last executing test programs: 5m13.232224089s ago: executing program 1 (id=317): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) 5m13.183200607s ago: executing program 1 (id=318): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x5f) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000002, 0x4080172, 0xffffffffffffffff, 0x6acc3000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x64000) landlock_restrict_self(0xffffffffffffffff, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r5, 0x0, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x59) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000240)) 5m12.637846466s ago: executing program 1 (id=319): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x2000000, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2}) 5m12.458183859s ago: executing program 1 (id=320): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000500)={@dev={0xac, 0x14, 0x14, 0x34}, @remote, r5}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r6, 0x1, 0x0) ptrace$setregset(0x4205, r6, 0x200, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') ioctl$TIOCGPTPEER(r4, 0x5441, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r3, &(0x7f0000000080)="3f03fe6d93d18946c701abd08e7002140006001e0089e9aaa9110000000000000000ad5734f1", 0x26, 0x4014015, &(0x7f0000000540)={0xc9, 0x17, r7, 0x1, 0xa1, 0x6, @remote}, 0x14) 5m11.96003514s ago: executing program 1 (id=322): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141b82, 0x68) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)=@svm={0xf, 0x1, 0x1080, {0x1}, {"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"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@multicast1]}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000014c0)=0x800, 0x4) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)="bef3e7b663a60e308f205fbeef05b48ef904e4b827380d2eac0fe5a095eef957c4382607ce78872cc37144677caf414e837900eb7c38e48de8b33bd745f2d3adc378b54384ff54211d4ab7c8baee07d8dab247634f7199f94e3d8fd0f8c0633636212e2cf75089ffe60ba5bdef66c0eb2b39d377336c80703b86c232fd77c5fdc227f0fc08824851db4fff69318fbe7e9c1a7a50d8e86e9fb0274f7932a1adbc4242f49b13f3b3b5a87a9eff7b1f74a36b12424c90530f242688ca42abc80a9ba4ae2b9a8d"}, 0x20) ioctl$FIBMAP(r2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x17, 0x72, 0x7e3bfe4fa73db39f, 0x4000000, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 5m11.478810013s ago: executing program 1 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x480382) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610502e806"], 0x62) 5m11.281074322s ago: executing program 32 (id=326): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_open_dev$media(&(0x7f00000006c0), 0x9, 0x480382) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x14, 0x36, 0x107, 0x3, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="610502e806"], 0x62) 24.510522784s ago: executing program 0 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000980)="e7030500d3fc07000000478880050917da14bc11f403000000000000005c04e5c69380f1f4637784c78f6b2ccb76e350c925fb762bf0f714b2218dae0646ebb4bb01c1f8a76ad79e42d1f5d335207c112d16322b3d367a191386d659ea0a88a93400876faf2f3293d85a7b3958", 0x6d, 0x2404c810, &(0x7f0000000280)={0x11, 0x88a8, r1, 0x1, 0x4, 0x6, @multicast}, 0x14) shmctl$SHM_STAT(0x0, 0xd, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000300)={0x200000, 0x200000}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x1, 0x2, &(0x7f0000000a80)="4dce"}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000580)=""/174, 0xff56) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 22.119231325s ago: executing program 0 (id=1355): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000740)=""/196, 0xc4}], 0x1}, 0x2}, {{&(0x7f00000004c0)=@x25, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000980)=""/172, 0xac}, {&(0x7f0000000b80)=""/178, 0xb2}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000a40)=""/51, 0x33}, {&(0x7f0000000c40)=""/36, 0x24}, {&(0x7f0000000c80)=""/196, 0xc4}], 0x9, &(0x7f0000000e40)=""/46, 0x2e}, 0x5}, {{&(0x7f0000000e80)=@alg, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/4, 0x4}, {&(0x7f0000000f40)=""/254, 0xfe}, {&(0x7f0000001040)=""/254, 0xfe}], 0x3, &(0x7f0000001180)=""/79, 0x4f}, 0x9}, {{&(0x7f0000001200)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002400)=[{&(0x7f0000001280)=""/6, 0x6}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/106, 0x6a}, {&(0x7f0000002340)=""/131, 0x83}], 0x4}, 0x6}, {{&(0x7f0000002440)=@generic, 0x80, &(0x7f0000002940)=[{&(0x7f00000024c0)=""/34, 0x22}, {&(0x7f0000002500)=""/109, 0x6d}, {&(0x7f0000002580)=""/9, 0x9}, {&(0x7f00000025c0)=""/16, 0x10}, {&(0x7f0000002600)=""/163, 0xa3}, {&(0x7f00000026c0)=""/202, 0xca}, {&(0x7f0000005980)=""/226, 0xe2}, {&(0x7f00000028c0)=""/95, 0x5f}], 0x8}, 0x400}, {{&(0x7f00000029c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000002a40)=""/89, 0x59}, {&(0x7f0000002ac0)=""/158, 0x9e}, {&(0x7f0000002b80)=""/187, 0xbb}, {&(0x7f0000002c40)=""/25, 0x19}, {&(0x7f0000002c80)=""/101, 0x65}, {&(0x7f0000002d00)=""/33, 0x21}, {&(0x7f0000002d40)=""/151, 0x97}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x8, &(0x7f0000003e80)=""/215, 0xd7}, 0x7}, {{&(0x7f0000003f80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/252, 0xfc}, {&(0x7f0000004100)=""/179, 0xb3}, {&(0x7f00000041c0)=""/13, 0xd}, {&(0x7f0000004200)=""/91, 0x5b}, {&(0x7f0000004280)}], 0x5, &(0x7f0000004340)=""/203, 0xcb}, 0x8001}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000004440)=""/104, 0x68}, {&(0x7f00000044c0)=""/120, 0x78}, {&(0x7f0000004540)=""/120, 0x78}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/6, 0x6}, {&(0x7f0000005600)=""/14, 0xe}], 0x6, &(0x7f00000056c0)=""/167, 0xa7}}], 0x8, 0x142, 0x0) fgetxattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f73782e0000674e8ef147e008000000d4f562a2d029c3799831e2cb000000000000000000"], &(0x7f0000000300)=""/131, 0x83) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf251b00000006002100c5"], 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x880) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000004ffe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0x80000300, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140008910000000000000000000000000000000000ff02000000000000000000000000000100000e2200089078f2c528797b6c275ad39bac842d970026403c2b2c45e6973010992faf8424236fd0618f796ace032949cae656c55035dbd82bf572666eee168083e0a210ba746fdde262a0f7f66e1c09d7f645dea5729ceeca065b0ad038e6005f7a1f9bd9d1"], 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 21.6834582s ago: executing program 0 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8408e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) close_range(r3, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000003000/0x3000)=nil) shmctl$IPC_INFO(r6, 0x3, 0x0) syz_io_uring_setup(0x502a, &(0x7f0000000240)={0x0, 0xa0fd, 0x80, 0x5, 0xab9, 0x0, r5}, &(0x7f0000000140), &(0x7f0000000200)) 20.815517791s ago: executing program 0 (id=1359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res(0x0, 0xa, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x6071, 0x0, 0x8001}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) r5 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf992}, 0x94) fstat(r6, &(0x7f00000000c0)) r7 = syz_pidfd_open(r5, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0xf0ff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000002010101000000000000000002000004240002801400018008000100ac1e000108000200000000000c000280040001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 19.043951406s ago: executing program 0 (id=1361): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000008, 0x11, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00005eb000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x0) 17.482790904s ago: executing program 0 (id=1368): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006", @ANYRES32, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x10008082}, 0x0) 16.247330028s ago: executing program 33 (id=1368): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x20000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001480)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006", @ANYRES32, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x10008082}, 0x0) 10.647956329s ago: executing program 2 (id=1385): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x2, 0x5, 0x6, 0x1}, 0x10, 0x2a9bf, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5c, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x26, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x2, "007c4de20278ab96e88afd5c976b4c1ce4a945b1"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) eventfd(0xffff) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@private2, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x70bd2f, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffccca38b900000001", 0x11) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x1000000}}}}}, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) sendmsg$IPSET_CMD_ADD(r6, 0x0, 0x11) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa38009050402100000fa000905820240"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c20d0001aaaaaaaaaabb080045ffffffff640000000290780a010100e000000111009078e0000002000000020100000000000000"], 0x0) 8.748834388s ago: executing program 3 (id=1391): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {0x0}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 7.848185895s ago: executing program 5 (id=1392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_clone3(&(0x7f0000000180)={0x41288a80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc080) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x1008000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x48, &(0x7f0000000740)=ANY=[@ANYBLOB="0402004000002503a018cc2eac8660824e269c9d954d980a0b606357f6e668b72132565c913a566e6209b2ece93d255ebafc7daf786c126d8f06e134d546840aa0880dc134d1843b"]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 7.39804322s ago: executing program 3 (id=1393): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe"], 0x0) open(0x0, 0x80140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x1000, 0x3, 0x7, 0xeffffdff, 0x0, [{0x4, 0x81, 0xfc, '\x00', 0x5}, {0x4, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0x8d, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4, '\x00', 0xa}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfc, 0x0, 0x6}, {0x0, 0x9}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0xf}, {0xe, 0x0, 0x0, '\x00', 0xfc}, {0x50, 0x99, 0x2, '\x00', 0xfd}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x42, 0x2, 0x6}, {0xc3, 0x0, 0x8, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x6}, {0x3, 0x0, 0x20}, {0x0, 0x2, 0x2, '\x00', 0x10}, {0x48, 0x0, 0xa}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0xf}, {0xfd, 0x8, 0x0, '\x00', 0x5}, {0x2, 0x7f, 0x2, '\x00', 0x5}, {0x7f, 0xff, 0x3, '\x00', 0x7}]}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {0xa, 0x0, 0x39887cf2c8aa914b}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_generic(r6, 0x0, 0x40010) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r8, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) 7.141114601s ago: executing program 2 (id=1394): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x7, 0x3f}) 7.00329613s ago: executing program 2 (id=1395): socket(0xa, 0x3, 0x3a) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, 0x0, 0x0) 6.006235876s ago: executing program 2 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) eventfd2(0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x4) setns(0xffffffffffffffff, 0x2000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2, 0x2, 0x2, 0xe, 0xc, 0xf}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) clock_gettime(0xfeffffff, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) r3 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40088a01, &(0x7f0000000000)=0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x1}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 5.083239962s ago: executing program 4 (id=1398): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) syz_open_dev$usbfs(0x0, 0x203, 0x8401) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (fail_nth: 5) 5.055802425s ago: executing program 5 (id=1399): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x480000ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xb) bind$ax25(r4, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) read$FUSE(r6, 0x0, 0x5700) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0xff1c, 0xf9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x400000b3, 0x7}}], 0x20}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000140)) 4.154492347s ago: executing program 3 (id=1400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x12a4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1278, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x1, 0x4, 0x7e3}]}}, @TCA_BPF_ACT={0x208, 0x1, [@m_connmark={0x100, 0x19, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x8000, 0x2, 0x9, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x18, 0x8, 0x4, 0xfff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd447, 0xcc, 0x5, 0x9, 0x4}, 0x6}}]}, {0x7c, 0x6, "7e321b95ce214e3e048f533ff0a1d64387928b93d48155065193204d513c54c07e2d287f562c20f683aec1b91a8d5eaff13668d304296a1dd948fbc2d12ea65c5f4cab888251eb5be7a0607bf2fc58e08a5b720b0e3c5a1d63291c9c189b05e26f9e658bd4945202abcd8fa47cf68481364df07049913c6e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x104, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}]}, {0xce, 0x6, "84303443c055e3a61d640dfcda82d370c14c37a816e16d65e29d0993bd9abafeada89be4f22be4549a93aab702f78e5e249235af8f81a7ab08630f51704a9dd6a1ff7bfe70072f45fc467408be196f627a24ffcb672f778a7ac2b7d8409201fec855fd7e170d463ad42feeca9dfcaf89d1d9bea355ae14ef10440bceab4fa707c71cba1325462e59667776b646bb51e75cb0f29d68403d316663c5b6bd6d0d7a709f60674608e4f807fe7ab8f1d9874e56a1c05b8c92259c3dee17b2ba6388db83d12702301a74d94f01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_ACT={0x7b4, 0x1, [@m_mirred={0x98, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x1, 0x1, 0x5, 0x61e3}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x1, 0x7, 0x401}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x10000000, 0x2, 0x70e}, 0x1, r3}}]}, {0xc, 0x6, "c3fdcb75bffcef1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x400, 0x90, 0x3, 0x0, 0xfffffff9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x7e, 0x6, "2580ccd954ba2190f6debc914642d2876a948e39686457dcba2214caba4ff9c98d116d65929e55476d23ba6d81b8e22933428303e3e95a4e1c69658ece68b6c624150165442d893d3552433fb3ad5f0a2e40d13254f9213ca9d0ab4152a3157cf36b7e8eca721ab72460cc228d27e422ecdceb941961fae186df"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_xt={0x414, 0x12, 0x0, 0x0, {{0x7}, {0x354, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4b8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xcf, 0x6, {0x9, 'mangle\x00', 0x7, 0x2, "0d4afff77f209348a394d7c138329e11dacee96303ff38cbd64efcef423cd4bf1194426d13465f7596accbe14d7e714586c3209ee1195956a952f3db85d4966a46dfb9ffa2604c4fb51c84d776aa1ca4081cfb6d8964bc0a2e6d41d967ab932f98e9b53a99bc921754d953b27397297498f1b5d274fae490539c2ce2582de378904b95a1f285b72ac359b3f1ca76b377391111b9f2bd8c43e335a428f8e2a5d961e7474a79"}}, @TCA_IPT_TARG={0xb0, 0x6, {0x66c0, 'nat\x00', 0x6, 0x138, "1067f29bb77b950f01d27eae055462d71df4a9bf770a50055432b056597b2fecc6762132ab25c4a191848c2185f07807dd3db4a4f81bf125aa5df27140f15234b35db97f714dc55b4ed754b5aac020869814665a41aaf83468680a9d17e10bdfa5bbbf63caaf8e8f94844a7db1967ae68ffba02448b9daa23cca3ee2ac8a2b4deca242df60d0"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xb6, 0x6, {0x8, 'nat\x00', 0xc2, 0x5, "98dacb6ba7b66a75c92eb529f84d0a2213c0fc9e23d99b40fe1de0fe7d83176ba3ef20645c2cf0e604e924c1342192d77479f04cb8fcc21748a731d68c04cc61b2bb4b9db148c7437d3f50c893ce69002ca2d7668ac70a76653a306822a5fb7b4ecd790c22e88b98c7890ad954a6a5481686c44fd304d3a827900ca8c836fb638c874470d2c07bc97332534c"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_TARG={0xed, 0x6, {0x2, 'security\x00', 0x4, 0x677d, "124f15ce96e1da8ef8c7279ccdd4c263883b0e857968076e1d7c393cfd19e6463a3dc47383eb657a26f9524ab42ad0f2de896c3b48f82cab0acba7f0a90b02c8b6ca760c80768ab5f37e973ed44c4bc50c9a25a9d767fa55b218658cd1a6a2b9a4a5adb29dedc7bd3bbb1d697235924beebbe8bf6f6267c29d22f885fc45cab6500876bb9b536aa1ee213437c1c9a5683dd439c2644c39f2877255c66fc5790bf2222eee106fe9b1490903bcbfba2c40de7a7e0e8fafc859d8787075325dcca84ecbe3"}}]}, {0x9c, 0x6, "cecdb188a986f59d1fda0846badaefed2018ca27a577e873ac180bb434dae228feb44f75a50a2391967f8e1515734ba8b3b48c95b357ddb390764f2dd3a8b46146d4b06d477218a378a6b3d5834e70d178a2210772bae1b73d7240de28a0c8a1fede8e9d7267bf2d3c7a60291a1e1e15446f5f87c2641f7abf6ffb56e62a7c196d4cf7e3577d608b9793198af00f352990723db55562237c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x114, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xde, 0x6, "6c307668eb5ca4396737bb6b1cc3b85ddd06db1e799bee8d2c4c71441b5f9697baf99834d0ccea6c36bcb7c0bd12be1a6a846c9d3e4550b0944a863ba2a86cb67b706dba66b3fde19f839dda0fcad61ad93daf8189ccc6e8b1bb10ee9a762dc0af7e3fefa53c9b4fa4d379f0cbe70b2383711a1a3f34844f7c0b7fb1fc58bd13f4c7ee8355e991bed377d7fa58e9b05b0bb617ea3fff3b62c1dcbc7ddc8057dc4c27291e0eba85510754cbdb40c80815bbf6a7932f21786da883b836d1f66534a13d9171a9f69990eb4035f3b9c40d02ad642afac8bf13fea610"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x110, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xd9, 0x6, "231a884a6bf6a2f2d9d48ff94ba8ccc1c4dde8fe5550ca6e6ac917a5604d0a010ef06c20540e24ddecf87edb6483a759a65fa29189a21cbddc01116ee6c26e929ba97622e692e88ca097ce85025bb7b82e8f187c8f428a338164ccd3fa68fd4923b5503e36758d1c12bf999893cd0a67b8391a3ccb0956fb6cd21422e5b96cb0612f6ef545f3ae5afff80c38260115daa980bf8e507735286531910ded90a304ddaf840ab225b0092c221478755d2d0e4b0bd6d54df1f6f389af74186ca75b1f48af1b3678b98b09d7f29753aa741524583743203c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_POLICE={0x888, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2d}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x37d, 0x22e, 0x1, 0x7ff, 0xc61, 0x29e, 0x1000, 0x0, 0x9, 0x8, 0x9, 0x347, 0x616c, 0x7, 0x9f08, 0x4d, 0x8, 0x81, 0x3, 0x3, 0x3, 0x80000001, 0x7, 0xecd, 0x800, 0x6, 0x81, 0x5, 0x65e, 0xc4ca, 0x4, 0x7, 0x0, 0x7, 0x1, 0x5, 0x157, 0x223, 0x3, 0xffffff5b, 0x8, 0x3, 0x81, 0x80, 0xd9d, 0x1, 0x6, 0x2, 0x8000, 0x1, 0xffffffff, 0xfffffffc, 0x3, 0xfffffffe, 0x6, 0x9, 0x5, 0x80000001, 0x99f00000, 0x71, 0x16, 0xe9, 0x9, 0x6, 0x9, 0x101, 0x6, 0x7, 0x6, 0x7fff, 0x200, 0xe6d, 0x8, 0x9, 0x1, 0x45cd8207, 0x0, 0xd, 0x1, 0x8, 0x2, 0xffffff0c, 0x365c, 0x8, 0x4, 0xf8cb, 0xffff42ef, 0x6, 0xf, 0x5, 0x11, 0x2, 0x9, 0xf, 0xfff, 0x1, 0x7ff, 0x9, 0x8, 0x2, 0x6, 0xea, 0xb, 0x8001, 0x9d27, 0xfffffffa, 0x10000, 0x2, 0x0, 0x3, 0x3, 0x7fff, 0x6, 0x8, 0x4cc, 0x7, 0x6, 0x7, 0xf20, 0x38000, 0x0, 0x800, 0x8, 0x9, 0xffffffff, 0x53, 0x9, 0x1, 0x7, 0x2, 0x3, 0x5, 0x4e0, 0xf, 0x2, 0xffffffff, 0x720, 0x6, 0xc9f7, 0xb, 0x2, 0xf, 0x40, 0x7, 0x9, 0x5, 0x400, 0x5, 0x4, 0x3, 0x0, 0x9, 0x10000, 0xab, 0x1, 0x81, 0x1ff, 0xe, 0x335405c7, 0x6316, 0x4ba64907, 0x9, 0x5, 0x8, 0x45, 0x1000, 0x5, 0xa7, 0x6, 0x6, 0x2, 0x71a34c7a, 0x40, 0x2, 0x40, 0x8, 0x0, 0x9, 0x8, 0x4, 0xff2a, 0x7, 0x401, 0x1c, 0x1ff, 0x2, 0x7, 0x400, 0x5d, 0x5, 0x7, 0x80, 0x5, 0x8000, 0x80, 0x6, 0x2, 0x4, 0xf, 0x800, 0x4, 0x9fa3, 0x0, 0x8, 0x0, 0x5, 0x9, 0x5b, 0x3c49, 0x1ff, 0x80, 0x9, 0x0, 0x3, 0x80000001, 0x8001, 0x7, 0x1, 0x3ff, 0x7, 0x2, 0x9, 0xeb1, 0x7d, 0xc1f, 0xf0, 0x400, 0x2, 0x401, 0x0, 0x9, 0x7, 0x0, 0x9, 0x401, 0x0, 0x6, 0x68d, 0x1000, 0x5, 0x4, 0x8, 0x10, 0x0, 0x8000, 0x8, 0x7f, 0x80, 0xfffffffa, 0x3, 0x1, 0x100, 0x8, 0x5, 0x78]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe56, 0x20000000, 0x10, 0x4, 0x5, {0xb, 0x1, 0xfff, 0x8000, 0x7ff, 0x80}, {0x9b, 0x2, 0xd1, 0x7, 0x16, 0x6}, 0x2, 0x3, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0x4, 0x6, 0x2, 0x10, 0x4, 0x9, 0xd, 0x2, 0x18, 0x7, 0x8, 0x482, 0x6e0e, 0x4893, 0x2, 0x2, 0x9, 0x4f52e702, 0x3, 0xffffff5f, 0xfffffff7, 0x9, 0x61de, 0x4, 0x4, 0x5, 0x400, 0x4, 0x9, 0x7, 0x7f, 0x71e1, 0x4, 0x8, 0xa0ce, 0x9, 0x4, 0x5, 0x6, 0x1a000000, 0xb, 0x100, 0x2, 0x0, 0x8, 0x5, 0x10, 0x1000, 0x9, 0xffffff11, 0x2, 0xb, 0x6, 0x1, 0xd, 0x6, 0x5, 0x7, 0x6, 0x10000, 0xffffffff, 0x5, 0x2, 0x5, 0x80, 0x1, 0x6, 0x9fd7, 0x7, 0x3, 0x1, 0x7, 0x7, 0x2, 0xc071, 0xb, 0x21d4, 0x5, 0x89e, 0x9, 0xe413, 0x80000000, 0x80000000, 0x1ff, 0xdb4, 0x7, 0x4, 0x2, 0x8, 0x1, 0x6f, 0x0, 0x413d, 0x5, 0x91b5, 0x4, 0x800, 0x0, 0x1, 0x0, 0x5, 0x2, 0xca, 0x6, 0x4, 0xfffffffd, 0x5, 0xea5e, 0x5, 0x0, 0x2, 0x51fb, 0x9, 0x3, 0x9, 0x400, 0x5, 0x1ff, 0x326, 0x0, 0x5, 0x4, 0x7, 0x47, 0x400000, 