000640)=0x84) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x204000, 0x0) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f00000006c0)) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000700), 0x4) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'caif0\x00'}) r11 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) sendmsg$NFNL_MSG_ACCT_NEW(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa8, 0x0, 0x7, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x60}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xd}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xe}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf1}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r11, 0xc01064c2, &(0x7f0000000900)={0x0, 0x1, r11}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r11, 0xc01064c2, &(0x7f0000000940)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r11, 0xc01064c2, &(0x7f0000000980)={0x0, 0x1, r11}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r11, 0xc01064c4, &(0x7f0000000a00)={&(0x7f00000009c0)=[0x0, r12, r13, 0x0, 0x0, r14], 0x6}) read$FUSE(r11, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r15, &(0x7f0000002a80)='fd/4\x00') 2.329063358s ago: executing program 4 (id=186): io_setup(0x23, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x30}}, 0x0) recvmsg(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1, 0x0, 0xf0ff}, 0x10002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x27, 0x0, 0x1, 0x10000}, 0x28) 2.145461172s ago: executing program 2 (id=187): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) (async, rerun: 64) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) (async, rerun: 64) write$nci(r1, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async, rerun: 32) read$nci(r1, &(0x7f00000002c0)=""/100, 0x64) (async, rerun: 32) write$nci(r1, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) (async) read$nci(r1, &(0x7f0000000380)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) (async, rerun: 32) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) (async, rerun: 32) read$nci(r1, &(0x7f0000000500)=""/100, 0x64) (async) write$nci(r1, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 32) read$nci(r1, &(0x7f00000005c0)=""/100, 0x64) (async, rerun: 32) write$nci(r1, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) (async, rerun: 64) read$nci(r1, &(0x7f0000000680)=""/100, 0x64) (async, rerun: 64) write$nci(r1, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r1, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 64) read$nci(r1, &(0x7f0000000840)=""/100, 0x64) (async, rerun: 64) write$nci(r1, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) (async, rerun: 64) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 2.089034469s ago: executing program 0 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000200)=""/182, 0x39000, 0x1000, 0x5, 0x7}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000c4f000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x7e41, 0x1, 0x7, 0x20002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x6, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) syslog(0x2, &(0x7f0000001500)=""/43, 0x2b) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bff000/0x400000)=nil) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="389c3d848f3e923dfccff757ebc5e6d2cfb808bbec4d727da33fcb32bade5358074e382bb9f7876920977103c5285558a81afde5e78160a5599b931534113ac30c63937c155e24fb53386e1a8ba880f857f3e3bb7e10b63b41138d9b13922b016c8798d823bfa7da91df39ca707e3abf92a78d08c04a692b0fb5d90562e1c0b6b2349e96636084c893c85c781f3906e4fd8df01351400b17450b052d0364ba7e8f1215b80285a9dfd68c9eb84b5b5b1df8", @ANYRES16=r6, @ANYRESHEX=r6], 0x1a4}, 0x1, 0x0, 0x0, 0x11}, 0x4840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x24040001}, 0x4048004) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010094bd7000fbdbdfa505ae34e4002562b64329abcb3c25552655000000880003f8eed242d8884cf645e658f05ab26ba8f38b6a6f3d447ec0e2f30a75cdcb47f0e2c0d59b45445b175501cac2cfca9e5b", @ANYRES32=r8, @ANYRES16=r4], 0x28}, 0x1, 0x0, 0x0, 0x40080a4}, 0x810) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x0, 0x2a, [@rann={0x7e, 0x0, {{0x1, 0x79}, 0xf, 0x7, @broadcast, 0x1, 0x4, 0x3ff}}, @tim={0x5, 0x0, {0x2, 0xe3, 0x8, "b1a3eb2269482afc27c1a164f678db597d0cffba0e0c14faca2640b09633aad57b510c962aa7249dbc6ad1a79fd2983a83d9dcf81c3d9313c3930f9cea89e4f5dd72f5d4a2addd2bee87d38fbd29b8a4872849e1241ed856852a727bdbafb843e115053474f8bcb3c13c4f5c5d17e85c66169516bc39638deba287fc2038434adb9aea2cd1a9000f1838f4991f20dedee26a41f9fba83f16561b0c986681bae297f2adf70e09a9de30fde5833d79f9d12ab15e078b7bac8588ff108d0f6611405540fa96c1a1290799"}}, @ssid={0x0, 0x0, @default_ap_ssid}, @challenge={0x10, 0x0, 0x56}, @mic={0x8c, 0x0, {0xf4, "87a6ff42660d", @long="af1c5105078aca29c5ac99ed65382787"}}, @cf={0x4, 0x0, {0x7, 0x1, 0x8, 0xf88}}, @chsw_timing={0x68, 0x0, {0x1, 0x4}}, @mesh_chsw={0x76, 0x0, {0x9, 0xb7, 0x24, 0x95b}}, @ext_channel_switch={0x3c, 0x0, {0x0, 0x88, 0x7, 0xff}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xc, 0x34, @default_ibss_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40400c2) 1.587211443s ago: executing program 2 (id=189): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x10, r3, 'id1\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@initdev}, &(0x7f0000000140)=0x14) socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(r2, &(0x7f0000000240)='./file1/file4/file6\x00', 0x49) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0x0, 0x1}, 0x18, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000019300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) socket(0x2c, 0x5, 0x2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 1.32388986s ago: executing program 3 (id=190): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0xfffffff8}, 0xfffffffffffffee6) (async) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000100)=0x8, 0x4) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) (rerun: 32) 809.94881ms ago: executing program 4 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) 747.549161ms ago: executing program 3 (id=192): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000600)={[0xf, 0x3, 0xfffffffffffff602, 0x1000000000000002, 0x5, 0x8000000d, 0x9e, 0x5, 0x3, 0xffffffff, 0xffffffffffffffff, 0x1, 0x400000000000d0f, 0x4, 0x2000000000000003, 0x800005], 0x80a0000, 0x104204}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0xc00000000000000, 0x3}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002700)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000894}, 0x700) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000fdffffff850000002800000085000000230000009700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x32) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="0f01cbf30fc7320f218d0f013cc500000000640fc72fb81e0000000f23d80f21f835000000600f23f8dc11c4e1135a279a06000000b900c4c1ad600d31000000", 0x40}], 0x1, 0x4a, &(0x7f0000000240), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x2, 0x800004, 0x80000001}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd5000fdcbdf251f"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 59.633344][ T30] audit: type=1400 audit(1765936125.703:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.656740][ T30] audit: type=1400 audit(1765936125.723:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.659050][ T5802] cgroup: Unknown subsys name 'net' [ 59.685524][ T30] audit: type=1400 audit(1765936125.763:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.863937][ T5802] cgroup: Unknown subsys name 'cpuset' [ 59.871845][ T5802] cgroup: Unknown subsys name 'rlimit' [ 60.030627][ T30] audit: type=1400 audit(1765936126.093:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.062943][ T30] audit: type=1400 audit(1765936126.093:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.093770][ T30] audit: type=1400 audit(1765936126.093:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.114170][ T30] audit: type=1400 audit(1765936126.093:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.134444][ T30] audit: type=1400 audit(1765936126.093:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 60.163189][ T30] audit: type=1400 audit(1765936126.093:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 60.180752][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.195519][ T30] audit: type=1400 audit(1765936126.273:71): avc: denied { relabelto } for pid=5804 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.170601][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.177271][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 66.177286][ T30] audit: type=1400 audit(1765936132.233:76): avc: denied { create } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.204316][ T30] audit: type=1400 audit(1765936132.233:77): avc: denied { read write } for pid=5812 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.248791][ T30] audit: type=1400 audit(1765936132.233:78): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.273074][ T30] audit: type=1400 audit(1765936132.263:79): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="socket:[5303]" dev="sockfs" ino=5303 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.315631][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.325280][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.333012][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.341304][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.341937][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.348861][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.363712][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.364209][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.371259][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.378305][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.386415][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.393371][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.399678][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.406328][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.414430][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.421695][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.432002][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.439926][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.441320][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.448340][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.457488][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.462000][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.475137][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.478690][ T30] audit: type=1400 audit(1765936132.543:80): avc: denied { read } for pid=5819 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.482581][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.514295][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.553148][ T30] audit: type=1400 audit(1765936132.583:81): avc: denied { open } for pid=5819 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.577217][ T30] audit: type=1400 audit(1765936132.583:82): avc: denied { mounton } for pid=5819 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 66.837923][ T30] audit: type=1400 audit(1765936132.903:83): avc: denied { module_request } for pid=5819 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 66.940066][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 66.968866][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 67.049503][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 67.128243][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 67.238582][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.246401][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.253851][ T5819] bridge_slave_0: entered allmulticast mode [ 67.260776][ T5819] bridge_slave_0: entered promiscuous mode [ 67.278136][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 67.291980][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.299072][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.306412][ T5812] bridge_slave_0: entered allmulticast mode [ 67.313070][ T5812] bridge_slave_0: entered promiscuous mode [ 67.320282][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.327612][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.334800][ T5819] bridge_slave_1: entered allmulticast mode [ 67.341750][ T5819] bridge_slave_1: entered promiscuous mode [ 67.358400][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.365622][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.374519][ T5812] bridge_slave_1: entered allmulticast mode [ 67.381131][ T5812] bridge_slave_1: entered promiscuous mode [ 67.454204][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.465200][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.474665][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.482047][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.489149][ T5817] bridge_slave_0: entered allmulticast mode [ 67.496232][ T5817] bridge_slave_0: entered promiscuous mode [ 67.514582][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.525611][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.543897][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.551125][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.558481][ T5817] bridge_slave_1: entered allmulticast mode [ 67.565118][ T5817] bridge_slave_1: entered promiscuous mode [ 67.585279][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.592405][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.599494][ T5813] bridge_slave_0: entered allmulticast mode [ 67.606292][ T5813] bridge_slave_0: entered promiscuous mode [ 67.646866][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.654093][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.661339][ T5813] bridge_slave_1: entered allmulticast mode [ 67.668026][ T5813] bridge_slave_1: entered promiscuous mode [ 67.676755][ T5812] team0: Port device team_slave_0 added [ 67.683796][ T5819] team0: Port device team_slave_0 added [ 67.716971][ T5812] team0: Port device team_slave_1 added [ 67.723700][ T5819] team0: Port device team_slave_1 added [ 67.731301][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.769342][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.778842][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.786561][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.794099][ T5828] bridge_slave_0: entered allmulticast mode [ 67.800686][ T5828] bridge_slave_0: entered promiscuous mode [ 67.809063][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.839115][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.846307][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.853706][ T5828] bridge_slave_1: entered allmulticast mode [ 67.860276][ T5828] bridge_slave_1: entered promiscuous mode [ 67.868192][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.878274][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.885312][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.911301][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.923179][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.930112][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.956612][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.993841][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.000770][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.027719][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.039098][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.046123][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.074301][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.086965][ T5817] team0: Port device team_slave_0 added [ 68.117877][ T5817] team0: Port device team_slave_1 added [ 68.125099][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.135608][ T5813] team0: Port device team_slave_0 added [ 68.143614][ T5813] team0: Port device team_slave_1 added [ 68.165050][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.217225][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.224565][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.250766][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.283446][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.290398][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.316345][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.328296][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.335470][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.361705][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.373532][ T5828] team0: Port device team_slave_0 added [ 68.382936][ T5812] hsr_slave_0: entered promiscuous mode [ 68.389023][ T5812] hsr_slave_1: entered promiscuous mode [ 68.398819][ T5819] hsr_slave_0: entered promiscuous mode [ 68.404978][ T5819] hsr_slave_1: entered promiscuous mode [ 68.410827][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 68.416904][ T5819] Cannot create hsr debugfs directory [ 68.422956][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.429873][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.455909][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.475609][ T5828] team0: Port device team_slave_1 added [ 68.542086][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.549063][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.575821][ T5818] Bluetooth: hci3: command tx timeout [ 68.576405][ T5831] Bluetooth: hci4: command tx timeout [ 68.581605][ T5827] Bluetooth: hci1: command tx timeout [ 68.587018][ T52] Bluetooth: hci0: command tx timeout [ 68.597996][ T5833] Bluetooth: hci2: command tx timeout [ 68.601941][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.625331][ T5817] hsr_slave_0: entered promiscuous mode [ 68.631315][ T5817] hsr_slave_1: entered promiscuous mode [ 68.637535][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 68.643278][ T5817] Cannot create hsr debugfs directory [ 68.652202][ T5813] hsr_slave_0: entered promiscuous mode [ 68.658202][ T5813] hsr_slave_1: entered promiscuous mode [ 68.664539][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 68.670242][ T5813] Cannot create hsr debugfs directory [ 68.676355][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.683731][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.709854][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.853291][ T5828] hsr_slave_0: entered promiscuous mode [ 68.859283][ T5828] hsr_slave_1: entered promiscuous mode [ 68.865363][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 68.871069][ T5828] Cannot create hsr debugfs directory [ 69.098316][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.109747][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.124611][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.136570][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.167961][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.179991][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.190917][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.201036][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.266697][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.278509][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.288048][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.299713][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.385971][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.395252][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.408782][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.418705][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.490394][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.507168][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.527443][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.538240][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.552152][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.587682][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.615757][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.628902][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.638110][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.645278][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.674593][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.681693][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.700049][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.707169][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.725797][ T3891] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.732907][ T3891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.759233][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.809268][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.832723][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.849650][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.856815][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.886903][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.894057][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.897028][ T30] audit: type=1400 audit(1765936135.973:84): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.936455][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.968490][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.005789][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.012944][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.042241][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.077396][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.084474][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.099663][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.106811][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.136451][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.143612][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.259652][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.304017][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.407089][ T5812] veth0_vlan: entered promiscuous mode [ 70.433651][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.443245][ T5812] veth1_vlan: entered promiscuous mode [ 70.486489][ T5812] veth0_macvtap: entered promiscuous mode [ 70.515756][ T5812] veth1_macvtap: entered promiscuous mode [ 70.525336][ T5819] veth0_vlan: entered promiscuous mode [ 70.560961][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.571270][ T5819] veth1_vlan: entered promiscuous mode [ 70.595708][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.617960][ T3972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.628288][ T3972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.639066][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.647589][ T5817] veth0_vlan: entered promiscuous mode [ 70.653481][ T5833] Bluetooth: hci2: command tx timeout [ 70.653585][ T5818] Bluetooth: hci4: command tx timeout [ 70.658900][ T52] Bluetooth: hci0: command tx timeout [ 70.666056][ T5818] Bluetooth: hci3: command tx timeout [ 70.669957][ T5833] Bluetooth: hci1: command tx timeout [ 70.681775][ T3972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.703142][ T3972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.716972][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.753073][ T5817] veth1_vlan: entered promiscuous mode [ 70.792278][ T5819] veth0_macvtap: entered promiscuous mode [ 70.864480][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.865529][ T5819] veth1_macvtap: entered promiscuous mode [ 70.883167][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.893012][ T5817] veth0_macvtap: entered promiscuous mode [ 70.899623][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.907547][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.949988][ T5817] veth1_macvtap: entered promiscuous mode [ 70.980654][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.985232][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.995785][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.003630][ T5828] veth0_vlan: entered promiscuous mode [ 71.024331][ T30] audit: type=1400 audit(1765936137.093:85): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.UCYUuF/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.024614][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.060825][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.075040][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.093074][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.105261][ T1090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.117748][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.142932][ T1090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.152682][ T1090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.164311][ T5828] veth1_vlan: entered promiscuous mode [ 71.178431][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188756][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 71.188776][ T30] audit: type=1400 audit(1765936137.253:97): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.226051][ T30] audit: type=1400 audit(1765936137.253:98): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.291779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.383317][ T30] audit: type=1400 audit(1765936137.253:99): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.454250][ T30] audit: type=1400 audit(1765936137.323:100): avc: denied { read } for pid=5934 comm="syz.0.1" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.482392][ T1090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.498141][ T30] audit: type=1400 audit(1765936137.323:101): avc: denied { open } for pid=5934 comm="syz.0.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 71.522145][ T30] audit: type=1400 audit(1765936137.433:102): avc: denied { bind } for pid=5934 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.545053][ T30] audit: type=1400 audit(1765936137.453:103): avc: denied { create } for pid=5934 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.579532][ T30] audit: type=1400 audit(1765936137.453:104): avc: denied { prog_load } for pid=5934 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.657564][ T30] audit: type=1400 audit(1765936137.453:105): avc: denied { bpf } for pid=5934 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.687895][ T4243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.734664][ T4243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.796004][ T5813] veth0_vlan: entered promiscuous mode [ 71.859938][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.860217][ T5828] veth0_macvtap: entered promiscuous mode [ 71.874675][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.884050][ T30] audit: type=1400 audit(1765936137.953:106): avc: denied { create } for pid=5937 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.914547][ T5813] veth1_vlan: entered promiscuous mode [ 71.921829][ T5828] veth1_macvtap: entered promiscuous mode [ 72.003629][ T5941] random: crng reseeded on system resumption [ 72.038676][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.055261][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.180528][ T5942] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 72.188332][ T5942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6'. [ 72.198576][ T5942] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 72.205965][ T5942] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 72.219926][ T5942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 72.561675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.671614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.752715][ T5833] Bluetooth: hci3: command tx timeout [ 72.758206][ T5833] Bluetooth: hci1: command tx timeout [ 72.767199][ T5818] Bluetooth: hci0: command tx timeout [ 72.773765][ T5818] Bluetooth: hci4: command tx timeout [ 72.783500][ T5833] Bluetooth: hci2: command tx timeout [ 72.824780][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.848544][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.902796][ T3891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.910640][ T3891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.917540][ T4243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959489][ T5813] veth0_macvtap: entered promiscuous mode [ 72.976394][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991893][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.105026][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.281579][ T5949] delete_channel: no stack [ 73.339407][ T5813] veth1_macvtap: entered promiscuous mode [ 73.360275][ T3891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.369380][ T3891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.416165][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.455372][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.524769][ T4243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.538548][ T4243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.548217][ T3891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.558023][ T3891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.568434][ T4243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.581966][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.596681][ T4243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.669746][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.682629][ T5814] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.694261][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.731566][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.746041][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.764605][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.782747][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.865716][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 73.906612][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 73.970270][ T5814] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 74.014346][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.105665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 74.291857][ T5958] loop5: detected capacity change from 0 to 7 [ 74.341408][ T5958] Dev loop5: unable to read RDB block 7 [ 74.347326][ T5958] loop5: AHDI p1 [ 74.351416][ T5958] loop5: partition table partially beyond EOD, truncated [ 74.609963][ T5814] usb 2-1: config 0 descriptor?? [ 74.634861][ T5814] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 74.652323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.736396][ T5965] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 74.812779][ T5831] Bluetooth: hci3: command tx timeout [ 74.868981][ T5965] netlink: 'syz.2.3': attribute type 29 has an invalid length. [ 74.877008][ T5965] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.886130][ T5965] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3'. [ 74.898144][ T5818] Bluetooth: hci1: command tx timeout [ 74.903618][ T5818] Bluetooth: hci0: command tx timeout [ 74.909006][ T5831] Bluetooth: hci2: command tx timeout [ 74.915948][ T5833] Bluetooth: hci4: command tx timeout [ 74.925681][ T5174] bcm5974 2-1:0.0: could not read from device [ 76.013570][ T90] cfg80211: failed to load regulatory.db [ 77.082271][ T5174] bcm5974 2-1:0.0: could not read from device [ 77.096259][ T5814] usb 2-1: USB disconnect, device number 2 [ 77.102670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.116924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.281447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 77.342034][ T5975] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 77.389292][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.429399][ T5975] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.536923][ T5975] bridge0: entered promiscuous mode [ 77.612438][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 77.612456][ T30] audit: type=1400 audit(1765936143.603:141): avc: denied { setopt } for pid=5973 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.651568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.852424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.039676][ T30] audit: type=1400 audit(1765936143.683:142): avc: denied { allowed } for pid=5977 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.059078][ T30] audit: type=1400 audit(1765936143.843:143): avc: denied { ioctl } for pid=5976 comm="syz.0.9" path="socket:[9291]" dev="sockfs" ino=9291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.245899][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.256738][ T5985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 78.688273][ T30] audit: type=1400 audit(1765936143.973:144): avc: denied { create } for pid=5977 comm="syz.3.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.781424][ T30] audit: type=1400 audit(1765936143.973:145): avc: denied { map } for pid=5977 comm="syz.3.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.913945][ T30] audit: type=1400 audit(1765936143.973:146): avc: denied { read write } for pid=5977 comm="syz.3.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.141821][ T30] audit: type=1400 audit(1765936144.153:147): avc: denied { perfmon } for pid=5982 comm="syz.1.12" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.163209][ T5996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5996 comm=syz.2.10 [ 79.183282][ T30] audit: type=1400 audit(1765936144.153:148): avc: denied { prog_run } for pid=5982 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.347557][ T30] audit: type=1400 audit(1765936144.163:149): avc: denied { create } for pid=5982 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.373285][ T5990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.337021][ T30] audit: type=1400 audit(1765936144.163:150): avc: denied { write } for pid=5982 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.625297][ T5973] bridge0: left promiscuous mode [ 80.704327][ T5990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.018977][ T5990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.230269][ T5990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.328968][ T6012] loop5: detected capacity change from 0 to 7 [ 81.820032][ T6012] Dev loop5: unable to read RDB block 7 [ 81.826062][ T6012] loop5: AHDI p1 [ 81.840091][ T6014] macsec1: entered promiscuous mode [ 81.861536][ T6012] loop5: partition table partially beyond EOD, truncated [ 83.135156][ T3972] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.158846][ T3972] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.188248][ T3972] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.331428][ T3972] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.375407][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 83.375418][ T30] audit: type=1400 audit(1765936149.443:162): avc: denied { create } for pid=6026 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.445281][ T30] audit: type=1400 audit(1765936149.473:163): avc: denied { setopt } for pid=6026 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 83.557987][ T30] audit: type=1400 audit(1765936149.543:164): avc: denied { setopt } for pid=6021 comm="syz.3.20" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.592937][ T6030] netlink: 'syz.1.16': attribute type 12 has an invalid length. [ 83.600918][ T6030] netlink: 'syz.1.16': attribute type 29 has an invalid length. [ 83.608751][ T30] audit: type=1400 audit(1765936149.543:165): avc: denied { read write } for pid=6021 comm="syz.3.20" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.732661][ T6030] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16'. [ 83.733592][ T30] audit: type=1400 audit(1765936149.543:166): avc: denied { open } for pid=6021 comm="syz.3.20" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.753089][ T6030] netlink: 59 bytes leftover after parsing attributes in process `syz.1.16'. [ 83.801742][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.978949][ T5939] usb 1-1: device descriptor read/64, error -71 [ 84.338551][ T5939] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.543521][ T5939] usb 1-1: device descriptor read/64, error -71 [ 84.849575][ T30] audit: type=1400 audit(1765936150.553:167): avc: denied { read write } for pid=6031 comm="syz.3.23" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.899428][ T30] audit: type=1400 audit(1765936150.563:168): avc: denied { open } for pid=6031 comm="syz.3.23" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 84.953640][ T30] audit: type=1400 audit(1765936151.023:169): avc: denied { write } for pid=6039 comm="syz.4.24" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.982553][ T5939] usb usb1-port1: attempt power cycle [ 85.171816][ T30] audit: type=1400 audit(1765936151.243:170): avc: denied { ioctl } for pid=6042 comm="syz.3.25" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9640 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.202416][ T30] audit: type=1400 audit(1765936151.263:171): avc: denied { mount } for pid=6042 comm="syz.3.25" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 85.225062][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.321574][ T5939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.384022][ T5939] usb 1-1: device descriptor read/8, error -71 [ 85.539337][ T5877] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 85.548612][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.572143][ T5877] usb 3-1: config 0 descriptor?? [ 85.617100][ T6048] netlink: 256 bytes leftover after parsing attributes in process `syz.4.27'. [ 85.631473][ T5939] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.891148][ T6048] syzkaller0: entered promiscuous mode [ 85.914804][ T6048] syzkaller0: entered allmulticast mode [ 86.281839][ T5939] usb 1-1: device descriptor read/8, error -71 [ 86.392077][ T5939] usb usb1-port1: unable to enumerate USB device [ 86.652238][ T6065] loop5: detected capacity change from 0 to 7 [ 86.706447][ T5939] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.707385][ T6065] Dev loop5: unable to read RDB block 7 [ 86.749974][ T6065] loop5: AHDI p1 [ 86.780543][ T6065] loop5: partition table partially beyond EOD, truncated [ 87.002926][ T5939] usb 5-1: config 0 interface 0 altsetting 229 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 87.016406][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.023549][ T5939] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 87.032948][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.789218][ T5939] usb 5-1: config 0 descriptor?? [ 87.989236][ T6076] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 88.437954][ T5939] usbhid 5-1:0.0: can't add hid device: -71 [ 88.483308][ T5939] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 88.558162][ T5939] usb 5-1: USB disconnect, device number 2 [ 89.591569][ T6085] Zero length message leads to an empty skb [ 89.658113][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 89.658125][ T30] audit: type=1400 audit(1765936155.683:185): avc: denied { create } for pid=6080 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.686781][ T30] audit: type=1400 audit(1765936155.683:186): avc: denied { write } for pid=6080 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 89.749476][ T30] audit: type=1400 audit(1765936155.693:187): avc: denied { read } for pid=6080 comm="syz.1.34" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.826185][ T30] audit: type=1400 audit(1765936155.693:188): avc: denied { open } for pid=6080 comm="syz.1.34" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.912764][ T30] audit: type=1400 audit(1765936155.693:189): avc: denied { ioctl } for pid=6080 comm="syz.1.34" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.980565][ T30] audit: type=1400 audit(1765936155.713:190): avc: denied { setopt } for pid=6083 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.158637][ T6093] veth1_macvtap: left promiscuous mode [ 90.184751][ T30] audit: type=1400 audit(1765936155.843:191): avc: denied { create } for pid=6089 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.337013][ T30] audit: type=1400 audit(1765936155.843:192): avc: denied { write } for pid=6089 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.466897][ T30] audit: type=1400 audit(1765936156.533:193): avc: denied { connect } for pid=6091 comm="syz.0.37" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.590651][ T5877] usbhid 3-1:0.0: can't add hid device: -71 [ 90.601857][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 90.630873][ T5877] usb 3-1: USB disconnect, device number 2 [ 91.750966][ T30] audit: type=1400 audit(1765936157.803:194): avc: denied { setopt } for pid=6102 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.945882][ T6115] binder_alloc: 6114: binder_alloc_buf, no vma [ 93.372452][ T6121] loop5: detected capacity change from 0 to 7 [ 93.379414][ T6121] Dev loop5: unable to read RDB block 7 [ 93.385035][ T6121] loop5: AHDI p1 [ 93.388653][ T6121] loop5: partition table partially beyond EOD, truncated [ 94.012883][ T6128] loop5: detected capacity change from 0 to 7 [ 94.023793][ T6128] Dev loop5: unable to read RDB block 7 [ 94.029341][ T6128] loop5: AHDI p1 [ 94.033013][ T6128] loop5: partition table partially beyond EOD, truncated [ 95.026609][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 95.026625][ T30] audit: type=1400 audit(1765936161.093:204): avc: denied { ioctl } for