last executing test programs: 1m23.09538888s ago: executing program 2 (id=457): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0xc4, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4020) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r4, 0x0, 0x293) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'ip6_vti0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) r5 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="04ac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fstatfs(0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES16=r1, @ANYRES8=r5, @ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x24000040) 1m21.187364912s ago: executing program 2 (id=463): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_netprio_ifpriomap(r12, &(0x7f0000000080), 0x2, 0x0) sendfile(r13, r13, &(0x7f0000000100)=0x6, 0x7) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m20.860181204s ago: executing program 2 (id=467): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000001440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb3bbbbb86dd6c1dd6419f002c01000000000000000000000b3aac1e0001fe800000000000000000"], 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000006c0)={0x10001, 0x1, 0x9, 0x1, 0x11, "8d3f1642f1bc2c7e16f158d7c8cda5d2b465b5"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x3) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m20.237644126s ago: executing program 2 (id=468): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0xee01, &(0x7f0000000080)) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x24, r3, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pause() clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/228, 0xe4}], 0x6, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x1, 0x40, &(0x7f0000000680)={r6, r7+60000000}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x8000040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000100)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, 0xee01, &(0x7f0000000080)) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000640)={0x24, r3, 0x1, 0x30bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pause() (async) clock_gettime(0x0, &(0x7f0000000640)) (async) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/82, 0x52}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000400)=""/228, 0xe4}], 0x6, &(0x7f0000000580)=""/69, 0x45}, 0x1}], 0x1, 0x40, &(0x7f0000000680)={r6, r7+60000000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd2d, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x8000040) (async) 1m19.928061091s ago: executing program 2 (id=470): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000240)={0x0, 0x80fd, 0x80, 0x2, 0xabc}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47bc, 0x0, 0xff000000, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) 1m19.337410705s ago: executing program 2 (id=472): sched_setattr(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) 1m19.116354478s ago: executing program 32 (id=472): sched_setattr(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) 52.294351532s ago: executing program 5 (id=473): socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000000d0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xfdb05f43584610e6}, 0x8010) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 42.115810884s ago: executing program 5 (id=473): socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000000d0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xfdb05f43584610e6}, 0x8010) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 33.867167769s ago: executing program 5 (id=473): socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000000d0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xfdb05f43584610e6}, 0x8010) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 24.364044247s ago: executing program 5 (id=473): socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000000d0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xfdb05f43584610e6}, 0x8010) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 12.16431044s ago: executing program 4 (id=676): r0 = syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360041000000000904960102502f7e0009050f10200001ff08090401"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2f00, &(0x7f0000000340)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0xe, 0x0, 0x7}, 0xc) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xfff7, 0x2, 0x4}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x16) r7 = openat$cgroup_pressure(r6, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000300)={'some', 0x20, 0x17a, 0x20, 0x200100002}, 0x2f) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 12.074887664s ago: executing program 1 (id=677): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x8000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r7, 0x1000006) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x1000000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x6b, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r9, 0x0, 0x1004000, 0x0, &(0x7f00000002c0)}) 12.00379064s ago: executing program 3 (id=678): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x84000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ee6000/0x1000)=nil) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x32315659, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}}) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f00000000c0)={0x5, "a9015e3b7e0dd83b725fd158eb5ccd97ebfcb4306c180e1d078bbff48170aaa2", 0x1, 0x7fff, 0x5, 0xffffff, 0x2000021, 0x8}) ioctl$KDGKBMETA(r5, 0x4bfa, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) 10.975012131s ago: executing program 1 (id=679): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x1000086}, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) unshare(0x20000400) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket(0x5, 0x3, 0x0) r5 = socket(0x1e, 0x3, 0x102) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x20040801) fanotify_init(0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1001}], 0x1, 0x5b3d2934, 0xfffffff8) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1, 0xfffffe01, 0x3) 10.920373783s ago: executing program 3 (id=680): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x107941, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1000, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) mq_notify(0xffffffffffffffff, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) unshare(0x2c060000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318325bd700000000000190000000c0001800800030005"], 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x400, 0x70bd2b, 0x3c, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100015"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 10.130122409s ago: executing program 5 (id=473): socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000000d0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f000004b680)=""/102400, 0x19000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xfdb05f43584610e6}, 0x8010) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 8.09012058s ago: executing program 1 (id=682): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000338}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x84) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 8.085918036s ago: executing program 3 (id=683): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000008, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000007980)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000002c0)="c946c2418a1f74098089397e07fee08f376e604d307121be533917fc9e94824b7c3405b4830d60415149d7828bb573afc9b0262014aa86cb53dbd8c5e2ae575e47aa3970e443c57d8e87799c3b4a9996e8a4dc0b118b5d2a524d51d1c81d2cc11c9ad32316fb2cbc1f660c93eb57682bb0560449b9cc8e04c72518", 0x7b}], 0x1, 0x0, 0x0, 