last executing test programs: 2m41.4395498s ago: executing program 0 (id=599): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x676, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x300000, 0x1000, 0x0, 0x7, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="05000000040000000400000007"], 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYRES8=r7, @ANYRES16=r7, @ANYRESOCT=r8], 0xf8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m37.912885792s ago: executing program 0 (id=611): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x0, 0x100, 0x4}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000600)=[@iv={0xd0, 0x117, 0x2, 0xb5, "bd38f9c0b91b9de20cd5ef1dd917472698b8c2659b72529ac53cdb1cadfd5973b7eb143c078b8c292f2241b5a6f09ab4a3910fcf47672e85db09e8c90a559de53e42cf394a5a6554869ca0661aa39bddd96f8bc5071524d0f2d9bfa2ab2e5d9e6be99c7e52178b622c32a7fbd833cb71d7b714abdbe8a1c50438fcc1fee13d74fe2d6ba55994c68c7676afb6f91e2fa90192a06b0e8a0be6ce977272a787a34bc0193e95abec817708581d2ec29c2a893c6f0c8bd2"}], 0xd0, 0x4004000}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000b00)="507b84da5ed7d3264710a02e941d6629a9f5dfd435c4d010e6fa1883b5303e61cbca0e46bd8234d9e235081aadb0c215ebdb60582edd262ca0118dde359f7391737340a81bcb5f2804fce1898f297462676e81778acc10402b1eb00d43de6e4e535bdf96c0c6b74d7083ea4d435b1355308ac024bef1ea63c749d3510007e7bfb90c28846dcac1d251ccb38e10d626a42240c16f4b435f48fd0651eb9ca7fc254bcd5673a5413b515454402958800000000000000000000000000000c64f3de5618b437edea77631f0c6e0ddff2b8504362c9ebe63bc4bbe69b6705e12c65e6c0a8034db99d9f96d9342f854484b88e3874d7ca9a4eacc9eeba0e2514ea9a3d02e784eee3f5967914e28af99c7c063da54f26f05f922db8e914a02edf6dc82be73603da009e579fa1df60226c8030eb6b07895d620ab945b2103a7ddb0c49c2680b9cb7841d3033668d2635b681f1214e916b8b9c7a4193f85eb400ddfa3d20237a3f6401b1b5e90a603b43f0e0392406ab2418b617f22f1427a6e5ebcd620c46e6a391a66e09e0ad83d8ff365db9c67424ae922cee0cf0be5e3fbe9e955ef3bfc7e0313e2e3e272", 0x1a8}, {&(0x7f0000000500)="9e03ccbac75acf91a6c582ced91583ef4918afb2e297a42c788bd266ca419753948f72ad9c4ae8940d561df4510fa140fe5c649f762ef2", 0x37}, {&(0x7f0000000700)="1f06bcc5d31e8a58a5aed7ae4d9119e655fa45b25b5f67122376faa9393a0382dc1f9c59d5abe084165900ce57e7579495a3c8c5989c822b9612056a4c61a5bb33b7e0f8a5b9d3fa67eff816e547f91d7eab0601a956a8431de1fe06e0a4e147d2653324eb91ef6a2d8424fd95f7ad83884bebd42736742d524dedc0ff70e7837589a380da2f491121ddf88fd6d3db84358e810a13c9374e2c6ae1813f64b30aa4af8b55c1b9b99ca2d6b462d499885be20ea249cbe3a2050e9f91377c58ebf044b5e20e59", 0xc5}, {&(0x7f0000000300)="90428047c0b9f4c674eb3a8c0f454fc439e8684759b374370f3a02e0f89cf58dfd259d54dd6ea9c5207e534cb99fabb2a16f397472d07c63a8c669c7a0fe3fcb6ddf9c80f38cb21826b60c833dbb034a6a322efc5b44e113f2c3bbd77711a6b3ad9e", 0x62}, {&(0x7f0000000540)="be15615aaf45e36a8c8f728f718121ff5376da74a14002f6ad2c1d1c65a689c2dd1c52b369f8ddd079921f27f0", 0x2d}], 0x5, 0x0, 0x0, 0x49004}], 0x2, 0x40800) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000a1c0)={0x1c, 0x2a, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x2, 0x0, 0xfbfbfbfb}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000380)={r9, 0x0, 0x0, 0x1, 0x10000, 0x8, 0x2, 0x6, 0x1, 0x7f, 0x2}) 2m36.198412115s ago: executing program 0 (id=619): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x3, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setfsgid(0xee00) (async) r3 = syz_clone(0x100100, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c00028008000140000000130800024000000000080004400000009b080003400000000108000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x44800) (async) r5 = memfd_create(&(0x7f0000000080)='/dev/vhost-vsock\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r5, 0x89f9b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sync_file_range(r5, 0xd7, 0x401, 0x2) 2m34.275798453s ago: executing program 0 (id=624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000030000000000000000000070094000100fffffffd95"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m33.972028748s ago: executing program 0 (id=628): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m32.89998683s ago: executing program 0 (id=632): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$vim2m(0x0, 0x800, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000018000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m17.427964092s ago: executing program 32 (id=632): syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_open_dev$vim2m(0x0, 0x800, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000018000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m54.695539251s ago: executing program 4 (id=765): prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xc, 0x0, &(0x7f0000000100)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x4001) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x1) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r2, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x10, &(0x7f0000000100)='barrier') connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES64=r8], 0x140}, 0x1, 0x0, 0x0, 0x4008005}, 0x20004044) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r10) 1m54.091888492s ago: executing program 4 (id=767): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m52.754074269s ago: executing program 4 (id=770): quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000403, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x1403, 0x2, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40810) syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x7, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x6, 0x0, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x1, 0xf, 0x8, 0xa, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x40, 0x7, {0x7, 0x25, 0x1, 0x3, 0xbe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x15, "730600"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xe, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x1, 0xff, {0x4, 0x25, 0x1, 0x2, 0x2a, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x41, &(0x7f0000000100)=@string={0x41, 0x3, "a9193c0d3562f37e49f228b21e5bba96ec5ff3040000000af02679a9b2da277f8bf17ba5b68cc39ea8f71b93714420a2058659032ca3ccc135ff575d5b411c"}}, {0xf, &(0x7f0000000180)=@string={0xf, 0x3, "2f874f60314f6c573fbf8293ee"}}, {0x4, &(0x7f0000000240)=@string={0x0, 0x3, "c285c50cca15c2bb677bc5bf5e819ea8188c67f3b53dde43f080616701ccb69b671c89b57133071c32541d30927e5a36aa0101b5daaaac7e64900f4bfeeb6520de77920f532ced8bbc1c28b9f258d8f8f383"}}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfe) ioctl$PPPIOCGUNIT(r0, 0x4004743c, 0x0) 1m50.128161925s ago: executing program 4 (id=780): prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast1, {[], {{0x0, 0x8907, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x11) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x66d9, 0x6, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x42, 0xb7, 0xfffffffffffffffc, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x453, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0xaff, 0x1, 0xdf, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x80, 0x80}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0) 1m46.923005854s ago: executing program 4 (id=790): r0 = socket(0x2d, 0x80002, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYBLOB, @ANYRES32=r1], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x8, 0x10, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000980)=""/16, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000b40)=""/220, 0xdc}, {&(0x7f00000003c0)=""/52, 0x34}], 0x2) r3 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x1f, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xffe4}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$sock(r4, &(0x7f0000000240)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x2, @remote}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000480)="ada1bade99b18b1deaac61ee7383c6d999836c8ffe32c6190094ae77f9617ce9ad41a3ac12aebf9c3933e7894d9f89af37c930df3865b8aee81fd51860385434ef3b27b58143ef401aaddf07abd974699d88", 0x52}, {&(0x7f00000001c0)="cc39490352d54a6d81d4863b04bde4a9b00bcfbf7a911583b07aaac3201251ef03f018090f729a0d8ad39236a5c357ae08893b420f17578cdb2aed", 0x3b}, {&(0x7f0000000680)="bbe68053ffcbdda4fd828904afc2137702489ba828b79b31080c468ee7ab8554d45866e2fa9112d491d6b3395747a83bc87521c6a47e0136b86b6eeef44c8396dabbda4243f60f26fb559d1a2f73fc2e9425f58d564abcd7f7f66eaf6a08bc05d7dc72b8953959326dc4ea9a8f3a81b714e6ade046ede7dd07e7338ded7fd370a46809fd7ea6ef3b8f755b539ab85cd7", 0x90}, {&(0x7f0000000580)="b51e896e57d0e4db37e12fe3c5065c8f3008b3ce3d9f1b8a4c01f4f435b1107dfea8bffbe1f7eddcc8ed84c2def47217b5ad028997657eaf8909d6a2795dc7f77fa2ecaa2eb68cc8fd6a06a00fdc66ee358f4e", 0x53}, {&(0x7f0000000740)="413322c4e16a917aaee399924a26be7fd4f2f4de5ef5ae3ed4bf0971811ac2b402068a55f177e1881ecf80343f1e36911432ad487036babb884d51d9c707cf585010cc228af2f5d907d75e9fb03d3b3635593aaa0b023cba58eea0fcdd5d8224f134d1300a62d430c38d2ce8553f996a5560a1440dfd947f916e731487d0", 0x7e}, {&(0x7f0000000800)="a5cc63816f2ed89ea8c85294a89a66150d717aa6382bf439bc79160dc6c93f4b067eb1bb4aa54cbed86ec13596028f25baa26b6aa397e8e2e64100409db49d26ea33f0e12ff578e21be3670260b5b46669b922a0d898ba0817a982b1cb767979a1ac8a56608a3974dc221bd20dadbccfefa20d0c3ef0e11ed658705a39dbac2aa2da42c3f03bd519fdb400b2216b877d9052b14fc643d2e67e15faa78a7337ce9f", 0xa1}, {&(0x7f00000008c0)="6ae3e6ebb84b7d76033ff5d1ec1d55581883871469a412e9b9e84d2d1a646b931c1053581d5209caba90429c43e5dcf8ef67ae22d749c109ec7050cf59eac2e129e20cf5b50e001c22d9fa9b1ebbb0168cf8c5fa3d1cf35a1064578400dd1a3a972bafb9d926b495dc8521f779", 0x6d}, {&(0x7f00000009c0)="c15d7a4f75a63d4b911a0b90f0a836d2f3f8efa3569cd08afe225f7cb341632e4e6f03cec77502d76f77f7f9ac938173", 0x30}], 0x8}, 0x4008811) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1m45.96824302s ago: executing program 4 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m45.447663137s ago: executing program 33 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.727965439s ago: executing program 6 (id=1179): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40482, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x5, 0x0) r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0, 0x31, r1}) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000000000)=0x977, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 9.287729426s ago: executing program 6 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtaction={0x2cc, 0x30, 0xffff, 0x0, 0x0, {}, [{0x2b8, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x158, 0x9, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x17, 0x3, '!\\^%]\\[#{-}\x12@,){$\\\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'ife\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0xffff7fff, 0x10000000, 0xc66, 0x8cc}}, @TCA_DEF_DATA={0x7, 0x3, '\'\x11\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2f, 0xffff8536, 0x0, 0x4, 0x300}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7, 0x8, 0x4, 0x956}}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0x89, 0x6, "7d018663e75591a3a0fd9728e15eea244daf10677be99507b91940480b60ad4f515f2cfc6940c5f504322002f9106825bad4c310e94b0aa88479b8bf7a67523de0ad9f8b72621b1c70c8357938477897ada35dde700efd0d8238050c06bb293604ab13df8e974dcae46bafdf276a43f6fd077aa8f6a65f04e457376185faf22108ef4d523a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x110, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x1c}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0xd7, 0x6, "32b6699e26995d017f30b8695656383ccb99f7d91146bc57008e206106fdfb6baad9a9867ef205d2e01be0f232a19d9ca8836831e751446d9675643913fcf153b5d4d348efcd5847a5dd6b756347c988189219533e133e4f52117517773242c5ac3fdc6c3444f789a2568bd72cdf3dfd1ff9b59daeb5a5dcbd0464499982ae5153c4b467fc92f7acaa4b7dd7126924ddfd04e0c1385d544d7df174c11f89783c80ff87a5e1ddabe2a33e491d15a7d12626813c70f7cc3f2cbaa31f966c2233b05ccb5d3ca78b822612624b4776f75bfaae4a65"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4004010}, 0x808) 9.162151239s ago: executing program 6 (id=1184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00020b, 0xc, 0x0, &(0x7f0000000440)="63eced8e46dc3f0adf33c9f7", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000340), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x33, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 'H]'}}, 0x0, 0x0}) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x40000084, 0x0, 0x39}]}) 6.936309995s ago: executing program 3 (id=1196): syz_emit_ethernet(0x46, &(0x7f0000000440)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}}, "00000000804500ff"}}}}}, 0x0) 6.723228443s ago: executing program 3 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0xffffffe4, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xd}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.837689946s ago: executing program 3 (id=1202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x1f, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xb4}}, 0x0) 5.753225808s ago: executing program 3 (id=1203): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000fb0f00083c00fc000000000000000000000000000000ff61a710d03597962fa84cab29cdf2312b7b3c07e8000000"], 0x0) syz_open_dev$dri(0x0, 0x1, 0x48240) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc814}, 0x802) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 5.695672581s ago: executing program 1 (id=1204): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$sndctrl(&(0x7f0000000880), 0x200, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000880), 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000ac0)={0x3, 0x1, 0xff, 0xffffffff, &(0x7f00000008c0)=[{}]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0x4, 0xfffffffffffffa72}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r5, 0x0, 0x4, 0xfffffffffffffa72}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r5, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03", @ANYBLOB="a4"], 0x0) (async) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000145f405e04bd84be89010403010902240001000000000904ed0002ff5d810009050303000000050009058a03", @ANYBLOB="a4"], 0x0) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (async) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x3, 0x1, 0x0, 0x6, 0xf13, 0x400}, 0x20) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x1103, 0x24, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30, 0x4010}], 0x1, 0x80000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYBLOB="095ccc0066"], 0x9) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r9, @ANYBLOB="095ccc0066"], 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 5.046256084s ago: executing program 6 (id=1206): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r3) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)=@multiplanar_userptr={0x2a, 0x1, 0x4, 0x1, 0x1ff, {}, {0x4, 0x0, 0x0, 0xc0, 0x5, 0x6, "edbe9213"}, 0x400, 0x2, {&(0x7f00000000c0)=[{0x4, 0x400, {&(0x7f0000000040)}}, {0xf, 0x5, {&(0x7f0000000080)}, 0x7}]}, 0x1000, 0x0, r1}) 4.311834307s ago: executing program 1 (id=1207): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000003f00472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 4.310100262s ago: executing program 6 (id=1209): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x8642) r1 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}]}]}, 0x28}}, 0x80) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000006c0)={r2, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_usb_control_io$hid(r5, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x40, 0xc, 0xa6, {0xa6, 0x22, "b9af5a62dce7c213abcdad017e7afdda7af3464cf2d41ee28b2d02923520ed10a61ee7d36039c8e8aab050a917b050c73c76430370849464b1574138c0569d57e454e418b8ca7559e5a5c9703fb84454773a78ee1b0082f8ae972e13cd0029d696fc7529a7e21f0c4e78def6306b6130b7bd241508f73973be7e7cc6cdb763ddae8180bbe54b1ab1b06e37a3f365ef6dc953e8e6624259db3537212541b0915272c88c83"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x436}}, &(0x7f0000000400)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x0, '\''}, @global=@item_012={0x1, 0x1, 0x3, "86"}, @main=@item_012={0x2, 0x0, 0x9, "90b9"}, @global=@item_4={0x3, 0x1, 0xa, "6ef79519"}, @local=@item_4={0x3, 0x2, 0x1, "79d6e939"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffd, 0x3, 0x1, {0x22, 0xb0e}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a80)={0x0, 0x12, 0x7a, "0387283c6b56f576b953077a8809b63abdcbd94b9b853eed2d677b328c792ec3129c0eb273b6eb26cd4cc159e9c470d32ff962f78ecfa9d709a803434106fa0be5212b21e0632e4de8bb93f61aa3580a7c6cf7a94f3663b1215a8f5d8a9630c09ed2d4af44821222aebf7e81adf307e6066e2dc2cdc5104123c9"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000b40)={0x20, 0x1, 0x68, "2bbb2ddd45869ec93fcd73f9cc4b338534c2a365606eebaec7ccdc7ca7e72169c2105e2f399b40eb6b4c92e45de37996b21efc15a4c5ae18582be82f10640e6404197bb922b09307e3c8ee80f51f68a904428d518f2bc72a7ca8a39c082f163322e9a8d6cf113d35"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x3}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010600000008001b000000000008000d0001"], 0x38}}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r10, r8) fallocate(r8, 0x10, 0x3, 0x7) read$FUSE(r8, &(0x7f0000001100)={0x2020}, 0x2020) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc623, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0x820}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1a, 