0x9, 0x8, 0x6, 0x8855, 0x7, 0x3, 0x5, 0x7, 0x1, 0x9, 0x0, 0x80000001, 0x1, 0x215baa0f, 0x7, 0x1c, 0x4, 0x8, 0x8, 0x251c0000, 0xfffff801, 0x20, 0x5, 0x9, 0x80, 0x3, 0xcd, 0xfffffe56, 0xb, 0x743, 0xa9f, 0x4, 0x80, 0x4, 0x1, 0x6, 0x78a156c8, 0x80000001, 0x200, 0x4, 0x0, 0x1, 0xc, 0x3, 0x2000, 0x4c, 0xf453, 0xce, 0xc7, 0x9, 0x5, 0x200, 0x7, 0x6, 0x5, 0x17, 0x7, 0x2, 0x7fff, 0x2, 0x7f, 0xa, 0x3, 0x2, 0x5, 0x6, 0x3, 0x2, 0x9, 0xce4f, 0xf8, 0x6, 0xffffffff, 0x9, 0x9, 0x8001, 0x4, 0x8000, 0x3, 0x9, 0x1000, 0x400, 0xdb7e, 0x6, 0x4, 0x7, 0x33, 0x81, 0x2000, 0x2cae, 0x9d37, 0x5, 0xfffffffe, 0x800, 0x0, 0x8, 0x7ff, 0x5, 0xc9, 0x98f7, 0x662a, 0x2, 0x9, 0x9, 0xffffff00, 0x1, 0xc, 0x2, 0x3, 0x5, 0x0, 0x2, 0xffffffff, 0xee2, 0x0, 0x2, 0x3, 0xa, 0x0, 0x68da, 0x8, 0x2, 0x40, 0x800, 0x6, 0x8, 0x1c00000, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf02}]}]}}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 4.035021224s ago: executing program 4 (id=1401): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3.832056009s ago: executing program 5 (id=1402): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200143000000e2fe17c7c201d64467b930ac58f9bbeda161d033bcba27754ea393eb6cc5f1763cff49855f78baa48dc6c859206612c01d8709bb532d24fb538dc34e05a0ad17b4149b21e70c1a36dd62e5d22c97a39d5ed291a784da7330ee5029e92a003528c088f83af16f3089892e9918b7d87c4f6964d5ed4e85f907134db25179c7a172b28a60e1f35abcbbf5eac67bd24b9667eea43b", @ANYRES64, @ANYRES64, @ANYRES8, @ANYRES64], &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf5}}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000080)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000140)={0x1, 0x1, 0x8000, 0xffffffff, 0x5, 0xc}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x24, 0x2c, 0x400, 0x1030bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8, 0xffed}, {0x0, 0xfff1}, {0xc, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x40d1}, 0x840) 3.829284143s ago: executing program 3 (id=1403): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r7, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3.100457087s ago: executing program 4 (id=1404): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x7, 0x3f}) 2.558101935s ago: executing program 4 (id=1405): socket(0xa, 0x3, 0x3a) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040), 0x0) 2.395684421s ago: executing program 3 (id=1406): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000005780)={0x2020}, 0x2020) 2.312901546s ago: executing program 3 (id=1407): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/packet\x00') read$FUSE(r2, &(0x7f00000036c0)={0x2020}, 0x2020) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000c237c4892c94ba24086f851b1c8e0b27beb0148e71b97c1cdc1c818fe0456c099fe45d54212fea848291d044a548264469bf440eb1306fdc28f071a504c7e2d464650aee530424173a1fac2dcb0a325335f18749589b14f29f519545f7a862143b4a499127ce16300bb9aa378f41f7"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r6, 0x107, 0x1, 0x0, 0x0) shutdown(r3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x42000000) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000000)=0x1, 0x4) 1.979323335s ago: executing program 6 (id=1370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/90, 0x5a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) listen(0xffffffffffffffff, 0x8) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045515, &(0x7f0000000580)={0xf}) landlock_restrict_self(r6, 0x0) statfs(&(0x7f0000002540)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r8) creat(&(0x7f0000002cc0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc0) sendmsg$802154_raw(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="197439", 0x3}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) 1.693464901s ago: executing program 2 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.257851299s ago: executing program 4 (id=1409): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {0x0}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 787.315674ms ago: executing program 2 (id=1410): syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe"], 0x0) open(0x0, 0x80140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x1000, 0x3, 0x7, 0xeffffdff, 0x0, [{0x4, 0x81, 0xfc, '\x00', 0x5}, {0x4, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0xb9}, {0x11, 0x8d, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4, '\x00', 0xa}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfc, 0x0, 0x6}, {0x0, 0x9}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0xa8, 0x6, 0x0, '\x00', 0xf}, {0xe, 0x0, 0x0, '\x00', 0xfc}, {0x50, 0x99, 0x2, '\x00', 0xfd}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x42, 0x2, 0x6}, {0xc3, 0x0, 0x8, '\x00', 0x49}, {0x0, 0x21, 0x80, '\x00', 0x6}, {0x3, 0x0, 0x20}, {0x0, 0x2, 0x2, '\x00', 0x10}, {0x48, 0x0, 0xa}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0xf}, {0xfd, 0x8, 0x0, '\x00', 0x5}, {0x2, 0x7f, 0x2, '\x00', 0x5}, {0x7f, 0xff, 0x3, '\x00', 0x7}]}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378eb, 0x70bd28, 0x0, {0xa, 0x0, 0x39887cf2c8aa914b}}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_generic(r6, 0x0, 0x40010) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r8, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) 646.878896ms ago: executing program 4 (id=1411): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000440)='FROZEN\x00', 0x7) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000001580)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/66, 0x42}, {0x0}, {&(0x7f0000000140)=""/82, 0x52}, {&(0x7f00000013c0)=""/168, 0xa8}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000001700)=""/197, 0xc5}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000015c0)=""/165, 0xa5}], 0x8, &(0x7f0000001500)=""/123, 0x7b}, 0x2106) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000002}]}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)) 571.633078ms ago: executing program 5 (id=1412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0xa7, 0x0, 0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x12a4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1278, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x1, 0x4, 0x7e3}]}}, @TCA_BPF_ACT={0x208, 0x1, [@m_connmark={0x100, 0x19, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x8000, 0x2, 0x9, 0x9}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x18, 0x8, 0x4, 0xfff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd447, 0xcc, 0x5, 0x9, 0x4}, 0x6}}]}, {0x7c, 0x6, "7e321b95ce214e3e048f533ff0a1d64387928b93d48155065193204d513c54c07e2d287f562c20f683aec1b91a8d5eaff13668d304296a1dd948fbc2d12ea65c5f4cab888251eb5be7a0607bf2fc58e08a5b720b0e3c5a1d63291c9c189b05e26f9e658bd4945202abcd8fa47cf68481364df07049913c6e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x104, 0x3, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd}]}, {0xce, 0x6, "84303443c055e3a61d640dfcda82d370c14c37a816e16d65e29d0993bd9abafeada89be4f22be4549a93aab702f78e5e249235af8f81a7ab08630f51704a9dd6a1ff7bfe70072f45fc467408be196f627a24ffcb672f778a7ac2b7d8409201fec855fd7e170d463ad42feeca9dfcaf89d1d9bea355ae14ef10440bceab4fa707c71cba1325462e59667776b646bb51e75cb0f29d68403d316663c5b6bd6d0d7a709f60674608e4f807fe7ab8f1d9874e56a1c05b8c92259c3dee17b2ba6388db83d12702301a74d94f01"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_ACT={0x7b4, 0x1, [@m_mirred={0x98, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x1, 0x1, 0x5, 0x61e3}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x1, 0x7, 0x401}, 0x1, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x10000000, 0x2, 0x70e}, 0x1, r3}}]}, {0xc, 0x6, "c3fdcb75bffcef1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xe0, 0x1f, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x400, 0x90, 0x3, 0x0, 0xfffffff9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x7e, 0x6, "2580ccd954ba2190f6debc914642d2876a948e39686457dcba2214caba4ff9c98d116d65929e55476d23ba6d81b8e22933428303e3e95a4e1c69658ece68b6c624150165442d893d3552433fb3ad5f0a2e40d13254f9213ca9d0ab4152a3157cf36b7e8eca721ab72460cc228d27e422ecdceb941961fae186df"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_xt={0x414, 0x12, 0x0, 0x0, {{0x7}, {0x354, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4b8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0xcf, 0x6, {0x9, 'mangle\x00', 0x7, 0x2, "0d4afff77f209348a394d7c138329e11dacee96303ff38cbd64efcef423cd4bf1194426d13465f7596accbe14d7e714586c3209ee1195956a952f3db85d4966a46dfb9ffa2604c4fb51c84d776aa1ca4081cfb6d8964bc0a2e6d41d967ab932f98e9b53a99bc921754d953b27397297498f1b5d274fae490539c2ce2582de378904b95a1f285b72ac359b3f1ca76b377391111b9f2bd8c43e335a428f8e2a5d961e7474a79"}}, @TCA_IPT_TARG={0xb0, 0x6, {0x66c0, 'nat\x00', 0x6, 0x138, "1067f29bb77b950f01d27eae055462d71df4a9bf770a50055432b056597b2fecc6762132ab25c4a191848c2185f07807dd3db4a4f81bf125aa5df27140f15234b35db97f714dc55b4ed754b5aac020869814665a41aaf83468680a9d17e10bdfa5bbbf63caaf8e8f94844a7db1967ae68ffba02448b9daa23cca3ee2ac8a2b4deca242df60d0"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xb6, 0x6, {0x8, 'nat\x00', 0xc2, 0x5, "98dacb6ba7b66a75c92eb529f84d0a2213c0fc9e23d99b40fe1de0fe7d83176ba3ef20645c2cf0e604e924c1342192d77479f04cb8fcc21748a731d68c04cc61b2bb4b9db148c7437d3f50c893ce69002ca2d7668ac70a76653a306822a5fb7b4ecd790c22e88b98c7890ad954a6a5481686c44fd304d3a827900ca8c836fb638c874470d2c07bc97332534c"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x10001}, @TCA_IPT_TARG={0xed, 0x6, {0x2, 'security\x00', 0x4, 0x677d, "124f15ce96e1da8ef8c7279ccdd4c263883b0e857968076e1d7c393cfd19e6463a3dc47383eb657a26f9524ab42ad0f2de896c3b48f82cab0acba7f0a90b02c8b6ca760c80768ab5f37e973ed44c4bc50c9a25a9d767fa55b218658cd1a6a2b9a4a5adb29dedc7bd3bbb1d697235924beebbe8bf6f6267c29d22f885fc45cab6500876bb9b536aa1ee213437c1c9a5683dd439c2644c39f2877255c66fc5790bf2222eee106fe9b1490903bcbfba2c40de7a7e0e8fafc859d8787075325dcca84ecbe3"}}]}, {0x9c, 0x6, "cecdb188a986f59d1fda0846badaefed2018ca27a577e873ac180bb434dae228feb44f75a50a2391967f8e1515734ba8b3b48c95b357ddb390764f2dd3a8b46146d4b06d477218a378a6b3d5834e70d178a2210772bae1b73d7240de28a0c8a1fede8e9d7267bf2d3c7a60291a1e1e15446f5f87c2641f7abf6ffb56e62a7c196d4cf7e3577d608b9793198af00f352990723db55562237c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x114, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0xde, 0x6, "6c307668eb5ca4396737bb6b1cc3b85ddd06db1e799bee8d2c4c71441b5f9697baf99834d0ccea6c36bcb7c0bd12be1a6a846c9d3e4550b0944a863ba2a86cb67b706dba66b3fde19f839dda0fcad61ad93daf8189ccc6e8b1bb10ee9a762dc0af7e3fefa53c9b4fa4d379f0cbe70b2383711a1a3f34844f7c0b7fb1fc58bd13f4c7ee8355e991bed377d7fa58e9b05b0bb617ea3fff3b62c1dcbc7ddc8057dc4c27291e0eba85510754cbdb40c80815bbf6a7932f21786da883b836d1f66534a13d9171a9f69990eb4035f3b9c40d02ad642afac8bf13fea610"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x110, 0x5, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0xd9, 0x6, "231a884a6bf6a2f2d9d48ff94ba8ccc1c4dde8fe5550ca6e6ac917a5604d0a010ef06c20540e24ddecf87edb6483a759a65fa29189a21cbddc01116ee6c26e929ba97622e692e88ca097ce85025bb7b82e8f187c8f428a338164ccd3fa68fd4923b5503e36758d1c12bf999893cd0a67b8391a3ccb0956fb6cd21422e5b96cb0612f6ef545f3ae5afff80c38260115daa980bf8e507735286531910ded90a304ddaf840ab225b0092c221478755d2d0e4b0bd6d54df1f6f389af74186ca75b1f48af1b3678b98b09d7f29753aa741524583743203c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BPF_POLICE={0x888, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2d}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x37d, 0x22e, 0x1, 0x7ff, 0xc61, 0x29e, 0x1000, 0x0, 0x9, 0x8, 0x9, 0x347, 0x616c, 0x7, 0x9f08, 0x4d, 0x8, 0x81, 0x3, 0x3, 0x3, 0x80000001, 0x7, 0xecd, 0x800, 0x6, 0x81, 0x5, 0x65e, 0xc4ca, 0x4, 0x7, 0x0, 0x7, 0x1, 0x5, 0x157, 0x223, 0x3, 0xffffff5b, 0x8, 0x3, 0x81, 0x80, 0xd9d, 0x1, 0x6, 0x2, 0x8000, 0x1, 0xffffffff, 0xfffffffc, 0x3, 0xfffffffe, 0x6, 0x9, 0x5, 0x80000001, 0x99f00000, 0x71, 0x16, 0xe9, 0x9, 0x6, 0x9, 0x101, 0x6, 0x7, 0x6, 0x7fff, 0x200, 0xe6d, 0x8, 0x9, 0x1, 0x45cd8207, 0x0, 0xd, 0x1, 0x8, 0x2, 0xffffff0c, 0x365c, 0x8, 0x4, 0xf8cb, 0xffff42ef, 0x6, 0xf, 0x5, 0x11, 0x2, 0x9, 0xf, 0xfff, 0x1, 0x7ff, 0x9, 0x8, 0x2, 0x6, 0xea, 0xb, 0x8001, 0x9d27, 0xfffffffa, 0x10000, 0x2, 0x0, 0x3, 0x3, 0x7fff, 0x6, 0x8, 0x4cc, 0x7, 0x6, 0x7, 0xf20, 0x38000, 0x0, 0x800, 0x8, 0x9, 0xffffffff, 0x53, 0x9, 0x1, 0x7, 0x2, 0x3, 0x5, 0x4e0, 0xf, 0x2, 0xffffffff, 0x720, 0x6, 0xc9f7, 0xb, 0x2, 0xf, 0x40, 0x7, 0x9, 0x5, 0x400, 0x5, 0x4, 0x3, 0x0, 0x9, 0x10000, 0xab, 0x1, 0x81, 0x1ff, 0xe, 0x335405c7, 0x6316, 0x4ba64907, 0x9, 0x5, 0x8, 0x45, 0x1000, 0x5, 0xa7, 0x6, 0x6, 0x2, 0x71a34c7a, 0x40, 0x2, 0x40, 0x8, 0x0, 0x9, 0x8, 0x4, 0xff2a, 0x7, 0x401, 0x1c, 0x1ff, 0x2, 0x7, 0x400, 0x5d, 0x5, 0x7, 0x80, 0x5, 0x8000, 0x80, 0x6, 0x2, 0x4, 0xf, 0x800, 0x4, 0x9fa3, 0x0, 0x8, 0x0, 0x5, 0x9, 0x5b, 0x3c49, 0x1ff, 0x80, 0x9, 0x0, 0x3, 0x80000001, 0x8001, 0x7, 0x1, 0x3ff, 0x7, 0x2, 0x9, 0xeb1, 0x7d, 0xc1f, 0xf0, 0x400, 0x2, 0x401, 0x0, 0x9, 0x7, 0x0, 0x9, 0x401, 0x0, 0x6, 0x68d, 0x1000, 0x5, 0x4, 0x8, 0x10, 0x0, 0x8000, 0x8, 0x7f, 0x80, 0xfffffffa, 0x3, 0x1, 0x100, 0x8, 0x5, 0x78]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe56, 0x20000000, 0x10, 0x4, 0x5, {0xb, 0x1, 0xfff, 0x8000, 0x7ff, 0x80}, {0x9b, 0x2, 0xd1, 0x7, 0x16, 0x6}, 0x2, 0x3, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x9, 0x4, 0x6, 0x2, 0x10, 0x4, 0x9, 0xd, 0x2, 0x18, 0x7, 0x8, 0x482, 0x6e0e, 0x4893, 0x2, 0x2, 0x9, 0x4f52e702, 0x3, 0xffffff5f, 0xfffffff7, 0x9, 0x61de, 0x4, 0x4, 0x5, 0x400, 0x4, 0x9, 0x7, 0x7f, 0x71e1, 0x4, 0x8, 0xa0ce, 0x9, 0x4, 0x5, 0x6, 0x1a000000, 0xb, 0x100, 0x2, 0x0, 0x8, 0x5, 0x10, 0x1000, 0x9, 0xffffff11, 0x2, 0xb, 0x6, 0x1, 0xd, 0x6, 0x5, 0x7, 0x6, 0x10000, 0xffffffff, 0x5, 0x2, 0x5, 0x80, 0x1, 0x6, 0x9fd7, 0x7, 0x3, 0x1, 0x7, 0x7, 0x2, 0xc071, 0xb, 0x21d4, 0x5, 0x89e, 0x9, 0xe413, 0x80000000, 0x80000000, 0x1ff, 0xdb4, 0x7, 0x4, 0x2, 0x8, 0x1, 0x6f, 0x0, 0x413d, 0x5, 0x91b5, 0x4, 0x800, 0x0, 0x1, 0x0, 0x5, 0x2, 0xca, 0x6, 0x4, 0xfffffffd, 0x5, 0xea5e, 0x5, 0x0, 0x2, 0x51fb, 0x9, 0x3, 0x9, 0x400, 0x5, 0x1ff, 0x326, 0x0, 0x5, 0x4, 0x7, 0x47, 0x400000, 0x9, 0x8, 0x6, 0x8855, 0x7, 0x3, 0x5, 0x7, 0x1, 0x9, 0x0, 0x80000001, 0x1, 0x215baa0f, 0x7, 0x1c, 0x4, 0x8, 0x8, 0x251c0000, 0xfffff801, 0x20, 0x5, 0x9, 0x80, 0x3, 0xcd, 0xfffffe56, 0xb, 0x743, 0xa9f, 0x4, 0x80, 0x4, 0x1, 0x6, 0x78a156c8, 0x80000001, 0x200, 0x4, 0x0, 0x1, 0xc, 0x3, 0x2000, 0x4c, 0xf453, 0xce, 0xc7, 0x9, 0x5, 0x200, 0x7, 0x6, 0x5, 0x17, 0x7, 0x2, 0x7fff, 0x2, 0x7f, 0xa, 0x3, 0x2, 0x5, 0x6, 0x3, 0x2, 0x9, 0xce4f, 0xf8, 0x6, 0xffffffff, 0x9, 0x9, 0x8001, 0x4, 0x8000, 0x3, 0x9, 0x1000, 0x400, 0xdb7e, 0x6, 0x4, 0x7, 0x33, 0x81, 0x2000, 0x2cae, 0x9d37, 0x5, 0xfffffffe, 0x800, 0x0, 0x8, 0x7ff, 0x5, 0xc9, 0x98f7, 0x662a, 0x2, 0x9, 0x9, 0xffffff00, 0x1, 0xc, 0x2, 0x3, 0x5, 0x0, 0x2, 0xffffffff, 0xee2, 0x0, 0x2, 0x3, 0xa, 0x0, 0x68da, 0x8, 0x2, 0x40, 0x800, 0x6, 0x8, 0x1c00000, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf02}]}]}}]}, 0x12a4}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 565.939332ms ago: executing program 6 (id=1413): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000480), 0x1004) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0x1d}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x8, 0x30}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) 140.0063ms ago: executing program 5 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_USERDATA={0xf7, 0x6, "c8dbdfa9116420526e824efe3da226f03e0ef53991a023a39f3d82ef85009022e9c4984d04ce95aa0d571555607ed1536e394cbff1a418114451245c69aeaa729f1b040cd343b36eb5ae4c8baa2f8eb1d7eb48c4ab9f5ca551759856bf4d62364025b6565699a2a8fdcea5b40db245428e4058122045c2baa24861a538959c6599ff5722e581995964e99fa29b72f1ea1b1d3dd4294be05a94672d0bc63e5f62419cd929bdcd5cd4bbc4187aba5f61bd35e841179d9294fd8273805106ee5cc3b7d4832841d5d06eff60c85e6b182e841395e24ba04587509392a87c0aabea5362edce8c768e66d99b0609c8db79a93570688d"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x134}}, 0x4000000) 0s ago: executing program 5 (id=1415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000400001c0012800b00010062726964676500000c0002800800080088a800100a0001001f"], 0x48}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read(r2, &(0x7f0000000900)=""/198, 0xc6) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = fsopen(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4b46, &(0x7f0000000000)) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r9}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0)={0xffffffffffffffff}, 0x4, r9, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000800)={0x11, 0x10, 0xfa00, {&(0x7f00000007c0), r10}}, 0x18) syz_genetlink_get_family_id$nfc(&(0x7f00000019c0), r4) getsockopt(r3, 0x200000000114, 0x4, 0x0, &(0x7f00000014c0)) r11 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r11, &(0x7f0000001980)={&(0x7f0000000080)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000100)="d77c2e789eb42c40ca509ebbb53c95ebf4ffca639ae1aceb9bc9ae89efb6c7e017674633a22278aac7058cb699da4b76286df66e5039964770f7251a528841d44a0b7403692e59a616ae9f984571a926e66544a109dc723e232004141af6bbf19bce3d2c490ac8f422a33f74301c99cfccc1c84015c3a9b1d785e121895b4048f3c78413dff102d523fea9d5775c19ee3ba78ebac3686e7d52f14833e8c3489c7d0c7f705f57844ade42ee2d39b81e5f80f145bdcdf11f193f4255a153b75b2bca48a32a1f9fb8a322407f723f43f271", 0xd0}, {&(0x7f0000000200)="96509c21c7ac5894524952491ae94c2ecd91cbf7439d67be9db452dba183093ce005dead33c85454cfe398bc8419eb66abb24095d240e3a9b0908baefb987ba409211a3964da70f5efb519410e16e2762f59aee9ab11180e5427f83f3f46d06a5d5fbb3d39d01721646d586ca27009cc66185a1a90133452f900923f52836f56020d909d10ee2150473ad761b9cece754132", 0x92}, {&(0x7f00000002c0)="57cc457415242c27da81dbf265c372e721ce53d513b32b356725fb1265efa67fdf43d4a8fb2ec5631e88ca74ec6361d0ecf1c9f39d6aa486df538bfe437d6af09875a631601120204eac567b4e66c7db3f5f7c61d6e90d4f2e562d3d53b05774be1e2d8ba3d0bfd971ba28bc9f55", 