0x48880}}, {{&(0x7f00000003c0)=@file={0x663edddab0978e62, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000440)="adba9a93228406b855d7ba71364cee85310c19f9762fc5bf8e80090ba436f7ab85e2262fb42ba7347a966052adbfd90454b3af3e4bf1d80fa19c28d41fc8d1dd1821aaac1443a14a6b0007fc5b0f3ea2f2e833fad9abcc375a48d9edd5c4dc763043f3c28b85d67a7554e157212d2a3ff49451775733a8243851c7cae79d1639d7467c62018385bb0efdc654f93cac76dbdd44ca04321adffb3185e962bb4224e26dbdfc1a8c44778a3db5998f45e488516aa78e975b570bcd93c395edf931ebbb1044576faa8f7556218d02d6ca13bbc1276e9d056eb2e873bccef2f86c45c73f39a0e5b07072e8b2db4b71f478ed53e8b37f6700f3", 0xf6}, {&(0x7f0000000540)="5a94cd7965ba4c09705f2849e3e4d6b863ee40a9fa30da94622b028e8f11de634fdf4759067ca4a7b1c174fbff65fbf04ec3fa7757d89d0f7fba6acfb45284278a01a059e8c3b3ad17222375581b656d74c4774e76e6492c33425ef9f6d5e2767424a830c9ced87694037783f2fb68669afab57814471981fd1e38f082c06613770c6fa29436fbabbab83ab505a8346d3e9c0a30dab004e05b643d4238ed37b7527ccfac8d742e2b1085b114ee7d83ce0b8247c7a690fcd7bc8d1eda301330", 0xbf}], 0x2, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r1, r3, r0, r2]}}, @cred={{0xd}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x8400}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001c80)="66678c37f40bd328c265d610c763b49671de842f542b7c96845ef582c781191db03d28ab35e82273981c530482c30cde77cfde33bd9f9455104e8d4554a24cac7e82385a36662ce679f0b00ff5b6e65c2f32838904b5805b20cefc978dab85572b07ee507e7b9b1da14745ecd8c8c9a51571a9e50de31ad158e541a4fd2c4a5d30afb1ac40e3a98c3a77153bfe3005098dbc47161fbec4caf05f86d19e328b81a5b86d4387dd657cdeb6227c852099e03ce526da79231313d11d6dc8436624dade14612ec5c20330766fa329b9f4a69f99d60e9c3238853aa9fe2b73ac034f9bcb6f7dda3c972c871a2d4ac5ee992166268d7feeda", 0xf5}, {&(0x7f0000001d80)="8616aad513ac33ef2a6e8706eada747d93e02de78986e9ec1e9e5e4f167e89d9eea73a668ecaf4a1addbdf51e1182111c8a997f6220223c1929194f8b53e76d57ed2f7a71731a02a12204fcdec69b6d0d51ea66628fc970fc091249cc49c6528231d5d03f9fbeba2d83b15898844efbb8d7499767fb9cb3aebed74571abd482f767b6fb485f3ec3790e85f47b18e9f9324619c186e", 0x95}, {&(0x7f0000001e40)="b5953f87b14f358bfe2c98f75d0cfc737c623b9582b3efed8902728498e9063bd304ab15ad1599fe687911a3078fa49dd529", 0x32}], 0x3, &(0x7f0000001ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r1]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x800}}, {{&(0x7f0000001f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001fc0)="f8e1b7114b8a84659e21ab833721aeb5abdbc3ff391b16212acbc46eff0e467d0dbb60850fc29ae224734b530029c15049f18a3274454c", 0x37}, {&(0x7f0000002000)="a07cd5f678642a347bfe2698f2fd774cc918a798c4288efa2d2466ae915d815d6b69b504db731a83f661f899d67c771398a9403c30e04bca7ff27792d264076e1c1ce746e4b0e1b1a6f1babaae28b4edef76eddd36af7bae3c8ead44682ba5ffec3f4a030e0fbc859900301e403243c1552a9048323b46ad66e96cd035b90e7e0f6bf8", 0x83}, {&(0x7f00000020c0)="eb4e32a5eb03653451654355d27b670172c66d954472c5032b7d2171ae30cf39a944e919359d42db9981643aba70e76632c9b219d9cf6b76dda4847b6db2d94faf480ff2aaead032f3e8fd0b00353abca69b0b7106f22a1e3bacbdddbcbc5b57b3d6", 0x62}, {&(0x7f0000002140)="89b6e190a8a601052c9560aa57804f1e3028c16fa3622531bfbf4866f4c69ddea835779cad8a8a564a730b45581b04841085109cd59ce0963171b2cfc860bcee5b4f3e3860ae4c82d716a31db17918641c5a680d0c0b4ee8b612afb34371962318bce485563c08869d16b9cf8817ceed51c96ebad98ab41253065accd8b2358999e64167ba8975843abe9c8356fc19b9fc582b1fb71970e8d878a9b6b561ebdd5808c5a26dc6c0fa98fa7dc38766a0a795361ac991edf4a50806652d0bbecba240e542666713a4249e1e593b1bc982023cd916e04496124f546f50df436dbaa97e6c40a03bb9d10376b7e6de5707c9faae8b84c807d7cfe6c730ebee3eaf772d7c6160298c9c29e30506186f2ed961303969ca034385b16c8da83c953e10b6da5829a66b71ed01ebb0529a8f15378b933287bc47e2ecbb959c816becfc69678f097523324759d30145e61c8e92c79ad8047c790afdceae5bc854245e7e3688daffff7fdc58600b77a9065ca03d75e6dc7047e36725d311ffff0241ed4a863e67df4f40bb84f1324cd77b9454fafd18e31bf7679fd3243e7a5faed81f7ab7f5b38f78d03fb76059ad18b8c37335a8d97eafbd0f34be8aad06de49db2e6a79205b55bdeb08b908dad1dbb88213699a6b0f0b6c8a4253a65ea733aedaded51bf9a0426e1cd7356e265a8290b6fd452dd98bde387bbfafa6b1395cd8a23511fdf2cd60e2ddea0b5daa4a4dc8a2b15cd4f3e9f3808dde4bfe4b5ab33faf5d59470fff7214024b687d3f2153f4db054858ea8646cf064bf0ed5ab3c40002e39e08e27563657aa444eeedf0cf582807f76e7059b927b1cfef2515905c9c9af3dd02ca238ee60d21b1ffd4daf028fe7cdfcd54b903c06f223e7e91cb37f16d5067db548f11e8e390f1b02a5b720b4799094f0b4eedf0ec1557648863bd894b5cb5b7ec74335a2fc84d20a6159003cc8998921b120df886dc4b06480fc0c76c07e5cccbf23a93426570c7114b1c9818634638667224c478c4936d1b2ed836855ac59f2305f54cd445cbc92b9865d03230dbefd5f6f86e8dd3f1a656ffd22b466c5f310a3293a4dae9866fa14933da9b2a9bb1a487037aac6ed70003b351b3f6ae70277633ce35e6f4f1ef23ea780c7bcb26db4a4cd988f446e27acc9491a3d41e72020268f2876f4204c2f0d16aabde5aeb68039001e82d827b14d5b421bb4766b66f9becbb19513e6c19081b96750cc9cd3f33038c58e950a6626b62832dbe3d8c96a7ade2aa2ce1104069421dd2808388f26e8716cd2fc67cad45c6dddef7440371de14c41122346f2b66ce4ada18de244f8ff0f1ac652d96fc7b6f69b5624abf216d1a118cd4de3c567ef2151c68a97ccca93c391dfb683982c6104d5e8662ea84a046c2657ffdb6c5b9f2a96c8a7f58de833ffc5deca76a0a438a473deface8d0a2646ec9ae45344a536fb8969f7c1439afb9efa2d8997433757f920f0906a3bc0cf945ee836576b2d2de6bd3c76048dc3681a059783a9b4f96569853ea51e6207b8cbaf5602ab509d54e2447a1194c4c8de0a16e461ee9b6fb4da90de0ef57dd356373ded239df265f237cc36ca33aa9588f6c49f79c3cb874bb5b46d36511dc3fa5178fa452cee684bf565e320696771ced7de9f51dce6bf32e4220b51f8b6a68d1ec907274b5699e151f05e5efb373ca973b75e1125984bbc36ae4cef6e0ee731ed7fece162c6bd66b976831411714da71db80af125dcd22b5e3836dcf84d15bbb241daeec1863de391b95f78fb1f5d38d37ae7bd7623e29777cf4c940364453b6992c2539c71020d48e13c7883f03e2b05cf5a5f94b7d591337249d8549e02bea4d32084861857e9218ab724f3e0a2f31bebeb217d392e0aa15f02e8cff6ce12cce749f4403c6e8fc27cb84c540bc1674fb48c951d00b08a87a6bb3014b567f20857c57cd8e8a002f2845377ba1fb6538de1f4daa39e2d9b0d67372dccab0dd27c5533de98b5fa2edc7d711f9405b29182e0cd686cc9a7a15632a7da50898e00f75ec2bfadfbf3c5ed9207aa0878ffb6aba1a12ee888b1ebfd0666c9c5e4e6086b18cb34d2c61a0523977ad9b3514f20076c14f747998cd5a9955a6bdd8bfc2bd1b0861c052c61040876406f5c2f359728953e42b9a5e2abb1813dafb019009979e5ae3ea03c80d735294d2ed90c6354463ff59bc36427f8a89f05e86a9ad1ef33c30d4e150ca6f6f2f9fce1a51f31c6508489a41cb2895ccf09e0d5dd4df51f1963dbb69dc8c8489169f70866b83abde8aba1b094e47512f3916776c96e320853da98efe9c247bc03e1ae8c73afb0f6fc35d15cb000309933e314bdb38aef5ab266285c45d0bc144839dd3bab801317d803d8dd93822b63b40b128f81abce8e40d8f378b8fa2e99f5c0544c9f29679817dbb0b14b0db0ce56cb910d17ebdf36f498d54f214e7ae9a823d09a646b7decccfa929ef06a01dfb990cdcbf7874ba0a8f1b131d5bfd5723b8cb5b3c34f4ad3fa610252f2b46f452603d8492602bc54602fbc79a95387449c1fe038d6ecb27450d7f6c3c6ebf8b7757208ab3dc04e40c43321586270cae17f2ba32759b841ef974ec4331af727f53f39d6f52ecadae4083b735b3a5a961b162e82ebf52a86c88a011151da80604007ee0e0a7cabf3a450aaff3e31a6e1ce043009fb67078937d7ae2a3da7bf637b2e5dc9f32a766e65da1cba677517f96213eb1818ae667e0b369d97958563eb6d635b22ad3269a2efff2208191a0201edd06c57769b43131e42cd7e00897984a640a0f06902072b7fefdd589999eb00a352ba335b2cde4f5d28e97378dd5ee98840df41ad45623dea3200d92b44fa98de4d2ab061d1ba18ce81766a1e0b8d612bb4e367164d51503222bd20a05ef67a4ce73dade0c215c957f6015e94f25b3f745b02d9a62dcce52d8d2c0cd989e0f12c5ef05bbc0c7ce045bcd93a78e1ef566476c99780a355d423901d5ad96f7bfb207b8f9923246461f379467e3cf11cf6579c53ce42f4f5c400be283fb18e6b579569550ce706dff039e44646c29259af8a5d0a18749638e6cd0ae4fc4f3a4eb666752b3f7f125c4ccefa53b0d719fe74c87c04c0e5569375876f1254256e5dbc8cc76a5389556d179b8b90e29d0d8f25058f47e320d4cd5b76e8ebbd57d2c1259897ef3d7418c30e17a5b13a1899da8434966777f6d60c2901c34145b959996321c21e1afd3d688a15fe1ade7cad705e4ce96fba321d903859a774ef13182a1756ec0930064fa4e9681de37e7bae0fb4d108883ac5dc914cbdf0cb407fe37d34e7a83bad4e019ba9b2181fbb0d339bb0babd1cbc5333581d89476e0b0028b76191f13c8d6adfee29ce9492705d8dcec1112453c8bf35d0b8c22325b02780886182677c8ca52fb77a24d8b4fc06ad7722dd1762003aa74510b46d05aeb9336d4b1eb60021623cd8288e0bdf2807365243f5904c206e49ed4044fa6dbeeb21a0098ae70ef0c61fed6c0f9880643ea5ce9db46ad574c035490178368adf1433ff4d293599334a286df5232513196507363c53e651d257fa8728d8246028af20933ca81fae80165d44075faf6ae6cb2d34f6d68ce4bb4d56e0588937