0x10, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x40, 0x7}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x8, 0x7, 0x20, 0x8}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7, 0x8, 0x6, [0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4f1be5be377d6c03ff4c0eb371dcc82c"}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x414}}, {0x101, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}, {0xd0, &(0x7f0000000440)=@string={0xd0, 0x3, "36ba3132685806c1870095f2c0e9ac11f361cfb2a91dcea31483225144de034dc94097bafdf9d49bc0a8005efe8bc6b118082862f5c20f412870b47a99b429b971020e20dcaa774a8e460e0a65e5ef179e8c63183abb53de081a531744b2289d99a07cebbe32235ebb53736110053a550334bd5c0b401341f36d4e0ba4c0cb5ddf76e74228ea89b51fce86613f3ff06f680b71d77dc4654bf979019b9c3a1f37066505bf61ac8f5a62e886f50d5d5247f58624198a153c13503a067cb81582f2284fdb7d6aad8455794afcddefd2"}}, {0xab, &(0x7f0000000200)=@string={0xab, 0x3, "086f8588ff5da2987e2f0259f22113fbdfbc736a16d6da3895c31912f0562968ec8f0e466db49d0b0e9bbd8399f37e0121727ed377f244cb1d1dffcef40f568e336796248adb8fef619fcaf57dd6eed795eb53d600ee2ba383baca552d6431e6d258f74e56250fc3e61c360833b518543716669fd86d4d2f9ab64e9dd9db553be71a12928633732693f194e35a24cb22652a7f0199505f05b85d928a93e1ec792728a64f81799dc158"}}, {0x9b, &(0x7f0000000840)=ANY=[@ANYRES64=r7]}, {0x36, &(0x7f0000000600)=@string={0x36, 0x3, "dc20a290c30a2b774bc288f97d3aeabc56376b20ceb9f0bcdb3d10e481b9253f853949fd4b4e65bc19c6fac9f48055fc87fb77ce"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc0a}}]}) 3.543605519s ago: executing program 1 (id=1210): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = io_uring_setup(0x1685, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffff5, 0x0, 0x0, 0x4, 0xfefdffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.491902495s ago: executing program 3 (id=1211): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7d77f40d61244043d29010203010902120001000000000904ff0100000a2e00"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0xa0, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "62bcfc91988604e6c485ef28008e5039"}, @TCA_CT_PARMS={0x18, 0x1, {0x8000, 0xfffffffc, 0x0, 0x8, 0xf}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0xa0}}, 0x20004084) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x4b70, 0x10100, 0xa, 0x40003, 0x0, r9}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1}) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000b80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000800)={0x2a0, 0x12, 0x100, 0x70bd26, 0x25dfdbff, {0x6, 0x4, 0x9, 0x46, {0x4e21, 0x4e23, [0x8, 0xb, 0x6, 0x9e0], [0x4, 0xf, 0x1000, 0x7], r7, [0x0, 0x4]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa0, 0x1, "0879ef9a9165876cb6e8820f6bbba73fe7460a6658be7ef70d3fe8d92b293e781f3448b240960609952ed71032e1e4948a6375a4a8c88de8eef5d910d5e1bc55c0c9d3a737270a240a1423cc68297cfc2e7c0dcd28969b8976384910835237d776f86908bb84da39528a22ffb68764f2565e44260598c89d0f9f13069a3eed3340e00a013ee39965cb8fae092d3702d98ccca639d97b46f4616822ba"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "b114a8acd8fb3d244b9b53b6a47a641626ae554ae00932c5b3cd0584f100c328765d8b7a744fed22fc9df9439a9acf4175fa3937bba20a1dd330ff537e09ba4e208e987f9f2b284a326c10f93e244901c8e074fc18bf16b66a3abfc96caa3197378064c58d79d4671988e70a64f1d1fc6fe10d2ac89b5ef0a6ce26e1d570c1bbf8a2a2eb359bbbb39577c538ec7b9656b3bb75d6bdb614f0878131d8c6280da851e3ad74a13a14632e9129259d969d6a39118a219df45e25c49a624799819052a1c9"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "020d23a4feb055227072370be2d8e51377134cb89f1180f42f06f12d7fafc81aecb7102f6f96cf4c324855988c4ce20731272e6c1d7413c0087420a67c992496080ec798cb4ea93f770a828910319167e2ffe4141d70d9fd729fac7420e5cf637f1704407a210f02f2bdba525753080808057adf5505b434f8556c2d10b4a59c917ff351874c89e01bbd94d65d3ade8a5e4dff3aa596666bd63800fb1c44b1d1bd"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "16d25c2891e342bf63578633cf45c26e5554c54ac70d1b4f6ba076d6a0d06f01274365588b6d4506765ad45f0c4353d355d5aac8b5bf96e23e2f00a165"}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x24040000}, 0x400c001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000480)={'syztnl2\x00', r7, 0x8000, 0x8, 0x5, 0x4, {{0x1f, 0x4, 0x1, 0x0, 0x7c, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @empty, {[@rr={0x7, 0xb, 0xd0, [@rand_addr=0x64010101, @broadcast]}, @rr={0x7, 0xb, 0x6a, [@rand_addr=0x64010102, @loopback]}, @end, @timestamp_addr={0x44, 0x2c, 0x34, 0x1, 0x3, [{@remote, 0x40}, {@multicast1, 0x2}, {@loopback, 0x8}, {@broadcast}, {@loopback, 0x93}]}, @timestamp_addr={0x44, 0x1c, 0x31, 0x1, 0x0, [{@multicast1, 0x6}, {@empty, 0x48}, {@local, 0x800}]}, @generic={0x94, 0x9, "76d98e5b58c618"}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x44000000, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x4, 0x1, 0xa, 0x1, 0x5, 0x6, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0xfc40, 0x7f, &(0x7f0000000400)=""/127, 0x40f00, 0x40, '\x00', r12, 0x0, r8, 0x8, &(0x7f0000000580)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x5, 0xa, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r9, r9], &(0x7f0000000640)=[{0x1, 0x5, 0xf, 0x1}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xfff, '\x00', r5, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x7ff}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xb7, &(0x7f0000000500)=""/183, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r13, r14, 0x1], &(0x7f0000000a00)=[{0x3, 0x1, 0x5, 0x9}, {0x0, 0x1, 0xa, 0xc}], 0x10, 0x6}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r15 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) r16 = dup(r15) write$selinux_access(r16, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797374656d5f753a6f62796527745f723a7472616365726f7574655f657865635f743a73afa64affba845f302073797374656d5f753a73797374656d5f723a6b65726e656c5f743b7330203037667c060d168e2030303030303030303030303030303030303033005e9e94179298ff1298cf0b7de6fc44b9ce04a196ef83b8e3057774e620bd09b7468ba5226b000000"], 0x5a) 3.40831374s ago: executing program 2 (id=1212): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400}, 0x10}, 0x94) 3.064130353s ago: executing program 1 (id=1215): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x124, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xf4, 0x2, [@TCA_BASIC_ACT={0xf0, 0x3, [@m_connmark={0xec, 0x3ffd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0xa0, 0x6, "e2cfd253cdae10ff79d613c6ddefeccaff685c413b9287feaed6ae2655b1b28dfee86b454cc4be749e072db2e4a72d5d801dd4ea728bc5574c08e1750226915971c179f4b6b064b9e5697c21da78a13eebf871394d8b2c21eb5efee3160e1074918724b1f1873925da7af572597c49079539dc9b1bf35d71631b82586ca3785712157ddc2fa00bbfddb116cbed8879886fa509b551546357cb1c2c04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.013159139s ago: executing program 5 (id=1216): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd26, 0x0, {0xa, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040801}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.870718254s ago: executing program 1 (id=1217): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x29}}, &(0x7f0000000400)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000008800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000240)=""/249, 0xf9}], 0x1, 0x5e, 0xfffffff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.808476288s ago: executing program 5 (id=1218): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00002c8000/0x2000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0xdd03000000000000}, 0x20000000) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) 2.256056691s ago: executing program 1 (id=1219): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffea) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x5}, {0x5, 0x8, 0x8f, 0x200}, {0x7, 0x3, 0x7, 0x31c5}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) (async) socket$inet6(0xa, 0x1, 0x7f) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x4014) (async) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) 2.014518626s ago: executing program 2 (id=1220): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_key={0x1, 0x8}]}, 0x58}, 0x1, 0x7}, 0x5f00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x4cc00) 1.885193016s ago: executing program 2 (id=1221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000007aac00000002000000300004802c000180090001007866726d000000001c000280080002400000000c050003005700000008000140000000100900010073797a30000000000900"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.8403451s ago: executing program 2 (id=1222): mkdirat(0xffffffffffffff9c, 0x0, 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x5, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) set_mempolicy(0x3, &(0x7f0000000080)=0x1fe, 0x5) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000fb0f00083c00fc000000000000000000000000000000ff61a710d03597962fa84cab29cdf2312b7b3c07e8000000"], 0x0) syz_open_dev$dri(0x0, 0x1, 0x48240) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xc814}, 0x802) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 1.004110629s ago: executing program 5 (id=1223): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x79ac, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x16) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x5, 0x4) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 999.94537ms ago: executing program 5 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001e0001f80100002000000000010000000c000380080000005ab5b52e320161df68a99eab531da2a3f903ddbd3b68762ea35c41f2e3736ffd656d8fbfcd0738b4d113eee270d83d6a711fcd5b83aa49971af4c15c5ca1252788f6984ba3dd0a064e20060aaa2b2f4926b4d08a3c230901f5b7b9f72950a1f1f12412b3fbf89b79ad"], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 943.258342ms ago: executing program 5 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac0040002020800020003000a002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300005865000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24040854}, 0x24014080) 942.362509ms ago: executing program 2 (id=1226): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x100000000000000, 0x40000}, 0x0) 519.804207ms ago: executing program 3 (id=1227): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x124, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xf4, 0x2, [@TCA_BASIC_ACT={0xf0, 0x3, [@m_connmark={0xec, 0x3ffd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0xa0, 0x6, "e2cfd253cdae10ff79d613c6ddefeccaff685c413b9287feaed6ae2655b1b28dfee86b454cc4be749e072db2e4a72d5d801dd4ea728bc5574c08e1750226915971c179f4b6b064b9e5697c21da78a13eebf871394d8b2c21eb5efee3160e1074918724b1f1873925da7af572597c49079539dc9b1bf35d71631b82586ca3785712157ddc2fa00bbfddb116cbed8879886fa509b551546357cb1c2c04"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 198.103694ms ago: executing program 6 (id=1228): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200002, 0x200000, 0x0, 0x0, 0x598b}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x40408c0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000), 0x4) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000ff7000/0x3000)=nil, 0x400c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r4 = fanotify_init(0x4, 0x1000) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1) fanotify_mark(r4, 0x1, 0x40001019, r3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f0000000740)=""/4096, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x275a, 0x0) utimensat(r5, 0x0, &(0x7f0000000780)={{0x77359400}, {0x0, 0x3ffffffe}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) 115.578615ms ago: executing program 2 (id=1229): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\xec\r\n\xd9\x95\\4\x15\x88\xc5A\xed\xa7g\"\r4\xc3Ñà– ) failed (rc=-5) [ 259.103114][ T30] audit: type=1400 audit(1771346167.230:463): avc: denied { read } for pid=8616 comm="syz.2.727" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.188742][ T8462] veth0_macvtap: entered promiscuous mode [ 259.270052][ T8462] veth1_macvtap: entered promiscuous mode [ 259.319764][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.392376][ T8462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.411943][ T180] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.426451][ T5960] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 259.439593][ T180] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.462164][ T180] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.513352][ T180] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.598086][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.623183][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.676047][ T5960] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 259.685726][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.780849][ T5960] usb 3-1: config 0 descriptor?? [ 260.349783][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.380380][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.471052][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.486537][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.496791][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 260.518492][ T30] audit: type=1400 audit(1771346168.650:464): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/root/syzkaller.tyDjtC/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 260.628399][ T5960] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 260.686810][ T5960] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 260.738649][ T30] audit: type=1400 audit(1771346168.790:465): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/root/syzkaller.tyDjtC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 260.887568][ T5960] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 260.908397][ T30] audit: type=1400 audit(1771346168.790:466): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/root/syzkaller.tyDjtC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=22278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 260.992738][ T8656] xt_hashlimit: max too large, truncated to 1048576 [ 261.002133][ T8656] No such timeout policy "syz1" [ 261.030177][ T8656] binder: 8651:8656 ioctl c0306201 2000000001c0 returned -22 [ 261.362183][ T5960] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 261.380651][ T5960] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -32 [ 261.438015][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.470335][ T30] audit: type=1400 audit(1771346168.840:467): avc: denied { mounton } for pid=8462 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 261.493928][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.837345][ T8674] netlink: 44 bytes leftover after parsing attributes in process `syz.5.740'. [ 262.001120][ T30] audit: type=1400 audit(1771346171.138:468): avc: denied { create } for pid=8668 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 262.506923][ T8685] capability: warning: `syz.5.744' uses 32-bit capabilities (legacy support in use) [ 262.713369][ T8688] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.745'. [ 262.852953][ T5872] usb 3-1: USB disconnect, device number 17 [ 262.977341][ T5960] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 263.116616][ T5960] usb 5-1: device descriptor read/64, error -71 [ 263.906506][ T5872] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 263.914131][ T5960] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 264.046726][ T5960] usb 5-1: device descriptor read/64, error -71 [ 264.066423][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 264.075680][ T5872] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 264.086310][ T5872] usb 3-1: config 1 has no interface number 1 [ 264.096598][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 264.126436][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 264.156681][ T5960] usb usb5-port1: attempt power cycle [ 264.172315][ T5872] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.195928][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.205476][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.234069][ T5872] usb 3-1: Product: syz [ 264.239555][ T5872] usb 3-1: Manufacturer: syz [ 264.244230][ T5872] usb 3-1: SerialNumber: syz [ 265.037205][ T8706] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 265.149012][ T5960] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.266312][ T5872] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 265.608418][ T5960] usb 5-1: device not accepting address 16, error -71 [ 265.854811][ T8712] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.751'. [ 265.886958][ T30] audit: type=1400 audit(1771346175.018:469): avc: denied { getopt } for pid=8708 comm="syz.5.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.091433][ T5872] usb 3-1: 2:1: cannot get freq at ep 0x82 [ 266.276323][ T8713] Cannot find add_set index 0 as target [ 266.577409][ T30] audit: type=1400 audit(1771346175.698:470): avc: denied { create } for pid=8714 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.660013][ T5872] usb 3-1: USB disconnect, device number 18 [ 266.930733][ T30] audit: type=1400 audit(1771346175.708:471): avc: denied { setopt } for pid=8714 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.167365][ T30] audit: type=1400 audit(1771346176.278:472): avc: denied { getopt } for pid=8714 comm="syz.5.