pid=6139 comm="syz.3.50" path="socket:[9886]" dev="sockfs" ino=9886 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.061739][ T30] audit: type=1400 audit(1765936161.123:205): avc: denied { write } for pid=6139 comm="syz.3.50" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 95.963450][ T30] audit: type=1400 audit(1765936161.663:206): avc: denied { ioctl } for pid=6143 comm="syz.1.52" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.986710][ T30] audit: type=1400 audit(1765936161.663:207): avc: denied { ioctl } for pid=6143 comm="syz.1.52" path="socket:[9053]" dev="sockfs" ino=9053 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.099618][ T30] audit: type=1400 audit(1765936162.163:208): avc: denied { ioctl } for pid=6149 comm="syz.0.53" path="socket:[9890]" dev="sockfs" ino=9890 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.201788][ T30] audit: type=1400 audit(1765936162.273:209): avc: denied { create } for pid=6151 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.255886][ T30] audit: type=1400 audit(1765936162.293:210): avc: denied { append } for pid=6153 comm="syz.3.55" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 96.311036][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.55'. [ 96.342225][ T30] audit: type=1400 audit(1765936162.303:211): avc: denied { ioctl } for pid=6151 comm="syz.2.49" path="socket:[9067]" dev="sockfs" ino=9067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.378402][ T30] audit: type=1400 audit(1765936162.303:212): avc: denied { bind } for pid=6151 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.398031][ T30] audit: type=1400 audit(1765936162.303:213): avc: denied { read } for pid=6151 comm="syz.2.49" path="socket:[9067]" dev="sockfs" ino=9067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.601433][ T6165] netlink: 32 bytes leftover after parsing attributes in process `syz.4.56'. [ 96.744529][ T6168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.162400][ T5904] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.231669][ T5939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.318051][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.329891][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.340158][ T5904] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 97.349464][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.363149][ T5904] usb 4-1: config 0 descriptor?? [ 97.481536][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 97.495114][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.506441][ T5939] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.519925][ T5939] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.526781][ T5939] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 97.537114][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.629365][ T6179] syz.1.54 (6179): drop_caches: 0 [ 97.660304][ T5939] usb 1-1: config 0 descriptor?? [ 98.064580][ T6177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 98.321991][ T6184] trusted_key: syz.3.58 sent an empty control message without MSG_MORE. [ 98.631155][ T5904] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 98.753885][ T5904] magicmouse 0003:05AC:0324.0001: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 98.861474][ T6205] syz_tun: entered allmulticast mode [ 98.878351][ T6207] process 'syz.2.66' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 99.437003][ T5939] usbhid 1-1:0.0: can't add hid device: -71 [ 99.456348][ T5939] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 99.517992][ T5939] usb 1-1: USB disconnect, device number 6 [ 99.712428][ T6204] syz_tun: left allmulticast mode [ 99.806536][ T6221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.68'. [ 100.045014][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 100.045029][ T30] audit: type=1400 audit(1765936166.103:226): avc: denied { create } for pid=6225 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.071636][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.153286][ T30] audit: type=1400 audit(1765936166.223:227): avc: denied { mounton } for pid=6227 comm="syz.0.71" path="/19/file1" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.182740][ T30] audit: type=1400 audit(1765936166.253:228): avc: denied { write } for pid=6227 comm="syz.0.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.205640][ T30] audit: type=1400 audit(1765936166.273:229): avc: denied { ioctl } for pid=6225 comm="syz.1.70" path="socket:[10060]" dev="sockfs" ino=10060 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 100.254605][ T6231] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 100.263863][ T6231] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.280790][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.298638][ T5814] usb 5-1: config 3 has an invalid interface number: 21 but max is 0 [ 100.310324][ T5814] usb 5-1: config 3 has no interface number 0 [ 100.317439][ T5814] usb 5-1: config 3 interface 21 has no altsetting 0 [ 100.327246][ T5814] usb 5-1: New USB device found, idVendor=110a, idProduct=1658, bcdDevice=db.db [ 100.340654][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.348773][ T5814] usb 5-1: Product: syz [ 100.354092][ T5814] usb 5-1: Manufacturer: syz [ 100.363966][ T5814] usb 5-1: SerialNumber: syz [ 100.383818][ T30] audit: type=1400 audit(1765936166.453:230): avc: denied { name_bind } for pid=6235 comm="syz.2.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 100.406218][ T30] audit: type=1400 audit(1765936166.453:231): avc: denied { node_bind } for pid=6235 comm="syz.2.74" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 100.538026][ T30] audit: type=1400 audit(1765936166.603:232): avc: denied { bind } for pid=6235 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.591635][ T30] audit: type=1400 audit(1765936166.603:233): avc: denied { setopt } for pid=6235 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 100.621077][ T30] audit: type=1400 audit(1765936166.683:234): avc: denied { create } for pid=6220 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.668253][ T5904] usb 4-1: USB disconnect, device number 2 [ 100.960639][ T30] audit: type=1400 audit(1765936167.023:235): avc: denied { shutdown } for pid=6241 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.349858][ T6251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.704291][ T5814] mxuport 5-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 101.735589][ T5814] mxuport 5-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 101.754595][ T5814] mxuport 5-1:3.21: probe with driver mxuport failed with error -71 [ 101.901427][ T5931] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.112231][ T5814] usb 5-1: USB disconnect, device number 3 [ 103.677726][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 103.707478][ T6267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'. [ 103.716813][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.735594][ T5931] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.754545][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.784360][ T5931] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 103.817101][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.843490][ T5931] usb 2-1: config 0 descriptor?? [ 105.157801][ T5931] usbhid 2-1:0.0: can't add hid device: -71 [ 105.189684][ T5931] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.206288][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 105.206302][ T30] audit: type=1400 audit(1765936171.273:248): avc: denied { map } for pid=6288 comm="syz.1.90" path="socket:[11431]" dev="sockfs" ino=11431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 105.242604][ T5931] usb 2-1: USB disconnect, device number 3 [ 105.317171][ T30] audit: type=1400 audit(1765936171.313:249): avc: denied { getopt } for pid=6288 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 105.607947][ T30] audit: type=1326 audit(1765936171.673:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 105.639303][ T30] audit: type=1326 audit(1765936171.673:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 105.663344][ T30] audit: type=1400 audit(1765936171.673:252): avc: denied { setattr } for pid=6308 comm="syz.0.95" name="/" dev="ocfs2_dlmfs" ino=10702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.687271][ T30] audit: type=1326 audit(1765936171.673:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 105.957069][ T30] audit: type=1326 audit(1765936171.673:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 106.087571][ T30] audit: type=1326 audit(1765936171.673:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 106.154104][ T30] audit: type=1326 audit(1765936171.703:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6308 comm="syz.0.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24dcf8f749 code=0x7ffc0000 [ 106.187582][ T30] audit: type=1400 audit(1765936171.703:257): avc: denied { mounton } for pid=6310 comm="syz.2.96" path="/15/bus" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.272350][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 106.403123][ T6331] binder: 6328:6331 ioctl 4018620d 0 returned -22 [ 106.816663][ T6339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.207743][ T6343] mmap: syz.3.97 (6343) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.372096][ T6034] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.431414][ T5904] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.531463][ T6034] usb 1-1: Using ep0 maxpacket: 32 [ 107.538263][ T6034] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.551437][ T6034] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.581407][ T6034] usb 1-1: config 0 interface 0 has no altsetting 0 [ 107.588042][ T6034] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 107.611948][ T6034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.621767][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.622849][ T6034] usb 1-1: config 0 descriptor?? [ 107.637161][ T5814] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.665777][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 107.679839][ T5904] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 107.689473][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.712320][ T5904] usb 5-1: config 0 descriptor?? [ 107.811453][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 