f623f87ebf5e3eb940d6458520ae7b271585789cacc06807ec72320d6b14d935767d0866beb3179b4bd357a41bfe65a764442dceccf585c6f9d8f2a04f85ebb2f14b0ff7dc79fdd56d8e8e0d5c26af0fa18c069d89e326756852dabc20205c8bb542cf54081bb84ed2348ac4ff38aed381cab272cffcbc954112aa6214d50750e58e85e7ae9371cd732e0cb7979add9da77e809889d1b1e85d90d4c800fbb8ab66a887833182bf75296f44c2abe0b99b789ab0082807a5deb541e5bbe3ee1a27c841f299fd63f70977bc8ba02582f5ce8d4d717dd389aa234e0dd9831f3b0018116243b3cd9cb18f25d0f4b43746233be54732ada55bb8bce093e6b9d2db7671f3904518d9b1ce40d06e10aa7e7bd42a1a933177a3b4ed769c61bb02e0979766d46d6839c235684735609b050b72ca8a7f9f16e2eaf3497f0342b963cd1db1b6ed2d9dc731feb7a3d1e7165b3a6583f6916de8705629636d9faf9c2e35a5de23eec4a430b4e0df2fa56e927fa5884e300a30f0cf18e9243089a8112c11bd296a13f1ae3fb7a794e8328f24461bd6fd271be2c221a859509e79c65164d520e23b98a797480a1bd2ee65b860c2e1df805b2bc426565452b7134dd8a5258b6e03ef5ba02b3869aa7f126b5a71ad3608b6cf23deff69bcca7b6909b263d0b0e9fffb6d3680eeb8f23fba54b03aa1abad36df3018a8a5f7b32cfdbf941ad1f48c4090ead068e2b72042b7ada6b3c415d26406d6224613b69e2ca3b5a09369bbe6b26f093ec720c4ccea76b9e69a290813bcba7049749e76162bba299d5b122dd3a72aa32ecfaa1f9312f7ff29a00d7b2cbd2c9db84ad2ce187b9c6f1f3df6a3c39d8a2a89eca7de84d2a443d534ccdcb0cce3b9575140f11ce8bba1e76bfd947ecdc4bd0297af8220746013e14c2d1a87549dbe41c07b354d7e8ec1253f73cbf799fe621bea9e9ba63ece1d07c3ad9b842083b7af45213b20913b31306490f33e6b459deb183e620ca18947d8ad945e2a3185ba1e12eb35264fb03505cc96724d699c5da9c69e0d2e97fe87166a0b6b9e779769fddf1ac06ada8d4b29784bad6448ad77b7abda28b738566cf456b6b2be17c93baae880ea5d0ef7f9836297a2300a3c48c8cc4387ad9794503140c8fca1b53fac8aacaaaa7ef028748379a954182bce1cc3fd422b27a5419b1e518268510f9c61e5cc6505d84ff39bd5d372e8f19eb0bce2d114949c595c0a7fc9bc6287edb81d5c01805cbbfb7f05fee815546427a1511191137659542e1c3cec67706ef94d53c3e58292cb9f77b2dd55194adc3e41bb4c190269ece15075e78079d94ffe2b5c5a9c30c7ff03ce7db926095369a81f485bdffa020a504699d3b00a29317e65768eba2117864d2b3158f4cf4187945587684dda92ca1e724f694be86d7f64758f2fcb6ee76dcd01b4e88b4f2c4dca104f0145e93693594045bbfc5a2b3dbf7471ae0df02cdfca863f0229d214c69d636956e3523b597f7a526b2098a068ff2e0b3832791e0306a146c40201a2ecad12763d6955acea3954d8bf3525469ae75be6b569f505581564d5a5e0560eb8e1fa6cdad87395588fed9a4f99e9455cf874e2f2f687a2b1300efcade985a324e6f6f6e47cd64d3722b5659027e029112e97ead5b00739a2138dcb775f1a4b1789ac6c137e0515a5c39e9152dac03607f8dbf9f62ed71ae589407fb3de243d66da18b538f27ab59a9347a3a275f2ca205d6176a99cd116eac6023df5c15478e6f62b780e3e3c518bf6611c8d861f56a625429757d373181158ef977edd17dff76dd68169ce6715262bda19889616c35cd181bf84227119c7ce9a80aa5cef9896834d5f99ec700cde69125eec96780c565c57718c4218787b19b4701f01a2d60a055cd7d1c64fa7a5f19dc7b0cf7d902a840700554839c07767848e410ae2899f386f13929f92ac4dbe72693c5ca31426721da5556bb2c0a4408970fcd74c194f89314daf367e354a5590303d66d63758549371939f17554d6fa738ef497bf854ef3b6be827eb2eeee3ae9c2cf9b76b4ab3fb92287883dd65a95f7474c5c3b1d4c8b5bedb1ab373643193c0396040bc2b2ee764b6c94f26b119a9468bc7da66e1c1be7307bd132a6b18e23f1a6d31b3723459ef6d90d0f7e103b93e6196d0eb84e7d", 0x1000}, {&(0x7f0000003140)="a4d600961d", 0x5}], 0x5, &(0x7f0000003380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138, 0x84}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005500)="21ba839d5ad0cd16b6211cf9e5ee8005b6b0da2cb691fd535ff3daf9646d226970ecdadb7f28e7f8879e4404e330b4b830f60ab3c85cda013e97a78da62ba6da1e9db6ea81b0bb583078260d6115ef06a29c9ddd30a25df4a3d5f32065ce99daf3f35951b9fe76253d4496991baef7851402ce341bb1290da9888d87cf48e6d46ea1639d1cfd246a052452f52dfa30cf475019cacdc328794377c6dadc080879ecf1628c863874b266078df3d55f93afb1c5c49f64725a378767c63b", 0xbc}], 0x1, &(0x7f0000007900)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60, 0x4000000}}], 0x5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, 0x0, 0x0, 0x4080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000100)=0x5, 0x3c) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) eventfd(0x80000001) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) close_range(r1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 8.08109902s ago: executing program 4 (id=684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x15, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) 7.219828077s ago: executing program 3 (id=686): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1d) sched_setaffinity(0x0, 0x0, &(0x7f0000000180)=0xffffffff) setrlimit(0xf, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f00000001c0), &(0x7f0000000380)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r4, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000440)={[{@index_off}, {@redirect_dir_off}, {@uuid_on}, {@metacopy_off}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_gt={'fowner>', r5}}, {@subj_user={'subj_user', 0x3d, '/dev/kvm\x00'}}, {@subj_role={'subj_role', 0x3d, '\\&N@.\xc5\'&)#\xf1'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '\xfb'}}, {@euid_gt={'euid>', r5}}, {@euid_eq={'euid', 0x3d, r5}}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000200)=[{0x48, 0xf9, 0x48, 0x5}, {0x28, 0x81, 0x5, 0xffbff038}, {0x6, 0x27, 0x2, 0x207}, {0x7fff, 0xdb, 0x5, 0x3}, {0xf, 0x4, 0x9, 0x3}]}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c0000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="e59de53b141aea2bb0f0e55cbecf3a7e7a40fbd57009cb77fa27dee6d634fb90e15576278011f9fce7757c8b5bfbb79199381689aa087f473e04e72e0b8dd7a8fe330adab95abe0d4931d92bce23aac66fc40a2866dd935d2a99b5957fcab9963ef6c97c0db7dc9c57f68fedd30a17af22"], 0x1c}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.070699647s ago: executing program 0 (id=688): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a"], 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) setresuid(0x0, 0xee00, 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_tcp_int(r9, 0x6, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x0, 0x1}, 0x10) 4.867840683s ago: executing program 1 (id=689): r0 = socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x6, &(0x7f0000000100)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x9e06f8a4add6d414, &(0x7f0000000140)={0x81, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() ptrace$getregset(0x4204, r3, 0x201, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000480)={@none, 0x3, 0xef, 0x3, 0x4, 0x40, "737f4f994242a59098cfaf1e64bc8bd71d85db54423054c1d2f24c214813bb706c11d81e2db0ce8dd4ad699d40686e10bbb5c2aa6f9fca89e86def465e67fbd5633ac48b000000efffffffffffffff000000000000000000000000000000000600"}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xf}, 0x1, 0x4, &(0x7f00000001c0), 0x0, 0x3, 0x6, 0x0, 0x7, 0x10001, &(0x7f0000000680)="6990eada20721f8139260c683992e7dd87ce0e9ad2102070659513f267e42bfad297c8621657bb8a5c20be150e8eab52350df068935b389a864a023916b3ea5d9852baf8b78756223a663b38d058a74158a3c05421f26699b7a4d611546e783a5cd1765ff66543340146777ec2e000faff2177a9d9284be9fb20832c4c7a86cabbcc987cfc1fd2ee413442502502063a1ad6c0af60d2c314da87e3330ee3a838977b676a950412cdb39db22426c933c83f5afe82c4b832d5b602e27eb0144d0585a3174e67e8e90fd464e2c5b4dc3c89835df77e11629610e6c2cb707130dcdb8683a7a1"}) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000a80)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r6, 0x0, 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000040)='./file1\x00', r6, &(0x7f0000000180)='./bus\x00', 0x0) sendto(r0, &(0x7f0000000140)="1fa984b5", 0x4, 0x810, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x2, @local, 0x5}, 0x80) 4.227669889s ago: executing program 3 (id=690): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3001a}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) getsockopt$inet_tcp_int(r5, 0x6, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="940200001900010000000000fcdbdf2500000000000023000000000040000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000049e9835b00000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000001"], 