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.576645][ T180] wlan1: Trigger new scan to find an IBSS to join [ 268.277868][ T8740] input: syz1 as /devices/virtual/input/input22 [ 269.030650][ T8750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.764'. [ 269.682925][ T8758] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 270.561731][ T8735] cgroup: fork rejected by pids controller in /syz5 [ 270.818978][ T2615] block nbd0: Possible stuck request ffff888028230000: control (read@0,1024B). Runtime 90 seconds [ 270.830839][ T2615] block nbd0: Possible stuck request ffff888028230200: control (read@1024,1024B). Runtime 90 seconds [ 270.842034][ T2615] block nbd0: Possible stuck request ffff888028230400: control (read@2048,1024B). Runtime 90 seconds [ 270.853053][ T2615] block nbd0: Possible stuck request ffff888028230600: control (read@3072,1024B). Runtime 90 seconds [ 271.382103][ T30] audit: type=1400 audit(1771346181.519:473): avc: denied { mounton } for pid=8763 comm="syz.3.768" path="/proc/535/task" dev="proc" ino=23163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 271.685698][ T54] wlan1: Trigger new scan to find an IBSS to join [ 272.003029][ T24] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 272.225801][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 272.513116][ T24] usb 5-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 272.527875][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 272.539666][ T24] usb 5-1: config 1 has no interface number 1 [ 272.546545][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 272.564236][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.574306][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.587380][ T24] usb 5-1: Manufacturer: 蜯æä¼±å¬ë¼¿éŽ‚ [ 272.593386][ T24] usb 5-1: SerialNumber: syz [ 272.838329][ T30] audit: type=1326 audit(1771346182.979:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8923 comm="syz.1.776" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc74af9bf79 code=0x0 [ 272.885323][ T8927] syz.4.770 (8927) used obsolete PPPIOCDETACH ioctl [ 272.907438][ T1030] wlan1: Creating new IBSS network, BSSID 1a:3e:4c:a6:73:f0 [ 272.973186][ T24] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 273.001756][ T24] usb 5-1: 2:1 : unsupported format bits 0x80 [ 273.610390][ T24] usb 5-1: USB disconnect, device number 18 [ 273.632658][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 273.681623][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.716162][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.781'. [ 273.770973][ T8942] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.828013][ T8944] bond3: entered promiscuous mode [ 273.853577][ T8944] bond3: entered allmulticast mode [ 273.886989][ T8945] bond2: (slave dummy0): Releasing backup interface [ 273.918375][ T8945] dummy0: left promiscuous mode [ 273.936142][ T8945] dummy0: left allmulticast mode [ 274.003733][ T8945] dummy0: entered promiscuous mode [ 274.016329][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 274.037023][ T8945] dummy0: entered allmulticast mode [ 274.055110][ T8945] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 274.146348][ T5873] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 274.381461][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 274.396333][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.834814][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.844745][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.889695][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 274.906333][ T5873] usb 4-1: config 0 has no interface number 0 [ 274.914055][ T5873] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 274.928659][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.023777][ T5873] usb 4-1: config 0 descriptor?? [ 275.031753][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 275.052567][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 275.105377][ T5873] usb 4-1: selecting invalid altsetting 1 [ 275.111743][ T24] usb 5-1: Product: syz [ 275.120660][ T5873] dvb_ttusb_budget: ttusb_init_controller: error [ 275.130420][ T24] usb 5-1: Manufacturer: syz [ 275.135189][ T24] usb 5-1: SerialNumber: syz [ 275.145379][ T5873] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 275.262840][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input23 [ 275.446259][ T30] audit: type=1400 audit(1771346185.579:475): avc: denied { map } for pid=8939 comm="syz.4.780" path="socket:[23801]" dev="sockfs" ino=23801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 275.579939][ T5873] DVB: Unable to find symbol cx22700_attach() [ 275.817108][ T5873] DVB: Unable to find symbol tda10046_attach() [ 275.843769][ T5873] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 276.191539][ T5873] usb 5-1: USB disconnect, device number 19 [ 276.398590][ T5873] appletouch 5-1:1.0: input: appletouch disconnected [ 277.058788][ T5949] usb 4-1: USB disconnect, device number 19 [ 277.725716][ T30] audit: type=1326 audit(1771346187.859:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.2.794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63d719bf79 code=0x0 [ 278.391546][ T8998] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 278.445760][ T5808] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.458209][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.470438][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.482502][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.492301][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.616297][ T5873] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 278.966306][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 278.977172][ T5873] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 278.996606][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.029155][ T5873] usb 4-1: config 0 descriptor?? [ 279.079535][ T9000] chnl_net:caif_netlink_parms(): no params data found [ 279.253918][ T24] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 279.262087][ T5873] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 279.287322][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.297822][ T5873] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 279.305160][ T5873] usb 4-1: media controller created [ 279.327606][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.507417][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.637566][ T24] usb 2-1: config 0 has no interface number 0 [ 279.745660][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 279.767000][ T5873] az6027: usb out operation failed. (-71) [ 279.772847][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.773931][ T5873] az6027: usb out operation failed. (-71) [ 279.799902][ T24] usb 2-1: config 0 descriptor?? [ 279.808892][ T30] audit: type=1400 audit(1771346189.939:477): avc: denied { listen } for pid=9013 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.831839][ T5873] stb0899_attach: Driver disabled by Kconfig [ 279.839472][ T24] usb 2-1: selecting invalid altsetting 1 [ 279.847003][ T5873] az6027: no front-end attached [ 279.847003][ T5873] [ 279.854409][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 279.860957][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 279.869654][ T5873] az6027: usb out operation failed. (-71) [ 279.875381][ T5873] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 279.888594][ T5873] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 279.916520][ T30] audit: type=1400 audit(1771346189.939:478): avc: denied { accept } for pid=9013 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 279.920448][ T5873] dvb-usb: schedule remote query interval to 400 msecs. [ 279.946472][ T5873] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 280.026583][ T24] DVB: Unable to find symbol cx22700_attach() [ 280.210765][ T5859] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 280.232954][ T5873] usb 4-1: USB disconnect, device number 20 [ 281.159176][ T5811] Bluetooth: hci0: command tx timeout [ 281.203345][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.236896][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.366276][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 281.383679][ T5859] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.442582][ T5859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.452793][ T5859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.463057][ T5859] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.476679][ T5859] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 281.487293][ T24] DVB: Unable to find symbol tda10046_attach() [ 281.493678][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 281.507238][ T9000] bridge_slave_0: entered allmulticast mode [ 281.515136][ T9000] bridge_slave_0: entered promiscuous mode [ 281.622303][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.633247][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.640939][ T9000] bridge_slave_1: entered allmulticast mode [ 281.670401][ T9000] bridge_slave_1: entered promiscuous mode [ 281.674291][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.771162][ T9000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.788932][ T9000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.190880][ T9041] batman_adv: batadv0: Adding interface: macvtap3 [ 282.199376][ T9041] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.227714][ T9041] batman_adv: batadv0: Interface activated: macvtap3 [ 282.245070][ T5859] usb 6-1: GET_CAPABILITIES returned 0 [ 282.255065][ T5859] usbtmc 6-1:16.0: can't read capabilities [ 282.340084][ T9000] team0: Port device team_slave_0 added [ 282.358677][ T9000] team0: Port device team_slave_1 added [ 282.379028][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.398356][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.447620][ T9000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.470324][ T30] audit: type=1400 audit(1771346192.609:479): avc: denied { bind } for pid=9013 comm="syz.5.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.478470][ T9000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.514636][ T9000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.561985][ T9000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.632090][ T9000] hsr_slave_0: entered promiscuous mode [ 282.643647][ T9000] hsr_slave_1: entered promiscuous mode [ 282.652349][ T9000] debugfs: 'hsr0' already exists in 'hsr' [ 282.658173][ T9000] Cannot create hsr debugfs directory [ 282.736017][ T5873] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 282.786494][ T5859] usb 2-1: USB disconnect, device number 27 [ 282.897970][ T5811] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 283.181111][ T5811] Bluetooth: hci0: command tx timeout [ 283.347196][ T9057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.810'. [ 283.401482][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 283.416448][ T30] audit: type=1400 audit(1771346193.549:480): avc: denied { name_connect } for pid=9058 comm="syz.1.811" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 283.690079][ T9000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.698079][ T5859] usb 6-1: USB disconnect, device number 2 [ 283.863323][ T9000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.884968][ T9000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.916718][ T1204] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 283.920266][ T9069] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 283.927105][ T9000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.076536][ T1204] usb 2-1: device descriptor read/64, error -71 [ 284.079867][ T30] audit: type=1400 audit(1771346194.179:481): avc: denied { map } for pid=9068 comm="syz.2.813" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.106780][ T30] audit: type=1400 audit(1771346194.179:482): avc: denied { execute } for pid=9068 comm="syz.2.813" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 284.587761][ T9069] comedi comedi1: dmm32at: I/O port conflict (0x4f23,16) [ 284.650738][ T9000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.667425][ T9000] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.682864][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.690032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.722112][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.729312][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.757753][ T1204] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 285.068476][ T1204] usb 2-1: device descriptor read/64, error -71 [ 285.176781][ T1204] usb usb2-port1: attempt power cycle [ 285.280663][ T5811] Bluetooth: hci0: command tx timeout [ 285.351521][ T9000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.526323][ T1204] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 285.634357][ T1204] usb 2-1: device descriptor read/8, error -71 [ 285.899956][ T1204] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 285.927044][ T1204] usb 2-1: device descriptor read/8, error -71 [ 285.967174][ T9000] veth0_vlan: entered promiscuous mode [ 285.982936][ T9000] veth1_vlan: entered promiscuous mode [ 286.031564][ T9000] veth0_macvtap: entered promiscuous mode [ 286.038709][ T1204] usb usb2-port1: unable to enumerate USB device [ 286.052791][ T9000] veth1_macvtap: entered promiscuous mode [ 286.077296][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.094784][ T9000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.120951][ T180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.144016][ T180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.216072][ T5960] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 286.239345][ T180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.249036][ T180] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.347901][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.355963][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.356328][ T5960] usb 3-1: device descriptor read/64, error -71 [ 286.422821][ T180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.431255][ T180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.858023][ T5960] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 287.042011][ T5960] usb 3-1: device descriptor read/64, error -71 [ 287.258047][ T5960] usb usb3-port1: attempt power cycle [ 287.336342][ T5811] Bluetooth: hci0: command tx timeout [ 287.619643][ T5960] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 287.711885][ T5859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 287.725566][ T30] audit: type=1400 audit(1771346197.859:483): avc: denied { create } for pid=9137 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 287.759736][ T5960] usb 3-1: device descriptor read/8, error -71 [ 287.962023][ T5859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.975690][ T5859] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 288.012513][ T5859] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 288.029031][ T5960] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 288.061699][ T9141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.100659][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.111131][ T5960] usb 3-1: device descriptor read/8, error -71 [ 288.123389][ T5859] usb 7-1: config 0 descriptor?? [ 288.258229][ T5960] usb usb3-port1: unable to enumerate USB device [ 288.353054][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 288.576688][ T5859] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 289.089678][ T9159] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.830'. [ 289.131156][ T5859] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device [ 289.134369][ T9159] xt_hashlimit: max too large, truncated to 1048576 [ 289.166516][ T5859] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse [ 289.549938][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 289.559836][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.831'. [ 289.584159][ T9170] fuse: Bad value for 'fd' [ 289.839343][ T5859] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -5 [ 290.556678][ T1204] usb 7-1: USB disconnect, device number 2 [ 291.906279][ T30] audit: type=1400 audit(1771346201.979:484): avc: denied { connect } for pid=9186 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.354018][ T5859] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 292.433620][ T30] audit: type=1400 audit(1771346202.539:485): avc: denied { read write } for pid=9000 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.486365][ T30] audit: type=1400 audit(1771346202.539:486): avc: denied { open } for pid=9000 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.542207][ T30] audit: type=1400 audit(1771346202.539:487): avc: denied { ioctl } for pid=9000 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 292.556269][ T5859] usb 4-1: Using ep0 maxpacket: 16 [ 292.596828][ T5859] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 293.580323][ T5859] usb 4-1: config 1 has no interface number 1 [ 293.586563][ T5859] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 293.597288][ T5859] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 293.610530][ T5859] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.910085][ T30] audit: type=1400 audit(1771346202.539:488): avc: denied { ioctl } for pid=9179 comm="syz.3.835" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 294.030363][ T5859] usb 4-1: string descriptor 0 read error: -71 [ 294.083046][ T5859] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.127745][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.210506][ T30] audit: type=1400 audit(1771346202.719:489): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 294.239589][ T30] audit: type=1400 audit(1771346202.769:490): avc: denied { create } for pid=9200 comm="syz.6.