0x6e}, {&(0x7f0000000340)="a680d2f2f5f82fafd9f28f72b399bfe113d6381944a37d892c1f11b8ee6d8d506b23598a31798ba8223fb044db03fc655fe8952a3e10df51c904ac832d8c6b47499d11718cab7a42f13f009a4faf60066ec2a61b954100864e8883753e376ed301bd83f73ff09e5bdd2106e3daa0a635e4fc6983d26abb80fc0e0a2e4d5aeeafa9d68ddc26cb6084326856ee1edd1e1e0747820d542d8b725b7ca4549d2dc9ff9ebaa99e4c3c2122a4b85e9259d6e6cc9a32cb157c46393a6688b6231b031100693162721a84d0e828e92ffd3c679e6e05b36c6122fcdf5d4d97b61e70700a0750707c1530a3abd68f441ad6ef2b35389548796ed3969844ed51ab2a91c253460bc39fb9beaa528b5d2a67798674451f578f431b8f7304ae1f394913bc92dbad0e4c8f5679c495c347fa1031d12db0e3f2bedbb4b5fcc22ed342de69e8fe437cd79f2b889b9a5c3be5605448a4f538c3db9be664bba795c671bed0cc92924cc8c50b76f9f636c50ac32e8e622371ffc328d1a01bb4c40a89c289d44779ade089de948df432ce02372406302568b2345ea4998ba61e34e242fa62c105d8c9ee362d5b6e7b4c94745cddb9dc6092d6fde0210228020beeac2aef0ad1b9ace9ea1a1e93325e54cecaa990689547c12cf23251b06c3ad4d4529e5e691b7152abe5f63b4a2782864e23badf288a1be2e3572bd5a34690c95cd913fb8b5680c695aa147c69f0749c99f9b7ccb7c6988df3934038d4b73d24623031dee828abf7f164dd95fdc0a32caf94535a76b5977a846e1a0d8aad66408613c31a743864e128a16e011f4a7e8475d534e8fbfe7dbe85348fc0766e9a33983cc339f069759c7a18df44ae8edc5dea566fb9013083655173609efd25ba9d74bff229d5e67ccfb1c26ae7815cd2953f6c2dc872ceaf4a7512407174bfcc05111fcc3bd1895db1d3f97efcb50a17529877d381fbfc11b438cf5cf9d37604bd4d1bc2e4602f1b9700aaff9ea4fa68f3a94a8a4cf5eeab59531fce17881705c9104fc6b79b97e2a1b0db9b09de8d920634588506b557394e71c9ec3dbe587caf12c17f37837d2748abe3f5e67f4293ccea7f7dcc5a1eaf57ac614446487e6cbbd5d3603f82dbe29c9ff3fc719b47d1c1f44a581b0ee66413955f6991015fe39f0c0de1ea11942608848bbe8b89a0de0aec5da307354b278f176137b77a8d1e141db9c3869425904012cc3f535f302c44852399eea16aefe9e19a706e87c91d50619976a80214ed1540fe82ad2e539e7f323706ec3906b8aa8094b429c23511ce576d3f6fa7dbb6ad8ef2e9df9dfd5b66614c052c90192d53ea97d41ae21ac5bee75fe89152c78fa3010095686fcd6d3b8257def073c3538d97c4d2d03fbfae2cfd320c14203c67593adcfd63a47c49d3cc4774cce8c0ff94d60e7f359585abc6e87652e8c8ba2f033ca8f648ac39a411236e9e3814e40ffe458c04f80e814d8279156f889d13cb9941c680d879a6d33b857f64c8d4c99d0e8ed245added61ba51492a9c2367f3910f88c9ab4b883e532c3c7ed0a752c760a60b06161d21a6a3be3ff592e5eb511bd3a2bdda0a7ee2ab80ed5857a4c2db383d35204140a9c548e75b70282174d62e04ebf2f6d2f2bf6cde4b4f4ec5d9a8f71835b0c0c5b95932592f6517b259de8e04cef95d47440ba87a48c563a6e259a3be11eb2604e3730f3a32586f59506b6a86cc9dc82a8bf77b0155618e9c2d62ce017619f928d2a6be1fb7480b4d7ef93044f02ab532d1155ed992afb7fe2d087dc6b7a4e712270815bf3988345564672d38e540a3540acd7443ebbf84de4da6f68d398a1cabeb0f6f12ce553ff672f7c0fa9442aa8f27775f6cc04626476496c1eb80fde08f07f70e38a4c37ff60b76b4dea2adb233b70dc50fe99995f1970cdaad9e4c9580c3533f8f342fe71879d7422ed5596e1a465e655bb61ccb34d0e0cbd1e7f72261f14aaff8c6e1408562ec95277d0c4a05bdb5d49d9ced211687c60f840b85030cd12cb03dbc69f058184a313fd42e796ad399f808235fe86c64c2dff4283a610629355d7406712ea60fe66ad07217111917a7cb5173d14286085f09742dc38634cc60fd9498bfe1bfeafec6ddf9a0ecee62ba99d190161babb8f9a1399042c6d883ee0ad5bd899a35b987e15cf555aec6e7ed7e3a7f8c5145f83995c6a626eed50056bbfa3264d4a15737e7069680111982ceb79480bd6c6c2bbbc13d47b156a68a1a37228d91883a1dda2a7fbb672838539523c2bff181fc05f4b415c695f70a9e737c5c75081621949740a52d02c7692b1475767927b1255969bbaaef14ea562f1e7606a2ae969c618a74d849f57eccdf24f2f7ff037e9d2f43d5825bc7da276778171dc83900990a18c5884db6d09b4b3458fcac8d01431f88e03c35fa4b9b01775837fdb645c3cd709672b20234dff8c4b63adc6e25f1813813aff0c357baee509f26d19bf2b75c2663e56714a678f4294f48e3d785cb58d2170c9eba769637a503c946b7d8658a370e6022fd8a0ae42c68439b21308c8f5d3603381b5a8249f727a082eee5b1a162c052646e517acc7b58115bb100f21425495d209fa8e3b030ee7eec9c0adb656bf0c167fcf427bbd8f3c9c2459fa5328ba0e21492795f4069446d5af456f653232da96679f9f1d802b7580c09e663c89b247a3f49beb2789a3743dba92e342d1a645ffd999401cd8e8b464cd8e5fb33337605d62a7486b3dd6da7bb6f097a03e41278200e0b91353c77f0b76e2aa7a5e4b663d4e347a3ee8ab39d1c83958b2a61a7b585a40481e976c30e54b8fb26b499528e69e464261a98cd7d2c2ce398ee166f80ac4ac91560c2fe3c1402a28a7d5bba6f7a6a2177a5b4570ba2d42f9e059a11eb2b08154a303fad37293f243d385a3b26aa83f3a34041a06ec4b9c74062fa2db82a4934623a05589b81c564fe00aad6fe25faa32debba1ff0d14d70fbf0daf332fe1d7e0bae5a127e950837b3d5069591042ed58815c6aea1536c7b493d23d89637c369613cbea3c3e9ac3a5f3fe8f9d3c0454efa5893fcf9cce0ab4dabbfa1bafa40533181302ec801381559effe57ac1154402e2c04a118d7d502f3d55da3216cfe62c81be7a01d994d5b1f7ec7f9d91e17189a04a188fd08dd8fcf4ee689e366ac4c62b863f12cb4ddb8eee4e61c96ca7ffa33a05f7d75aceb555ca139719c73e8a1335b1d80bc809aba12dcc398bb488662308d77e0b665249bbc9342d3f8164b057cabfea10388a4274f26f5c657d5669316c188779afd6f02e1bddeccfd28df63ec77f67c7cdceabb4888869a2e7b71f422c2c93c2a37848cb12464904e12cc73a7572af2f3d85718d9de07d781ed74b3b5a0b22359366d7db1ead376b88e9e39c9b47e0a49c293e90aa6632700b19245a358646f26a2df6ddbb1f04b6e4221c00b75b0a558aadde2cf62e51cc24aa33413626faf1b540c137ab5e0bfbfa9058bfc071fce635e677a358f764fc7c3e65da3316044fb11f033be32ac6160430818f09cbc0994f6ef31585a6350c92d155eb50cefa7ccd5d301d60959360a306e81c7b22ba5ca4e92e68890273f47c6e86f5510b8b54c1b9a14cdf6ef3bb8c94417977d057898148fdc31a159a6a8eb6deee4076f9bcd872e2f41a0ceab5c0be9e87c8d9496cc53e895b78b105d26d19d058e753573a899b073996ee8074669449764e5b0f5402cea0f0a0cded40ab83444295bbe26a5c807f52e63fff2f29a02bee3e54de94c885aaaa60c260a114c72317a0b64eccf0399d45bf4c42b4159e5f47fb8a0ffe0fc17cd6e8698ee6158f55fabc585a176962bc9d39a66181adfc8bed26d74ee34139bbfe8814b71b3ee7e9da1b2a5c111dfc9b0b769581c778b2d479a61d5343ea74c4f63973c7031a59202718499a5c685a23ced17fc2e5b098056eff52ba7a904eb2cf1c45105476e709cadcc53347d9f4196bbe64348ac4629b08b3cb0d65e8976a98395f0c859dfd1de1c48f6027175a45f1b183b4d1d5527d09757f88c409b301d1437cd6575cc061d88dc0b0a33b7a93546e0fcbcd10f72c0609c05e2043353d3405d07a35fccdb8514ecc6776a74c8a6924ce0d6fa55bdb0e017fcb1bf49ff471c142a47d8592d19707c6ce8d6bb8b4c6874d91332f0a05eb97087d1b9b9bee25cd29ef2a6c35e08c748e4db277578c8e1d326d6f13ddc9ca6c6c87989ddaef597eb61e8058f937e6f8490de2491815d9acc0803f0521838422fccff93a5b8c4571a9068ce09d0c0affec0fbe70e05280163e2aac26375ad782239e2509468619fc224ce790e3d93b95f94370ba51865e2d28400ae5cea7c93bd8ac682e519871632361b0c82a3dce1fb81abe84ecd24ec3007511b61f8d27ad8529af960b70ca98e78f47a32b3ecdd86ffb56223ad16167d6dc7a5e44dcdcfa471c558c69e31d56e204483b97ed7d12941420d9e5821ca3f98c06ca3e472f22a556e9bfa40fa47fbf399b25834a1b84fb3ba38dd7940f7eabf7653b241a9a71513294cbf4142d778d20ff4c0062ed3eee4207b7a2d585134d9e55bfb5ab2fe784e34f8117472d5c0a7319f3571f5e854fd6e4181c2cd5987ee5482083e7763bd6ded667f3c2769c0c6294062939233a70c9bf33d8a14c91b45e1c2a40e507940eeb1f7fedb73be9a4253f3b7b31162fdd3b0888c6e4bfbf5ea3fae31bd10013e3dc85a976500f72e4447ff2cea8c3f498eac965c95c0e07e4ead9629da3e3eb72fb053349e30cc28a04906ad646a57148e29109b9d9414a5acd40dfa8993e2093ea8ca5d509eea6772b5262670eb8a12e8ff64aa6d5a2818a6cc8aad79fa14820f9fdb7447ebc7bb07f2904e8200cbf82cc6d430495c12833900eeea28dbf9b0dbf45578ea9d78b550353259cfca85a21f46d0f5f48823c425a31f778076bae9d0f853df4d7da558e839b237707fafb4ffa8a9b0b806cfc69791875cf6621dd506acb830d8eee173dfc6bdaf11bef3c0a64498f1cba4ac32d40929e0c14d02cb88c645a21fd6e7681deca510bcc5a95e1c162770c7cd46d5714381d04469d83b675d8e277206376dedefbf31b02c94921c5269dbe50fcd0f22449a07653cac0c3912525f20eceb80d70cb776fa7a2cffb316ce585c9f94aec372ac7c4adc8c90f6eecd790d2d56397425d24b8e32e376303a5dd2b333617e782102109304a914d97bd47e21739c5e23b35f2e8a5be5963de7eea899241bcf0c13549910fce91e8326379b4cf2ea9b77a33392d6f652f9763e27f29ef10ae68cf61980178f7ef777781d7f27c9f65408a96c8e4f61900c2bde86bc0117bd4e1944dd96aa7299f5238ba2eabafff2b35049f9bbfebeb1c18f4f8a2181c0c990fa3378ff58c8c406f9e2f3ea34931d7e32d8c9301fa52bf6ec0440730a611bc14d79e80fd3ab4de79314379be3ad8dfe07008903c62cbed599b8df50f4cb8e15c26fe7edb923da027f72d196034ec0933862a72d99a8e3b8982c4fdc63fa082162a9b0c5d763cb1bb1ab05a9dc0b29e6f2c72a6f8dbdda60417f6b2bc4f913406922679f5b8f71213e9ad1b2d3ba61b5b6675dfc9cd24e37c17fd87a4f11e1db0bc9ed396cb9031556911c7cd9554ccc1812c0b8f378017737a3b1c52f61a8976f859dcd36b8ff9192309b888189688d9bb31c8a7ba1a267f6dc127ad95fe29d109356d67863f3afac0752de97c8c2b530b9835f97666ac6cc07cbec46dd833bc44f241287f86f9dc5e4c864cf0a8619d63c8d48c9de7ae35ddad8e8726", 0xff8}, {&(0x7f0000001340)="f4fe38df0afc9f3faffa1587f73603d903cd4efa2b364159f8e6d7f75d401c58241f9a84fd64f6ddc701f09acbcf480471874ad4abf81a49c5253786aac646c7eddde6fb34b52161e07ba7d8b70c1e731e91bdd6712d0ab2a84977ec965e941bddfa6ed21fc670120285417bbf0218d839866c6b2a0c983fa407eb32948de874a23cef9572aa2c8e7c340d7a399b8c62c24e9790c6e04003ec48f1", 0x9b}, {&(0x7f0000001440)="aaffbf2a397ded88542a45c8084fdecf39308ef21690adf07e20b18eae1e5dbedd75765d9e1131fefbc94d848d5e25b7b4a00b268bc6ffc8dc09fbb46d6baeb75fbe495adfdd348d8864bdb196893b933278fefa566c46f894a5c2e27a581050c737b7909774991557f67c260b3ee634af", 0x71}, {&(0x7f0000000000)="d96934070bf50d8d0df0c9f8ff6178e28d95864fb69850f7af510e7bba3985d9b883b82fa9d30abb8b012296108061d3", 0x30}, {0x0}], 0x8, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x3a8}, 0x4080000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): d { write } for pid=10006 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 348.269478][ T30] audit: type=1400 audit(1769353021.679:1036): avc: denied { read } for pid=10006 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 348.346999][T10012] tmpfs: Unknown parameter 'grpqŠota_inode_hardlimit' [ 348.353245][ T30] audit: type=1400 audit(1769353021.799:1037): avc: denied { mounton } for pid=10011 comm="syz.2.1023" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 348.407782][ T30] audit: type=1400 audit(1769353021.849:1038): avc: denied { bind } for pid=10004 comm="syz.4.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.430561][T10010] digital: digital_start_poll: Unknown protocol [ 348.435851][ T30] audit: type=1400 audit(1769353021.849:1039): avc: denied { write } for pid=10004 comm="syz.4.1020" path="socket:[26987]" dev="sockfs" ino=26987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.460963][ T5817] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 348.485656][ T30] audit: type=1326 audit(1769353021.929:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f679acb9 code=0x7ffc0000 [ 348.524377][ T30] audit: type=1326 audit(1769353021.929:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f679acb9 code=0x7ffc0000 [ 348.554633][T10021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.561696][ T30] audit: type=1326 audit(1769353021.929:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10011 comm="syz.2.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58f679acb9 code=0x7ffc0000 [ 348.690728][ T5817] usb 4-1: device descriptor read/64, error -71 [ 349.815606][ T5817] usb usb4-port1: attempt power cycle [ 351.585273][ T5817] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 352.077848][ T5817] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 352.091543][ T5817] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.110232][ T5817] usb 4-1: config 2 interface 0 has no altsetting 0 [ 352.124556][ T5817] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 352.162695][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.188486][ T5817] usb 4-1: SerialNumber: syz [ 352.412919][ T5817] ims_pcu 4-1:2.0: Zero length descriptor [ 352.435436][ T5817] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 352.453477][ T5817] usb 4-1: USB disconnect, device number 29 [ 352.713976][T10068] digital: digital_start_poll: Unknown protocol [ 353.915432][ T5817] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 354.258780][T10095] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1044'. [ 354.358850][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 354.358889][ T30] audit: type=1400 audit(1769353027.809:1066): avc: denied { write } for pid=10094 comm="syz.5.1044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 354.362302][T10098] input: syz0 as /devices/virtual/input/input20 [ 354.423624][T10098] netlink: zone id is out of range [ 354.428882][T10098] netlink: zone id is out of range [ 354.434028][T10098] netlink: zone id is out of range [ 354.439300][T10098] netlink: zone id is out of range [ 354.444451][T10098] netlink: zone id is out of range [ 354.449806][T10098] netlink: zone id is out of range [ 354.454946][T10098] netlink: zone id is out of range [ 354.460113][T10098] netlink: zone id is out of range [ 354.465345][T10098] netlink: zone id is out of range [ 354.470534][T10098] netlink: zone id is out of range [ 354.652554][ T30] audit: type=1400 audit(1769353027.959:1067): avc: denied { read } for pid=5166 comm="acpid" name="event4" dev="devtmpfs" ino=3235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.741411][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 354.772887][ T5817] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 354.816860][ T30] audit: type=1400 audit(1769353027.959:1068): avc: denied { open } for pid=5166 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3235 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.840731][ T5817] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.865214][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.925744][ T30] audit: type=1400 audit(1769353027.959:1069): avc: denied { ioctl } for pid=5166 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3235 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.951801][ T30] audit: type=1400 audit(1769353028.249:1070): avc: denied { lock } for pid=10101 comm="syz.0.1045" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.381981][T10115] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1048'. [ 355.459487][T10078] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 355.474801][T10114] digital: digital_start_poll: Unknown protocol [ 355.510730][ T5817] usb 5-1: USB disconnect, device number 29 [ 356.120854][T10130] FAULT_INJECTION: forcing a failure. [ 356.120854][T10130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.147506][ T5817] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 356.157573][T10130] CPU: 0 UID: 0 PID: 10130 Comm: syz.5.1052 Tainted: G L syzkaller #0 PREEMPT(full) [ 356.157600][T10130] Tainted: [L]=SOFTLOCKUP [ 356.157607][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 356.157617][T10130] Call Trace: [ 356.157622][T10130] [ 356.157629][T10130] dump_stack_lvl+0x100/0x190 [ 356.157657][T10130] should_fail_ex.cold+0x5/0xa [ 356.157688][T10130] _copy_from_user+0x2e/0xd0 [ 356.157713][T10130] msr_io+0x93/0x480 [ 356.157740][T10130] ? __pfx_do_set_msr+0x10/0x10 [ 356.157759][T10130] ? __pfx_msr_io+0x10/0x10 [ 356.157790][T10130] kvm_arch_vcpu_ioctl+0xcfa/0x53e0 [ 356.157816][T10130] ? kvm_arch_vcpu_ioctl+0xcdc/0x53e0 [ 356.157842][T10130] ? stack_trace_save+0x8e/0xc0 [ 356.157869][T10130] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 356.157895][T10130] ? __lock_acquire+0x4a5/0x2630 [ 356.157915][T10130] ? kasan_save_stack+0x3f/0x50 [ 356.157935][T10130] ? kasan_save_stack+0x30/0x50 [ 356.157953][T10130] ? kasan_save_track+0x14/0x30 [ 356.157971][T10130] ? kasan_save_free_info+0x3b/0x70 [ 356.157991][T10130] ? __lock_acquire+0x4a5/0x2630 [ 356.158017][T10130] ? lock_acquire+0x17c/0x330 [ 356.158037][T10130] ? __pfx___might_resched+0x10/0x10 [ 356.158059][T10130] ? rcu_is_watching+0x12/0xc0 [ 356.158083][T10130] ? trace_contention_end+0xd6/0x110 [ 356.158102][T10130] ? __mutex_lock+0x26a/0x1b90 [ 356.158124][T10130] ? kvm_vcpu_ioctl+0x322/0x16d0 [ 356.158144][T10130] ? kasan_quarantine_put+0x104/0x240 [ 356.158165][T10130] ? __pfx___mutex_lock+0x10/0x10 [ 356.158187][T10130] ? tomoyo_path_number_perm+0x28f/0x580 [ 356.158222][T10130] ? tomoyo_path_number_perm+0x188/0x580 [ 356.158253][T10130] ? kvm_vcpu_ioctl+0x8a0/0x16d0 [ 356.158269][T10130] kvm_vcpu_ioctl+0x8a0/0x16d0 [ 356.158291][T10130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 356.158309][T10130] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 356.158337][T10130] ? do_vfs_ioctl+0x226/0x13e0 [ 356.158359][T10130] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 356.158373][T10130] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 356.158395][T10130] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 356.158432][T10130] ? selinux_file_ioctl+0x139/0x290 [ 356.158448][T10130] ? selinux_file_ioctl+0xb4/0x290 [ 356.158468][T10130] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 356.158488][T10130] __x64_sys_ioctl+0x18e/0x210 [ 356.158507][T10130] do_syscall_64+0xc9/0xf80 [ 356.158528][T10130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.158545][T10130] RIP: 0033:0x7fa3eb39acb9 [ 356.158561][T10130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.158577][T10130] RSP: 002b:00007fa3ec296028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.158595][T10130] RAX: ffffffffffffffda RBX: 00007fa3eb615fa0 RCX: 00007fa3eb39acb9 [ 356.158605][T10130] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 356.158616][T10130] RBP: 00007fa3ec296090 R08: 0000000000000000 R09: 0000000000000000 [ 356.158625][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.158635][T10130] R13: 00007fa3eb616038 R14: 00007fa3eb615fa0 R15: 00007ffeeef257c8 [ 356.158660][T10130] [ 356.666032][ T5817] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 356.684160][ T5817] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 356.700340][T10134] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1053'. [ 356.725484][ T5817] usb 3-1: config 2 interface 0 has no altsetting 0 [ 356.740992][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 356.750762][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 356.776410][ T5817] usb 3-1: SerialNumber: syz [ 357.171176][ T5817] ims_pcu 3-1:2.0: Zero length descriptor [ 357.198218][ T5817] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 357.240610][ T5817] usb 3-1: USB disconnect, device number 26 [ 357.926025][ T5861] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 358.229763][ T5817] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 358.315079][ T5861] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 358.342366][ T5861] usb 5-1: config 0 has no interface number 0 [ 358.357099][T10168] binder: BINDER_SET_CONTEXT_MGR already set [ 358.364102][ T5861] usb 5-1: too many endpoints for config 0 interface 20 altsetting 20: 187, using maximum allowed: 30 [ 358.379131][T10168] binder: 10167:10168 ioctl 4018620d 200000004a80 returned -16 [ 358.385527][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 358.390140][ T5861] usb 5-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 358.412007][ T5861] usb 5-1: config 0 interface 20 has no altsetting 0 [ 358.413288][ T5817] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 358.419218][ T5861] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 358.438751][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.446904][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1062'. [ 358.478902][ T5861] usb 5-1: config 0 descriptor?? [ 358.487200][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.491030][ T5861] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 358.527385][ T5817] pvrusb2: Hardware description: Terratec Grabster AV400 [ 358.534624][ T5817] pvrusb2: ********** [ 358.548649][ T5817] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 358.562427][ T5817] pvrusb2: Important functionality might not be entirely working. [ 358.571289][ T5817] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 358.584650][ T5817] pvrusb2: ********** [ 358.625474][ T915] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 358.744231][ T2338] pvrusb2: Invalid write control endpoint [ 358.748620][ T5817] usb 3-1: USB disconnect, device number 27 [ 358.776706][ T915] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 358.785577][ T2338] pvrusb2: Invalid write control endpoint [ 358.792731][ T915] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.812799][ T915] usb 6-1: config 2 interface 0 has no altsetting 0 [ 358.824354][ T915] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 358.835808][ T915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 358.849863][T10178] netlink: 'syz.3.1063': attribute type 21 has an invalid length. [ 358.857921][T10178] netlink: 'syz.3.1063': attribute type 6 has an invalid length. [ 358.865786][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1063'. [ 359.015523][ T30] audit: type=1400 audit(1769353032.299:1071): avc: denied { create } for pid=10174 comm="syz.3.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.049307][ T915] usb 6-1: SerialNumber: syz [ 359.164394][ T30] audit: type=1400 audit(1769353032.299:1072): avc: denied { write } for pid=10174 comm="syz.3.