0x294}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000380)='\x9f\xbep', r8) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c7e838969078000003039600d2055e7487946d696f6181850ec1da52eac80083fcf84ab4ddac15085aa752a4ba005001b88843292011c32c82dc70c60f2f99784cd9433ac8abbd84c775eb7cc723c7c89752db0000"], 0x0) 3.531765702s ago: executing program 0 (id=691): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc) 3.255569709s ago: executing program 3 (id=692): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0xfffffff9) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x6cc0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xd2000000}, 0x4) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/188, 0xbc) 3.209735148s ago: executing program 4 (id=693): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = syz_io_uring_setup(0x37eb, &(0x7f0000000640)={0x0, 0x1f1d, 0x400, 0x3, 0x40000333}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x847b8, 0x0, 0xf, 0x0, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004f0033d487277b9b108b", @ANYRES32], 0x4394) sendmsg$inet(r2, &(0x7f0000001c80)={&(0x7f0000001900)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@ip_ttl={{0x10, 0x0, 0x2, 0x3}}], 0x10}, 0x4844) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) 2.819158844s ago: executing program 0 (id=694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) (async) shutdown(r1, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x2}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r3, 0x0, r4, 0x0, 0xcea5, 0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) (async) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x40, 0x1, 0x7fffc, 0x25dfdbff, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c881}, 0x4008094) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x40, 0x1, 0x7fffc, 0x25dfdbff, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c881}, 0x4008094) 2.666220178s ago: executing program 4 (id=695): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x24, 0x24, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0xffff}, {0x5}}}, 0x24}}, 0x40000) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x41) write$FUSE_DIRENTPLUS(r0, &(0x7f00000014c0)=ANY=[], 0x150) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000bc0)="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", 0xee9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r0, 0x37, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0]}, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') getdents64(r3, 0xfffffffffffffffe, 0x39) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500003e0000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d09cc3ef0002b6e14591b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04e45d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc60887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)=[0x3], &(0x7f0000000500)=[0x3, 0x2, 0x4], 0x6, 0x1, 0x0, r7}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0x7, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x4d, 0x0, &(0x7f0000000000)=0x2f) 2.414517248s ago: executing program 0 (id=696): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101e01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000001440)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbb3bbbbb86dd6c1dd6419f002c01000000000000000000000b3aac1e0001fe800000000000000000"], 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000006c0)={0x10001, 0x1, 0x9, 0x1, 0x11, "8d3f1642f1bc2c7e16f158d7c8cda5d2b465b5"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x2, 0x0, 0x0, 0x1}, 0x76e0}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x3) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) 2.266953395s ago: executing program 0 (id=697): r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xa3) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="03040400000000000000fe33"], 0xfffffffffffffe51) close(r1) r3 = socket(0x1e, 0x2, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'ipvlan1\x00', 0x2000}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x2}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x44001, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r7, 0x10000000) r8 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f0000000000)={0x8, [0x204, 0x2, 0x3, 0x0, 0xfff, 0x8000, 0x5, 0xc7, 0x3, 0x1, 0x4, 0xd20, 0x7, 0xfff8, 0x4, 0x8, 0x7867, 0x7e27, 0xac, 0x0, 0x4, 0x5109, 0x81, 0x5, 0x0, 0xfff, 0x6, 0x4, 0x400, 0x6, 0x5f4, 0x9, 0x7ff, 0x0, 0x0, 0x12, 0x7, 0x63, 0x7, 0xa5, 0x5, 0xd, 0xffd, 0x9, 0x3ff, 0x0, 0x4, 0xc8], 0x2}) cachestat(r7, &(0x7f0000000040), &(0x7f000009de80), 0x0) 2.263514227s ago: executing program 1 (id=698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x2e, 0x1, 0x88}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x62f}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00080000000025827875d7b09d6b76208b"], &(0x7f00000002c0)={0x0, 0xf, 0x73, {0x5, 0xf, 0x73, 0x3, [@generic={0x53, 0x10, 0x3, "5e5e9fbc54ae57a0511ee0db41d8ad26cf195625a4fcd2fc2ce7e101b1b3dd270186477ecc8a25d3a0afbcc0bb0de30850ea95ebee143fdca9b8a324cdafafcd51eefada8f414dad0ca672d8cba34699"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "60797f6c4ad06f036dd8751e03ee09da"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xf, 0x6, 0x4000}]}}, &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x1, 0x0, 0x7, "3623688e", "ee081cfc"}}, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x2, 0x33, 0x7, 0x4, 0x59, 0x8000}}}, &(0x7f0000000940)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="4031e80000000b9c1f63a636467e9119455a50898fd44aa6340d78c59f36fd5529810332331554360647915bbe702220233366f0eb25ba187ef66919f45630575248ed5a9e3febeeebb3532c1738030e80d4c0dd3f2532711b3a0eee11ff1fe38a20279e41d01e4fb8d179a152df2198e387438c3d45f858f460a12a74e44aace8e440ba35407d1aba005cc6f1274d5a5455374d1913444b5265e80dc96020cd1fddc691220993d5031c76e8e919d94e4a0cf4f5d8e5c900fd50912212d7a22a7211f07cdd18038b3ae12e7b3e430c33db0f404c859a711137427454660675792e16de83"], &(0x7f0000000500)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x10, 0x80, [0xf0f0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x400}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x1c}, &(0x7f0000000700)={0x40, 0xb, 0x2, "be55"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="8319a9a1ce14"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "ec7d"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0xe}}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5c8c}]}, 0x28}, 0x1, 0x0, 0x0, 0xc1}, 0x44100) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)={[{@nr_inodes={'nr_inodes', 0x3d, [0x2c, 0x34]}}], [], 0x39}) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.187150592s ago: executing program 4 (id=699): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000338}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x84) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 954.398068ms ago: executing program 0 (id=700): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x602040, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(r0, 0x40049409, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x1c1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) r7 = add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x20031935) 166.559348ms ago: executing program 1 (id=701): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x8006, 0x4, 0x4}}], 0x20, 0x8040}, 0x814) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r6, &(0x7f0000000d80), 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/247, 0xf7}], 0x1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getpid() ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) syz_socket_connect_nvme_tcp() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) 0s ago: executing program 4 (id=702): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) (fail_nth: 8) kernel console output (not intermixed with test programs): state = BACKUP, mcast_ifn = vcan0, syncid = 1, id = 0 [ 92.764882][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 92.771350][ T9] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 