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 294.265982][ T9222] ip6gre0: left promiscuous mode [ 294.282782][ T5859] usb 4-1: can't set config #1, error -71 [ 294.316935][ T30] audit: type=1400 audit(1771346202.769:491): avc: denied { execmem } for pid=9200 comm="syz.6.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 294.342416][ T30] audit: type=1400 audit(1771346202.929:492): avc: denied { read } for pid=9200 comm="syz.6.840" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 294.370660][ T9222] ip6gre0: left allmulticast mode [ 294.649547][ T30] audit: type=1400 audit(1771346202.929:493): avc: denied { open } for pid=9200 comm="syz.6.840" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 294.676010][ T9222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.693768][ T5859] usb 4-1: USB disconnect, device number 21 [ 295.204764][ T9237] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 295.252613][ T9237] bond3: (slave dummy0): Releasing active interface [ 295.266448][ T9237] dummy0: left promiscuous mode [ 295.271513][ T9237] dummy0: left allmulticast mode [ 295.301161][ T9237] team0: Port device dummy0 added [ 295.605662][ T9241] mkiss: ax0: crc mode is auto. [ 295.711325][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.852'. [ 296.682666][ T9260] netlink: 108 bytes leftover after parsing attributes in process `syz.5.857'. [ 296.918917][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 296.918934][ T30] audit: type=1400 audit(1771346207.059:556): avc: denied { read } for pid=9268 comm="syz.3.861" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 296.966370][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 296.970625][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 296.984138][ T30] audit: type=1400 audit(1771346207.099:557): avc: denied { open } for pid=9268 comm="syz.3.861" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.013011][ T9276] netlink: 'syz.1.862': attribute type 3 has an invalid length. [ 297.035260][ T30] audit: type=1400 audit(1771346207.159:558): avc: denied { ioctl } for pid=9268 comm="syz.3.861" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.138003][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 297.145742][ T24] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.176746][ T24] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.204299][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 297.226316][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.264365][ T9283] loop8: detected capacity change from 0 to 8 [ 297.310797][ T9283] Dev loop8: unable to read RDB block 8 [ 297.318180][ T9283] loop8: unable to read partition table [ 297.324596][ T9283] loop8: partition table beyond EOD, truncated [ 297.354182][ T9283] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 297.676443][ T1204] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 297.734770][ T30] audit: type=1400 audit(1771346207.869:559): avc: denied { create } for pid=9262 comm="syz.6.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.764228][ T24] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 297.803312][ T30] audit: type=1400 audit(1771346207.939:560): avc: denied { create } for pid=9290 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.832156][ T30] audit: type=1400 audit(1771346207.939:561): avc: denied { read } for pid=9290 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.867882][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.885699][ T1204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.895642][ T1204] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 297.904850][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.915023][ T1204] usb 2-1: config 0 descriptor?? [ 297.986420][ T24] usb 7-1: USB disconnect, device number 3 [ 298.266444][ T5949] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 298.826709][ T5949] usb 3-1: device descriptor read/64, error -71 [ 299.014098][ T1204] usbhid 2-1:0.0: can't add hid device: -71 [ 299.029372][ T1204] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.063951][ T1204] usb 2-1: USB disconnect, device number 32 [ 299.076291][ T5949] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 299.118206][ T30] audit: type=1400 audit(1771346209.249:562): avc: denied { create } for pid=9305 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.195266][ T30] audit: type=1400 audit(1771346209.249:563): avc: denied { ioctl } for pid=9305 comm="syz.1.872" path="socket:[26002]" dev="sockfs" ino=26002 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 299.229140][ T5949] usb 3-1: device descriptor read/64, error -71 [ 299.257243][ T30] audit: type=1400 audit(1771346209.249:564): avc: denied { create } for pid=9305 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 299.377931][ T9314] syz.5.873 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 299.378340][ T5949] usb usb3-port1: attempt power cycle [ 299.853318][ T5949] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 299.881863][ T30] audit: type=1400 audit(1771346210.019:565): avc: denied { create } for pid=9320 comm="syz.6.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.883492][ T9322] netlink: 'syz.6.878': attribute type 10 has an invalid length. [ 299.940045][ T5949] usb 3-1: device descriptor read/8, error -71 [ 299.981858][ T9322] team0: Port device dummy0 added [ 300.256515][ T5949] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 300.286727][ T5949] usb 3-1: device descriptor read/8, error -71 [ 300.503577][ T5949] usb usb3-port1: unable to enumerate USB device [ 300.927872][ T2615] block nbd0: Possible stuck request ffff888028230000: control (read@0,1024B). Runtime 120 seconds [ 300.938974][ T2615] block nbd0: Possible stuck request ffff888028230200: control (read@1024,1024B). Runtime 120 seconds [ 300.950317][ T2615] block nbd0: Possible stuck request ffff888028230400: control (read@2048,1024B). Runtime 120 seconds [ 300.961371][ T2615] block nbd0: Possible stuck request ffff888028230600: control (read@3072,1024B). Runtime 120 seconds [ 300.986264][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.168057][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 301.239721][ T5872] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.249995][ T5872] usb 6-1: config 1 has no interface number 1 [ 301.273904][ T5872] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 301.307433][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.6.884'. [ 301.328083][ T5872] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 301.356307][ T5872] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.394403][ T5872] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.536444][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.581642][ T9349] Invalid ELF header type: 3 != 1 [ 301.620935][ T5872] usb 6-1: Product: syz [ 301.635136][ T5872] usb 6-1: Manufacturer: syz [ 301.901381][ T9351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.927176][ T5872] usb 6-1: SerialNumber: syz [ 302.624760][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 302.624776][ T30] audit: type=1400 audit(1771346212.759:576): avc: denied { connect } for pid=9354 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 302.775585][ T5872] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 303.121853][ T30] audit: type=1400 audit(1771346213.259:577): avc: denied { open } for pid=9367 comm="syz.2.893" path="/dev/ttyq9" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 303.663493][ T5811] Bluetooth: hci0: Unknown advertising packet type: 0x73 [ 303.663546][ T5811] Bluetooth: hci0: Malformed LE Event: 0x0d [ 303.691394][ T30] audit: type=1400 audit(1771346213.409:578): avc: denied { setopt } for pid=9361 comm="syz.6.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.713769][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 303.722800][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'. [ 303.732853][ T30] audit: type=1400 audit(1771346213.409:579): avc: denied { wake_alarm } for pid=9361 comm="syz.6.891" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 303.837053][ T9371] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 303.844811][ T9371] netlink: 224 bytes leftover after parsing attributes in process `syz.2.893'. [ 303.904544][ T30] audit: type=1400 audit(1771346213.489:580): avc: denied { write } for pid=9361 comm="syz.6.891" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 304.088944][ T30] audit: type=1400 audit(1771346214.229:581): avc: denied { read } for pid=9324 comm="syz.5.879" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.105430][ T9325] bridge1: entered promiscuous mode [ 304.117935][ T9325] bridge1: entered allmulticast mode [ 304.146800][ T9384] netlink: 288 bytes leftover after parsing attributes in process `syz.6.894'. [ 304.151889][ T5872] usb 6-1: 2:1: cannot get freq at ep 0x82 [ 304.214323][ T30] audit: type=1400 audit(1771346214.229:582): avc: denied { open } for pid=9324 comm="syz.5.879" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 304.240376][ T5872] usb 6-1: USB disconnect, device number 3 [ 305.140316][ T30] audit: type=1400 audit(1771346214.379:583): avc: denied { accept } for pid=9383 comm="syz.6.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 305.201514][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.203201][ T30] audit: type=1400 audit(1771346214.399:584): avc: denied { setopt } for pid=9383 comm="syz.6.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 305.241527][ T30] audit: type=1400 audit(1771346215.359:585): avc: denied { read } for pid=9388 comm="syz.1.895" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 305.643500][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 305.881230][ T9403] mkiss: ax0: crc mode is auto. [ 306.646600][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 307.727242][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 307.727598][ T30] audit: type=1400 audit(1771346217.859:593): avc: denied { read write } for pid=9429 comm="syz.2.906" name="event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.729843][ T9432] 9p: Bad value for 'rfdno' [ 307.734732][ T30] audit: type=1400 audit(1771346217.859:594): avc: denied { open } for pid=9429 comm="syz.2.906" path="/dev/input/event2" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 308.081576][ T30] audit: type=1400 audit(1771346218.219:595): avc: denied { read } for pid=9425 comm="syz.6.896" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 308.111408][ T30] audit: type=1400 audit(1771346218.219:596): avc: denied { open } for pid=9425 comm="syz.6.896" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 308.476446][ T30] audit: type=1400 audit(1771346218.469:597): avc: denied { setopt } for pid=9438 comm="syz.5.909" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.651115][ T30] audit: type=1400 audit(1771346218.789:598): avc: denied { map } for pid=9449 comm="syz.3.914" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.688090][ T9450] loop6: detected capacity change from 0 to 2640 [ 308.694882][ T9450] buffer_io_error: 27 callbacks suppressed [ 308.694899][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.708767][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.717054][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.724884][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.732992][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.741005][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.748898][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.756899][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.765157][ T9450] ldm_validate_partition_table(): Disk read failed. [ 308.771841][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.779850][ T9450] Buffer I/O error on dev loop6, logical block 0, async page read [ 308.787726][ T9450] Dev loop6: unable to read RDB block 0 [ 308.793367][ T9450] loop6: unable to read partition table [ 308.799187][ T9450] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 308.808100][ T30] audit: type=1400 audit(1771346218.789:599): avc: denied { execute } for pid=9449 comm="syz.3.914" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.831930][ T30] audit: type=1400 audit(1771346218.789:600): avc: denied { append } for pid=9449 comm="syz.3.914" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 308.896359][ T5960] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 308.994142][ T30] audit: type=1400 audit(1771346219.099:601): avc: denied { ioctl } for pid=9451 comm="syz.2.915" path="socket:[26751]" dev="sockfs" ino=26751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 309.066255][ T5960] usb 6-1: Using ep0 maxpacket: 32 [ 309.159436][ T30] audit: type=1400 audit(1771346219.299:602): avc: denied { connect } for pid=9457 comm="syz.6.918" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 309.226458][ T5960] usb 6-1: config index 0 descriptor too short (expected 6701, got 45) [ 309.254509][ T5960] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.280204][ T5960] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.352457][ T5960] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.362934][ T5960] usb 6-1: config 0 interface 0 has no altsetting 0 [ 309.370457][ T5960] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 309.382686][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.400543][ T5960] usb 6-1: config 0 descriptor?? [ 310.212971][ T5960] logitech 0003:046D:CA03.000A: item fetching failed at offset 5/7 [ 310.262942][ T5960] logitech 0003:046D:CA03.000A: parse failed [ 310.275366][ T5960] logitech 0003:046D:CA03.000A: probe with driver logitech failed with error -22 [ 310.433012][ T5960] usb 6-1: USB disconnect, device number 4 [ 310.871636][ T9499] Cannot find add_set index 0 as target [ 310.942056][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.148121][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 311.221190][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 311.247345][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 311.323947][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 311.356902][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 311.478601][ T9506] input: syz1 as /devices/virtual/input/input25 [ 311.574035][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 311.610616][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 311.629432][ T9499] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 311.676344][ T9499] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 311.740821][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.747435][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.892574][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.931'. [ 312.553822][ T5873] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 312.728563][ T5873] usb 4-1: config 0 has no interfaces? [ 312.736688][ T5873] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 312.745782][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.755919][ T5873] usb 4-1: Product: syz [ 312.763703][ T5873] usb 4-1: Manufacturer: syz [ 312.786677][ T5873] usb 4-1: SerialNumber: syz [ 313.062431][ T5873] usb 4-1: config 0 descriptor?? [ 313.095915][ T9532] delete_channel: no stack [ 313.100586][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 313.100597][ T30] audit: type=1400 audit(1771346224.227:623): avc: denied { create } for pid=9531 comm="syz.6.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 313.252125][ T30] audit: type=1400 audit(1771346224.317:624): avc: denied { accept } for pid=9531 comm="syz.6.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 313.315518][ T9511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.336009][ T9511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.387752][ T5873] usb 4-1: USB disconnect, device number 22 [ 313.526259][ T30] audit: type=1400 audit(1771346224.337:625): avc: denied { bind } for pid=9528 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 313.652003][ T30] audit: type=1400 audit(1771346224.337:626): avc: denied { node_bind } for pid=9528 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 314.581630][ T1220] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 314.767961][ T30] audit: type=1400 audit(1771346225.907:627): avc: denied { write } for pid=9553 comm="syz.6.945" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.849065][ T9559] ./file0: Can't lookup blockdev [ 314.890760][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.902205][ T30] audit: type=1400 audit(1771346225.977:628): avc: denied { create } for pid=9551 comm="syz.3.944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 314.910796][ T1220] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.003616][ T30] audit: type=1400 audit(1771346225.987:629): avc: denied { mounton } for pid=9551 comm="syz.3.944" path="/193/file0" dev="tmpfs" ino=1016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.115905][ T9564] netlink: 'syz.1.947': attribute type 3 has an invalid length. [ 315.223606][ T1220] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 315.237314][ T1220] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.278234][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 315.292549][ T1220] usb 6-1: config 0 descriptor?? [ 315.404932][ T30] audit: type=1400 audit(1771346226.537:630): avc: denied { bind } for pid=9565 comm="syz.2.