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 359.183977][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 359.183991][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 359.183998][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 359.184007][ T2338] pvrusb2: Device being rendered inoperable [ 359.184040][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 359.184881][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 359.251072][ T5861] cpia1 5-1:0.20: unexpected state after lo power cmd: 00 [ 359.259983][ T2338] pvrusb2: Attached sub-driver cx25840 [ 359.267905][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 359.278129][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 359.330505][ T915] ims_pcu 6-1:2.0: Zero length descriptor [ 359.344414][ T915] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22 [ 359.358414][ T915] usb 6-1: USB disconnect, device number 22 [ 360.405486][ T5817] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 360.601341][ T5861] gspca_cpia1: usb_control_msg 02, error -110 [ 360.618466][ T5861] gspca_cpia1: usb_control_msg 05, error -32 [ 360.638597][ T5861] gspca_cpia1: usb_control_msg 05, error -32 [ 360.717517][ T5861] gspca_cpia1: usb_control_msg 05, error -32 [ 360.758632][ T5861] gspca_cpia1: usb_control_msg 05, error -32 [ 360.771132][ T5817] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 360.787488][ T5817] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 360.795326][ T5861] cpia1 5-1:0.20: unexpected systemstate: 00 [ 360.955244][ T5817] usb 3-1: config 2 interface 0 has no altsetting 0 [ 360.963174][ T5817] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 360.972873][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.982488][ T5817] usb 3-1: SerialNumber: syz [ 361.127269][ T5861] usb 5-1: USB disconnect, device number 30 [ 361.409926][ T5817] ims_pcu 3-1:2.0: Zero length descriptor [ 361.424207][ T5817] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 361.470604][ T5817] usb 3-1: USB disconnect, device number 28 [ 361.835244][ T5861] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 361.845277][ T5868] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 361.995450][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 362.004573][ T5868] usb 4-1: too many configurations: 133, using maximum allowed: 8 [ 362.203951][ T5861] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 362.299020][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.309729][ T5868] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 362.317368][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.334019][ T5868] usb 4-1: can't read configurations, error -61 [ 362.340263][T10233] FAULT_INJECTION: forcing a failure. [ 362.340263][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 362.340298][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.5.1083 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.340322][T10233] Tainted: [L]=SOFTLOCKUP [ 362.340328][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 362.340337][T10233] Call Trace: [ 362.340343][T10233] [ 362.340349][T10233] dump_stack_lvl+0x100/0x190 [ 362.340375][T10233] should_fail_ex.cold+0x5/0xa [ 362.340401][T10233] should_failslab+0xc2/0x120 [ 362.340422][T10233] __kmalloc_cache_noprof+0x80/0x810 [ 362.340441][T10233] ? tomoyo_init_log+0x1a0/0x20c0 [ 362.340457][T10233] ? format_decode+0x1a7/0xcd0 [ 362.340481][T10233] ? tomoyo_init_log+0x1a0/0x20c0 [ 362.340496][T10233] tomoyo_init_log+0x1a0/0x20c0 [ 362.340512][T10233] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 362.340535][T10233] ? vsnprintf+0x4ee/0x1240 [ 362.340561][T10233] ? __pfx_tomoyo_init_log+0x10/0x10 [ 362.340577][T10233] ? tomoyo_profile+0x47/0x60 [ 362.340594][T10233] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 362.340620][T10233] tomoyo_supervisor+0x506/0x1340 [ 362.340643][T10233] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 362.340677][T10233] ? tomoyo_check_path_acl+0x141/0x210 [ 362.340700][T10233] ? tomoyo_check_acl+0x1f7/0x410 [ 362.340724][T10233] tomoyo_path_permission+0x270/0x3b0 [ 362.340749][T10233] tomoyo_check_open_permission+0x37f/0x3c0 [ 362.340772][T10233] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 362.340817][T10233] ? do_raw_spin_lock+0x128/0x260 [ 362.340836][T10233] ? path_get+0x61/0x80 [ 362.340859][T10233] tomoyo_file_open+0x6b/0x90 [ 362.340878][T10233] security_file_open+0xb5/0x1e0 [ 362.340896][T10233] do_dentry_open+0x58c/0x1570 [ 362.340914][T10233] ? security_inode_permission+0xbf/0x250 [ 362.340933][T10233] vfs_open+0x82/0x3f0 [ 362.340957][T10233] path_openat+0x21dc/0x3120 [ 362.340982][T10233] ? __pfx_path_openat+0x10/0x10 [ 362.341009][T10233] do_filp_open+0x1f7/0x420 [ 362.341028][T10233] ? __pfx_do_filp_open+0x10/0x10 [ 362.341061][T10233] ? _raw_spin_unlock+0x28/0x50 [ 362.341082][T10233] ? alloc_fd+0x476/0x790 [ 362.341107][T10233] do_sys_openat2+0x12e/0x220 [ 362.341128][T10233] ? __pfx_do_sys_openat2+0x10/0x10 [ 362.341147][T10233] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 362.341176][T10233] __x64_sys_openat+0x12d/0x210 [ 362.341197][T10233] ? __pfx___x64_sys_openat+0x10/0x10 [ 362.341220][T10233] ? do_user_addr_fault+0x8d6/0x12f0 [ 362.341245][T10233] do_syscall_64+0xc9/0xf80 [ 362.341263][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.341278][T10233] RIP: 0033:0x7fa3eb35b58e [ 362.341290][T10233] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 362.341304][T10233] RSP: 002b:00007fa3ec293ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.341319][T10233] RAX: ffffffffffffffda RBX: 00007fa3ec2966c0 RCX: 00007fa3eb35b58e [ 362.341329][T10233] RDX: 0000000000000002 RSI: 00007fa3eb404178 RDI: ffffffffffffff9c [ 362.341338][T10233] RBP: 00007fa3ec296090 R08: 0000000000000000 R09: 0000000000000000 [ 362.341347][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 362.341356][T10233] R13: 0000200000000000 R14: 0000000000000000 R15: 00007ffeeef257c8 [ 362.341377][T10233] [ 362.784320][ T30] audit: type=1400 audit(1769353036.229:1073): avc: denied { mount } for pid=10238 comm="syz.0.1086" name="/" dev="mqueue" ino=4798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 362.807095][ T5817] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 362.815330][ T5868] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 363.075260][ T5861] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.084122][T10222] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.095341][ T5817] usb 6-1: Using ep0 maxpacket: 32 [ 363.120785][ T5817] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 363.135138][ T5817] usb 6-1: config 0 has no interface number 0 [ 363.143928][ T5817] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 363.145277][ T794] usb 5-1: USB disconnect, device number 31 [ 363.154847][ T5817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.173292][ T5817] usb 6-1: Product: syz [ 363.179123][ T5817] usb 6-1: Manufacturer: syz [ 363.184871][ T5817] usb 6-1: SerialNumber: syz [ 363.187388][ T5868] usb 4-1: too many configurations: 133, using maximum allowed: 8 [ 363.199209][ T5868] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.200073][ T5817] usb 6-1: config 0 descriptor?? [ 363.213141][ T5868] usb 4-1: can't read configurations, error -61 [ 363.251448][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 363.254710][ T5817] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 363.265530][ T5817] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 363.330430][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.341877][ T5868] usb usb4-port1: attempt power cycle [ 363.361115][ T5861] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 363.377546][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.546338][ T5817] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 363.554779][ T5817] usbhid 6-1:0.35: couldn't find an input interrupt endpoint [ 363.561647][ T5861] usb 3-1: config 0 descriptor?? [ 363.565501][ T5817] usb 6-1: USB disconnect, device number 23 [ 363.998433][ T5861] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 364.016290][ T5868] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.124623][ T5868] usb 4-1: too many configurations: 133, using maximum allowed: 8 [ 364.165687][ T5868] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 364.200209][ T5868] usb 4-1: can't read configurations, error -61 [ 364.573685][ T794] usb 3-1: USB disconnect, device number 29 [ 364.625269][ T5861] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 364.632950][ T5868] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 364.732608][ T5868] usb 4-1: device descriptor read/8, error -71 [ 365.214727][ T5868] usb usb4-port1: unable to enumerate USB device [ 365.232184][ T5861] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 365.249149][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.265330][ T5861] usb 5-1: config 0 descriptor?? [ 365.289019][T10261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10261 comm=syz.0.1092 [ 365.307016][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 365.332591][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.350878][T10261] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.882830][T10277] can0: slcan on ttyS3. [ 366.335940][T10277] can0 (unregistered): slcan off ttyS3. [ 366.495951][T10281] can0: slcan on ttyS3. [ 366.545647][ T5817] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 367.099166][ T5817] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 367.110285][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.361928][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.372753][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 367.389864][ T5817] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 367.857055][ T5817] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 367.893138][ T5817] usb 1-1: Manufacturer: syz [ 367.932453][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1102'. [ 367.967661][ T5817] usb 1-1: config 0 descriptor?? [ 368.022708][ T30] audit: type=1400 audit(1769353041.469:1074): avc: denied { name_bind } for pid=10310 comm="syz.3.1104" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 368.092969][ T30] audit: type=1400 audit(1769353041.469:1075): avc: denied { node_bind } for pid=10310 comm="syz.3.1104" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 368.216059][T10254] can0 (unregistered): slcan off ttyS3. [ 368.395236][ T7785] usb 5-1: USB disconnect, device number 32 [ 368.407009][ T915] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 368.506911][ T30] audit: type=1400 audit(1769353041.929:1076): avc: denied { getopt } for pid=10304 comm="syz.2.1102" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.555888][ T5817] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 368.608078][T10323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=10323 comm=syz.2.1102 [ 368.649615][ T5817] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 368.755258][ T915] usb 4-1: Using ep0 maxpacket: 16 [ 368.782923][ T915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.818513][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.915804][ T915] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 368.930682][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.939527][ T915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.958705][ T30] audit: type=1400 audit(1769353042.409:1077): avc: denied { write } for pid=10272 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 368.989543][ T915] usb 4-1: config 0 descriptor?? [ 368.996957][ T7785] usb 1-1: USB disconnect, device number 36 [ 369.437190][ T915] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 370.121131][ T915] usb 4-1: USB disconnect, device number 34 [ 370.470597][ T30] audit: type=1400 audit(1769353043.909:1078): avc: denied { read write } for pid=10364 comm="syz.5.1115" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 370.554625][ T30] audit: type=1400 audit(1769353043.909:1079): avc: denied { open } for pid=10364 comm="syz.5.1115" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 370.590099][ T30] audit: type=1400 audit(1769353043.999:1080): avc: denied { unmount } for pid=7195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 370.779591][ T30] audit: type=1400 audit(1769353044.129:1081): avc: denied { ioctl } for pid=10375 comm="syz.2.1118" path="socket:[27615]" dev="sockfs" ino=27615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 371.268396][ T30] audit: type=1400 audit(1769353044.139:1082): avc: denied { mounton } for pid=10375 comm="syz.2.1118" path="mnt:[4026532938]" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 371.416998][T10394] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1122'. [ 371.535608][ T915] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 371.668088][T10394] input: syz0 as /devices/virtual/input/input21 [ 371.895702][ T915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 371.926333][T10405] netlink: 'syz.5.1125': attribute type 8 has an invalid length. [ 371.942373][ T915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 371.975143][T10405] rdma_rxe: rxe_newlink: failed to add syz_tun [ 372.068003][ T915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 372.100378][ T915] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 372.119489][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.143697][ T915] usb 1-1: Product: syz [ 372.157915][ T915] usb 1-1: Manufacturer: syz [ 372.173348][ T915] usb 1-1: SerialNumber: syz [ 372.341891][ T915] usb 1-1: config 0 descriptor?? [ 372.381091][T10382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 372.758742][T10382] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 373.029798][ T30] audit: type=1400 audit(1769353046.469:1083): avc: denied { create } for pid=10418 comm="syz.5.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 373.345438][ T5868] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 373.407591][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 373.785313][ T5868] usb 6-1: device descriptor read/64, error -32 [ 373.963673][T10426] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 374.048214][ T5868] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 374.102166][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 374.358520][ T5868] usb 6-1: device descriptor read/64, error -32 [ 374.542963][ T5868] usb usb6-port1: attempt power cycle [ 375.162148][ T5868] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 375.264008][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 375.270807][T10444] netlink: 'syz.2.1135': attribute type 11 has an invalid length. [ 375.282283][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 375.295126][ T5868] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.316686][ T5868] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.326645][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.359312][ T5868] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 375.390495][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.416254][ T5868] usb 6-1: config 0 descriptor?? [ 375.430383][T10445] binder: BINDER_SET_CONTEXT_MGR already set [ 375.438976][T10445] binder: 10443:10445 ioctl 4018620d 200000004a80 returned -16 [ 375.785705][ T5861] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 376.002068][ T5861] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 376.012899][ T5861] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.029420][ T5861] usb 4-1: config 2 interface 0 has no altsetting 0 [ 376.080097][ T5861] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 376.090895][ T5868] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 376.100033][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 376.112326][ T5868] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 376.120699][ T5861] usb 4-1: SerialNumber: syz [ 376.125912][ T5868] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 376.148137][ T5868] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 376.155982][ T5868] nzxt-smart2 0003:1E71:2009.0019: unknown main item tag 0x0 [ 376.168860][ T5868] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 376.292919][ T30] audit: type=1400 audit(1769353049.739:1084): avc: denied { write } for pid=10418 comm="syz.5.1129" name="hidraw0" dev="devtmpfs" ino=3291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 376.345738][ T5868] usb 6-1: USB disconnect, device number 26 [ 376.365131][ T5861] ims_pcu 4-1:2.0: Zero length descriptor [ 376.403510][ T5861] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 376.453948][ T5861] usb 4-1: USB disconnect, device number 35 [ 376.527408][ T794] usb 1-1: USB disconnect, device number 37 [ 377.458801][ T30] audit: type=1326 audit(1769353050.909:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.656098][ T30] audit: type=1326 audit(1769353050.909:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.739166][ T30] audit: type=1326 audit(1769353050.909:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.803150][ T30] audit: type=1326 audit(1769353050.909:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.874131][ T30] audit: type=1326 audit(1769353050.909:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.902835][ T30] audit: type=1326 audit(1769353050.909:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.929919][ T30] audit: type=1326 audit(1769353050.909:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.956622][ T30] audit: type=1326 audit(1769353050.929:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.3.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8b199acb9 code=0x7ffc0000 [ 377.992147][T10486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.121406][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.127858][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.496571][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 378.496586][ T30] audit: type=1400 audit(1769353051.949:1117): avc: denied { create } for pid=10483 comm="syz.2.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 378.585270][ T915] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 378.675533][ T30] audit: type=1400 audit(1769353052.089:1118): avc: denied { append } for pid=10461 comm="syz.3.1142" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.815275][ T915] usb 5-1: device descriptor read/64, error -71 [ 378.885247][ T7785] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 379.036830][T10499] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1150'. [ 379.065249][ T915] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 379.216209][T10501] input: syz0 as /devices/virtual/input/input22 [ 379.256468][ T915] usb 5-1: device descriptor read/64, error -71 [ 379.379073][ T915] usb usb5-port1: attempt power cycle [ 379.493968][ T30] audit: type=1400 audit(1769353052.939:1119): avc: denied { sys_admin } for pid=10483 comm="syz.2.1148" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 379.799990][ T915] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 379.878800][ T915] usb 5-1: device descriptor read/8, error -71 [ 380.181654][ T915] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 380.242502][ T915] usb 5-1: device descriptor read/8, error -71 [ 380.355528][ T915] usb usb5-port1: unable to enumerate USB device [ 380.625565][ T794] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 380.747484][T10511] overlayfs: failed to resolve './file0': -2 [ 381.335244][ T794] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 381.345595][ T794] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.361236][ T794] usb 3-1: config 2 interface 0 has no altsetting 0 [ 382.067709][ T794] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 382.085256][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.093534][ T794] usb 3-1: SerialNumber: syz [ 382.369814][ T794] ims_pcu 3-1:2.0: Zero length descriptor [ 382.378083][ T794] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 382.422260][T10527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1159'. [ 382.440276][ T794] usb 3-1: USB disconnect, device number 30 [ 382.447827][T10529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.647656][ T794] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 384.677662][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1168'. [ 384.825253][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 384.836754][ T794] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 384.857272][ T794] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 384.877252][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.015882][ T30] audit: type=1400 audit(1769353058.469:1120): avc: denied { create } for pid=10578 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 385.096332][ T915] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 385.132254][T10562] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 385.144957][T10582] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1171'. [ 385.208334][ T7785] usb 4-1: USB disconnect, device number 36 [ 385.257026][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.271544][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.292038][ T915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.320756][ T915] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.337235][ T915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.349714][ T915] usb 3-1: config 0 descriptor?? [ 385.468881][ T5817] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 385.635247][ T5817] usb 6-1: device descriptor read/64, error -71 [ 385.761853][ T915] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 385.779628][ T915] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 385.836155][ T915] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 385.893661][T10589] fuse: Bad value for 'fd' [ 385.915276][ T5817] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 386.185239][ T5817] usb 6-1: device descriptor read/64, error -71 [ 386.335914][ T5817] usb usb6-port1: attempt power cycle [ 386.377323][ T30] audit: type=1400 audit(1769353059.829:1121): avc: denied { create } for pid=10575 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 386.455495][ T794] usb 3-1: USB disconnect, device number 31 [ 386.467454][ T30] audit: type=1400 audit(1769353059.849:1122): avc: denied { setopt } for pid=10575 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 387.170252][ T5817] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 387.266615][ T5817] usb 6-1: device descriptor read/8, error -71 [ 387.994684][T10607] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1178'. [ 388.036134][ T915] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 388.043851][ T5817] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 388.193714][ T30] audit: type=1400 audit(1769353061.639:1123): avc: denied { mount } for pid=10613 comm="syz.2.1181" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 388.230980][ T915] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 388.243592][ T915] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.259388][ T915] usb 4-1: config 2 interface 0 has no altsetting 0 [ 388.267624][ T5817] usb 6-1: device not accepting address 30, error -71 [ 388.277403][ T5817] usb usb6-port1: unable to enumerate USB device [ 388.296916][ T915] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 388.301771][T10615] input: syz0 as /devices/virtual/input/input24 [ 388.306737][ T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.324141][ T915] usb 4-1: Product: syz [ 388.334767][ T915] usb 4-1: Manufacturer: syz [ 388.341060][ T915] usb 4-1: SerialNumber: syz [ 388.480695][ T7785] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 388.745270][ T7785] usb 1-1: Using ep0 maxpacket: 8 [ 388.756813][ T7785] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 388.762164][T10621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1182'. [ 388.775214][ T7785] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.791870][ T7785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.973837][ T915] usb 4-1: USB disconnect, device number 37 [ 389.811893][T10612] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.863638][ T7785] usb 1-1: USB disconnect, device number 39 [ 390.190361][T10631] fuse: Bad value for 'fd' [ 390.482056][T10639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=10639 comm=syz.3.1187 [ 390.489338][ T30] audit: type=1400 audit(1769353063.939:1124): avc: denied { read } for pid=10640 comm="syz.5.1188" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 390.585878][ T7785] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 390.761194][ T7785] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.120623][ T7785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.174198][ T7785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.194717][ T7785] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.274504][T10644] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1188'. [ 391.298999][T10644] unsupported nlmsg_type 40 [ 391.315386][ T30] audit: type=1400 audit(1769353063.939:1125): avc: denied { open } for pid=10640 comm="syz.5.1188" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 391.345310][ T7785] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 391.388644][ T7785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.411272][ T7785] usb 5-1: config 0 descriptor?? [ 391.825219][ T30] audit: type=1400 audit(1769353065.269:1126): avc: denied { getopt } for pid=10652 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.938668][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: unknown main item tag 0x0 [ 391.994382][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: unknown main item tag 0x0 [ 392.072744][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: unknown main item tag 0x0 [ 392.092939][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: unknown main item tag 0x0 [ 392.123233][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: unknown main item tag 0x0 [ 392.166807][ T30] audit: type=1400 audit(1769353065.619:1127): avc: denied { setopt } for pid=10632 comm="syz.4.