92.780919][ T9] usb 2-1: config 0 has no interface number 0 [ 92.787572][ T9] usb 2-1: config 0 interface 192 has no altsetting 0 [ 92.871250][ T9] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0041, bcdDevice=52.05 [ 92.899206][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.913860][ T9] usb 2-1: Product: syz [ 92.930639][ T9] usb 2-1: Manufacturer: syz [ 92.937233][ T9] usb 2-1: SerialNumber: syz [ 92.950556][ T9] usb 2-1: config 0 descriptor?? [ 93.136420][ T6410] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 93.277710][ T5878] usb 2-1: USB disconnect, device number 4 [ 94.620516][ T6434] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.597362][ T6436] Invalid source name [ 95.780506][ T6441] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.799133][ T6445] fuse: Unknown parameter 'group_i00000000000000000000' [ 96.424567][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 96.432608][ C1] lec:lec_tx_timeout: lec0 [ 96.437504][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 96.534637][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.690824][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 96.711687][ T6451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.132'. [ 96.755902][ T5886] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 96.781992][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.806585][ T5886] usb 3-1: Product: syz [ 96.816704][ T5886] usb 3-1: Manufacturer: syz [ 96.841888][ T5886] usb 3-1: SerialNumber: syz [ 96.853017][ T5886] r8152-cfgselector 3-1: Unknown version 0x0000 [ 96.884626][ T5886] r8152-cfgselector 3-1: config 0 descriptor?? [ 97.138138][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 97.548981][ T6445] tmpfs: Bad value for 'nr_inodes' [ 97.615469][ T5886] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 97.886407][ T6459] netlink: set zone limit has 4 unknown bytes [ 98.016518][ T6458] netlink: zone id is out of range [ 98.021645][ T6458] netlink: zone id is out of range [ 98.026862][ T6458] netlink: zone id is out of range [ 98.031948][ T6458] netlink: zone id is out of range [ 98.749700][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 98.749716][ T30] audit: type=1400 audit(1770150321.821:295): avc: denied { connect } for pid=6477 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 98.900721][ T6490] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 99.012487][ T30] audit: type=1400 audit(1770150322.111:296): avc: denied { read } for pid=6491 comm="syz.0.141" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.344634][ T30] audit: type=1400 audit(1770150322.111:297): avc: denied { open } for pid=6491 comm="syz.0.141" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.417025][ T30] audit: type=1400 audit(1770150322.491:298): avc: denied { setopt } for pid=6495 comm="syz.3.138" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.686824][ T6502] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.692523][ T6518] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.699210][ T6518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.754966][ T6518] vhci_hcd vhci_hcd.0: Device attached [ 101.054771][ T30] audit: type=1400 audit(1770150324.121:299): avc: denied { block_suspend } for pid=6515 comm="syz.0.144" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 101.158306][ T9] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 101.444584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 101.452635][ C1] lec:lec_tx_timeout: lec0 [ 101.457130][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 101.534616][ T5878] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 101.807030][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.867905][ T5878] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 101.928730][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.954966][ T30] audit: type=1400 audit(1770150325.041:300): avc: denied { mount } for pid=6541 comm="syz.3.150" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 101.986904][ T1206] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.055091][ T5878] usb 3-1: config 0 descriptor?? [ 102.070101][ T30] audit: type=1400 audit(1770150325.041:301): avc: denied { search } for pid=6541 comm="syz.3.150" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 102.077145][ T5878] dvb-usb: found a 'TeVii S662' in warm state. [ 102.162388][ T5878] dw2102: su3000_power_ctrl: 1, initialized 0 [ 102.314906][ T5878] dvb-usb: bulk message failed: -22 (2/0) [ 102.447636][ T6548] xt_socket: unknown flags 0x4c [ 103.367510][ T1206] usb 1-1: config 0 has no interfaces? [ 103.380002][ T5878] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 103.419271][ T5878] dvb-usb: TeVii S662 error while loading driver (-19) [ 104.347077][ T5794] udevd[5794]: setting mode of /dev/i2c-1 to 020600 failed: No such file or directory [ 104.365017][ T1206] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 104.374043][ T1206] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 104.593442][ T1206] usb 1-1: Manufacturer: syz [ 104.624685][ T5794] udevd[5794]: setting owner of /dev/i2c-1 to uid=0, gid=0 failed: No such file or directory [ 104.661568][ T1206] usb 1-1: config 0 descriptor?? [ 104.675602][ T1206] usb 1-1: can't set config #0, error -71 [ 104.759342][ T1206] usb 1-1: USB disconnect, device number 4 [ 104.919746][ T6519] vhci_hcd: connection reset by peer [ 104.962518][ T3524] vhci_hcd vhci_hcd.0: stop threads [ 104.963022][ T30] audit: type=1400 audit(1770150328.061:302): avc: denied { read } for pid=6554 comm="syz.1.152" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 104.996441][ T3524] vhci_hcd vhci_hcd.0: release socket [ 105.085501][ T3524] vhci_hcd vhci_hcd.0: disconnect device [ 105.138197][ T30] audit: type=1400 audit(1770150328.061:303): avc: denied { open } for pid=6554 comm="syz.1.152" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 105.779520][ T5878] usb 3-1: USB disconnect, device number 8 [ 105.784650][ T30] audit: type=1400 audit(1770150328.101:304): avc: denied { create } for pid=6554 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 105.999825][ T30] audit: type=1400 audit(1770150328.321:305): avc: denied { write } for pid=6554 comm="syz.1.152" name="mouse0" dev="devtmpfs" ino=1010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 106.464569][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 106.472637][ C1] lec:lec_tx_timeout: lec0 [ 106.478193][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 106.544840][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 106.574629][ T30] audit: type=1400 audit(1770150329.051:306): avc: denied { create } for pid=6560 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.615673][ T6568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 109.585562][ T30] audit: type=1400 audit(1770150332.691:307): avc: denied { setopt } for pid=6598 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.597091][ T6601] syzkaller1: entered promiscuous mode [ 109.719870][ T30] audit: type=1400 audit(1770150332.821:308): avc: denied { ioctl } for pid=6599 comm="syz.2.163" path="socket:[11574]" dev="sockfs" ino=11574 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.915317][ T6601] syzkaller1: entered allmulticast mode [ 110.028945][ T6613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.783592][ T6618] netlink: 'syz.4.166': attribute type 3 has an invalid length. [ 110.996393][ T6622] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 111.494549][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 111.502840][ C1] lec:lec_tx_timeout: lec0 [ 111.514600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 112.158528][ T6626] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 112.823886][ T6637] netlink: zone id is out of range [ 112.829163][ T6637] netlink: zone id is out of range [ 112.834305][ T6637] netlink: zone id is out of range [ 112.839587][ T6637] netlink: zone id is out of range [ 113.045377][ T6638] vivid-000: disconnect [ 113.409353][ T30] audit: type=1400 audit(1770150336.511:309): avc: denied { mounton } for pid=6639 comm="syz.3.173" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 113.774998][ T30] audit: type=1400 audit(1770150336.611:310): avc: denied { ioctl } for pid=6639 comm="syz.3.173" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 114.254757][ T30] audit: type=1400 audit(1770150337.321:311): avc: denied { listen } for pid=6646 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.754799][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.963448][ T6633] vivid-000: reconnect [ 114.994617][ T5878] usb 3-1: device descriptor read/64, error -71 [ 115.314800][ T5878] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 115.686400][ T30] audit: type=1400 audit(1770150338.791:312): avc: denied { read } for pid=6666 comm="syz.3.179" laddr=::ffff:127.0.0.1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.715875][ T5878] usb 3-1: device descriptor read/64, error -71 [ 115.784401][ T6662] lec:lec_atm_close: lec0: Shut down! [ 115.845289][ T5878] usb usb3-port1: attempt power cycle [ 116.126641][ T6684] netlink: 'syz.4.184': attribute type 10 has an invalid length. [ 116.197708][ T6684] team0: Port device dummy0 added [ 116.214635][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.347160][ T5878] usb 3-1: device descriptor read/8, error -71 [ 116.426510][ T30] audit: type=1400 audit(1770150339.531:313): avc: denied { read } for pid=6689 comm="syz.0.185" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.604690][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.706336][ T30] audit: type=1400 audit(1770150339.531:314): avc: denied { open } for pid=6689 comm="syz.0.185" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 116.876405][ T5878] usb 3-1: device descriptor read/8, error -71 [ 117.004221][ T30] audit: type=1400 audit(1770150340.101:315): avc: denied { write } for pid=6691 comm="syz.1.186" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 117.024620][ T1206] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.034658][ T5878] usb usb3-port1: unable to enumerate USB device [ 117.050414][ T6693] usb usb8: usbfs: process 6693 (syz.1.186) did not claim interface 0 before use [ 117.200510][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 117.239637][ T1206] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 117.259012][ T1206] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 117.502171][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 117.527571][ T1206] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 117.553668][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 117.579086][ T6707] ceph: No mds server is up or the cluster is laggy [ 117.584021][ T6715] : entered promiscuous mode [ 117.635126][ T1206] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 117.810095][ T1206] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 117.867908][ T1206] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 117.896442][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 117.932794][ T1206] usb 5-1: Product: syz [ 117.945013][ T1206] usb 5-1: Manufacturer: syz [ 117.953717][ T1206] cdc_wdm 5-1:1.0: skipping garbage [ 117.987583][ T1206] cdc_wdm 5-1:1.0: skipping garbage [ 117.997268][ T1206] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 118.024717][ T1206] cdc_wdm 5-1:1.0: Unknown control protocol [ 118.329849][ T30] audit: type=1400 audit(1770150341.421:316): avc: denied { bind } for pid=6719 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.706461][ T6734] vivid-000: disconnect [ 118.837810][ T30] audit: type=1400 audit(1770150341.421:317): avc: denied { name_bind } for pid=6719 comm="syz.0.190" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 119.066561][ T30] audit: type=1400 audit(1770150341.421:318): avc: denied { node_bind } for pid=6719 comm="syz.0.190" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 119.237711][ T30] audit: type=1400 audit(1770150341.541:319): avc: denied { write } for pid=6719 comm="syz.0.190" path="socket:[11775]" dev="sockfs" ino=11775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.265338][ T30] audit: type=1400 audit(1770150341.541:320): avc: denied { read } for pid=6719 comm="syz.0.190" path="socket:[11775]" dev="sockfs" ino=11775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.829472][ T6727] vivid-000: reconnect [ 119.865505][ T30] audit: type=1400 audit(1770150341.781:321): avc: denied { read write } for pid=6698 comm="syz.4.187" name="cdc-wdm0" dev="devtmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 119.934600][ T30] audit: type=1400 audit(1770150341.781:322): avc: denied { open } for pid=6698 comm="syz.4.187" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 120.000252][ T6748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6748 comm=syz.1.193 [ 120.002950][ T30] audit: type=1326 audit(1770150342.231:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6698 comm="syz.4.187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9466d9aeb9 code=0x0 [ 120.766541][ T1206] usb 5-1: USB disconnect, device number 9 [ 121.009553][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 121.384571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5610 ms [ 121.392631][ C1] lec:lec_tx_timeout: lec0 [ 121.397549][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 121.809257][ T30] audit: type=1400 audit(1770150344.891:324): avc: denied { connect } for pid=6772 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 121.941770][ T6783] capability: warning: `syz.2.201' uses 32-bit capabilities (legacy support in use) [ 121.968704][ T6757] lec:lec_atm_close: lec0: Shut down! [ 122.275728][ T30] audit: type=1400 audit(1770150345.371:325): avc: denied { getopt } for pid=6786 comm="syz.4.202" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.520264][ T30] audit: type=1400 audit(1770150345.431:326): avc: denied { mount } for pid=6786 comm="syz.4.202" name="/" dev="hugetlbfs" ino=12001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 122.780215][ T6792] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.813774][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.162688][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'. [ 124.497019][ T5815] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 124.506491][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 124.506522][ T30] audit: type=1400 audit(1770150347.561:328): avc: denied { create } for pid=6810 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.315863][ T30] audit: type=1400 audit(1770150348.401:329): avc: denied { read } for pid=6816 comm="syz.2.213" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.458956][ T30] audit: type=1400 audit(1770150348.401:330): avc: denied { open } for pid=6816 comm="syz.2.213" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.483184][ T30] audit: type=1400 audit(1770150348.411:331): avc: denied { ioctl } for pid=6816 comm="syz.2.213" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.570747][ T6817] netlink: zone id is out of range [ 125.575894][ T6817] netlink: zone id is out of range [ 125.580979][ T6817] netlink: zone id is out of range [ 125.586335][ T6817] netlink: zone id is out of range [ 125.667253][ T6824] vivid-000: disconnect [ 125.718061][ T30] audit: type=1400 audit(1770150348.791:332): avc: denied { map } for pid=6822 comm="syz.3.215" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.003128][ T30] audit: type=1400 audit(1770150348.851:333): avc: denied { ioctl } for pid=6822 comm="syz.3.215" path="socket:[12089]" dev="sockfs" ino=12089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.094802][ T6818] vivid-000: reconnect [ 126.177752][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.705814][ T30] audit: type=1400 audit(1770150349.801:334): avc: denied { getopt } for pid=6822 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.881149][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 126.928119][ T5878] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.997534][ T5878] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.056040][ T5878] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.158048][ T5878] usb 2-1: config 1 interface 0 has no altsetting 0 [ 127.310560][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.351124][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.384558][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 127.392571][ C1] lec:lec_tx_timeout: lec0 [ 127.404612][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 127.435070][ T5878] usb 2-1: Product: syz [ 127.464078][ T5878] usb 2-1: Manufacturer: syz [ 127.485901][ T5878] usb 2-1: SerialNumber: syz [ 127.974001][ T5878] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 128.073540][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 128.155909][ T6851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6851 comm=syz.0.223 [ 128.216456][ T30] audit: type=1400 audit(1770150351.321:335): avc: denied { read write } for pid=6825 comm="syz.1.216" name="lp0" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.240879][ T6851] netlink: 'syz.0.223': attribute type 21 has an invalid length. [ 128.265656][ T6826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.265753][ T6859] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 128.274301][ T6826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.289242][ T30] audit: type=1400 audit(1770150351.321:336): avc: denied { open } for pid=6825 comm="syz.1.216" path="/dev/usb/lp0" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 128.295378][ T5815] Bluetooth: hci3: command 0x2016 tx timeout [ 128.482020][ T6577] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.502634][ T6577] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.595445][ T30] audit: type=1400 audit(1770150351.681:337): avc: denied { ioctl } for pid=6850 comm="syz.0.223" path="socket:[12149]" dev="sockfs" ino=12149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.629150][ T6577] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.674473][ T6577] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.763335][ T793] usb 2-1: USB disconnect, device number 5 [ 128.792528][ T793] usblp0: removed [ 129.268298][ T5815] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 129.912265][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'. [ 130.261040][ T30] audit: type=1400 audit(1770150353.361:338): avc: denied { execute } for pid=6879 comm="syz.4.228" path="/42/blkio.bfq.io_merged" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 130.437972][ T30] audit: type=1400 audit(1770150353.541:339): avc: denied { mount } for pid=6881 comm="syz.4.229" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 130.504450][ T30] audit: type=1400 audit(1770150353.591:340): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 131.082999][ T6893] netlink: 52 bytes leftover after parsing attributes in process `syz.3.232'. [ 131.227317][ T30] audit: type=1400 audit(1770150354.051:341): avc: denied { mounton } for pid=6889 comm="syz.3.232" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.344408][ T6892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.936172][ T30] audit: type=1400 audit(1770150354.601:342): avc: denied { map } for pid=6897 comm="syz.1.235" path="socket:[13006]" dev="sockfs" ino=13006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.370390][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.379668][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.414566][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 132.422603][ C1] lec:lec_tx_timeout: lec0 [ 132.427248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 132.485362][ T30] audit: type=1400 audit(1770150355.591:343): avc: denied { read } for pid=6906 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 132.640286][ T30] audit: type=1400 audit(1770150355.671:344): avc: denied { write } for pid=6906 comm="syz.3.237" path="socket:[13074]" dev="sockfs" ino=13074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 133.067433][ T5815] Bluetooth: hci0: command 0x2016 tx timeout [ 133.162245][ T30] audit: type=1400 audit(1770150356.251:345): avc: denied { shutdown } for pid=6906 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 133.248500][ T6912] process 'syz.0.240' launched './file2' with NULL argv: empty string added [ 133.302737][ T30] audit: type=1400 audit(1770150356.361:346): avc: denied { execute_no_trans } for pid=6911 comm="syz.0.240" path="/52/file2" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.797900][ T51] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 134.833101][ T30] audit: type=1400 audit(1770150357.931:347): avc: denied { kexec_image_load } for pid=6917 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 134.864173][ T6931] fuse: Unknown parameter 'group_id00000000000000000000' [ 134.875705][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 135.259122][ T6939] netlink: 7 bytes leftover after parsing attributes in process `syz.0.248'. [ 136.048501][ T5917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.256569][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 136.867889][ T5917] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 136.921475][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.935466][ T6953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.251'. [ 136.961034][ T5917] usb 5-1: Product: syz [ 136.973135][ T5917] usb 5-1: Manufacturer: syz [ 136.975343][ T6953] No control pipe specified [ 137.063940][ T5917] usb 5-1: SerialNumber: syz [ 137.119009][ T5917] r8152-cfgselector 5-1: Unknown version 0x0000 [ 137.143771][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 137.153555][ T5917] r8152-cfgselector 5-1: config 0 descriptor?? [ 137.314983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 137.323035][ C1] lec:lec_tx_timeout: lec0 [ 137.327609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 137.359858][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 137.369327][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 137.479975][ T6975] overlayfs: failed to clone upperpath [ 137.602398][ T6931] tmpfs: Bad value for 'nr_inodes' [ 137.636309][ T5917] r8152-cfgselector 5-1: USB disconnect, device number 10 [ 137.747746][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 137.870448][ T793] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.019766][ T6989] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.037332][ T30] audit: type=1400 audit(1770151129.270:348): avc: denied { write } for pid=6982 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.070526][ T51] Bluetooth: hci1: command 0x2016 tx timeout [ 138.362575][ T793] usb 3-1: device descriptor read/64, error -71 [ 138.473661][ T30] audit: type=1400 audit(1770151129.753:349): avc: denied { create } for pid=6992 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 138.657042][ T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.841711][ T793] usb 3-1: device descriptor read/64, error -71 [ 138.905298][ T30] audit: type=1400 audit(1770151130.121:350): avc: denied { name_bind } for pid=7000 comm="syz.3.264" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 138.946184][ T793] usb usb3-port1: attempt power cycle [ 139.122510][ T7012] input: syz1 as /devices/virtual/input/input7 [ 139.648618][ T30] audit: type=1400 audit(1770151130.982:351): avc: denied { execmod } for pid=6992 comm="syz.4.262" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 139.735579][ T30] audit: type=1400 audit(1770151131.013:352): avc: denied { execute } for pid=6992 comm="syz.4.262" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 139.782389][ T793] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 139.827120][ T793] usb 3-1: device descriptor read/8, error -71 [ 140.125243][ T793] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 140.187006][ T793] usb 3-1: device descriptor read/8, error -71 [ 140.489694][ T793] usb usb3-port1: unable to enumerate USB device [ 140.616320][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.271'. [ 