107.825516][ T5814] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.860771][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.896987][ T5814] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 107.929053][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.992823][ T5814] usb 2-1: config 0 descriptor?? [ 108.555592][ T5814] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 108.697111][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.794035][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.114132][ T5814] usb 2-1: USB disconnect, device number 4 [ 109.280068][ T6363] loop5: detected capacity change from 0 to 7 [ 109.296823][ T6363] Dev loop5: unable to read RDB block 7 [ 109.302667][ T6363] loop5: AHDI p1 [ 109.306512][ T6363] loop5: partition table partially beyond EOD, truncated [ 109.613027][ T6362] ntfs3(nullb0): Primary boot signature is not NTFS. [ 109.628416][ T6034] usbhid 1-1:0.0: can't add hid device: -71 [ 109.656592][ T6034] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 109.715389][ T6034] usb 1-1: USB disconnect, device number 7 [ 109.750436][ T5904] Bluetooth: Can't get state to change to load ram patch err [ 109.762829][ T6362] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 109.783113][ T5904] Bluetooth: Loading patch file failed [ 109.801992][ T5904] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 109.917526][ T5904] usb 5-1: USB disconnect, device number 4 [ 110.347837][ T5891] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.114067][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.281433][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 111.289736][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.308126][ T5904] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 111.319600][ T5904] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 111.330140][ T5904] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 111.339224][ T5904] usb 5-1: config 128 has no interface number 0 [ 111.345766][ T5904] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 111.357056][ T5904] usb 5-1: config 128 interface 127 has no altsetting 0 [ 111.701219][ T5904] usb 5-1: language id specifier not provided by device, defaulting to English [ 111.716782][ T5904] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 111.726570][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.738668][ T5904] usb 5-1: Product: syz [ 111.743080][ T5904] usb 5-1: Manufacturer: syz [ 111.748963][ T5904] usb 5-1: SerialNumber: syz [ 112.179846][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.215070][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.267861][ T6403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.277573][ T6403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.452947][ T5904] usb 5-1: USB disconnect, device number 5 [ 113.641766][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.110721][ T6422] loop5: detected capacity change from 0 to 7 [ 114.231327][ T6422] Dev loop5: unable to read RDB block 7 [ 114.238674][ T6422] loop5: AHDI p1 [ 114.248562][ T6422] loop5: partition table partially beyond EOD, truncated [ 114.291463][ T6034] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.999670][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'. [ 115.012723][ T6034] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.032416][ T6034] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 115.062348][ T6034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.092565][ T6034] usb 5-1: config 0 descriptor?? [ 115.105298][ T6034] pwc: Askey VC010 type 2 USB webcam detected. [ 115.293866][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 115.293887][ T30] audit: type=1400 audit(1765936181.363:262): avc: denied { setopt } for pid=6429 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.663746][ T6433] warning: `syz.2.125' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.680262][ T6034] pwc: recv_control_msg error -32 req 02 val 2b00 [ 116.292311][ T6436] xt_socket: unknown flags 0x50 [ 116.328520][ T6034] pwc: recv_control_msg error -32 req 02 val 2700 [ 116.340391][ T30] audit: type=1400 audit(1765936181.723:263): avc: denied { create } for pid=6426 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 116.361141][ T30] audit: type=1400 audit(1765936182.023:264): avc: denied { create } for pid=6429 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.398709][ T6436] netlink: 'syz.3.126': attribute type 10 has an invalid length. [ 116.407511][ T30] audit: type=1400 audit(1765936182.363:265): avc: denied { setopt } for pid=6429 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.413223][ T6034] pwc: recv_control_msg error -32 req 02 val 2c00 [ 116.457074][ T6034] pwc: recv_control_msg error -32 req 04 val 1000 [ 116.464915][ T6034] pwc: recv_control_msg error -32 req 04 val 1300 [ 116.472342][ T6034] pwc: recv_control_msg error -32 req 04 val 1400 [ 116.486699][ T6034] pwc: recv_control_msg error -32 req 02 val 2000 [ 116.489767][ T6436] team0: Failed to send options change via netlink (err -105) [ 116.502069][ T6436] team0: Port device dummy0 added [ 117.075101][ T30] audit: type=1400 audit(1765936182.383:266): avc: denied { block_suspend } for pid=6418 comm="syz.4.121" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 117.103777][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.136148][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.180552][ T30] audit: type=1400 audit(1765936182.503:267): avc: denied { create } for pid=6430 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.237904][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.128'. [ 117.260634][ T30] audit: type=1400 audit(1765936182.513:268): avc: denied { setopt } for pid=6430 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.344381][ T30] audit: type=1400 audit(1765936183.413:269): avc: denied { ioctl } for pid=6443 comm="syz.3.128" path="socket:[11135]" dev="sockfs" ino=11135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.315091][ T30] audit: type=1400 audit(1765936184.133:270): avc: denied { write } for pid=6453 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.334992][ T30] audit: type=1400 audit(1765936184.153:271): avc: denied { ioctl } for pid=6453 comm="syz.0.131" path="socket:[11213]" dev="sockfs" ino=11213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.408407][ T6034] pwc: recv_control_msg error -71 req 04 val 1500 [ 118.453856][ T6034] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.493336][ T6034] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.518076][ T6034] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.535552][ T6034] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.570166][ T6463] 9pnet_fd: p9_fd_create_tcp (6463): problem connecting socket to 127.0.0.1 [ 118.593544][ T6034] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.617469][ T6034] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.644951][ T6034] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.698792][ T6034] pwc: Registered as video103. [ 118.719849][ T6034] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 118.761554][ T6034] usb 5-1: USB disconnect, device number 6 [ 119.527722][ T6463] syzkaller1: entered promiscuous mode [ 119.549349][ T6463] syzkaller1: entered allmulticast mode [ 120.114293][ T6478] syz_tun: entered allmulticast mode [ 120.135761][ T6482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6482 comm=syz.0.137 [ 120.159976][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 120.214835][ T6478] syz_tun (unregistering): left allmulticast mode [ 120.651965][ T5931] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 120.865100][ T5931] usb 1-1: not running at top speed; connect to a high speed hub [ 120.895009][ T5931] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 120.938429][ T5931] usb 1-1: config 1 interface 0 has no altsetting 0 [ 121.021837][ T6496] loop5: detected capacity change from 0 to 7 [ 121.023328][ T5931] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 121.086747][ T6496] Dev loop5: unable to read RDB block 7 [ 121.092494][ T6496] loop5: AHDI p1 [ 121.096321][ T6496] loop5: partition table partially beyond EOD, truncated [ 121.137207][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.316722][ T5931] usb 1-1: Product: syz [ 121.321027][ T5931] usb 1-1: Manufacturer: 慯㭬鬃屼ᙾ≙צּⲪ⿠陈੣谁莘ᙩ휮㊼閙튲蜂킍쾃竜흰켳睮떢慗饰嵙誮ฮ됺﯃奃춖銀钽鈓뿠笙跊㿃ꮺ鳒ᡰ᳾횤⦢ܫẁ겍㊐沇鈀᭎⮴쨇ᮉ뻰鹾ᓡ⪏淰ꉒ唻砡昞褎滇ꎩ⟜踛❞댦锶箆䏳ዷ獮趆⃥苰驿ﳧ塚핌㯠䚭⑻洔櫓跹竖㔖舝ᵗﭤ⋽Ꚓ [ 121.404664][ T5931] usb 1-1: SerialNumber: syz [ 121.420214][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 121.442702][ T6492] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.648060][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 121.679520][ T6492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.688459][ T6492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.777838][ T6492] ======================================================= [ 121.777838][ T6492] WARNING: The mand mount option has been deprecated and [ 121.777838][ T6492] and is ignored by this kernel. Remove the mand [ 121.777838][ T6492] option from the mount to silence this warning. [ 121.777838][ T6492] ======================================================= [ 121.812923][ T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 122.003946][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 122.032803][ T6492] tmpfs: Unknown parameter 'indo64' [ 122.213237][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 122.468263][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 122.565276][ T5931] usbhid 1-1:1.0: can't add hid device: -71 [ 122.571292][ T5931] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 122.583573][ T10] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 122.591121][ T5931] usb 1-1: USB disconnect, device number 8 [ 122.633677][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.694501][ T10] usb 2-1: config 0 descriptor?? [ 122.738502][ T6503] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.896120][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 122.967453][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 123.311864][ T10] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v20.