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 392.184028][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 392.265289][ T915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 392.284735][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: U2F Zero LED initialised [ 392.305487][ T7785] hid-u2fzero 0003:10C4:8ACF.001B: U2F Zero RNG initialised [ 392.349659][T10668] trusted_key: encrypted_key: insufficient parameters specified [ 392.422963][ T30] audit: type=1400 audit(1769353065.869:1128): avc: denied { wake_alarm } for pid=10654 comm="syz.2.1192" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 392.450518][ T915] usb 4-1: Using ep0 maxpacket: 16 [ 392.472186][ T915] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 392.488328][ T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.508335][ T5861] usb 5-1: USB disconnect, device number 37 [ 392.515260][ T915] usb 4-1: Product: syz [ 392.524467][ T915] usb 4-1: Manufacturer: syz [ 392.541740][ T915] usb 4-1: SerialNumber: syz [ 392.575288][ T915] usb 4-1: config 0 descriptor?? [ 392.582862][ T915] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 392.603162][ T30] audit: type=1326 audit(1769353066.049:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10670 comm="syz.0.1195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82d199acb9 code=0x0 [ 393.295661][ T915] gspca_sn9c2028: read1 error -110 [ 393.302591][ T915] gspca_sn9c2028: read1 error -32 [ 393.311286][ T915] gspca_sn9c2028: read1 error -32 [ 393.323512][ T915] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 394.145394][ T915] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 394.749914][T10692] netlink: 'syz.4.1201': attribute type 8 has an invalid length. [ 394.769052][T10692] syz1: rxe_newlink: already configured on syz_tun [ 394.858839][ T7785] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 394.866878][ T915] usb 3-1: Using ep0 maxpacket: 16 [ 394.927842][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.967705][ T915] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 394.976831][ T915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.053772][ T915] usb 3-1: config 0 descriptor?? [ 395.075542][ T7785] usb 6-1: Using ep0 maxpacket: 32 [ 395.097147][ T7785] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 395.125281][ T7785] usb 6-1: config 0 has no interface number 0 [ 395.139532][ T30] audit: type=1400 audit(1769353068.589:1130): avc: denied { connect } for pid=10694 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.179196][ T7785] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 395.206762][ T7785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.225545][ T7785] usb 6-1: Product: syz [ 395.235309][ T7785] usb 6-1: Manufacturer: syz [ 395.239944][ T7785] usb 6-1: SerialNumber: syz [ 395.257217][ T7785] usb 6-1: config 0 descriptor?? [ 395.269482][ T7785] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 395.314948][T10706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1204'. [ 395.413201][T10707] input: syz0 as /devices/virtual/input/input25 [ 395.446321][ T794] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 395.458453][T10707] net_ratelimit: 67 callbacks suppressed [ 395.458483][T10707] netlink: zone id is out of range [ 395.469376][T10707] netlink: zone id is out of range [ 395.474526][T10707] netlink: zone id is out of range [ 395.479943][T10707] netlink: zone id is out of range [ 395.485069][T10707] netlink: zone id is out of range [ 395.490241][T10707] netlink: zone id is out of range [ 395.495381][T10707] netlink: zone id is out of range [ 395.500522][T10707] netlink: zone id is out of range [ 395.505935][T10707] netlink: zone id is out of range [ 395.511573][T10707] netlink: zone id is out of range [ 395.714162][ T915] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 395.725972][ T7785] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 395.739099][ T7785] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 395.837001][ T794] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 395.871601][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.945833][ T794] usb 5-1: config 0 descriptor?? [ 395.983214][ T794] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 396.034161][T10712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.068816][ T794] usb 4-1: USB disconnect, device number 38 [ 396.210739][ T915] usb 3-1: USB disconnect, device number 32 [ 396.388636][ T30] audit: type=1400 audit(1769353069.839:1131): avc: denied { block_suspend } for pid=10684 comm="syz.5.1199" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 397.512595][ T30] audit: type=1400 audit(1769353070.949:1132): avc: denied { getopt } for pid=10725 comm="syz.3.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.563256][ T30] audit: type=1326 audit(1769353071.009:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.2.1210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58f679acb9 code=0x0 [ 397.597540][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 397.597764][ T794] usb 6-1: USB disconnect, device number 31 [ 397.756791][ T794] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 397.773635][ T794] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 397.786579][ T794] quatech2 6-1:0.51: device disconnected [ 398.622311][ T915] usb 5-1: USB disconnect, device number 38 [ 399.114269][ T30] audit: type=1400 audit(1769353072.459:1134): avc: denied { execmem } for pid=10744 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 399.146799][ T30] audit: type=1400 audit(1769353072.559:1135): avc: denied { sys_module } for pid=10739 comm="syz.3.1214" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 399.601233][ T30] audit: type=1400 audit(1769353072.559:1136): avc: denied { module_request } for pid=10739 comm="syz.3.1214" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 399.705409][ T30] audit: type=1400 audit(1769353072.659:1137): avc: denied { create } for pid=10744 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 399.764494][ T30] audit: type=1400 audit(1769353072.669:1138): avc: denied { write } for pid=10744 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.113307][T10762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 400.159860][ T30] audit: type=1400 audit(1769353072.669:1139): avc: denied { read } for pid=10744 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.336086][ T30] audit: type=1400 audit(1769353072.669:1140): avc: denied { read write } for pid=10744 comm="syz.2.1213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 401.495974][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 401.495989][ T30] audit: type=1400 audit(1769353074.949:1186): avc: denied { create } for pid=10780 comm="syz.5.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.595290][ T915] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 401.725336][ T7785] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 401.771962][ T30] audit: type=1400 audit(1769353075.209:1187): avc: denied { mounton } for pid=10780 comm="syz.5.1225" path="/164/file1" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.880286][ T915] usb 5-1: Using ep0 maxpacket: 16 [ 401.896231][ T7785] usb 3-1: Using ep0 maxpacket: 8 [ 401.906791][ T915] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 401.918907][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.931182][ T7785] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 401.941868][ T7785] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.955936][ T915] usb 5-1: Product: syz [ 401.960257][ T915] usb 5-1: Manufacturer: syz [ 401.973571][ T7785] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.984237][ T915] usb 5-1: SerialNumber: syz [ 401.989884][ T30] audit: type=1400 audit(1769353075.439:1188): avc: denied { create } for pid=10785 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.012385][ T915] usb 5-1: config 0 descriptor?? [ 402.018158][ T7785] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.032874][ T915] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 402.048284][ T7785] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.070132][ T30] audit: type=1400 audit(1769353075.509:1189): avc: denied { write } for pid=10785 comm="syz.3.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.107065][ T7785] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.134141][ T7785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.144834][ T30] audit: type=1400 audit(1769353075.549:1190): avc: denied { map_create } for pid=10788 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 402.293581][ T30] audit: type=1400 audit(1769353075.549:1191): avc: denied { map_read map_write } for pid=10788 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 402.316286][ T30] audit: type=1400 audit(1769353075.559:1192): avc: denied { create } for pid=10788 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 402.565725][ T915] gspca_sn9c2028: read1 error -110 [ 402.701114][ T915] gspca_sn9c2028: read1 error -32 [ 402.711211][ T7785] usb 3-1: GET_CAPABILITIES returned 0 [ 402.719819][ T7785] usbtmc 3-1:16.0: can't read capabilities [ 402.726043][ T915] gspca_sn9c2028: read1 error -32 [ 402.737614][ T30] audit: type=1400 audit(1769353075.879:1193): avc: denied { write } for pid=10790 comm="syz.3.1229" name="tcp" dev="proc" ino=4026533012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 402.761237][ T915] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 402.770905][ T30] audit: type=1400 audit(1769353076.159:1194): avc: denied { allowed } for pid=10788 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 402.807382][ T30] audit: type=1400 audit(1769353076.159:1195): avc: denied { create } for pid=10788 comm="syz.0.1228" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.863857][ T7785] usb 3-1: USB disconnect, device number 33 [ 403.095241][ T915] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 403.265216][ T915] usb 1-1: Using ep0 maxpacket: 16 [ 403.277253][ T915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.287820][ T915] usb 1-1: config 0 has no interfaces? [ 403.296844][ T915] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 403.316980][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.325206][ T915] usb 1-1: Product: syz [ 403.329399][ T915] usb 1-1: Manufacturer: syz [ 403.333984][ T915] usb 1-1: SerialNumber: syz [ 403.342072][ T915] usb 1-1: config 0 descriptor?? [ 403.375274][ T7785] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 403.397872][ T794] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 403.470344][T10810] gfs2: error -5 reading superblock [ 403.605314][ T7785] usb 4-1: Using ep0 maxpacket: 8 [ 403.684997][ T7785] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 403.702085][ T7785] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.732460][ T7785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.895879][ T794] usb 6-1: Using ep0 maxpacket: 16 [ 403.926572][ T794] usb 6-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 403.937902][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.945366][ T7785] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 403.977473][ T794] usb 6-1: Product: syz [ 403.981645][ T794] usb 6-1: Manufacturer: syz [ 403.996142][T10805] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 404.004006][ T794] usb 6-1: SerialNumber: syz [ 404.030476][ T915] usb 4-1: USB disconnect, device number 39 [ 404.090001][ T794] usb 6-1: config 0 descriptor?? [ 404.098812][ T7785] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 404.108195][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.124777][ T7785] usb 3-1: Product: syz [ 404.135237][ T7785] usb 3-1: Manufacturer: syz [ 404.141053][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.153322][ T794] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 404.162828][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.171783][ T7785] usb 3-1: SerialNumber: syz [ 404.187561][ T7785] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 404.209836][ T5817] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 404.665954][ T794] gspca_sn9c2028: read1 error -110 [ 404.701527][ T794] gspca_sn9c2028: read1 error -32 [ 404.706868][ T7785] usb 3-1: USB disconnect, device number 34 [ 404.742214][ T794] gspca_sn9c2028: read1 error -32 [ 404.775336][ T794] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -32 [ 404.929636][ T915] usb 6-1: USB disconnect, device number 32 [ 405.035239][ T794] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 405.200266][ T794] usb 4-1: Using ep0 maxpacket: 8 [ 405.211562][ T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.235775][ T794] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 405.235987][ T5817] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 405.262123][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.271168][ T794] usb 4-1: Product: syz [ 405.276883][ T794] usb 4-1: Manufacturer: syz [ 405.277065][ T5817] ath9k_htc: Failed to initialize the device [ 405.285326][ T794] usb 4-1: SerialNumber: syz [ 405.311506][ T7785] usb 3-1: ath9k_htc: USB layer deinitialized [ 405.311793][ T794] usb 4-1: config 0 descriptor?? [ 405.328904][ T794] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 405.510435][T10824] siw: device registration error -23 [ 405.798574][T10817] kvm: Disabled LAPIC found during irq injection [ 406.400073][ T794] usb 5-1: USB disconnect, device number 39 [ 406.538520][ T5861] usb 1-1: USB disconnect, device number 40 [ 407.108504][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 407.108520][ T30] audit: type=1400 audit(1769353080.559:1228): avc: denied { create } for pid=10833 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.439497][ T30] audit: type=1400 audit(1769353080.589:1229): avc: denied { read } for pid=10833 comm="syz.2.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.545318][ T30] audit: type=1400 audit(1769353080.929:1230): avc: denied { read write } for pid=10837 comm="syz.0.1240" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 407.577313][ T30] audit: type=1400 audit(1769353080.929:1231): avc: denied { open } for pid=10837 comm="syz.0.1240" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 407.603321][ T30] audit: type=1400 audit(1769353080.929:1232): avc: denied { ioctl } for pid=10837 comm="syz.0.1240" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 408.158737][ T30] audit: type=1400 audit(1769353081.609:1233): avc: denied { ioctl } for pid=10837 comm="syz.0.1240" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=29905 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 408.248370][ T5861] usb 4-1: USB disconnect, device number 40 [ 408.442689][ T30] audit: type=1400 audit(1769353081.889:1234): avc: denied { read } for pid=10858 comm="syz.5.1247" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 408.467693][ T30] audit: type=1400 audit(1769353081.889:1235): avc: denied { open } for pid=10858 comm="syz.5.1247" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 408.625243][ T5817] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 408.722061][ T30] audit: type=1400 audit(1769353082.129:1236): avc: denied { bind } for pid=10858 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.744364][ T30] audit: type=1400 audit(1769353082.139:1237): avc: denied { write } for pid=10858 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 408.832982][ T5817] usb 3-1: Using ep0 maxpacket: 8 [ 408.847241][ T5817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.865711][ T5817] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 408.875930][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.884131][ T5817] usb 3-1: Product: syz [ 408.890743][ T5817] usb 3-1: Manufacturer: syz [ 408.896173][ T5817] usb 3-1: SerialNumber: syz [ 408.912886][ T5817] usb 3-1: config 0 descriptor?? [ 408.928218][ T5861] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 408.934963][ T5817] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 409.105256][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 409.111956][ T5861] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 409.121651][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.131708][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.141526][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.151748][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.170170][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.187606][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.201365][T10853] kvm: Disabled LAPIC found during irq injection [ 409.589237][ T5861] usb 4-1: GET_CAPABILITIES returned 0 [ 409.665329][ T5868] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 409.809559][ T5861] usbtmc 4-1:16.0: can't read capabilities [ 409.846061][ T5861] usb 4-1: USB disconnect, device number 41 [ 410.035554][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 410.044641][ T5868] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 410.053979][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.062135][ T5868] usb 1-1: Product: syz [ 410.066515][ T5868] usb 1-1: Manufacturer: syz [ 410.071211][ T5868] usb 1-1: SerialNumber: syz [ 410.112019][ T5868] usb 1-1: config 0 descriptor?? [ 410.178743][ T5868] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 410.455935][ T5817] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 410.511657][T10881] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.782576][ T5868] gspca_sn9c2028: read1 error -110 [ 410.795741][ T5817] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 410.807051][ T5817] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 410.816297][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.835064][ T5817] usb 5-1: config 0 descriptor?? [ 410.836522][ T5868] gspca_sn9c2028: read1 error -32 [ 410.847410][T10874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.861526][ T5868] gspca_sn9c2028: read1 error -32 [ 410.867175][ T5868] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 410.967492][ T7785] usb 1-1: USB disconnect, device number 41 [ 411.125221][ T5868] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 411.332848][ T5817] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 411.337235][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 411.351279][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.395028][ T5868] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 411.405397][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.413450][ T5868] usb 6-1: Product: syz [ 411.423437][ T5868] usb 6-1: Manufacturer: syz [ 411.497940][ T794] usb 3-1: USB disconnect, device number 35 [ 411.606949][ T5868] usb 6-1: SerialNumber: syz [ 411.719400][ T5868] usb 6-1: config 0 descriptor?? [ 411.738380][ T5868] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22 [ 412.086343][T10884] kvm: Disabled LAPIC found during irq injection [ 412.196118][ T794] usb 5-1: USB disconnect, device number 40 [ 412.312140][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.324256][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.245449][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 413.245466][ T30] audit: type=1400 audit(1769353086.699:1243): avc: denied { connect } for pid=10908 comm="syz.0.