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 315.446659][ T5873] usb 7-1: device descriptor read/64, error -71 [ 315.479006][ T30] audit: type=1400 audit(1771346226.537:631): avc: denied { name_bind } for pid=9565 comm="syz.2.948" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 315.515214][ T30] audit: type=1400 audit(1771346226.537:632): avc: denied { node_bind } for pid=9565 comm="syz.2.948" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 316.013645][ T5873] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 316.026494][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.035348][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.056181][ T1220] usbhid 6-1:0.0: can't add hid device: -71 [ 316.063621][ T1220] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 316.152675][ T5873] usb 7-1: device descriptor read/64, error -71 [ 316.257022][ T1220] usb 6-1: USB disconnect, device number 5 [ 316.302360][ T5873] usb usb7-port1: attempt power cycle [ 316.706326][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 316.744377][ T5873] usb 7-1: device descriptor read/8, error -71 [ 317.026411][ T5873] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 317.099798][ T5873] usb 7-1: device descriptor read/8, error -71 [ 317.217760][ T5873] usb usb7-port1: unable to enumerate USB device [ 318.300835][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 318.300851][ T30] audit: type=1400 audit(1771346229.437:634): avc: denied { execute } for pid=9592 comm="syz.5.956" name="cgroup" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 318.371242][ T9595] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.955'. [ 318.445836][ T9598] netlink: 60 bytes leftover after parsing attributes in process `syz.6.958'. [ 318.808299][ T9604] netlink: 'syz.6.958': attribute type 16 has an invalid length. [ 318.895078][ T9604] netlink: 'syz.6.958': attribute type 17 has an invalid length. [ 319.686520][ T5960] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 319.837484][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 319.850949][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 319.860951][ T5960] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 319.892060][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29601, setting to 1024 [ 320.080798][ T5960] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 320.097062][ T5872] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 320.152641][ T5960] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 320.182041][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.210523][ T5960] usb 2-1: Product: syz [ 320.231668][ T5960] usb 2-1: Manufacturer: syz [ 320.280074][ T5960] usb 2-1: SerialNumber: syz [ 320.286014][ T5872] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 320.298204][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.324343][ T5960] usb 2-1: config 0 descriptor?? [ 320.333498][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.353680][ T9607] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.378804][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 320.723172][ T9141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.775597][ T5960] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 320.802318][ T5872] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 320.928054][ T5960] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 320.934598][ T5960] mcba_usb 2-1:0.0 can0: failed tx_urb -90 [ 320.960618][ T5872] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 321.007860][ T30] audit: type=1400 audit(1771346232.127:635): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 321.036786][ T5960] mcba_usb 2-1:0.0 can0: Failed to send cmd (169) [ 321.047551][ T5872] usb 7-1: Manufacturer: syz [ 321.055368][ T5960] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 321.064433][ T5872] usb 7-1: config 0 descriptor?? [ 321.926054][ T30] audit: type=1400 audit(1771346233.057:636): avc: denied { bind } for pid=9644 comm="syz.5.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.066825][ T30] audit: type=1400 audit(1771346233.097:637): avc: denied { write } for pid=9644 comm="syz.5.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 322.078876][ T5872] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 322.117131][ T1204] usb 2-1: USB disconnect, device number 33 [ 322.124549][ T1204] mcba_usb 2-1:0.0 can0: device disconnected [ 322.166790][ T30] audit: type=1400 audit(1771346233.097:638): avc: denied { execute } for pid=9644 comm="syz.5.973" path="/52/cpu.stat" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.195758][ T30] audit: type=1400 audit(1771346233.107:639): avc: denied { ioctl } for pid=9644 comm="syz.5.973" path="socket:[27187]" dev="sockfs" ino=27187 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 322.898792][ T5872] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 323.091986][ T30] audit: type=1400 audit(1771346233.297:640): avc: denied { create } for pid=9647 comm="syz.3.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 323.160277][ T9658] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.216816][ T9658] bond4: (slave lo): Enslaving as an active interface with an up link [ 323.258765][ T9658] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 323.296754][ T30] audit: type=1400 audit(1771346234.267:641): avc: denied { read open } for pid=9662 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.352131][ T5872] usb 7-1: USB disconnect, device number 8 [ 323.535098][ T9670] fido_id[9670]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 323.560693][ T30] audit: type=1400 audit(1771346234.267:642): avc: denied { getattr } for pid=9662 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.561910][ T9674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14864 sclass=netlink_route_socket pid=9674 comm=syz.5.979 [ 323.629832][ T30] audit: type=1400 audit(1771346234.297:643): avc: denied { name_bind } for pid=9647 comm="syz.3.974" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 324.021354][ T30] audit: type=1400 audit(1771346235.157:644): avc: denied { add_name } for pid=9652 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.126409][ T30] audit: type=1400 audit(1771346235.157:645): avc: denied { create } for pid=9652 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.242891][ T30] audit: type=1400 audit(1771346235.157:646): avc: denied { write } for pid=9652 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=5940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.348524][ T30] audit: type=1400 audit(1771346235.157:647): avc: denied { append } for pid=9652 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=5940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 324.593783][ T9694] input: syz1 as /devices/virtual/input/input26 [ 324.723554][ T5887] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 324.960255][ T30] audit: type=1400 audit(1771346236.087:648): avc: denied { remove_name } for pid=9691 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.003133][ T30] audit: type=1400 audit(1771346236.127:649): avc: denied { unlink } for pid=9691 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5940 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.601120][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.611111][ T5887] usb 4-1: config 0 has no interface number 0 [ 325.617734][ T5887] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 325.627498][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.746777][ T5887] usb 4-1: config 0 descriptor?? [ 325.868299][ T5887] usb 4-1: selecting invalid altsetting 1 [ 325.876374][ T5887] dvb_ttusb_budget: ttusb_init_controller: error [ 325.882862][ T5887] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 326.171921][ T30] audit: type=1400 audit(1771346238.246:650): avc: denied { append } for pid=9692 comm="syz.3.981" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 326.774883][ T5887] DVB: Unable to find symbol cx22700_attach() [ 326.801206][ T9716] batadv_slave_0: entered promiscuous mode [ 326.987968][ T5887] DVB: Unable to find symbol tda10046_attach() [ 326.994596][ T5887] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 327.008631][ T5887] usb 4-1: USB disconnect, device number 23 [ 327.512046][ T9716] batman_adv: batadv0: Adding interface: macvtap1 [ 327.534741][ T9727] overlayfs: missing 'lowerdir' [ 327.542144][ T9716] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.658669][ T9730] netlink: 'syz.5.987': attribute type 1 has an invalid length. [ 327.677717][ T9716] batman_adv: batadv0: Interface activated: macvtap1 [ 327.709454][ T9727] netem: change failed [ 329.272580][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 329.336514][ T9751] netlink: 'syz.1.992': attribute type 3 has an invalid length. [ 330.216308][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 330.241003][ T9] usb 4-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.256248][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 330.262882][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 330.315214][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.357042][ T9] usb 4-1: config 0 descriptor?? [ 330.663958][ T30] audit: type=1400 audit(1771346242.796:651): avc: denied { read write } for pid=9769 comm="syz.2.1000" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 331.199945][ T30] audit: type=1400 audit(1771346242.836:652): avc: denied { read write } for pid=9764 comm="syz.1.999" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.243836][ T9] wacom 0003:056A:0030.000C: unknown main item tag 0x0 [ 331.255012][ T30] audit: type=1400 audit(1771346242.836:653): avc: denied { open } for pid=9764 comm="syz.1.999" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.309137][ T9] wacom 0003:056A:0030.000C: unknown main item tag 0x0 [ 331.572838][ T5859] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 331.579603][ T9] wacom 0003:056A:0030.000C: unknown main item tag 0x0 [ 331.579631][ T9] wacom 0003:056A:0030.000C: unknown main item tag 0x0 [ 331.579652][ T9] wacom 0003:056A:0030.000C: unknown main item tag 0x0 [ 331.585027][ T2615] block nbd0: Possible stuck request ffff888028230000: control (read@0,1024B). Runtime 150 seconds [ 331.585098][ T2615] block nbd0: Possible stuck request ffff888028230200: control (read@1024,1024B). Runtime 150 seconds [ 331.585122][ T2615] block nbd0: Possible stuck request ffff888028230400: control (read@2048,1024B). Runtime 150 seconds [ 331.585144][ T2615] block nbd0: Possible stuck request ffff888028230600: control (read@3072,1024B). Runtime 150 seconds [ 331.591325][ T30] audit: type=1400 audit(1771346242.886:654): avc: denied { ioctl } for pid=9764 comm="syz.1.999" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.591354][ T30] audit: type=1400 audit(1771346243.306:655): avc: denied { open } for pid=9769 comm="syz.2.1000" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 331.591378][ T30] audit: type=1400 audit(1771346243.456:656): avc: denied { read write } for pid=9769 comm="syz.2.1000" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 331.591400][ T30] audit: type=1400 audit(1771346243.456:657): avc: denied { open } for pid=9769 comm="syz.2.1000" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 331.607019][ T5859] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.800568][ T9774] fido_id[9774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 332.274106][ T9783] bridge_slave_0: left allmulticast mode [ 332.274123][ T9783] bridge_slave_0: left promiscuous mode [ 332.275343][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.314044][ T9783] bridge_slave_1: left allmulticast mode [ 332.314065][ T9783] bridge_slave_1: left promiscuous mode [ 332.314207][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.326167][ T9783] bond0: (slave bond_slave_0): Releasing backup interface [ 332.329329][ T9783] bond0: (slave bond_slave_1): Releasing backup interface [ 332.333080][ T9783] team0: Port device team_slave_0 removed [ 332.335165][ T9783] team0: Port device team_slave_1 removed [ 332.335566][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.335578][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.337139][ T9783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.337150][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.338451][ T9783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 333.132778][ T9792] netlink: 204 bytes leftover after parsing attributes in process `syz.6.997'. [ 333.168241][ T30] audit: type=1400 audit(1771346245.266:658): avc: denied { lock } for pid=9789 comm="syz.6.997" path="socket:[27348]" dev="sockfs" ino=27348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 333.503147][ T5887] usb 4-1: USB disconnect, device number 24 [ 333.617472][ T30] audit: type=1400 audit(1771346245.746:659): avc: denied { create } for pid=9795 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 333.850768][ T30] audit: type=1400 audit(1771346245.976:660): avc: denied { read } for pid=9795 comm="syz.2.1007" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 334.186914][ T9802] loop8: detected capacity change from 0 to 8 [ 334.225560][ T9802] Dev loop8: unable to read RDB block 8 [ 334.247225][ T9802] loop8: unable to read partition table [ 334.253036][ T9802] loop8: partition table beyond EOD, truncated [ 334.293332][ T9802] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 334.349117][ T9813] Cannot find add_set index 0 as target [ 334.798485][ T9822] loop2: detected capacity change from 0 to 7 [ 334.808461][ T9822] Dev loop2: unable to read RDB block 7 [ 334.817445][ T9822] loop2: AHDI p2 p3 [ 334.829259][ T9822] loop2: partition table partially beyond EOD, truncated [ 334.845118][ T9822] loop2: p3 start 335544320 is beyond EOD, truncated [ 335.023046][ T9828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.610593][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 335.661218][ T9834] No control pipe specified [ 335.939949][ T9847] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1023'. [ 336.336456][ T9851] input: syz1 as /devices/virtual/input/input27 [ 337.397931][ T5872] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 337.557786][ T5872] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.572177][ T5872] usb 6-1: config 0 has no interface number 0 [ 337.588193][ T5872] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 338.586269][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.820955][ T5872] usb 6-1: config 0 descriptor?? [ 338.834147][ T5872] usb 6-1: selecting invalid altsetting 1 [ 338.842292][ T5872] dvb_ttusb_budget: ttusb_init_controller: error [ 338.849458][ T5872] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 338.890798][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 338.890813][ T30] audit: type=1400 audit(1771346252.022:666): avc: denied { mounton } for pid=9875 comm="syz.6.1033" path="/36/file1" dev="tmpfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.317811][ T9887] netlink: 'syz.6.1039': attribute type 10 has an invalid length. [ 339.390454][ T30] audit: type=1400 audit(1771346252.522:667): avc: denied { watch } for pid=9883 comm="syz.2.1038" path="/216/bus/file1" dev="overlay" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 339.492959][ T5872] DVB: Unable to find symbol cx22700_attach() [ 339.523992][ T30] audit: type=1400 audit(1771346252.522:668): avc: denied { watch_sb watch_reads } for pid=9883 comm="syz.2.1038" path="/216/bus/file1" dev="overlay" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 339.605906][ T5872] DVB: Unable to find symbol tda10046_attach() [ 339.715894][ T5872] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 339.730251][ T30] audit: type=1400 audit(1771346252.602:669): avc: denied { setopt } for pid=9883 comm="syz.2.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.136509][ T5872] usb 6-1: USB disconnect, device number 6 [ 340.143198][ T30] audit: type=1400 audit(1771346252.612:670): avc: denied { ioctl } for pid=9883 comm="syz.2.1038" path="socket:[28473]" dev="sockfs" ino=28473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.168766][ T30] audit: type=1400 audit(1771346252.962:671): avc: denied { write } for pid=9886 comm="syz.6.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 340.300212][ T24] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 340.450757][ T30] audit: type=1400 audit(1771346252.982:672): avc: denied { accept } for pid=9886 comm="syz.6.