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 123.323543][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 123.323555][ T30] audit: type=1400 audit(1765936189.403:288): avc: denied { lock } for pid=6514 comm="syz.4.148" path="socket:[12340]" dev="sockfs" ino=12340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.380432][ T10] megaworld 0003:07B5:0312.0003: no inputs found [ 123.455556][ T5931] usb 2-1: USB disconnect, device number 6 [ 123.530445][ T6519] fido_id[6519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 123.949088][ T30] audit: type=1400 audit(1765936189.783:289): avc: denied { write } for pid=6524 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.057188][ T30] audit: type=1400 audit(1765936189.783:290): avc: denied { nlmsg_write } for pid=6524 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.535776][ T5989] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.683242][ T5989] usb 5-1: device descriptor read/64, error -71 [ 124.961719][ T5989] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 125.391404][ T5989] usb 5-1: device descriptor read/64, error -71 [ 125.584718][ T5989] usb usb5-port1: attempt power cycle [ 125.935037][ T6552] loop5: detected capacity change from 0 to 7 [ 125.951031][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 125.968985][ T5826] Dev loop5: unable to read RDB block 7 [ 125.976741][ T5826] loop5: AHDI p1 [ 125.981638][ T5826] loop5: partition table partially beyond EOD, truncated [ 126.001403][ T5989] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 126.010787][ T6552] Dev loop5: unable to read RDB block 7 [ 126.039693][ T6552] loop5: AHDI p1 [ 126.043773][ T6552] loop5: partition table partially beyond EOD, truncated [ 126.140105][ T5989] usb 5-1: device descriptor read/8, error -71 [ 128.162173][ T5989] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.202588][ T5989] usb 5-1: Using ep0 maxpacket: 16 [ 128.209400][ T5989] usb 5-1: config 0 interface 0 altsetting 229 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 128.228139][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.238709][ T5989] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.248053][ T5989] usb 5-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00 [ 128.258847][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.267070][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.298512][ T5989] usb 5-1: config 0 descriptor?? [ 129.002341][ T30] audit: type=1400 audit(1765936194.883:291): avc: denied { connect } for pid=6589 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.055622][ T5931] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 129.426022][ T5989] usb 5-1: string descriptor 0 read error: -71 [ 129.448011][ T30] audit: type=1400 audit(1765936195.483:292): avc: denied { mounton } for pid=6568 comm="syz.4.165" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 129.457181][ T5989] usbhid 5-1:0.0: can't add hid device: -71 [ 129.551433][ T5931] usb 4-1: device descriptor read/64, error -71 [ 129.800388][ T5989] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.144190][ T30] audit: type=1400 audit(1765936196.103:293): avc: denied { create } for pid=6571 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.165038][ T5989] usb 5-1: USB disconnect, device number 10 [ 130.171840][ T5931] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.180012][ T30] audit: type=1400 audit(1765936196.153:294): avc: denied { listen } for pid=6571 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.551435][ T30] audit: type=1400 audit(1765936196.313:295): avc: denied { bind } for pid=6581 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.571702][ T30] audit: type=1400 audit(1765936196.433:296): avc: denied { ioctl } for pid=6581 comm="syz.2.166" path="socket:[12219]" dev="sockfs" ino=12219 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.597544][ T30] audit: type=1400 audit(1765936196.573:297): avc: denied { accept } for pid=6571 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 130.641454][ T5931] usb 4-1: device descriptor read/64, error -71 [ 130.675055][ T6603] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 130.811844][ T30] audit: type=1400 audit(1765936196.843:298): avc: denied { append } for pid=6609 comm="syz.2.174" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 130.851660][ T5931] usb usb4-port1: attempt power cycle [ 131.911488][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.092480][ T30] audit: type=1400 audit(1765936196.923:299): avc: denied { read } for pid=6609 comm="syz.2.174" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.166797][ T5931] usb 4-1: device not accepting address 5, error -71 [ 132.194581][ T30] audit: type=1400 audit(1765936196.923:300): avc: denied { open } for pid=6609 comm="syz.2.174" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 132.335035][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.374724][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.685231][ T6641] dlm: no locking on control device [ 133.804127][ T6642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.393028][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 134.393066][ T30] audit: type=1400 audit(1765936200.443:303): avc: denied { bind } for pid=6643 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 134.461396][ T90] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.141546][ T90] usb 4-1: Using ep0 maxpacket: 32 [ 135.148241][ T90] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.158529][ T90] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 135.176783][ T90] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.186141][ T90] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 135.195427][ T90] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.219154][ T90] usb 4-1: config 0 descriptor?? [ 135.245871][ T30] audit: type=1400 audit(1765936201.313:304): avc: denied { setopt } for pid=6620 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.275701][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 135.321509][ T30] audit: type=1400 audit(1765936201.343:305): avc: denied { bind } for pid=6620 comm="syz.4.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.519197][ T30] audit: type=1400 audit(1765936201.583:306): avc: denied { connect } for pid=6654 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.532419][ T5989] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.541326][ T6655] sctp: [Deprecated]: syz.0.185 (pid 6655) Use of int in maxseg socket option. [ 135.541326][ T6655] Use struct sctp_assoc_value instead [ 135.586562][ T30] audit: type=1400 audit(1765936201.643:307): avc: denied { ioctl } for pid=6654 comm="syz.0.185" path="socket:[13373]" dev="sockfs" ino=13373 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.616383][ T30] audit: type=1400 audit(1765936201.643:308): avc: denied { ioctl } for pid=6654 comm="syz.0.185" path="socket:[13376]" dev="sockfs" ino=13376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 135.641457][ T30] audit: type=1400 audit(1765936201.643:309): avc: denied { read } for pid=6654 comm="syz.0.185" dev="sockfs" ino=12645 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.800726][ T5989] usb 2-1: config 0 interface 0 altsetting 229 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 135.837097][ T5989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 135.999425][ T5989] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 136.001250][ T30] audit: type=1400 audit(1765936202.063:310): avc: denied { read write } for pid=6661 comm="syz.2.187" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.050899][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.067395][ T30] audit: type=1400 audit(1765936202.103:311): avc: denied { open } for pid=6661 comm="syz.2.187" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 136.123094][ T6662] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 136.541496][ T90] usbhid 4-1:0.0: can't add hid device: -71 [ 136.556725][ T5989] usb 2-1: config 0 descriptor?? [ 136.561993][ T90] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 136.576472][ T90] usb 4-1: USB disconnect, device number 7 [ 136.651607][ T30] audit: type=1400 audit(1765936202.713:312): avc: denied { firmware_load } for pid=6660 comm="syz.0.188" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 136.989461][ T5989] ryos 0003:1E7D:3138.0004: invalid report_size -1903817399 [ 137.145038][ T6675] loop5: detected capacity change from 0 to 7 [ 137.152130][ T6675] Dev loop5: unable to read RDB block 7 [ 137.157692][ T6675] loop5: AHDI p1 [ 137.161400][ T6675] loop5: partition table partially beyond EOD, truncated [ 137.185157][ T6672] syz.0.188 (6672) used greatest stack depth: 17080 bytes left [ 137.202452][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.211204][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.231725][ T5989] ryos 0003:1E7D:3138.0004: item 0 4 1 7 parsing failed [ 137.256662][ T5989] ryos 0003:1E7D:3138.0004: parse failed [ 137.264823][ T5989] ryos 0003:1E7D:3138.0004: probe with driver ryos failed with error -22 [ 137.284587][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.381942][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.921304][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 242.928272][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5812/1:b..l P6523/1:b..l [ 242.937560][ C0] rcu: (detected by 0, t=10502 jiffies, g=12261, q=655 ncpus=2) [ 242.945244][ C0] task:udevd state:R running task stack:24760 pid:6523 tgid:6523 ppid:5189 task_flags:0x400140 flags:0x00080000 [ 242.958973][ C0] Call Trace: [ 242.962250][ C0] [ 242.965168][ C0] ? __schedule+0x10b9/0x6150 [ 242.969855][ C0] __schedule+0x1139/0x6150 [ 242.974353][ C0] ? __pfx___schedule+0x10/0x10 [ 242.979179][ C0] preempt_schedule_irq+0x51/0x90 [ 242.984182][ C0] irqentry_exit+0x1d8/0x8c0 [ 242.988742][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 242.994708][ C0] RIP: 0010:__orc_find+0x70/0xf0 [ 242.999618][ C0] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 243.019201][ C0] RSP: 0018:ffffc9000e3a7878 EFLAGS: 00000a06 [ 243.025243][ C0] RAX: ffffffff9131a02e RBX: ffffffff90a8ab30 RCX: dffffc0000000000 [ 243.033184][ C0] RDX: 1ffffffff2151566 RSI: 0000000000000000 RDI: ffffffff90a8ab20 [ 243.041122][ C0] RBP: ffffffff90a8ab20 R08: ffffffff9131a0a6 R09: 00000000ffffffff [ 243.049071][ C0] R10: 0000000000000002 R11: 000000000001409c R12: ffffffff90a8ab40 [ 243.057011][ C0] R13: ffffffff82409c23 R14: ffffffff90a8ab20 R15: ffffffff90a8ab20 [ 243.064966][ C0] ? user_path_at+0x23/0x60 [ 243.069474][ C0] ? user_path_at+0x23/0x60 [ 243.073985][ C0] unwind_next_frame+0x2ec/0x20a0 [ 243.078990][ C0] ? user_path_at+0x24/0x60 [ 243.083475][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.089600][ C0] arch_stack_walk+0x94/0x100 [ 243.094261][ C0] ? user_path_at+0x24/0x60 [ 243.098749][ C0] stack_trace_save+0x8e/0xc0 [ 243.103408][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 243.108847][ C0] ? stack_depot_save_flags+0x29/0x9b0 [ 243.114288][ C0] ? __lock_acquire+0x436/0x2890 [ 243.119204][ C0] kasan_save_stack+0x33/0x60 [ 243.123850][ C0] ? kasan_save_stack+0x33/0x60 [ 243.128675][ C0] ? kasan_save_track+0x14/0x30 [ 243.133500][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 243.138493][ C0] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 243.144092][ C0] ? getname_flags.part.0+0x4c/0x550 [ 243.149343][ C0] ? getname_flags+0x93/0xf0 [ 243.153911][ C0] ? user_path_at+0x24/0x60 [ 243.158400][ C0] kasan_save_track+0x14/0x30 [ 243.163054][ C0] __kasan_slab_alloc+0x89/0x90 [ 243.167876][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 243.173305][ C0] ? getname_flags.part.0+0x4c/0x550 [ 243.178560][ C0] ? getname_flags.part.0+0x4c/0x550 [ 243.183810][ C0] getname_flags.part.0+0x4c/0x550 [ 243.188897][ C0] getname_flags+0x93/0xf0 [ 243.193281][ C0] user_path_at+0x24/0x60 [ 243.197581][ C0] do_utimes+0x102/0x2a0 [ 243.201800][ C0] ? __pfx_do_utimes+0x10/0x10 [ 243.206542][ C0] __x64_sys_utimensat+0x1c6/0x290 [ 243.211624][ C0] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 243.217227][ C0] do_syscall_64+0xcd/0xf80 [ 243.221707][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.227567][ C0] RIP: 0033:0x7efeea515a1a [ 243.231956][ C0] RSP: 002b:00007ffc6bcdb7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 243.240342][ C0] RAX: ffffffffffffffda RBX: 0000000000002180 RCX: 00007efeea515a1a [ 243.248279][ C0] RDX: 0000000000000000 RSI: 0000558e1e526620 RDI: 00000000ffffff9c [ 243.256219][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000558e1e586910 [ 243.264167][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.272120][ C0] R13: 0000000000000000 R14: 0000558e1e526620 R15: 0000558e1e580720 [ 243.280085][ C0] [ 243.283076][ C0] task:syz-executor state:R running task stack:23000 pid:5812 tgid:5812 ppid:5807 task_flags:0x400140 flags:0x00080000 [ 243.296517][ C0] Call Trace: [ 243.299767][ C0] [ 243.302686][ C0] ? __schedule+0x10b9/0x6150 [ 243.307349][ C0] __schedule+0x1139/0x6150 [ 243.311835][ C0] ? __pfx___schedule+0x10/0x10 [ 243.316671][ C0] ? mark_held_locks+0x49/0x80 [ 243.321413][ C0] preempt_schedule_irq+0x51/0x90 [ 243.326420][ C0] irqentry_exit+0x1d8/0x8c0 [ 243.330993][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.336959][ C0] RIP: 0010:lock_acquire+0x62/0x330 [ 243.342146][ C0] Code: a6 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 82 b6 ee 0e 0f 82 74 02 00 00 8b 35 1a e7 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 99 a6 18 12 0f 85 ad 02 00 00 48 83 c4 [ 243.361741][ C0] RSP: 0018:ffffc9000450f3d8 EFLAGS: 00000206 [ 243.367791][ C0] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 000000002f2966ae [ 243.375734][ C0] RDX: 0000000000000000 RSI: ffffffff8daa7ad1 RDI: ffffffff8bf2b380 [ 243.383680][ C0] RBP: 0000000000000002 R08: 0000000027facad6 R09: 00000000627facad [ 243.391622][ C0] R10: 0000000000000002 R11: ffff88801cf6d4b0 R12: 0000000000000000 [ 243.399561][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.407511][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 243.412687][ C0] unwind_next_frame+0xd1/0x20a0 [ 243.417595][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 243.422688][ C0] ? arch_stack_walk+0x73/0x100 [ 243.427529][ C0] __unwind_start+0x45f/0x7f0 [ 243.432197][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 243.438337][ C0] arch_stack_walk+0x73/0x100 [ 243.443005][ C0] ? arch_stack_walk+0x73/0x100 [ 243.447837][ C0] stack_trace_save+0x8e/0xc0 [ 243.452498][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 243.457860][ C0] ? __lock_acquire+0x436/0x2890 [ 243.462794][ C0] kasan_save_stack+0x33/0x60 [ 243.467474][ C0] kasan_save_track+0x14/0x30 [ 243.472129][ C0] __kasan_kmalloc+0xaa/0xb0 [ 243.476705][ C0] __get_vm_area_node+0x101/0x330 [ 243.481715][ C0] ? __pfx___might_resched+0x10/0x10 [ 243.486973][ C0] __vmalloc_node_range_noprof+0x247/0x16b0 [ 243.492841][ C0] ? do_ip6t_get_ctl+0x6b6/0xae0 [ 243.497751][ C0] ? __mutex_lock+0x27b/0x1ca0 [ 243.502488][ C0] ? xt_find_table_lock+0x5e/0x520 [ 243.507577][ C0] ? do_ip6t_get_ctl+0x6b6/0xae0 [ 243.512495][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 243.518817][ C0] ? do_ip6t_get_ctl+0x6b6/0xae0 [ 243.523752][ C0] __vmalloc_node_noprof+0xad/0xf0 [ 243.528851][ C0] ? do_ip6t_get_ctl+0x6b6/0xae0 [ 243.533782][ C0] do_ip6t_get_ctl+0x6b6/0xae0 [ 243.538556][ C0] ? __mutex_unlock_slowpath+0x161/0x790 [ 243.544169][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 243.549449][ C0] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 243.555422][ C0] nf_getsockopt+0x7c/0xe0 [ 243.559824][ C0] ipv6_getsockopt+0x1f7/0x280 [ 243.564566][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 243.569842][ C0] ? find_held_lock+0x2b/0x80 [ 243.574494][ C0] ? __might_fault+0xe3/0x190 [ 243.579158][ C0] ? __might_fault+0xe3/0x190 [ 243.583806][ C0] ? __might_fault+0x13b/0x190 [ 243.588547][ C0] tcp_getsockopt+0xa1/0x100 [ 243.593108][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 243.598971][ C0] do_sock_getsockopt+0x324/0x410 [ 243.603967][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.609480][ C0] ? kfree+0x27d/0x6e0 [ 243.613524][ C0] ? do_sock_setsockopt+0x101/0x1d0 [ 243.618699][ C0] __sys_getsockopt+0x12f/0x260 [ 243.623520][ C0] __x64_sys_getsockopt+0xbd/0x160 [ 243.628595][ C0] ? do_syscall_64+0x91/0xf80 [ 243.633241][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.638418][ C0] do_syscall_64+0xcd/0xf80 [ 243.642893][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.648763][ C0] RIP: 0033:0x7f24dcf9148a [ 243.653148][ C0] RSP: 002b:00007ffc95cedda8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 243.661530][ C0] RAX: ffffffffffffffda RBX: 00007ffc95cede30 RCX: 00007f24dcf9148a [ 243.669468][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 243.677422][ C0] RBP: 0000000000000003 R08: 00007ffc95ceddcc R09: 0079746972756365 [ 243.685370][ C0] R10: 00007ffc95cede30 R11: 0000000000000212 R12: 00007f24dd1b70e0 [ 243.693313][ C0] R13: 00007ffc95ceddcc R14: 0000000000000000 R15: 00007f24dd1b7e60 [ 243.701259][ C0] [ 243.704248][ C0] rcu: rcu_preempt kthread starved for 10577 jiffies! g12261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 243.715451][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.725404][ C0] rcu: RCU grace-period kthread stack dump: [ 243.731267][ C0] task:rcu_preempt state:R running task stack:28328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 243.744719][ C0] Call Trace: [ 243.747969][ C0] [ 243.750870][ C0] ? __schedule+0x10b9/0x6150 [ 243.755516][ C0] __schedule+0x1139/0x6150 [ 243.759995][ C0] ? __pfx___schedule+0x10/0x10 [ 243.764809][ C0] ? find_held_lock+0x2b/0x80 [ 243.769471][ C0] ? schedule+0x2d7/0x3a0 [ 243.773770][ C0] schedule+0xe7/0x3a0 [ 243.777813][ C0] schedule_timeout+0x123/0x290 [ 243.782639][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 243.787995][ C0] ? __pfx_process_timeout+0x10/0x10 [ 243.793263][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 243.799053][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 243.804488][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 243.809224][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 243.814486][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.819661][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 243.824566][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 243.829390][ C0] rcu_gp_kthread+0x26d/0x380 [ 243.834038][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.839208][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.843937][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.849119][ C0] ? __kthread_parkme+0x19e/0x250 [ 243.854110][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 243.859285][ C0] kthread+0x3c5/0x780 [ 243.863324][ C0] ? __pfx_kthread+0x10/0x10 [ 243.867883][ C0] ? rcu_is_watching+0x12/0xc0 [ 243.872617][ C0] ? __pfx_kthread+0x10/0x10 [ 243.877176][ C0] ret_from_fork+0x983/0xb10 [ 243.881736][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 243.886827][ C0] ? __switch_to+0x7af/0x10d0 [ 243.891488][ C0] ? __pfx_kthread+0x10/0x10 [ 243.896047][ C0] ret_from_fork_asm+0x1a/0x30 [ 243.900788][ C0] [ 243.903777][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 243.910069][ C0] Sending NMI from CPU 0 to CPUs 1: [ 243.915253][ C1] NMI backtrace for cpu 1 [ 243.915263][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 243.915278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.915284][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 243.915302][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 243.915313][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 243.915324][ C1] RAX: 00000000005df311 RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 243.915333][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdb69 RDI: ffffffff8bf2b380 [ 243.915341][ C1] RBP: ffffed1003b58498 R08: 0000000000000001 R09: ffffed10170a673d [ 243.915349][ C1] R10: ffff8880b85339eb R11: ffff88801dac2ff0 R12: 0000000000000001 [ 243.915356][ C1] R13: ffff88801dac24c0 R14: ffffffff9088afd0 R15: 0000000000000000 [ 243.915364][ C1] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 243.915377][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.915384][ C1] CR2: 0000001b30222ff8 CR3: 000000000e184000 CR4: 00000000003526f0 [ 243.915392][ C1] Call Trace: [ 243.915396][ C1] [ 243.915400][ C1] default_idle+0x13/0x20 [ 243.915416][ C1] default_idle_call+0x6c/0xb0 [ 243.915431][ C1] do_idle+0x38d/0x510 [ 243.915450][ C1] ? __pfx_do_idle+0x10/0x10 [ 243.915468][ C1] cpu_startup_entry+0x4f/0x60 [ 243.915485][ C1] start_secondary+0x21d/0x2d0 [ 243.915498][ C1] ? __pfx_start_secondary+0x10/0x10 [ 243.915512][ C1] common_startup_64+0x13e/0x148 [ 243.915530][ C1]