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.045907][ T794] usb 6-1: USB disconnect, device number 33 [ 414.448545][ T30] audit: type=1400 audit(1769353087.899:1244): avc: denied { read write } for pid=10915 comm="syz.4.1264" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 414.605635][T10923] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1263'. [ 414.614717][ T30] audit: type=1400 audit(1769353087.899:1245): avc: denied { open } for pid=10915 comm="syz.4.1264" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 414.752465][ T30] audit: type=1400 audit(1769353088.149:1246): avc: denied { write } for pid=10915 comm="syz.4.1264" path="socket:[30150]" dev="sockfs" ino=30150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.106435][T10924] input: syz0 as /devices/virtual/input/input26 [ 415.343845][ T30] audit: type=1400 audit(1769353088.189:1247): avc: denied { mount } for pid=10915 comm="syz.4.1264" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 415.426265][ T30] audit: type=1400 audit(1769353088.539:1248): avc: denied { read write } for pid=10921 comm="syz.0.1263" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.459368][ T30] audit: type=1400 audit(1769353088.539:1249): avc: denied { open } for pid=10921 comm="syz.0.1263" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.632857][T10929] gfs2: error -5 reading superblock [ 415.831929][ T30] audit: type=1400 audit(1769353088.549:1250): avc: denied { ioctl } for pid=10921 comm="syz.0.1263" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 415.891639][ T30] audit: type=1400 audit(1769353088.569:1251): avc: denied { read } for pid=5166 comm="acpid" name="event4" dev="devtmpfs" ino=3367 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.092594][ T30] audit: type=1400 audit(1769353088.569:1252): avc: denied { open } for pid=5166 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3367 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 416.145857][ T794] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 417.941793][ T794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 418.022160][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.131325][ T794] usb 3-1: Product: syz [ 418.135285][T10962] netlink: 'syz.0.1275': attribute type 8 has an invalid length. [ 418.141111][ T794] usb 3-1: Manufacturer: syz [ 418.165600][ T794] usb 3-1: SerialNumber: syz [ 418.175095][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 418.184842][ T794] usb 3-1: can't set config #1, error -32 [ 418.197213][ T794] usb 3-1: USB disconnect, device number 36 [ 418.209792][T10962] rdma_rxe: rxe_newlink: failed to add syz_tun [ 418.371896][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 418.371911][ T30] audit: type=1400 audit(1769353091.819:1259): avc: denied { execute } for pid=10963 comm="syz.3.1276" name="file1" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 418.416149][ T30] audit: type=1400 audit(1769353091.849:1260): avc: denied { execute_no_trans } for pid=10963 comm="syz.3.1276" path="/252/file1" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 418.468469][ T30] audit: type=1400 audit(1769353091.849:1261): avc: denied { create } for pid=10960 comm="syz.0.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 418.543909][ T30] audit: type=1400 audit(1769353091.989:1262): avc: denied { ioctl } for pid=10972 comm="syz.5.1278" path="/dev/video8" dev="devtmpfs" ino=951 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 418.575700][ T5817] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 418.699180][ T30] audit: type=1400 audit(1769353092.149:1263): avc: denied { create } for pid=10975 comm="syz.0.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 418.769785][ T5817] usb 5-1: Using ep0 maxpacket: 8 [ 418.814763][ T30] audit: type=1400 audit(1769353092.259:1264): avc: denied { create } for pid=10972 comm="syz.5.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 418.855633][ T5817] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 418.877221][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.894850][ T30] audit: type=1400 audit(1769353092.289:1265): avc: denied { bind } for pid=10972 comm="syz.5.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 418.897740][T10989] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.961594][ T5817] usb 5-1: Product: syz [ 418.972653][ T5817] usb 5-1: Manufacturer: syz [ 418.983415][ T5817] usb 5-1: SerialNumber: syz [ 419.087404][ T5817] usb 5-1: config 0 descriptor?? [ 419.177691][ T5817] gspca_main: sq930x-2.14.0 probing 2770:930c [ 419.575509][ T794] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 419.588645][ T5817] gspca_sq930x: ucbus_write failed -71 [ 419.697081][T10996] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1283'. [ 419.735466][ T794] usb 1-1: Using ep0 maxpacket: 16 [ 419.759297][ T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.825739][ T5817] gspca_sq930x: Sensor ov9630 not yet treated [ 419.832443][ T794] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 419.833013][ T5817] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 419.859998][T10998] input: syz0 as /devices/virtual/input/input27 [ 419.927744][ T5817] usb 5-1: USB disconnect, device number 41 [ 419.937133][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.085369][ T7785] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 420.120547][ T794] usb 1-1: config 0 descriptor?? [ 420.329984][ T30] audit: type=1400 audit(1769353093.779:1266): avc: denied { set_context_mgr } for pid=11002 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 420.398042][ T7785] usb 3-1: Using ep0 maxpacket: 8 [ 420.413629][ T7785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.435752][ T7785] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 420.449495][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.463560][ T7785] usb 3-1: Product: syz [ 420.472117][ T7785] usb 3-1: Manufacturer: syz [ 420.478180][ T7785] usb 3-1: SerialNumber: syz [ 420.488235][ T7785] usb 3-1: config 0 descriptor?? [ 420.495785][ T7785] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 420.495794][T11006] cgroup: none used incorrectly [ 420.512323][ T30] audit: type=1400 audit(1769353093.939:1267): avc: denied { setopt } for pid=11001 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 420.584933][ T794] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 420.685586][ T5868] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 421.545698][T10999] kvm: Disabled LAPIC found during irq injection [ 421.724270][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.736972][ T794] usb 1-1: USB disconnect, device number 42 [ 421.744617][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.769156][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.800546][ T5868] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.818441][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.933340][ T5868] usb 5-1: config 0 descriptor?? [ 422.399763][ T5868] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 422.463470][T11029] gfs2: error -5 reading superblock [ 422.508713][ T5868] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 422.649408][ T5868] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 422.705662][ T30] audit: type=1400 audit(1769353096.159:1268): avc: denied { mounton } for pid=11031 comm="syz.0.1293" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 422.705952][T11032] bpf: Bad value for 'mode' [ 422.853975][T11033] tipc: Failed to remove unknown binding: 66,0,0/0:1698242511/1698242512 [ 422.875647][T11033] tipc: Failed to remove unknown binding: 66,0,0/0:1698242511/1698242512 [ 422.915692][ T5868] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 423.088935][ T5868] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 423.109379][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.130996][ T5868] usb 6-1: Product: syz [ 423.144574][ T5868] usb 6-1: Manufacturer: syz [ 423.151697][ T794] usb 5-1: USB disconnect, device number 42 [ 423.185617][ T5868] usb 6-1: SerialNumber: syz [ 423.248653][ T5868] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.291813][ T7785] usb 3-1: USB disconnect, device number 37 [ 423.313886][ T5861] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.493001][T11041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.041476][ T7785] usb 6-1: USB disconnect, device number 34 [ 424.648788][ T5861] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 424.804274][ T5861] ath9k_htc: Failed to initialize the device [ 424.827000][ T7785] usb 6-1: ath9k_htc: USB layer deinitialized [ 424.835637][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 424.835653][ T30] audit: type=1326 audit(1769353098.269:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.3.1297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8b199acb9 code=0x0 [ 424.908490][ T30] audit: type=1400 audit(1769353098.359:1274): avc: denied { read } for pid=11051 comm="syz.3.1297" path="socket:[31268]" dev="sockfs" ino=31268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 424.955409][ T915] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 425.125555][ T915] usb 1-1: Using ep0 maxpacket: 16 [ 425.259057][ T915] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 425.268299][ T915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.277804][ T915] usb 1-1: Product: syz [ 425.282917][ T915] usb 1-1: Manufacturer: syz [ 425.287636][ T915] usb 1-1: SerialNumber: syz [ 425.309751][ T915] usb 1-1: config 0 descriptor?? [ 425.326119][ T915] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 426.082427][T11051] [U]  [ 426.146168][ T915] gspca_sn9c2028: read1 error -110 [ 426.155580][ T915] gspca_sn9c2028: read1 error -32 [ 426.160992][ T915] gspca_sn9c2028: read1 error -32 [ 426.166177][ T915] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 426.853157][ T30] audit: type=1326 audit(1769353100.299:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11067 comm="syz.5.1303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3eb39acb9 code=0x0 [ 429.647385][ T30] audit: type=1400 audit(1769353102.319:1276): avc: denied { write } for pid=11070 comm="syz.2.1302" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 429.708973][T11087] digital: digital_start_poll: Unknown protocol [ 429.718990][ T30] audit: type=1400 audit(1769353102.709:1277): avc: denied { read append } for pid=11070 comm="syz.2.1302" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 429.760923][ T30] audit: type=1400 audit(1769353102.709:1278): avc: denied { open } for pid=11070 comm="syz.2.1302" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 430.073355][T11088] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 430.083544][ T30] audit: type=1400 audit(1769353103.509:1279): avc: denied { create } for pid=11086 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 430.119013][ T30] audit: type=1400 audit(1769353103.519:1280): avc: denied { getopt } for pid=11086 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 430.162627][ T30] audit: type=1400 audit(1769353103.519:1281): avc: denied { setopt } for pid=11086 comm="syz.3.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 430.191746][T11088] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1306'. [ 430.233559][T11093] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1307'. [ 430.234054][T11097] FAULT_INJECTION: forcing a failure. [ 430.234054][T11097] name failslab, interval 1, probability 0, space 0, times 0 [ 430.255790][T11097] CPU: 0 UID: 0 PID: 11097 Comm: syz.2.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.255823][T11097] Tainted: [L]=SOFTLOCKUP [ 430.255829][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 430.255838][T11097] Call Trace: [ 430.255843][T11097] [ 430.255848][T11097] dump_stack_lvl+0x100/0x190 [ 430.255873][T11097] should_fail_ex.cold+0x5/0xa [ 430.255897][T11097] should_failslab+0xc2/0x120 [ 430.255915][T11097] __kmalloc_cache_noprof+0x80/0x810 [ 430.255928][T11097] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.255944][T11097] ? nfqnl_recv_config+0xc81/0x1160 [ 430.255966][T11097] ? nfqnl_recv_config+0xc81/0x1160 [ 430.255983][T11097] nfqnl_recv_config+0xc81/0x1160 [ 430.256005][T11097] nfnetlink_rcv_msg+0x9f4/0x1200 [ 430.256026][T11097] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 430.256043][T11097] ? __lock_acquire+0x4a5/0x2630 [ 430.256074][T11097] ? avc_has_perm_noaudit+0x145/0x3b0 [ 430.256099][T11097] netlink_rcv_skb+0x159/0x420 [ 430.256118][T11097] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 430.256134][T11097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.256163][T11097] ? ns_capable+0xd2/0xf0 [ 430.256182][T11097] nfnetlink_rcv+0x1b3/0x440 [ 430.256196][T11097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 430.256210][T11097] ? netlink_deliver_tap+0x1ae/0xcc0 [ 430.256233][T11097] netlink_unicast+0x5aa/0x870 [ 430.256255][T11097] ? __pfx_netlink_unicast+0x10/0x10 [ 430.256281][T11097] netlink_sendmsg+0x8b0/0xda0 [ 430.256304][T11097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.256321][T11097] ? __might_fault+0x70/0x140 [ 430.256344][T11097] ____sys_sendmsg+0xa54/0xc30 [ 430.256359][T11097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.256381][T11097] ___sys_sendmsg+0x190/0x1e0 [ 430.256397][T11097] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.256421][T11097] ? find_held_lock+0x2b/0x80 [ 430.256454][T11097] __sys_sendmsg+0x170/0x220 [ 430.256472][T11097] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.256502][T11097] do_syscall_64+0xc9/0xf80 [ 430.256520][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.256534][T11097] RIP: 0033:0x7f58f679acb9 [ 430.256547][T11097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.256560][T11097] RSP: 002b:00007f58f75af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.256574][T11097] RAX: ffffffffffffffda RBX: 00007f58f6a15fa0 RCX: 00007f58f679acb9 [ 430.256583][T11097] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 430.256591][T11097] RBP: 00007f58f75af090 R08: 0000000000000000 R09: 0000000000000000 [ 430.256599][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.256607][T11097] R13: 00007f58f6a16038 R14: 00007f58f6a15fa0 R15: 00007ffca7ebf348 [ 430.256627][T11097] [ 430.259660][ T30] audit: type=1400 audit(1769353103.679:1282): avc: denied { name_bind } for pid=11095 comm="syz.2.1308" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 430.570053][T11100] netlink: 'syz.3.1306': attribute type 21 has an invalid length. [ 430.578067][T11100] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1306'. [ 430.984041][T11102] delete_channel: no stack [ 431.516853][ T915] usb 1-1: USB disconnect, device number 43 [ 431.603621][T11110] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1311'. [ 432.138969][T11115] input: syz0 as /devices/virtual/input/input29 [ 432.160323][T11100] netlink: 'syz.3.1306': attribute type 4 has an invalid length. [ 432.168456][T11100] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 432.176929][T11100] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1306'. [ 433.780362][ T30] audit: type=1400 audit(1769353107.179:1283): avc: denied { read write } for pid=11124 comm="syz.0.1315" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.043922][ T30] audit: type=1400 audit(1769353107.179:1284): avc: denied { open } for pid=11124 comm="syz.0.1315" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 434.082833][T11134] digital: digital_start_poll: Unknown protocol [ 434.572123][ T30] audit: type=1400 audit(1769353108.019:1285): avc: denied { create } for pid=11146 comm="syz.5.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 434.707301][ T30] audit: type=1400 audit(1769353108.089:1286): avc: denied { read write } for pid=11136 comm="syz.2.1318" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 434.731243][ T30] audit: type=1400 audit(1769353108.089:1287): avc: denied { open } for pid=11136 comm="syz.2.1318" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 434.790073][ T30] audit: type=1326 audit(1769353108.239:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11146 comm="syz.5.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3eb39acb9 code=0x0 [ 434.900966][T11152] netlink: 'syz.5.1323': attribute type 9 has an invalid length. [ 435.029325][T11148] kvm: pic: non byte read [ 435.037905][T11148] kvm: pic: non byte read [ 435.047559][T11148] kvm: pic: non byte read [ 435.056181][T11148] kvm: pic: non byte read [ 435.065778][T11148] kvm: pic: non byte read [ 435.076178][T11148] kvm: pic: non byte read [ 435.084713][T11148] kvm: pic: non byte read [ 435.094706][T11148] kvm: pic: non byte read [ 435.110152][T11148] kvm: pic: non byte read [ 435.120812][T11148] kvm: pic: non byte read [ 435.245842][T11158] erofs (device nullb0): cannot find valid erofs superblock [ 435.895722][ T5861] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 435.928259][T11169] net_ratelimit: 66 callbacks suppressed [ 435.928270][T11169] openvswitch: netlink: Invalid VLAN frame [ 435.947647][T11169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=11169 comm=syz.5.1326 [ 436.673123][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 436.857022][ T5861] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 436.925210][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.998983][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.235573][ T5861] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 437.254039][T11164] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 437.282486][ T794] usb 5-1: USB disconnect, device number 43 [ 437.364870][T11188] netlink: 'syz.3.1331': attribute type 8 has an invalid length. [ 437.405304][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 437.415396][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 437.415415][ T30] audit: type=1400 audit(1769353110.859:1294): avc: denied { write } for pid=11183 comm="syz.3.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.427832][ T5861] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 437.507559][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.534867][ T5861] usb 1-1: Product: syz [ 437.545513][ T5861] usb 1-1: Manufacturer: syz [ 437.556016][ T5861] usb 1-1: SerialNumber: syz [ 437.569065][ T5861] usb 1-1: config 0 descriptor?? [ 437.584168][ T5861] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 437.886930][T11188] syz.3.1331 (11188) used greatest stack depth: 18168 bytes left [ 438.224150][ T5861] gspca_sn9c2028: read1 error -110 [ 438.229761][ T5861] gspca_sn9c2028: read1 error -32 [ 438.235305][ T30] audit: type=1400 audit(1769353111.629:1295): avc: denied { ioctl } for pid=11196 comm="syz.2.1336" path="socket:[31836]" dev="sockfs" ino=31836 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 438.245490][ T5861] gspca_sn9c2028: read1 error -32 [ 438.306980][ T5861] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 438.539487][ T5861] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 438.554253][ T30] audit: type=1400 audit(1769353111.999:1296): avc: denied { connect } for pid=11204 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.594812][ T30] audit: type=1400 audit(1769353112.029:1297): avc: denied { shutdown } for pid=11204 comm="syz.3.