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.576829][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 340.612166][ T30] audit: type=1400 audit(1771346253.732:673): avc: denied { mount } for pid=9906 comm="syz.5.1042" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 340.727272][ T30] audit: type=1400 audit(1771346253.802:674): avc: denied { unmount } for pid=8462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 340.766346][ T24] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 340.963505][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 340.970861][ T24] usb usb4-port1: attempt power cycle [ 340.981467][ T9918] binder: 9917:9918 ioctl 4018620d 0 returned -22 [ 340.988193][ T9918] binder: 9917:9918 ioctl 4018620d 0 returned -22 [ 340.995899][ T30] audit: type=1400 audit(1771346254.112:675): avc: denied { ioctl } for pid=9917 comm="syz.5.1045" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 341.141720][ T9923] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 341.379145][ T24] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 341.407072][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 341.947223][ T5859] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 341.976340][ T24] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 342.009431][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 342.034716][ T24] usb usb4-port1: unable to enumerate USB device [ 342.106380][ T5859] usb 6-1: Using ep0 maxpacket: 32 [ 342.254823][ T9935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.255236][ T5859] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.439686][ T5859] usb 6-1: config 0 has no interface number 0 [ 342.474100][ T5859] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 342.483773][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.491853][ T5859] usb 6-1: Product: syz [ 342.496120][ T5859] usb 6-1: Manufacturer: syz [ 342.500886][ T5859] usb 6-1: SerialNumber: syz [ 342.539027][ T5859] usb 6-1: config 0 descriptor?? [ 342.642742][ T5859] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 342.651635][ T5859] usb 6-1: selecting invalid altsetting 1 [ 342.657903][ T5859] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 342.672117][ T5859] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.692527][ T5859] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 342.714476][ T5859] usb 6-1: media controller created [ 343.543417][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.578108][ T5859] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 343.585653][ T5859] zl10353_read_register: readreg error (reg=127, ret==-71) [ 343.606071][ T5859] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 343.730762][ T9953] loop2: detected capacity change from 0 to 7 [ 343.736986][ T5859] usb 6-1: USB disconnect, device number 7 [ 343.773461][ T9953] Dev loop2: unable to read RDB block 7 [ 343.877833][ T9953] loop2: unable to read partition table [ 343.883617][ T9953] loop2: partition table beyond EOD, truncated [ 343.894153][ T9953] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 344.415586][ T9961] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20003 [ 344.427319][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 344.427333][ T30] audit: type=1400 audit(1771346257.562:677): avc: denied { ioctl } for pid=9962 comm="syz.2.1060" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 345.310149][ T9979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1064'. [ 346.237759][ T9994] Bluetooth: MGMT ver 1.23 [ 346.247516][ T9994] Cannot find add_set index 0 as target [ 346.265000][ T30] audit: type=1400 audit(1771346259.362:678): avc: denied { write } for pid=9987 comm="syz.5.1070" path="socket:[28871]" dev="sockfs" ino=28871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.239869][T10010] loop2: detected capacity change from 0 to 7 [ 348.293715][ T5804] Dev loop2: unable to read RDB block 7 [ 348.301274][ T5804] loop2: unable to read partition table [ 348.309098][ T5804] loop2: partition table beyond EOD, truncated [ 348.316516][T10010] Dev loop2: unable to read RDB block 7 [ 348.338246][T10010] loop2: unable to read partition table [ 348.365030][T10010] loop2: partition table beyond EOD, truncated [ 348.396342][T10010] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 348.485215][ T5178] Dev loop2: unable to read RDB block 7 [ 348.550857][ T5178] loop2: unable to read partition table [ 348.586358][ T5178] loop2: partition table beyond EOD, truncated [ 348.894914][T10023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1077'. [ 349.240865][ T30] audit: type=1400 audit(1771346262.062:679): avc: denied { ioctl } for pid=10017 comm="syz.2.1077" path="socket:[29859]" dev="sockfs" ino=29859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.695121][T10030] loop2: detected capacity change from 0 to 7 [ 349.717237][T10030] Dev loop2: unable to read RDB block 7 [ 349.723272][T10030] loop2: unable to read partition table [ 349.734150][T10030] loop2: partition table beyond EOD, truncated [ 349.752766][T10030] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 350.075914][ T30] audit: type=1400 audit(1771346263.202:680): avc: denied { read append } for pid=10048 comm="syz.1.1088" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.122816][ T30] audit: type=1400 audit(1771346263.202:681): avc: denied { open } for pid=10048 comm="syz.1.1088" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.704997][T10057] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 350.708911][ T30] audit: type=1400 audit(1771346263.472:682): avc: denied { mount } for pid=10048 comm="syz.1.1088" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 350.738472][ T5859] IPVS: starting estimator thread 0... [ 350.869012][T10058] IPVS: using max 77 ests per chain, 184800 per kthread [ 351.386412][ T30] audit: type=1400 audit(1771346264.412:683): avc: denied { create } for pid=10061 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.469169][T10065] xt_hashlimit: size too large, truncated to 1048576 [ 351.699293][ T30] audit: type=1400 audit(1771346264.412:684): avc: denied { connect } for pid=10061 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 351.823903][T10069] loop8: detected capacity change from 0 to 8 [ 351.889587][T10069] Dev loop8: unable to read RDB block 8 [ 351.965297][T10069] loop8: unable to read partition table [ 352.001653][T10069] loop8: partition table beyond EOD, truncated [ 352.038737][T10069] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 352.814558][T10079] loop2: detected capacity change from 0 to 7 [ 352.842511][ T5804] Dev loop2: unable to read RDB block 7 [ 352.861086][ T5804] loop2: AHDI p2 p3 [ 352.870454][ T5804] loop2: partition table partially beyond EOD, truncated [ 352.882097][ T5804] loop2: p3 start 335544320 is beyond EOD, truncated [ 352.901841][T10079] Dev loop2: unable to read RDB block 7 [ 352.905202][ T180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.913744][T10079] loop2: AHDI p2 p3 [ 352.919033][ T180] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.932252][T10079] loop2: partition table partially beyond EOD, truncated [ 352.945055][T10079] loop2: p3 start 335544320 is beyond EOD, truncated [ 352.955832][ T5178] Dev loop2: unable to read RDB block 7 [ 352.978567][ T5178] loop2: AHDI p2 p3 [ 352.982500][ T5178] loop2: partition table partially beyond EOD, truncated [ 352.989837][ T5178] loop2: p3 start 335544320 is beyond EOD, truncated [ 353.000405][ T180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.036267][ T180] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.138686][ T180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.152775][ T180] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.187102][ T5859] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 353.211856][ T180] team0: Port device netdevsim0 removed [ 353.216373][ T1220] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 353.220461][ T180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.237276][ T180] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.338381][ T5960] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 353.386334][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 353.438542][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 353.496418][ T5960] usb 6-1: Using ep0 maxpacket: 16 [ 353.515285][ T5960] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 353.539852][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 353.578631][ T180] bridge_slave_1: left allmulticast mode [ 353.591391][ T5960] usb 6-1: config 1 has no interface number 1 [ 353.610265][ T5859] usb 4-1: config 4 interface 0 has no altsetting 0 [ 353.626076][ T5960] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.637413][ T180] bridge_slave_1: left promiscuous mode [ 353.650496][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.663223][ T5960] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 353.687798][ T5859] usb 4-1: string descriptor 0 read error: -22 [ 353.710320][ T5859] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 353.720219][ T1220] usb 3-1: config 118 has an invalid interface number: 247 but max is 0 [ 353.721489][ T5960] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.737806][ T1220] usb 3-1: config 118 has no interface number 0 [ 353.747225][ T5859] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 353.747244][ T1220] usb 3-1: config 118 interface 247 has no altsetting 0 [ 353.763100][ T180] bridge_slave_0: left allmulticast mode [ 353.766045][ T1220] usb 3-1: New USB device found, idVendor=236d, idProduct=0901, bcdDevice=43.dd [ 353.778908][ T180] bridge_slave_0: left promiscuous mode [ 353.785432][ T5859] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 353.787181][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.793641][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.801660][ T1220] usb 3-1: Product: syz [ 353.812942][ T1220] usb 3-1: Manufacturer: syz [ 353.819565][ T5859] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.832251][ T1220] usb 3-1: SerialNumber: syz [ 353.832265][ T5960] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.849568][ T5960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.858173][ T5859] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 353.868176][ T5859] usb 4-1: media controller created [ 353.873469][ T5960] usb 6-1: Product: syz [ 353.877775][ T5960] usb 6-1: Manufacturer: syz [ 353.888942][ T5960] usb 6-1: SerialNumber: syz [ 353.900606][ T5859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.977054][ T1805] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 354.072729][ T1220] usb 3-1: USB disconnect, device number 27 [ 354.142971][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.157681][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.170439][ T180] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 354.180193][ T180] bond0 (unregistering): Released all slaves [ 354.189896][ T180] bond1 (unregistering): Released all slaves [ 354.319916][ T5960] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 354.919210][ T180] hsr_slave_0: left promiscuous mode [ 354.930024][ T180] hsr_slave_1: left promiscuous mode [ 354.951977][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.960234][ T5859] zl10353_read_register: readreg error (reg=127, ret==0) [ 354.980052][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.022221][ T180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.050898][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.058201][ T5859] usb 4-1: USB disconnect, device number 29 [ 355.107090][ T180] veth1_macvtap: left allmulticast mode [ 355.118024][ T180] veth1_macvtap: left promiscuous mode [ 355.123762][ T180] veth0_macvtap: left promiscuous mode [ 355.130538][ T180] veth1_vlan: left promiscuous mode [ 355.139850][ T180] veth0_vlan: left promiscuous mode [ 355.628461][ T30] audit: type=1400 audit(1771346268.752:685): avc: denied { mount } for pid=10135 comm="syz.2.1108" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 355.668814][ T30] audit: type=1400 audit(1771346268.802:686): avc: denied { unmount } for pid=10135 comm="syz.2.1108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 355.841637][T10138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1109'. [ 356.380843][ T180] team0 (unregistering): Port device team_slave_1 removed [ 356.562826][ T5873] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 357.084396][ T180] team0 (unregistering): Port device team_slave_0 removed [ 357.093370][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 357.109271][ T5873] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.126314][ T5873] usb 2-1: config 1 has no interface number 1 [ 357.135796][ T5873] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.168703][ T30] audit: type=1400 audit(1771346270.292:687): avc: denied { setopt } for pid=10153 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 357.196245][ T5873] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 357.227487][ T5873] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.265101][ T5873] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.294064][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.314940][T10156] 9pnet_virtio: no channels available for device syz [ 357.325619][ T5873] usb 2-1: Product: syz [ 357.336647][ T5873] usb 2-1: Manufacturer: syz [ 357.341263][ T5873] usb 2-1: SerialNumber: syz [ 357.354295][T10089] bridge2: entered promiscuous mode [ 357.358072][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 357.395725][T10089] bridge2: entered allmulticast mode [ 357.427941][ T5960] usb 6-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 358.846406][ T5960] usb 6-1: USB disconnect, device number 8 [ 358.897534][ T5873] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 359.098970][ T30] audit: type=1400 audit(1771346272.232:688): avc: denied { create } for pid=10168 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 359.211397][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.238192][ T30] audit: type=1400 audit(1771346272.232:689): avc: denied { connect } for pid=10168 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 359.360018][ T5873] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 359.419725][ T30] audit: type=1400 audit(1771346272.232:690): avc: denied { ioctl } for pid=10168 comm="syz.3.1117" path="socket:[29527]" dev="sockfs" ino=29527 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 359.491690][ T30] audit: type=1400 audit(1771346272.272:691): avc: denied { set_context_mgr } for pid=10168 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 359.588780][ T5873] usb 2-1: USB disconnect, device number 34 [ 359.648623][ T30] audit: type=1400 audit(1771346272.522:692): avc: denied { getopt } for pid=10168 comm="syz.3.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 359.668706][ T5960] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 359.709183][T10092] udevd[10092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.866273][ T5817] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 359.895239][T10186] mmap: syz.2.1121 (10186): VmData 37593088 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 359.909849][ T5960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.931173][ T5960] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 359.960703][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.058085][ T5817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.065800][ T5960] usb 4-1: config 0 descriptor?? [ 360.106387][ T5817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 360.122441][ T5960] pwc: Askey VC010 type 2 USB webcam detected. [ 360.297103][ T5817] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 360.510113][ T5817] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 360.562107][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.657792][T10178] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 360.693729][ T5817] hub 6-1:1.0: bad descriptor, ignoring hub [ 360.755182][ T5817] hub 6-1:1.0: probe with driver hub failed with error -5 [ 360.823430][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 360.870315][ T5817] cdc_wdm 6-1:1.0: skipping garbage [ 360.882702][ T5817] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 360.894964][ T5817] cdc_wdm 6-1:1.0: Unknown control protocol [ 360.903915][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.910759][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.918089][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.924688][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.931134][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.937728][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.944229][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.950904][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.957536][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.964129][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.970395][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.976996][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.983350][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 360.989962][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 360.996421][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 361.003001][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 361.009411][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 361.015996][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 361.022525][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 361.029127][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 361.057445][ T30] audit: type=1400 audit(1771346274.042:693): avc: denied { read write } for pid=10177 comm="syz.5.1119" name="cdc-wdm0" dev="devtmpfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 361.127531][ T30] audit: type=1400 audit(1771346274.042:694): avc: denied { open } for pid=10177 comm="syz.5.1119" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 361.179519][ T5872] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 361.506223][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 361.584848][ T5872] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 361.617756][ T5872] usb 2-1: config 1 has no interface number 1 [ 361.628179][ T5872] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.656884][ T2615] block nbd0: Possible stuck request ffff888028230000: control (read@0,1024B). Runtime 180 seconds [ 361.667963][ T2615] block nbd0: Possible stuck request ffff888028230200: control (read@1024,1024B). Runtime 180 seconds [ 361.679338][ T2615] block nbd0: Possible stuck request ffff888028230400: control (read@2048,1024B). Runtime 180 seconds [ 361.690569][ T2615] block nbd0: Possible stuck request ffff888028230600: control (read@3072,1024B). Runtime 180 seconds [ 361.703824][ T5872] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 361.726892][ T5872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 361.756051][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.766428][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.774649][ T5872] usb 2-1: Product: syz [ 361.779335][ T5872] usb 2-1: Manufacturer: syz [ 361.783992][ T5872] usb 2-1: SerialNumber: syz [ 361.979362][ T5949] usb 6-1: USB disconnect, device number 9 [ 362.096695][ T30] audit: type=1400 audit(1771346275.222:695): avc: denied { create } for pid=10224 comm="syz.2.1129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 362.177361][ T30] audit: type=1400 audit(1771346275.262:696): avc: denied { checkpoint_restore } for pid=10224 comm="syz.2.1129" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 362.265255][ T5872] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 362.385155][T10233] loop8: detected capacity change from 0 to 8 [ 362.397933][ T5795] Dev loop8: unable to read RDB block 8 [ 362.403812][ T5795] loop8: unable to read partition table [ 362.409862][ T5795] loop8: partition table beyond EOD, truncated [ 362.418073][T10233] Dev loop8: unable to read RDB block 8 [ 362.425681][T10233] loop8: unable to read partition table [ 362.432051][T10233] loop8: partition table beyond EOD, truncated [ 362.448834][T10233] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 362.539938][ T5960] pwc: recv_control_msg error -71 req 02 val 2b00 [ 362.547749][ T5960] pwc: recv_control_msg error -71 req 02 val 2700 [ 362.555292][ T5960] pwc: recv_control_msg error -71 req 02 val 2c00 [ 362.582977][ T5960] pwc: recv_control_msg error -71 req 04 val 1000 [ 362.687323][ T5960] pwc: recv_control_msg error -71 req 04 val 1300 [ 362.696886][ T5960] pwc: recv_control_msg error -71 req 04 val 1400 [ 362.703704][ T5960] pwc: recv_control_msg error -71 req 02 val 2000 [ 362.717252][ T5960] pwc: recv_control_msg error -71 req 02 val 2100 [ 362.726790][ T5960] pwc: recv_control_msg error -71 req 04 val 1500 [ 362.734455][ T5960] pwc: recv_control_msg error -71 req 02 val 2500 [ 362.744150][ T5960] pwc: recv_control_msg error -71 req 02 val 2400 [ 362.752280][ T5960] pwc: recv_control_msg error -71 req 02 val 2600 [ 362.760256][ T5960] pwc: recv_control_msg error -71 req 02 val 2900 [ 362.768255][ T5960] pwc: recv_control_msg error -71 req 02 val 2800 [ 362.776637][ T5960] pwc: recv_control_msg error -71 req 04 val 1100 [ 362.784549][ T5960] pwc: recv_control_msg error -71 req 04 val 1200 [ 363.023439][ T5960] pwc: Registered as video103. [ 363.099976][ T5960] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 363.120460][T10205] bridge1: entered promiscuous mode [ 363.152013][ T30] audit: type=1400 audit(1771346276.272:697): avc: denied { write } for pid=10239 comm="syz.3.1132" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 363.178868][T10205] bridge1: entered allmulticast mode [ 363.947221][ T5960] usb 4-1: USB disconnect, device number 30 [ 363.954702][ T5872] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 364.106416][ T30] audit: type=1400 audit(1771346276.282:698): avc: denied { map } for pid=10239 comm="syz.3.1132" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 364.139643][ T5872] usb 2-1: USB disconnect, device number 35 [ 364.199292][ T6858] udevd[6858]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.932917][T10282] FAULT_INJECTION: forcing a failure. [ 364.932917][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 364.946103][T10282] CPU: 0 UID: 0 PID: 10282 Comm: syz.6.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.946132][T10282] Tainted: [L]=SOFTLOCKUP [ 364.946138][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.946147][T10282] Call Trace: [ 364.946153][T10282] [ 364.946159][T10282] dump_stack_lvl+0x100/0x190 [ 364.946194][T10282] should_fail_ex.cold+0x5/0xa [ 364.946218][T10282] should_failslab+0xc2/0x120 [ 364.946240][T10282] __kvmalloc_node_noprof+0xfa/0xa00 [ 364.946260][T10282] ? xt_alloc_entry_offsets+0x42/0x60 [ 364.946285][T10282] xt_alloc_entry_offsets+0x42/0x60 [ 364.946302][T10282] translate_table+0x229/0x1630 [ 364.946325][T10282] ? find_held_lock+0x2b/0x80 [ 364.946348][T10282] ? __pfx_translate_table+0x10/0x10 [ 364.946373][T10282] do_ipt_set_ctl+0x57c/0xb90 [ 364.946390][T10282] ? nf_sockopt_find.isra.0+0x222/0x290 [ 364.946421][T10282] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 364.946439][T10282] ? irqentry_exit+0x180/0x670 [ 364.946464][T10282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 364.946500][T10282] ? nf_sockopt_find.isra.0+0x222/0x290 [ 364.946530][T10282] nf_setsockopt+0x8d/0xf0 [ 364.946548][T10282] ip_setsockopt+0xcb/0xf0 [ 364.946568][T10282] tcp_setsockopt+0xa7/0x100 [ 364.946589][T10282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 364.946618][T10282] do_sock_setsockopt+0xf3/0x1d0 [ 364.946647][T10282] __sys_setsockopt+0x195/0x220 [ 364.946674][T10282] __x64_sys_setsockopt+0xbd/0x160 [ 364.946694][T10282] ? do_syscall_64+0x95/0xf80 [ 364.946718][T10282] ? lockdep_hardirqs_on+0x78/0x100 [ 364.946741][T10282] do_syscall_64+0x106/0xf80 [ 364.946763][T10282] ? clear_bhb_loop+0x40/0x90 [ 364.946785][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.946802][T10282] RIP: 0033:0x7f5b5c19bf79 [ 364.946818][T10282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.946834][T10282] RSP: 002b:00007f5b5cf90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.946852][T10282] RAX: ffffffffffffffda RBX: 00007f5b5c416090 RCX: 00007f5b5c19bf79 [ 364.946863][T10282] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 364.946873][T10282] RBP: 00007f5b5cf90090 R08: 0000000000000480 R09: 0000000000000000 [ 364.946883][T10282] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 364.946894][T10282] R13: 00007f5b5c416128 R14: 00007f5b5c416090 R15: 00007ffdbceb9df8 [ 364.946917][T10282] [ 365.395539][ T5960] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 365.475151][T10278] ./file0: Can't lookup blockdev [ 365.528458][T10284] nfs: Unknown parameter '00000000000000000000003' [ 365.592118][ T5960] usb 2-1: Using ep0 maxpacket: 32 [ 365.603743][ T5960] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.616352][ T5960] usb 2-1: config 0 interface 0 has no altsetting 0 [ 365.623911][ T5960] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 365.643138][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.653525][ T5960] usb 2-1: config 0 descriptor?? [ 365.908455][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1134'. [ 366.267730][ T5960] magicmouse 0003:05AC:0265.000E: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 366.365607][ T5960] usb 2-1: USB disconnect, device number 36 [ 366.557650][T10299] fido_id[10299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 366.693583][T10297] mkiss: ax0: crc mode is auto. [ 366.700878][ T30] audit: type=1400 audit(1771346279.822:699): avc: denied { create } for pid=10306 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 366.782604][ T30] audit: type=1400 audit(1771346279.882:700): avc: denied { write } for pid=10306 comm="syz.5.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 367.169130][T10323] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1145'. [ 367.450858][T10325] netlink: 'syz.5.1146': attribute type 3 has an invalid length. [ 367.802816][T10332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1147'. [ 368.035348][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 368.566509][ T5817] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 368.650284][ T30] audit: type=1400 audit(1771346281.782:701): avc: denied { create } for pid=10349 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 368.797901][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 368.813066][ T5817] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 368.834552][ T5817] usb 2-1: config 1 has no interface number 1 [ 368.867251][ T5817] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.916469][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1158'. [ 368.932021][ T5817] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 368.970647][ T5817] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.040104][ T5817] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.072840][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.156302][ T5817] usb 2-1: Product: syz [ 369.228121][ T5817] usb 2-1: Manufacturer: syz [ 369.301645][ T5817] usb 2-1: SerialNumber: syz [ 369.731563][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1161'. [ 370.002195][ T5817] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 370.207468][ T1220] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 370.389457][ T30] audit: type=1400 audit(1771346283.482:702): avc: denied { read write } for pid=10386 comm="syz.5.1166" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.659886][ T30] audit: type=1400 audit(1771346283.482:703): avc: denied { open } for pid=10386 comm="syz.5.1166" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.700848][ T30] audit: type=1400 audit(1771346283.482:704): avc: denied { ioctl } for pid=10386 comm="syz.5.1166" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x744d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.730757][T10342] bridge2: entered promiscuous mode [ 370.736092][T10342] bridge2: entered allmulticast mode [ 370.747182][ T5817] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 371.030545][ T5817] usb 2-1: USB disconnect, device number 37 [ 371.119727][T10092] udevd[10092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.596530][ T1220] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 371.597995][ T5960] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 371.874727][ T5960] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.908183][ T1220] usb 4-1: Using ep0 maxpacket: 32 [ 371.935477][ T1220] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 372.946514][T10430] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 373.034003][ T30] audit: type=1400 audit(1771346286.162:705): avc: denied { read } for pid=10427 comm="syz.2.1176" path="socket:[30696]" dev="sockfs" ino=30696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 373.071267][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.096860][T10428] fido_id[10428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.112899][ T1220] usb 4-1: config 0 descriptor?? [ 373.134434][T10432] 9p: Bad value for 'rfdno' [ 373.145309][ T30] audit: type=1400 audit(1771346286.252:706): avc: denied { read write } for pid=10427 comm="syz.2.1176" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 373.179227][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.263483][ T30] audit: type=1400 audit(1771346286.252:707): avc: denied { open } for pid=10427 comm="syz.2.1176" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 373.345309][ T1220] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 373.363818][ T1220] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.383943][ T1220] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 373.403227][ T1220] usb 4-1: media controller created [ 373.427441][T10438] loop2: detected capacity change from 0 to 7 [ 373.438768][ T1220] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.454631][T10438] Dev loop2: unable to read RDB block 7 [ 373.464261][T10438] loop2: unable to read partition table [ 373.478446][T10438] loop2: partition table beyond EOD, truncated [ 373.507581][T10438] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 373.557531][ T1220] az6027: usb out operation failed. (-71) [ 373.581127][ T1220] az6027: usb out operation failed. (-71) [ 373.608542][ T1220] stb0899_attach: Driver disabled by Kconfig [ 373.624538][ T1220] az6027: no front-end attached [ 373.624538][ T1220] [ 373.644858][ T1220] az6027: usb out operation failed. (-71) [ 373.756213][ T30] audit: type=1326 audit(1771346286.882:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10439 comm="syz.1.1181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc74af9bf79 code=0x0 [ 373.785737][ T1220] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 373.795127][ T1220] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 373.815687][ T1220] dvb-usb: schedule remote query interval to 400 msecs. [ 373.825071][ T1220] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 373.845025][ T1220] usb 4-1: USB disconnect, device number 32 [ 373.995207][ T1220] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 374.017338][ T30] audit: type=1400 audit(1771346287.152:709): avc: denied { getopt } for pid=10445 comm="syz.6.1179" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.787772][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'. [ 374.821094][T10459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 374.835869][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1185'. [ 374.849091][T10459] bond5: entered promiscuous mode [ 374.854790][T10459] bond5: entered allmulticast mode [ 374.880971][T10459] team0: Port device dummy0 removed [ 374.893601][T10459] dummy0: entered promiscuous mode [ 374.899399][T10459] dummy0: entered allmulticast mode [ 374.905226][T10459] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 374.996763][ T1220] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 375.168350][T10468] pimreg: entered allmulticast mode [ 375.188948][T10470] FAULT_INJECTION: forcing a failure. [ 375.188948][T10470] name failslab, interval 1, probability 0, space 0, times 0 [ 375.201782][T10470] CPU: 0 UID: 0 PID: 10470 Comm: syz.2.1188 Tainted: G L syzkaller #0 PREEMPT(full) [ 375.201805][ T1220] usb 7-1: Using ep0 maxpacket: 32 [ 375.201812][T10470] Tainted: [L]=SOFTLOCKUP [ 375.201819][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.201829][T10470] Call Trace: [ 375.201835][T10470] [ 375.201840][T10470] dump_stack_lvl+0x100/0x190 [ 375.201870][T10470] should_fail_ex.cold+0x5/0xa [ 375.201890][T10470] should_failslab+0xc2/0x120 [ 375.201912][T10470] __kvmalloc_node_noprof+0xfa/0xa00 [ 375.201931][T10470] ? xt_alloc_entry_offsets+0x42/0x60 [ 375.201947][T10470] ? __lock_acquire+0x4a5/0x2630 [ 375.201973][T10470] xt_alloc_entry_offsets+0x42/0x60 [ 375.201988][T10470] translate_table+0x229/0x1630 [ 375.202010][T10470] ? find_held_lock+0x2b/0x80 [ 375.202030][T10470] ? __pfx_translate_table+0x10/0x10 [ 375.202052][T10470] do_ipt_set_ctl+0x57c/0xb90 [ 375.202066][T10470] ? nf_sockopt_find.isra.0+0x222/0x290 [ 375.202099][T10470] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 375.202116][T10470] ? sockopt_release_sock+0x57/0x70 [ 375.202135][T10470] ? __local_bh_enable_ip+0x9e/0x120 [ 375.202154][T10470] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 375.202187][T10470] ? nf_sockopt_find.isra.0+0x222/0x290 [ 375.202211][T10470] nf_setsockopt+0x8d/0xf0 [ 375.202227][T10470] ip_setsockopt+0xcb/0xf0 [ 375.202245][T10470] tcp_setsockopt+0xa7/0x100 [ 375.202264][T10470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 375.202287][T10470] do_sock_setsockopt+0xf3/0x1d0 [ 375.202312][T10470] __sys_setsockopt+0x195/0x220 [ 375.202334][T10470] __x64_sys_setsockopt+0xbd/0x160 [ 375.202352][T10470] ? do_syscall_64+0x95/0xf80 [ 375.202371][T10470] ? lockdep_hardirqs_on+0x78/0x100 [ 375.202391][T10470] do_syscall_64+0x106/0xf80 [ 375.202410][T10470] ? clear_bhb_loop+0x40/0x90 [ 375.202428][T10470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.202443][T10470] RIP: 0033:0x7f63d719bf79 [ 375.202456][T10470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.202470][T10470] RSP: 002b:00007f63d7ff5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.202486][T10470] RAX: ffffffffffffffda RBX: 00007f63d7416090 RCX: 00007f63d719bf79 [ 375.202496][T10470] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 375.202504][T10470] RBP: 00007f63d7ff5090 R08: 0000000000000480 R09: 0000000000000000 [ 375.202513][T10470] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 375.202522][T10470] R13: 00007f63d7416128 R14: 00007f63d7416090 R15: 00007ffcca0f9688 [ 375.202543][T10470] [ 375.473824][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 375.522941][ T1220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.534797][ T1220] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.545101][ T1220] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 375.554357][ T1220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.576921][ T58] wlan1: Trigger new scan to find an IBSS to join [ 375.810390][ T1220] usb 7-1: config 0 descriptor?? [ 375.847280][ T1220] hub 7-1:0.0: USB hub found [ 376.064157][T10477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.377654][ T1220] hub 7-1:0.0: 1 port detected [ 376.558353][ T30] audit: type=1400 audit(1771346289.692:710): avc: denied { watch } for pid=10480 comm="syz.3.1193" path="/243/control" dev="tmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 377.112121][ T30] audit: type=1400 audit(1771346290.242:711): avc: denied { write } for pid=10502 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 377.884492][ T5873] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 377.912619][ T5873] usb 7-1: USB disconnect, device number 9 [ 377.912632][ T78] usb 7-1: Failed to suspend device, error -19 [ 378.145598][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 378.285148][T10522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.476317][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 378.485343][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 378.498550][ T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 378.510834][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.511276][T10524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10524 comm=syz.1.1204 [ 378.544804][ T30] audit: type=1400 audit(1771346291.672:712): avc: denied { shutdown } for pid=10520 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.582478][ T9] usb 3-1: Product: syz [ 378.602816][ T9] usb 3-1: Manufacturer: syz [ 378.620054][ T9] usb 3-1: SerialNumber: syz [ 378.620826][ T180] wlan1: Trigger new scan to find an IBSS to join [ 378.683443][ T9] usb 3-1: config 0 descriptor?? [ 378.723004][ T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 378.748217][ T9] usb 3-1: Detected FT232R [ 378.905361][T10539] input: syz1 as /devices/virtual/input/input30 [ 379.039348][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 379.066846][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 379.377028][ T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 379.456299][ T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.465628][ T30] audit: type=1400 audit(1771346293.595:713): avc: denied { append } for pid=10547 comm="syz.6.1209" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.520102][ T9] usb 3-1: USB disconnect, device number 28 [ 379.623637][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 379.644360][ T9] ftdi_sio 3-1:0.0: device disconnected [ 379.668878][T10549] tipc: Started in network mode [ 379.674535][T10549] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 379.682167][T10549] tipc: Enabled bearer , priority 10 [ 379.766807][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1208'. [ 380.466694][ T5859] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 380.516367][T10563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 380.538406][ T3565] wlan1: Creating new IBSS network, BSSID e6:c7:52:b2:55:49 [ 380.626373][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 380.643476][ T5859] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 380.675839][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.712261][ T5859] pvrusb2: Hardware description: Terratec Grabster AV400 [ 380.713365][T10570] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 380.746929][T10570] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 380.748050][ T5859] pvrusb2: ********** [ 380.781550][ T5859] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 380.798184][ T5960] tipc: Node number set to 10136234 [ 380.819042][ T5859] pvrusb2: Important functionality might not be entirely working. [ 380.837162][ T5859] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 380.888584][ T5859] pvrusb2: ********** [ 380.899328][ T5873] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.924307][ T2340] pvrusb2: Invalid write control endpoint [ 381.104913][ T5873] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 381.161859][ T5873] usb 4-1: config 0 has no interface number 0 [ 381.286056][ T5873] usb 4-1: config 0 interface 255 has no altsetting 0 [ 381.340500][ T5873] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 381.379698][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.401496][ T2340] pvrusb2: Invalid write control endpoint [ 381.436498][ T5873] usb 4-1: Product: syz [ 381.443672][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 381.460603][ T5873] usb 4-1: Manufacturer: syz [ 381.470548][ T5873] usb 4-1: SerialNumber: syz [ 381.477097][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 381.494585][ T5873] usb 4-1: config 0 descriptor?? [ 381.506238][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 381.521332][ T5873] ems_usb 4-1:0.255 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 381.538126][ T2340] pvrusb2: Device being rendered inoperable [ 381.546607][ T5873] ems_usb 4-1:0.255: probe with driver ems_usb failed with error -22 [ 381.562788][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 381.588180][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 381.620876][ T2340] pvrusb2: Attached sub-driver cx25840 [ 381.646896][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 381.666490][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 381.734592][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1209'. [ 381.757712][T10563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10563 comm=syz.3.1211 [ 381.799713][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.816560][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.886327][ T5960] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 382.316396][ T5960] usb 2-1: device descriptor read/64, error -71 [ 382.509770][ T5859] usb 4-1: USB disconnect, device number 33 [ 382.557672][ T5960] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 382.694958][T10611] No source specified [ 382.696405][ T5960] usb 2-1: device descriptor read/64, error -71 [ 382.742642][T10613] netlink: 'syz.5.1224': attribute type 3 has an invalid length. [ 383.222137][T10622] syzkaller0: entered promiscuous mode [ 383.227941][T10622] syzkaller0: entered allmulticast mode [ 383.482510][ T1220] usb 7-1: USB disconnect, device number 10 [ 383.596368][ T5960] usb usb2-port1: attempt power cycle [ 383.753044][T10632] loop8: detected capacity change from 0 to 8 [ 383.946633][T10632] Dev loop8: unable to read RDB block 8 [ 383.952490][T10632] loop8: unable to read partition table [ 384.002655][T10632] loop8: partition table beyond EOD, truncated [ 384.003432][ T5960] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 384.012413][T10632] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 384.068785][ T31] INFO: task syz.0.632:8264 blocked for more than 143 seconds. [ 384.093716][ T31] Tainted: G L syzkaller #0 [ 384.116258][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.126273][ T5960] usb 2-1: device descriptor read/8, error -71 [ 384.154529][ T31] task:syz.0.632 state:D stack:28184 pid:8264 tgid:8263 ppid:5807 task_flags:0x400040 flags:0x00080002 [ 384.196638][ T31] Call Trace: [ 384.201255][ T31] [ 384.204261][ T31] __schedule+0xfee/0x60e0 [ 384.209494][ T31] ? __lock_acquire+0x4a5/0x2630 [ 384.214672][ T31] ? __pfx___schedule+0x10/0x10 [ 384.223023][ T31] ? find_held_lock+0x2b/0x80 [ 384.230343][ T31] ? schedule+0x2bf/0x390 [ 384.235155][ T31] schedule+0xdd/0x390 [ 384.250885][ T30] audit: type=1400 audit(1771346298.385:714): avc: denied { watch watch_reads } for pid=10627 comm="syz.6.1228" path="/proc/243/map_files" dev="proc" ino=32102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 384.288083][ T31] schedule_preempt_disabled+0x13/0x30 [ 384.293917][ T31] __mutex_lock+0xc9a/0x1b90 [ 384.305909][ T31] ? bdev_open+0x41a/0xe40 [ 384.313222][ T31] ? find_held_lock+0x2b/0x80 [ 384.324146][ T31] ? find_inode_fast+0x5e3/0x910 [ 384.335969][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 384.348842][ T31] ? find_inode_fast+0x1fa/0x910 [ 384.366338][ T5960] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 384.374278][ T31] ? bdev_open+0x41a/0xe40 [ 384.382117][ T31] bdev_open+0x41a/0xe40 [ 384.391981][ T31] ? iput+0x3a/0x40 [ 384.405929][ T5960] usb 2-1: device descriptor read/8, error -71 [ 384.423292][ T31] blkdev_open+0x34e/0x4f0 [ 384.434667][ T31] do_dentry_open+0x6d8/0x1660 [ 384.445002][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 384.455625][ T31] vfs_open+0x82/0x3f0 [ 384.464327][ T31] path_openat+0x208c/0x31a0 [ 384.474529][ T31] ? __pfx_path_openat+0x10/0x10 [ 384.485178][ T31] do_file_open+0x20e/0x430 [ 384.494218][ T31] ? __pfx_do_file_open+0x10/0x10 [ 384.505034][ T31] ? alloc_fd+0x476/0x790 [ 384.514399][ T31] ? do_getname+0x191/0x390 [ 384.524628][ T31] do_sys_openat2+0x10d/0x1e0 [ 384.530031][ T5960] usb usb2-port1: unable to enumerate USB device [ 384.539366][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.545919][ T31] __x64_sys_openat+0x12d/0x210 [ 384.551348][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 384.557003][ T31] do_syscall_64+0x106/0xf80 [ 384.561719][ T31] ? clear_bhb_loop+0x40/0x90 [ 384.568509][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.574532][ T31] RIP: 0033:0x7f420a75c84e [ 384.579347][ T31] RSP: 002b:00007f420b580b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.589578][ T31] RAX: ffffffffffffffda RBX: 00007f420b5816c0 RCX: 00007f420a75c84e [ 384.597856][ T31] RDX: 0000000000000000 RSI: 00007f420b580c00 RDI: ffffffffffffff9c [ 384.606093][ T31] RBP: 00007f420b580c00 R08: 0000000000000000 R09: 0000000000000000 [ 384.614488][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 384.629216][ T31] R13: 00007f420aa16038 R14: 00007f420aa15fa0 R15: 00007ffeb8ff8e68 [ 384.649629][ T31] [ 384.656067][ T31] [ 384.656067][ T31] Showing all locks held in the system: [ 384.680958][ T31] 1 lock held by ksoftirqd/1/23: [ 384.691426][ T31] 1 lock held by khungtaskd/31: [ 384.717165][ T31] #0: ffffffff8e7e93e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 384.733540][ T31] 3 locks held by kworker/u8:4/58: [ 384.741099][ T31] #0: ffff88801caca148 ((wq_completion)pm){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 384.751562][ T31] #1: ffffc900015f7d08 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 384.784392][ T31] #2: ffff88802b8ea220 (&dev->power.lock){-...}-{3:3}, at: rpm_idle+0x6e7/0x7c0 [ 384.793909][ T31] 2 locks held by getty/5560: [ 384.799046][ T31] #0: ffff8880379e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 384.826118][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 384.839957][ T31] 1 lock held by udevd/6003: [ 384.844572][ T31] #0: ffff888028164358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 384.854048][ T31] 1 lock held by syz.0.632/8264: [ 384.859054][ T31] #0: ffff888028164358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 384.868624][ T31] 1 lock held by sed/10648: [ 384.875842][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 384.885900][ T31] [ 384.889233][ T31] ============================================= [ 384.889233][ T31] [ 384.897722][ T31] NMI backtrace for cpu 0 [ 384.897741][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 384.897761][ T31] Tainted: [L]=SOFTLOCKUP [ 384.897767][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.897776][ T31] Call Trace: [ 384.897782][ T31] [ 384.897788][ T31] dump_stack_lvl+0x100/0x190 [ 384.897817][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 384.897835][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.897860][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 384.897883][ T31] sys_info+0x141/0x190 [ 384.897909][ T31] watchdog+0xd25/0x1050 [ 384.897943][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.897965][ T31] ? __kthread_parkme+0x18c/0x230 [ 384.897994][ T31] ? kthread+0x13a/0x450 [ 384.898009][ T31] ? __pfx_watchdog+0x10/0x10 [ 384.898029][ T31] kthread+0x370/0x450 [ 384.898045][ T31] ? __pfx_kthread+0x10/0x10 [ 384.898063][ T31] ret_from_fork+0x754/0xd80 [ 384.898082][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 384.898101][ T31] ? __switch_to+0x7b4/0x1120 [ 384.898123][ T31] ? __pfx_kthread+0x10/0x10 [ 384.898139][ T31] ret_from_fork_asm+0x1a/0x30 [ 384.898171][ T31] [ 384.898177][ T31] Sending NMI from CPU 0 to CPUs 1: [ 385.024401][ C1] NMI backtrace for cpu 1 [ 385.024420][ C1] CPU: 1 UID: 0 PID: 10653 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 385.024441][ C1] Tainted: [L]=SOFTLOCKUP [ 385.024446][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.024453][ C1] RIP: 0010:mark_held_locks+0x44/0x70 [ 385.024478][ C1] Code: 9f 18 0b 00 00 0f b6 43 22 89 c2 83 e2 03 80 fa 01 44 89 e2 83 da ff a8 04 74 0f 48 89 de 4c 89 ef e8 90 f5 ff ff 85 c0 74 15 <83> c5 01 48 83 c3 28 41 39 ad 10 0b 00 00 7f cb b8 01 00 00 00 5b [ 385.024492][ C1] RSP: 0018:ffffc90004f8f6c8 EFLAGS: 00000002 [ 385.024504][ C1] RAX: 0000000000000001 RBX: ffff8880226c2fc0 RCX: 0000000000000040 [ 385.024513][ C1] RDX: 0000000000000000 RSI: ffff8880226c2fc0 RDI: ffff8880226c2480 [ 385.024521][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 385.024533][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000006 [ 385.024541][ C1] R13: ffff8880226c2480 R14: 0000000000000000 R15: ffff88807adf63c0 [ 385.024549][ C1] FS: 0000000000000000(0000) GS:ffff88812444d000(0000) knlGS:0000000000000000 [ 385.024563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.024572][ C1] CR2: 00007f0d64cad286 CR3: 00000000455e6000 CR4: 00000000003526f0 [ 385.024580][ C1] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 385.024588][ C1] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 385.024596][ C1] Call Trace: [ 385.024600][ C1] [ 385.024606][ C1] lockdep_hardirqs_on_prepare+0xf3/0x1b0 [ 385.024626][ C1] trace_hardirqs_on+0x36/0x40 [ 385.024643][ C1] _raw_spin_unlock_irqrestore+0x52/0x80 [ 385.024661][ C1] debug_check_no_obj_freed+0x31f/0x630 [ 385.024679][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 385.024693][ C1] ? __memcg_slab_free_hook+0x5ba/0x640 [ 385.024714][ C1] ? rcu_is_watching+0x12/0xc0 [ 385.024728][ C1] ? exit_mmap+0x58e/0xdd0 [ 385.024748][ C1] kmem_cache_free+0x3c8/0x6a0 [ 385.024763][ C1] exit_mmap+0x58e/0xdd0 [ 385.024783][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 385.024808][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 385.024823][ C1] __mmput+0x12a/0x410 [ 385.024839][ C1] mmput+0x67/0x80 [ 385.024853][ C1] begin_new_exec+0x10f0/0x38a0 [ 385.024872][ C1] ? __pfx_begin_new_exec+0x10/0x10 [ 385.024888][ C1] ? __pfx_load_elf_phdrs+0x10/0x10 [ 385.024908][ C1] ? rw_verify_area+0xce/0x6d0 [ 385.024925][ C1] load_elf_binary+0x8f1/0x51b0 [ 385.024942][ C1] ? lock_acquire+0x1cf/0x380 [ 385.024961][ C1] ? find_held_lock+0x2b/0x80 [ 385.024975][ C1] ? load_misc_binary+0x95e/0xd20 [ 385.024991][ C1] ? __pfx_load_elf_binary+0x10/0x10 [ 385.025005][ C1] ? find_held_lock+0x2b/0x80 [ 385.025020][ C1] ? bprm_execve+0x8d9/0x1680 [ 385.025034][ C1] ? bprm_execve+0x8d9/0x1680 [ 385.025051][ C1] bprm_execve+0x8fb/0x1680 [ 385.025068][ C1] ? __pfx_bprm_execve+0x10/0x10 [ 385.025083][ C1] ? copy_strings.isra.0+0x4b2/0x9b0 [ 385.025102][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 385.025120][ C1] __x64_sys_execve+0x93/0xd0 [ 385.025137][ C1] do_syscall_64+0x106/0xf80 [ 385.025153][ C1] ? clear_bhb_loop+0x40/0x90 [ 385.025169][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.025182][ C1] RIP: 0033:0x7f0d64bf3107 [ 385.025197][ C1] Code: Unable to access opcode bytes at 0x7f0d64bf30dd. [ 385.025203][ C1] RSP: 002b:00007ffd1ef00bb8 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 385.025215][ C1] RAX: ffffffffffffffda RBX: 0000558db27cbf50 RCX: 00007f0d64bf3107 [ 385.025224][ C1] RDX: 0000558db27cbf78 RSI: 0000558db27cbf50 RDI: 0000558db27cc030 [ 385.025232][ C1] RBP: 0000558db27cc030 R08: 00007ffd1ef06e16 R09: 0000000000000000 [ 385.025241][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000558db27cbf78 [ 385.025249][ C1] R13: 00007f0d64db8e8b R14: 0000558db27cbf78 R15: 0000000000000000 [ 385.025262][ C1] [ 385.407169][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 385.414032][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 385.424692][ T31] Tainted: [L]=SOFTLOCKUP [ 385.429018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.439089][ T31] Call Trace: [ 385.442345][ T31] [ 385.445258][ T31] dump_stack_lvl+0x100/0x190 [ 385.449923][ T31] vpanic+0x552/0x970 [ 385.453897][ T31] ? __pfx_vpanic+0x10/0x10 [ 385.458387][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 385.464609][ T31] panic+0xd1/0xe0 [ 385.468319][ T31] ? __pfx_panic+0x10/0x10 [ 385.472736][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 385.478870][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 385.485021][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 385.491147][ T31] ? watchdog.cold+0x198/0x1ca [ 385.495887][ T31] ? watchdog+0xd35/0x1050 [ 385.500626][ T31] watchdog.cold+0x1a9/0x1ca [ 385.505193][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.509849][ T31] ? __kthread_parkme+0x18c/0x230 [ 385.514859][ T31] ? kthread+0x13a/0x450 [ 385.519078][ T31] ? __pfx_watchdog+0x10/0x10 [ 385.523738][ T31] kthread+0x370/0x450 [ 385.527785][ T31] ? __pfx_kthread+0x10/0x10 [ 385.532352][ T31] ret_from_fork+0x754/0xd80 [ 385.536924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 385.542021][ T31] ? __switch_to+0x7b4/0x1120 [ 385.546681][ T31] ? __pfx_kthread+0x10/0x10 [ 385.551251][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.556005][ T31] [ 385.559305][ T31] Kernel Offset: disabled [ 385.563645][ T31] Rebooting in 86400 seconds..