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.625232][ T30] audit: type=1400 audit(1769353112.029:1298): avc: denied { write } for pid=11204 comm="syz.3.1338" path="socket:[31588]" dev="sockfs" ino=31588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.695239][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 438.702051][ T5861] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 438.714762][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.725422][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.739926][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.749637][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.758358][ T5861] usb 5-1: Product: syz [ 438.762746][ T5861] usb 5-1: Manufacturer: syz [ 438.781347][ T5861] usb 5-1: SerialNumber: syz [ 438.876428][T11210] gfs2: error -5 reading superblock [ 439.069561][ T794] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 439.101510][T11201] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1335'. [ 439.113474][ T5861] usb 5-1: 0:2 : does not exist [ 439.161658][ T5861] usb 5-1: USB disconnect, device number 44 [ 439.225292][ T915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 439.245277][ T794] usb 3-1: Using ep0 maxpacket: 8 [ 439.251986][ T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.267304][ T794] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 439.284570][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.294386][ T794] usb 3-1: Product: syz [ 439.298770][ T794] usb 3-1: Manufacturer: syz [ 439.305578][ T794] usb 3-1: SerialNumber: syz [ 439.334511][ T794] usb 3-1: config 0 descriptor?? [ 439.343542][ T794] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 439.410582][ T915] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 439.427443][ T915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.445265][ T915] usb 4-1: Product: syz [ 439.456870][ T915] usb 4-1: Manufacturer: syz [ 439.461479][ T915] usb 4-1: SerialNumber: syz [ 439.473941][ T915] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 439.488744][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 439.501556][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1342'. [ 439.556683][ T7785] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 439.569853][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.576564][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.633704][ T30] audit: type=1400 audit(1769353113.079:1299): avc: denied { getopt } for pid=11219 comm="syz.5.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.658065][T11209] kvm: Disabled LAPIC found during irq injection [ 439.680862][ T30] audit: type=1400 audit(1769353113.079:1300): avc: denied { create } for pid=11219 comm="syz.5.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 439.712557][T11222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1344'. [ 439.825422][ T30] audit: type=1400 audit(1769353113.249:1301): avc: denied { bind } for pid=11219 comm="syz.5.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 439.848585][ T30] audit: type=1400 audit(1769353113.299:1302): avc: denied { ioctl } for pid=11219 comm="syz.5.1344" path="socket:[32056]" dev="sockfs" ino=32056 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 440.269951][ T80] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 440.485231][ T915] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 440.541450][ T5861] usb 4-1: USB disconnect, device number 42 [ 440.576058][ T794] usb 1-1: USB disconnect, device number 44 [ 440.597167][ T7785] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 440.608612][ T7785] ath9k_htc: Failed to initialize the device [ 440.620660][ T5861] usb 4-1: ath9k_htc: USB layer deinitialized [ 440.645551][ T915] usb 5-1: Using ep0 maxpacket: 8 [ 440.651968][ T915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.664545][ T915] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 440.674104][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.684515][ T915] usb 5-1: Product: syz [ 440.688762][ T915] usb 5-1: Manufacturer: syz [ 440.693409][ T915] usb 5-1: SerialNumber: syz [ 440.699754][ T915] usb 5-1: config 0 descriptor?? [ 440.706286][ T915] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 440.935541][ T794] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 441.244444][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 441.262147][T11227] kvm: Disabled LAPIC found during irq injection [ 441.403099][ T794] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 441.416052][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.425369][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.838307][T11236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.847092][T11236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.899650][T11230] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 442.073795][ T7785] usb 3-1: USB disconnect, device number 38 [ 442.215575][ T794] usb 1-1: USB disconnect, device number 45 [ 442.256619][ T30] audit: type=1400 audit(1769353115.709:1303): avc: denied { append } for pid=11241 comm="syz.5.1349" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.484916][T11251] overlayfs: missing 'lowerdir' [ 442.874066][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 442.874113][ T30] audit: type=1400 audit(1769353116.239:1307): avc: denied { read write } for pid=11252 comm="syz.5.1354" name="mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 442.952077][ T30] audit: type=1400 audit(1769353116.239:1308): avc: denied { open } for pid=11252 comm="syz.5.1354" path="/dev/input/mouse0" dev="devtmpfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 442.989751][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 443.009380][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 443.017970][ T794] usb 5-1: USB disconnect, device number 45 [ 443.503893][ T794] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 443.753921][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 444.027816][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.041826][ T794] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 444.052034][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.060437][ T794] usb 5-1: Product: syz [ 444.065107][ T794] usb 5-1: Manufacturer: syz [ 444.070101][ T794] usb 5-1: SerialNumber: syz [ 444.082171][ T794] usb 5-1: config 0 descriptor?? [ 444.090591][ T794] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 444.396326][T11258] kvm: Disabled LAPIC found during irq injection [ 444.604817][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.614522][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.469920][ T30] audit: type=1400 audit(1769353118.849:1309): avc: denied { unlink } for pid=11273 comm="syz.0.1359" name="#d" dev="tmpfs" ino=1512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 445.793391][T11280] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 445.983925][ T30] audit: type=1326 audit(1769353119.049:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 446.663253][ T30] audit: type=1326 audit(1769353119.049:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 446.722130][ T30] audit: type=1326 audit(1769353119.059:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 446.808942][ T30] audit: type=1326 audit(1769353119.059:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 446.915359][ T7785] usb 5-1: USB disconnect, device number 46 [ 446.955221][ T30] audit: type=1326 audit(1769353119.059:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 447.342653][ T30] audit: type=1326 audit(1769353119.069:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 447.396315][T11288] bpf: Bad value for 'mode' [ 447.664327][ T30] audit: type=1326 audit(1769353119.069:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.0.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d199acb9 code=0x7ffc0000 [ 448.554836][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.631635][T11307] tipc: Failed to remove unknown binding: 66,0,0/2886997162:345125362/345125363 [ 448.665325][ T794] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 448.676619][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.686633][T11298] tipc: Failed to remove unknown binding: 66,0,0/2886997162:345125362/345125363 [ 448.822786][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.855632][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 448.875398][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.909912][ T794] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 448.951136][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.962835][ T794] usb 3-1: Product: syz [ 448.967303][ T794] usb 3-1: Manufacturer: syz [ 448.972011][ T794] usb 3-1: SerialNumber: syz [ 448.983950][ T794] usb 3-1: config 0 descriptor?? [ 448.995074][ T794] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 449.032088][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.063458][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.160092][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.173691][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.281578][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 449.293947][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 449.302494][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 449.311540][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 449.323530][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 449.348705][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 449.348722][ T30] audit: type=1400 audit(1769353122.789:1331): avc: denied { mounton } for pid=11320 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 449.382833][ T30] audit: type=1400 audit(1769353122.799:1332): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 449.408527][ T30] audit: type=1400 audit(1769353122.829:1333): avc: denied { search } for pid=5476 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.430567][ T30] audit: type=1400 audit(1769353122.829:1334): avc: denied { search } for pid=5476 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.452963][ T30] audit: type=1400 audit(1769353122.829:1335): avc: denied { search } for pid=5476 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.475507][ T30] audit: type=1400 audit(1769353122.829:1336): avc: denied { read } for pid=5476 comm="dhcpcd" name="n113" dev="tmpfs" ino=7484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.517861][ T794] gspca_sn9c2028: read1 error -110 [ 449.520881][ T30] audit: type=1400 audit(1769353122.829:1337): avc: denied { open } for pid=5476 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=7484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.531300][ T794] gspca_sn9c2028: read1 error -32 [ 449.571812][T11324] gfs2: error -5 reading superblock [ 449.583138][ T30] audit: type=1400 audit(1769353122.829:1338): avc: denied { getattr } for pid=5476 comm="dhcpcd" path="/run/udev/data/n113" dev="tmpfs" ino=7484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.614714][ T794] gspca_sn9c2028: read1 error -32 [ 449.637662][ T794] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 449.775216][ T12] bridge_slave_1: left allmulticast mode [ 449.780898][ T12] bridge_slave_1: left promiscuous mode [ 449.845443][ T915] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 449.903667][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.939203][ T30] audit: type=1400 audit(1769353123.379:1339): avc: denied { read open } for pid=11327 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.174172][ T915] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 450.264497][ T915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.275338][ T30] audit: type=1400 audit(1769353123.379:1340): avc: denied { getattr } for pid=11327 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.394613][ T915] usb 6-1: Product: syz [ 450.406005][ T12] bridge_slave_0: left allmulticast mode [ 450.409756][ T915] usb 6-1: Manufacturer: syz [ 450.416496][ T915] usb 6-1: SerialNumber: syz [ 450.425674][ T12] bridge_slave_0: left promiscuous mode [ 450.428825][ T915] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 450.612433][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.240738][ T5817] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.265630][ T7785] usb 3-1: USB disconnect, device number 39 [ 451.405285][ T5824] Bluetooth: hci0: command tx timeout [ 451.655558][ T7785] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 451.705947][ T915] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 451.720774][ T55] usb 6-1: USB disconnect, device number 35 [ 451.768763][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.779943][ T12] bond_slave_0: left promiscuous mode [ 451.787878][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.799040][ T12] bond_slave_1: left promiscuous mode [ 451.805806][ T12] $Hÿ (unregistering): (slave team0): Releasing backup interface [ 451.814005][ T12] team0: left promiscuous mode [ 451.815255][ T7785] usb 3-1: Using ep0 maxpacket: 8 [ 451.819021][ T12] team_slave_0: left promiscuous mode [ 451.826505][ T7785] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.830215][ T12] team_slave_1: left promiscuous mode [ 451.841890][ T7785] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 451.845559][ T12] $Hÿ (unregistering): Released all slaves [ 451.854310][ T7785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.868038][ T915] usb 5-1: Using ep0 maxpacket: 16 [ 451.873687][ T7785] usb 3-1: Product: syz [ 451.878308][ T7785] usb 3-1: Manufacturer: syz [ 451.884115][ T7785] usb 3-1: SerialNumber: syz [ 451.896267][ T7785] usb 3-1: config 0 descriptor?? [ 451.902763][ T915] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 451.914704][ T7785] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 451.923601][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.935993][ T915] usb 5-1: Product: syz [ 451.940242][ T915] usb 5-1: Manufacturer: syz [ 451.945543][ T915] usb 5-1: SerialNumber: syz [ 451.955084][ T915] usb 5-1: config 0 descriptor?? [ 451.965699][ T915] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 451.991595][ T12] bond1 (unregistering): Released all slaves [ 452.064927][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 452.074569][ T12] bond0 (unregistering): Released all slaves [ 452.231783][T11351] kvm: Disabled LAPIC found during irq injection [ 452.381870][ T5817] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 452.410534][ T5817] ath9k_htc: Failed to initialize the device [ 452.445305][ T7785] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 452.494684][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.504840][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.523165][ T915] gspca_sn9c2028: read1 error -110 [ 452.812223][ T55] usb 6-1: ath9k_htc: USB layer deinitialized [ 452.832099][ T915] gspca_sn9c2028: read1 error -32 [ 452.865124][ T915] gspca_sn9c2028: read1 error -71 [ 452.891642][ T915] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 452.910396][ T915] usb 5-1: USB disconnect, device number 47 [ 452.932874][T11367] netlink: 'syz.5.1380': attribute type 1 has an invalid length. [ 452.958907][T11367] netlink: 'syz.5.1380': attribute type 2 has an invalid length. [ 452.985675][ T7785] usb 4-1: Using ep0 maxpacket: 16 [ 453.007582][ T7785] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 453.019219][ T7785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.044021][ T7785] usb 4-1: Product: syz [ 453.053684][ T7785] usb 4-1: Manufacturer: syz [ 453.060794][ T7785] usb 4-1: SerialNumber: syz [ 453.076370][ T7785] usb 4-1: config 0 descriptor?? [ 453.093103][ T7785] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 453.137374][T11320] chnl_net:caif_netlink_parms(): no params data found [ 453.475239][ T5824] Bluetooth: hci0: command tx timeout [ 453.513089][ T12] hsr_slave_0: left promiscuous mode [ 453.568898][ T12] hsr_slave_1: left promiscuous mode [ 453.609737][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.632345][ T7785] gspca_sn9c2028: read1 error -110 [ 453.651268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.661104][ T7785] gspca_sn9c2028: read1 error -32 [ 453.679759][ T7785] gspca_sn9c2028: read1 error -32 [ 453.697272][ T7785] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 453.740064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.826516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.954280][ T12] veth1_macvtap: left promiscuous mode [ 454.007102][ T12] veth0_macvtap: left promiscuous mode [ 454.038762][ T12] veth1_vlan: left promiscuous mode [ 454.063369][ T12] veth0_vlan: left promiscuous mode [ 454.440901][ T7785] usb 3-1: USB disconnect, device number 40 [ 454.880918][ T7785] usb 4-1: USB disconnect, device number 43 [ 455.095542][ T5817] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 455.247818][ T12] team0 (unregistering): Port device team_slave_1 removed [ 455.255451][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 455.266551][ T5817] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 455.274772][ T5817] usb 3-1: config 1 has no interface number 0 [ 455.290072][ T5817] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 455.300611][ T5817] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 455.310867][ T5817] usb 3-1: config 1 interface 105 has no altsetting 0 [ 455.447605][ T12] team0 (unregistering): Port device team_slave_0 removed [ 455.447890][ T5817] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 455.464153][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.472388][ T5817] usb 3-1: Product: syz [ 455.476831][ T5817] usb 3-1: Manufacturer: syz [ 455.481466][ T5817] usb 3-1: SerialNumber: syz [ 455.625273][ T5824] Bluetooth: hci0: command tx timeout [ 455.888687][T11401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 455.896000][T11401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 456.130832][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.138507][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.146123][T11320] bridge_slave_0: entered allmulticast mode [ 456.153053][T11320] bridge_slave_0: entered promiscuous mode [ 456.161300][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.181551][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.209609][T11320] bridge_slave_1: entered allmulticast mode [ 456.226858][T11320] bridge_slave_1: entered promiscuous mode [ 456.279805][T11320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.292339][T11320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.328693][ T5817] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 456.362942][T11415] binder: 11414:11415 ioctl 4018620d 0 returned -22 [ 456.392609][ T5817] usb 3-1: USB disconnect, device number 41 [ 456.528640][T11320] team0: Port device team_slave_0 added [ 456.568693][T11320] team0: Port device team_slave_1 added [ 456.795421][ T5861] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 457.304692][T11320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.319660][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.360392][T11320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.416828][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 457.582220][T11425] gfs2: error -5 reading superblock [ 457.619251][T11320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.648717][ T5824] Bluetooth: hci0: command tx timeout [ 457.655927][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.668948][T11320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.713249][T11320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.725479][ T5861] usb 5-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 457.734953][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.743837][ T5861] usb 5-1: Product: syz [ 457.749801][ T5861] usb 5-1: Manufacturer: syz [ 457.754428][ T5861] usb 5-1: SerialNumber: syz [ 457.768181][ T5861] usb 5-1: config 0 descriptor?? [ 457.784907][ T5861] cdc_phonet 5-1:0.0: probe with driver cdc_phonet failed with error -22 [ 457.825446][T11320] hsr_slave_0: entered promiscuous mode [ 457.832080][T11320] hsr_slave_1: entered promiscuous mode [ 457.849273][ T12] IPVS: stop unused estimator thread 0... [ 457.915500][ T794] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 457.965546][ T5817] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 458.093742][T11418] kvm: Disabled LAPIC found during irq injection [ 458.102875][ T794] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 458.135946][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.143998][ T794] usb 6-1: Product: syz [ 458.166966][ T794] usb 6-1: Manufacturer: syz [ 458.171619][ T794] usb 6-1: SerialNumber: syz [ 458.183199][T11320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.204758][T11320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.218754][T11320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.237282][T11320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.268018][ T794] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 458.285227][ T5817] usb 4-1: Using ep0 maxpacket: 8 [ 458.292972][ T5861] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 458.300657][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.314490][ T5817] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 458.648391][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.656568][ T5817] usb 4-1: Product: syz [ 458.660768][ T5817] usb 4-1: Manufacturer: syz [ 458.665451][ T5817] usb 4-1: SerialNumber: syz [ 458.681451][ T5817] usb 4-1: config 0 descriptor?? [ 458.693018][ T5817] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 458.798404][T11320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.820773][T11320] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.835989][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.843270][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.860404][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.867645][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.897710][ T5868] usb 6-1: USB disconnect, device number 36 [ 458.933028][T11430] kvm: Disabled LAPIC found during irq injection [ 459.148290][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.158495][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.477642][ T5861] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 459.491974][ T5861] ath9k_htc: Failed to initialize the device [ 459.502528][ T5868] usb 6-1: ath9k_htc: USB layer deinitialized [ 459.795805][T11320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.795979][ T5817] usb 5-1: USB disconnect, device number 48 [ 460.690975][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 460.692012][ T30] audit: type=1400 audit(1769353134.139:1350): avc: denied { write } for pid=11486 comm="syz.5.1399" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 460.935898][ T5861] usb 4-1: USB disconnect, device number 44 [ 461.044323][ T30] audit: type=1400 audit(1769353134.239:1351): avc: denied { create } for pid=11486 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.117459][T11497] binder: 11495:11497 ioctl 4018620d 0 returned -22 [ 461.262346][ T30] audit: type=1400 audit(1769353134.239:1352): avc: denied { bind } for pid=11486 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 461.282919][ T30] audit: type=1400 audit(1769353134.239:1353): avc: denied { read } for pid=11486 comm="syz.5.1399" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 461.861074][T11320] veth0_vlan: entered promiscuous mode [ 461.880546][T11320] veth1_vlan: entered promiscuous mode [ 462.425334][ T5861] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 462.457504][T11320] veth0_macvtap: entered promiscuous mode [ 462.532090][T11320] veth1_macvtap: entered promiscuous mode [ 462.583032][T11320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.597552][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.618263][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.635880][ T5861] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.649099][ T5861] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.658527][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.670842][ T5861] usb 6-1: config 0 descriptor?? [ 462.729940][T11320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.764309][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.793709][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.826658][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.836707][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.928993][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.943198][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.992217][ T8797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.004920][ T8797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.034403][ T30] audit: type=1400 audit(1769353136.479:1354): avc: denied { mounton } for pid=11320 comm="syz-executor" path="/root/syzkaller.jRYo2W/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 463.066994][ T30] audit: type=1400 audit(1769353136.489:1356): avc: denied { bind } for pid=11519 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.103842][ T5861] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 463.135198][ T5861] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 463.166598][ T30] audit: type=1400 audit(1769353136.489:1357): avc: denied { write } for pid=11519 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 463.226545][ T5861] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 463.241893][ T30] audit: type=1400 audit(1769353136.479:1355): avc: denied { mount } for pid=11320 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 463.351978][ T30] audit: type=1400 audit(1769353136.509:1358): avc: denied { mounton } for pid=11320 comm="syz-executor" path="/root/syzkaller.jRYo2W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 463.645547][ T30] audit: type=1400 audit(1769353136.509:1359): avc: denied { mounton } for pid=11320 comm="syz-executor" path="/root/syzkaller.jRYo2W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34562 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 464.001880][ T5861] usb 6-1: USB disconnect, device number 37 [ 464.577846][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 464.916004][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 464.972952][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.991300][ T9] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 465.010517][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.046836][ T9] usb 3-1: Product: syz [ 465.064904][ T9] usb 3-1: Manufacturer: syz [ 465.087194][ T9] usb 3-1: SerialNumber: syz [ 465.140489][ T9] usb 3-1: config 0 descriptor?? [ 465.155570][ C0] ------------[ cut here ]------------ [ 465.161367][ C0] ODEBUG: free active (active state 0) object: ffff88802aaa0890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 465.174362][ C0] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz.3.1407/11538 [ 465.184515][ C0] Modules linked in: [ 465.188659][ C0] CPU: 0 UID: 0 PID: 11538 Comm: syz.3.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.199627][ C0] Tainted: [L]=SOFTLOCKUP [ 465.203961][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 465.214000][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 465.219816][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 1f d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 06 c8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 465.239449][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 465.245510][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 465.253559][ C0] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c194c0 [ 465.261515][ C0] RBP: 0000000000000001 R08: ffff88802aaa0890 R09: ffffffff8b92b900 [ 465.269490][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 465.277449][ C0] R13: ffffffff8b92b940 R14: ffffffff8a660f40 R15: ffffc90000007b18 [ 465.285426][ C0] FS: 00007fe8b28236c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 465.294360][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.300942][ C0] CR2: 00007fa3ec1456b8 CR3: 000000003130a000 CR4: 00000000003526f0 [ 465.308938][ C0] Call Trace: [ 465.312203][ C0] [ 465.315032][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 465.320689][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 465.326495][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 465.332025][ C0] ? ksys_unshare+0x455/0xab0 [ 465.336707][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 465.342756][ C0] ? mark_held_locks+0x40/0x70 [ 465.347516][ C0] ? kasan_quarantine_put+0x104/0x240 [ 465.352882][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 465.358101][ C0] kfree+0x34c/0x690 [ 465.361985][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.367371][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.372482][ C0] ? rose_timer_expiry+0x53f/0x630 [ 465.377584][ C0] rose_timer_expiry+0x53f/0x630 [ 465.382510][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.387984][ C0] call_timer_fn+0x19a/0x590 [ 465.392572][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 465.397704][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.403173][ C0] ? mark_held_locks+0x40/0x70 [ 465.407943][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 465.413385][ C0] __run_timers+0x757/0xac0 [ 465.417907][ C0] ? __pfx___run_timers+0x10/0x10 [ 465.422955][ C0] run_timer_base+0x114/0x190 [ 465.427642][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 465.432820][ C0] run_timer_softirq+0x1a/0x50 [ 465.437595][ C0] handle_softirqs+0x1ea/0x910 [ 465.442372][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 465.447657][ C0] __irq_exit_rcu+0xef/0x150 [ 465.452230][ C0] irq_exit_rcu+0x9/0x30 [ 465.456480][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 465.462104][ C0] [ 465.465011][ C0] [ 465.467930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.473900][ C0] RIP: 0010:unwind_next_frame+0xb3c/0x1ea0 [ 465.479712][ C0] Code: ff 48 8b 7c 24 28 e8 e3 ec ff ff 48 89 ee 48 8b 4c 24 20 48 ba 00 00 00 00 00 fc ff df 48 c1 ee 03 4c 8b 44 24 18 80 3c 16 00 <0f> 85 3c 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc [ 465.499318][ C0] RSP: 0018:ffffc9000d59f238 EFLAGS: 00000246 [ 465.505395][ C0] RAX: ffffffff82711980 RBX: 0000000000000001 RCX: ffffffff9159cc2a [ 465.513353][ C0] RDX: dffffc0000000000 RSI: 1ffff92001ab3e5e RDI: ffffc9000d59f3d0 [ 465.521330][ C0] RBP: ffffc9000d59f2f0 R08: ffffffff9159cc2e R09: 0000000000000007 [ 465.529291][ C0] R10: 0000000000000200 R11: 000000000000f1a6 R12: ffffc9000d59f2f8 [ 465.537263][ C0] R13: ffffc9000d59f2a8 R14: ffffc9000d59f3d8 R15: ffffc9000d59f2dc [ 465.545255][ C0] ? kasan_save_stack+0x30/0x50 [ 465.550113][ C0] ? unwind_next_frame+0xb1d/0x1ea0 [ 465.555325][ C0] ? stack_trace_save+0x8e/0xc0 [ 465.560192][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 465.566339][ C0] arch_stack_walk+0x94/0xf0 [ 465.570925][ C0] ? stack_trace_save+0x8e/0xc0 [ 465.575785][ C0] stack_trace_save+0x8e/0xc0 [ 465.580445][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 465.585816][ C0] ? kasan_save_stack+0x3f/0x50 [ 465.590644][ C0] ? kasan_save_stack+0x30/0x50 [ 465.595481][ C0] ? kasan_save_track+0x14/0x30 [ 465.600313][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 465.605064][ C0] ? __kmalloc_node_track_caller_noprof+0x357/0x9d0 [ 465.611643][ C0] ? kstrdup+0x51/0xe0 [ 465.615703][ C0] ? kstrdup_const+0x63/0x80 [ 465.620286][ C0] ? __kernfs_new_node+0x9b/0x960 [ 465.625308][ C0] kasan_save_stack+0x30/0x50 [ 465.629999][ C0] kasan_save_track+0x14/0x30 [ 465.634673][ C0] __kasan_slab_alloc+0x89/0x90 [ 465.639551][ C0] kmem_cache_alloc_noprof+0x2ad/0x780 [ 465.645015][ C0] ? __kernfs_new_node+0xd2/0x960 [ 465.650048][ C0] ? __kernfs_new_node+0xd2/0x960 [ 465.655085][ C0] __kernfs_new_node+0xd2/0x960 [ 465.659945][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 465.665400][ C0] ? find_held_lock+0x2b/0x80 [ 465.670090][ C0] ? kernfs_root+0xee/0x2a0 [ 465.674573][ C0] ? kernfs_root+0xee/0x2a0 [ 465.679082][ C0] kernfs_new_node+0x11b/0x1a0 [ 465.683840][ C0] __kernfs_create_file+0x53/0x350 [ 465.688951][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 465.694308][ C0] internal_create_group+0x593/0xf40 [ 465.699723][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 465.705551][ C0] ? __pfx_kobject_add+0x10/0x10 [ 465.710479][ C0] internal_create_groups+0x9d/0x150 [ 465.715766][ C0] ib_setup_port_attrs+0x41f/0x600 [ 465.720875][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 465.726522][ C0] ? __init_waitqueue_head+0xca/0x150 [ 465.731880][ C0] add_one_compat_dev+0x5b3/0x820 [ 465.736904][ C0] rdma_dev_init_net+0x30a/0x590 [ 465.741828][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 465.747288][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 465.752754][ C0] ops_init+0x1e2/0x5f0 [ 465.756921][ C0] setup_net+0x118/0x3a0 [ 465.761146][ C0] ? __pfx_setup_net+0x10/0x10 [ 465.765902][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 465.771264][ C0] ? mutex_init_lockep+0x110/0x150 [ 465.776366][ C0] copy_net_ns+0x46f/0x7c0 [ 465.780769][ C0] create_new_namespaces+0x3ea/0xab0 [ 465.786058][ C0] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 465.791689][ C0] ksys_unshare+0x455/0xab0 [ 465.796184][ C0] ? rcu_is_watching+0x12/0xc0 [ 465.800935][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 465.805959][ C0] ? kcov_ioctl+0x16a/0x720 [ 465.810447][ C0] ? kcov_ioctl+0x16a/0x720 [ 465.814931][ C0] ? fput+0x79/0x100 [ 465.818820][ C0] __x64_sys_unshare+0x31/0x40 [ 465.823588][ C0] do_syscall_64+0xc9/0xf80 [ 465.828095][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.833978][ C0] RIP: 0033:0x7fe8b199acb9 [ 465.838396][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.858011][ C0] RSP: 002b:00007fe8b2823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.866440][ C0] RAX: ffffffffffffffda RBX: 00007fe8b1c16360 RCX: 00007fe8b199acb9 [ 465.874404][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 465.882378][ C0] RBP: 00007fe8b1a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 465.890374][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.898386][ C0] R13: 00007fe8b1c163f8 R14: 00007fe8b1c16360 R15: 00007ffe2019af88 [ 465.906423][ C0] [ 465.909437][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.916696][ C0] CPU: 0 UID: 0 PID: 11538 Comm: syz.3.1407 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.927618][ C0] Tainted: [L]=SOFTLOCKUP [ 465.931929][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 465.941973][ C0] Call Trace: [ 465.945234][ C0] [ 465.948059][ C0] dump_stack_lvl+0x100/0x190 [ 465.952719][ C0] vpanic+0x20d/0x630 [ 465.956680][ C0] panic+0xd1/0xd1 [ 465.960392][ C0] ? __pfx_panic+0x10/0x10 [ 465.964794][ C0] ? check_panic_on_warn+0x1f/0x90 [ 465.969899][ C0] check_panic_on_warn.cold+0x19/0x34 [ 465.975248][ C0] ? debug_print_object+0x18e/0x2a0 [ 465.980436][ C0] __warn.cold+0x191/0x2f8 [ 465.984840][ C0] __report_bug+0x296/0x3d0 [ 465.989317][ C0] ? debug_print_object+0x18e/0x2a0 [ 465.994492][ C0] ? __pfx___report_bug+0x10/0x10 [ 465.999495][ C0] ? mark_held_locks+0x40/0x70 [ 466.004235][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.010035][ C0] report_bug_entry+0xe1/0x290 [ 466.014773][ C0] ? debug_print_object+0x19b/0x2a0 [ 466.019944][ C0] handle_bug+0x1c9/0x2a0 [ 466.024251][ C0] exc_invalid_op+0x17/0x50 [ 466.028733][ C0] asm_exc_invalid_op+0x1a/0x20 [ 466.033556][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 466.039349][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 12 1f d2 0b 41 56 48 8b 14 dd 60 47 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 06 c8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 466.058947][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 466.065001][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 466.072952][ C0] RDX: ffffffff8bfa46a0 RSI: ffffffff8bfa42c0 RDI: ffffffff90c194c0 [ 466.080918][ C0] RBP: 0000000000000001 R08: ffff88802aaa0890 R09: ffffffff8b92b900 [ 466.088867][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa42c0 [ 466.096820][ C0] R13: ffffffff8b92b940 R14: ffffffff8a660f40 R15: ffffc90000007b18 [ 466.104768][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 466.110394][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 466.116025][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 466.121809][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 466.127334][ C0] ? ksys_unshare+0x455/0xab0 [ 466.132001][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 466.138062][ C0] ? mark_held_locks+0x40/0x70 [ 466.142801][ C0] ? kasan_quarantine_put+0x104/0x240 [ 466.148151][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 466.153341][ C0] kfree+0x34c/0x690 [ 466.157222][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.162583][ C0] ? rose_timer_expiry+0x53f/0x630 [ 466.167684][ C0] ? rose_timer_expiry+0x53f/0x630 [ 466.172801][ C0] rose_timer_expiry+0x53f/0x630 [ 466.177722][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 466.183164][ C0] call_timer_fn+0x19a/0x590 [ 466.187760][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 466.192864][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 466.198306][ C0] ? mark_held_locks+0x40/0x70 [ 466.203062][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 466.208500][ C0] __run_timers+0x757/0xac0 [ 466.213002][ C0] ? __pfx___run_timers+0x10/0x10 [ 466.218031][ C0] run_timer_base+0x114/0x190 [ 466.222690][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 466.227869][ C0] run_timer_softirq+0x1a/0x50 [ 466.232611][ C0] handle_softirqs+0x1ea/0x910 [ 466.237382][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 466.242670][ C0] __irq_exit_rcu+0xef/0x150 [ 466.247334][ C0] irq_exit_rcu+0x9/0x30 [ 466.251564][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 466.257186][ C0] [ 466.260100][ C0] [ 466.263027][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 466.268992][ C0] RIP: 0010:unwind_next_frame+0xb3c/0x1ea0 [ 466.274789][ C0] Code: ff 48 8b 7c 24 28 e8 e3 ec ff ff 48 89 ee 48 8b 4c 24 20 48 ba 00 00 00 00 00 fc ff df 48 c1 ee 03 4c 8b 44 24 18 80 3c 16 00 <0f> 85 3c 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc [ 466.294392][ C0] RSP: 0018:ffffc9000d59f238 EFLAGS: 00000246 [ 466.300446][ C0] RAX: ffffffff82711980 RBX: 0000000000000001 RCX: ffffffff9159cc2a [ 466.308397][ C0] RDX: dffffc0000000000 RSI: 1ffff92001ab3e5e RDI: ffffc9000d59f3d0 [ 466.316353][ C0] RBP: ffffc9000d59f2f0 R08: ffffffff9159cc2e R09: 0000000000000007 [ 466.324306][ C0] R10: 0000000000000200 R11: 000000000000f1a6 R12: ffffc9000d59f2f8 [ 466.332271][ C0] R13: ffffc9000d59f2a8 R14: ffffc9000d59f3d8 R15: ffffc9000d59f2dc [ 466.340245][ C0] ? kasan_save_stack+0x30/0x50 [ 466.345087][ C0] ? unwind_next_frame+0xb1d/0x1ea0 [ 466.350273][ C0] ? stack_trace_save+0x8e/0xc0 [ 466.355113][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 466.361263][ C0] arch_stack_walk+0x94/0xf0 [ 466.365846][ C0] ? stack_trace_save+0x8e/0xc0 [ 466.370699][ C0] stack_trace_save+0x8e/0xc0 [ 466.375364][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 466.380724][ C0] ? kasan_save_stack+0x3f/0x50 [ 466.385564][ C0] ? kasan_save_stack+0x30/0x50 [ 466.390396][ C0] ? kasan_save_track+0x14/0x30 [ 466.395233][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 466.399978][ C0] ? __kmalloc_node_track_caller_noprof+0x357/0x9d0 [ 466.406556][ C0] ? kstrdup+0x51/0xe0 [ 466.410619][ C0] ? kstrdup_const+0x63/0x80 [ 466.415197][ C0] ? __kernfs_new_node+0x9b/0x960 [ 466.420241][ C0] kasan_save_stack+0x30/0x50 [ 466.424948][ C0] kasan_save_track+0x14/0x30 [ 466.429609][ C0] __kasan_slab_alloc+0x89/0x90 [ 466.434445][ C0] kmem_cache_alloc_noprof+0x2ad/0x780 [ 466.439897][ C0] ? __kernfs_new_node+0xd2/0x960 [ 466.444924][ C0] ? __kernfs_new_node+0xd2/0x960 [ 466.449933][ C0] __kernfs_new_node+0xd2/0x960 [ 466.454799][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 466.460252][ C0] ? find_held_lock+0x2b/0x80 [ 466.464915][ C0] ? kernfs_root+0xee/0x2a0 [ 466.469405][ C0] ? kernfs_root+0xee/0x2a0 [ 466.473904][ C0] kernfs_new_node+0x11b/0x1a0 [ 466.478654][ C0] __kernfs_create_file+0x53/0x350 [ 466.483753][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 466.489116][ C0] internal_create_group+0x593/0xf40 [ 466.494395][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 466.500194][ C0] ? __pfx_kobject_add+0x10/0x10 [ 466.505130][ C0] internal_create_groups+0x9d/0x150 [ 466.510417][ C0] ib_setup_port_attrs+0x41f/0x600 [ 466.515520][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 466.521148][ C0] ? __init_waitqueue_head+0xca/0x150 [ 466.526512][ C0] add_one_compat_dev+0x5b3/0x820 [ 466.531521][ C0] rdma_dev_init_net+0x30a/0x590 [ 466.536439][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 466.541899][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 466.547344][ C0] ops_init+0x1e2/0x5f0 [ 466.551489][ C0] setup_net+0x118/0x3a0 [ 466.555721][ C0] ? __pfx_setup_net+0x10/0x10 [ 466.560468][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 466.565823][ C0] ? mutex_init_lockep+0x110/0x150 [ 466.570920][ C0] copy_net_ns+0x46f/0x7c0 [ 466.575329][ C0] create_new_namespaces+0x3ea/0xab0 [ 466.580608][ C0] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 466.586229][ C0] ksys_unshare+0x455/0xab0 [ 466.590714][ C0] ? rcu_is_watching+0x12/0xc0 [ 466.595465][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 466.600471][ C0] ? kcov_ioctl+0x16a/0x720 [ 466.604961][ C0] ? kcov_ioctl+0x16a/0x720 [ 466.609453][ C0] ? fput+0x79/0x100 [ 466.613335][ C0] __x64_sys_unshare+0x31/0x40 [ 466.618078][ C0] do_syscall_64+0xc9/0xf80 [ 466.622566][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.628443][ C0] RIP: 0033:0x7fe8b199acb9 [ 466.633015][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.652604][ C0] RSP: 002b:00007fe8b2823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.660997][ C0] RAX: ffffffffffffffda RBX: 00007fe8b1c16360 RCX: 00007fe8b199acb9 [ 466.668954][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 466.676909][ C0] RBP: 00007fe8b1a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 466.684858][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.692811][ C0] R13: 00007fe8b1c163f8 R14: 00007fe8b1c16360 R15: 00007ffe2019af88 [ 466.700773][ C0] [ 466.704051][ C0] Kernel Offset: disabled [ 466.708349][ C0] Rebooting in 86400 seconds..