141.169828][ T7047] overlayfs: failed to resolve './file0/file1': -2 [ 141.201985][ T30] audit: type=1400 audit(1770151132.619:353): avc: denied { write } for pid=7045 comm="syz.3.276" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 141.829832][ T30] audit: type=1400 audit(1770151132.703:354): avc: denied { create } for pid=7045 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 142.096554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 142.104590][ C1] lec:lec_tx_timeout: lec0 [ 142.109101][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 142.257366][ T7055] xt_socket: unknown flags 0x4c [ 142.492807][ T7057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.343024][ T30] audit: type=1400 audit(1770151134.866:355): avc: denied { read } for pid=7065 comm="syz.3.281" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.458153][ T30] audit: type=1400 audit(1770151134.866:356): avc: denied { open } for pid=7065 comm="syz.3.281" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.512460][ T30] audit: type=1400 audit(1770151134.866:357): avc: denied { ioctl } for pid=7065 comm="syz.3.281" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.635702][ T30] audit: type=1400 audit(1770151134.866:358): avc: denied { ioctl } for pid=7062 comm="syz.4.280" path="socket:[13299]" dev="sockfs" ino=13299 ioctlcmd=0x4807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.742230][ T7076] random: crng reseeded on system resumption [ 143.783949][ T30] audit: type=1400 audit(1770151135.286:359): avc: denied { write } for pid=7070 comm="syz.3.283" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.100432][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 144.135175][ T30] audit: type=1400 audit(1770151135.286:360): avc: denied { open } for pid=7070 comm="syz.3.283" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.191222][ T30] audit: type=1400 audit(1770151135.318:361): avc: denied { ioctl } for pid=7070 comm="syz.3.283" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 144.243592][ T30] audit: type=1400 audit(1770151135.360:362): avc: denied { create } for pid=7070 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.306077][ T30] audit: type=1400 audit(1770151135.360:363): avc: denied { setopt } for pid=7070 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.397629][ T7081] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 144.405385][ T30] audit: type=1400 audit(1770151135.969:364): avc: denied { module_request } for pid=7082 comm="syz.0.287" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 144.853129][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 146.240709][ T7116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.297'. [ 146.290123][ T7116] netlink: 72 bytes leftover after parsing attributes in process `syz.2.297'. [ 146.482146][ T7123] xt_socket: unknown flags 0x4c [ 146.646489][ T7126] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.789142][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.796983][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.877487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 146.885534][ C1] lec:lec_tx_timeout: lec0 [ 146.890180][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 147.112830][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.126561][ T7125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.394281][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 147.499167][ T3524] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.527718][ T3524] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.558258][ T3524] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.581966][ T3524] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.632605][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 147.765565][ T7145] FAULT_INJECTION: forcing a failure. [ 147.765565][ T7145] name failslab, interval 1, probability 0, space 0, times 0 [ 147.787004][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.2.306 Not tainted syzkaller #0 PREEMPT(full) [ 147.787029][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.787039][ T7145] Call Trace: [ 147.787044][ T7145] [ 147.787051][ T7145] dump_stack_lvl+0x100/0x190 [ 147.787080][ T7145] should_fail_ex.cold+0x5/0xa [ 147.787099][ T7145] should_failslab+0xc2/0x120 [ 147.787121][ T7145] ? tomoyo_encode2+0xfb/0x3c0 [ 147.787142][ T7145] __kmalloc_noprof+0xf6/0x9c0 [ 147.787167][ T7145] ? tomoyo_encode2+0xfb/0x3c0 [ 147.787188][ T7145] tomoyo_encode2+0xfb/0x3c0 [ 147.787211][ T7145] tomoyo_encode+0x29/0x50 [ 147.787228][ T7145] tomoyo_realpath_from_path+0x18c/0x690 [ 147.787253][ T7145] tomoyo_path_number_perm+0x23c/0x580 [ 147.787280][ T7145] ? tomoyo_path_number_perm+0x22e/0x580 [ 147.787308][ T7145] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.787360][ T7145] ? find_held_lock+0x2b/0x80 [ 147.787383][ T7145] ? hook_file_ioctl_common+0x146/0x410 [ 147.787405][ T7145] ? __fget_files+0x215/0x3d0 [ 147.787430][ T7145] ? __fget_files+0x21f/0x3d0 [ 147.787454][ T7145] security_file_ioctl+0xd3/0x230 [ 147.787474][ T7145] __x64_sys_ioctl+0xb7/0x210 [ 147.787493][ T7145] do_syscall_64+0xc9/0xf80 [ 147.787515][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.787532][ T7145] RIP: 0033:0x7ff68339aeb9 [ 147.787547][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.787562][ T7145] RSP: 002b:00007ff684178028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.787579][ T7145] RAX: ffffffffffffffda RBX: 00007ff683615fa0 RCX: 00007ff68339aeb9 [ 147.787590][ T7145] RDX: 0000200000000600 RSI: 00000000402c5342 RDI: 0000000000000004 [ 147.787600][ T7145] RBP: 00007ff684178090 R08: 0000000000000000 R09: 0000000000000000 [ 147.787610][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.787620][ T7145] R13: 00007ff683616038 R14: 00007ff683615fa0 R15: 00007ffd9c6d7ea8 [ 147.787643][ T7145] [ 147.788048][ T7145] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.868278][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 147.873146][ T5856] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.106734][ T7139] netlink: 'syz.3.303': attribute type 41 has an invalid length. [ 148.397539][ T7162] binfmt_misc: register: failed to install interpreter file ./file0 [ 148.580772][ T5856] usb 5-1: device descriptor read/64, error -71 [ 148.706503][ T1206] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.723771][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.723786][ T30] audit: type=1400 audit(1770151140.515:369): avc: denied { getopt } for pid=7168 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 148.811164][ T5856] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.075782][ T1206] usb 2-1: Using ep0 maxpacket: 32 [ 149.075806][ T5856] usb 5-1: device descriptor read/64, error -71 [ 149.083321][ T1206] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.096023][ T1206] usb 2-1: config 0 has no interface number 0 [ 149.102691][ T1206] usb 2-1: config 0 interface 184 has no altsetting 0 [ 149.148160][ T1206] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.158518][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.168106][ T1206] usb 2-1: Product: syz [ 149.274892][ T5856] usb usb5-port1: attempt power cycle [ 149.382903][ T1206] usb 2-1: Manufacturer: syz [ 149.406279][ T1206] usb 2-1: SerialNumber: syz [ 149.425529][ T1206] usb 2-1: config 0 descriptor?? [ 149.440467][ T1206] smsc75xx v1.0.0 [ 149.588255][ T7176] openvswitch: netlink: Invalid VLAN frame [ 149.610437][ T7178] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 149.640024][ T5856] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.682910][ T5856] usb 5-1: device descriptor read/8, error -71 [ 149.954237][ T5856] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.992115][ T5856] usb 5-1: device descriptor read/8, error -71 [ 150.021781][ T1206] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.077931][ T1206] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.106677][ T5856] usb usb5-port1: unable to enumerate USB device [ 150.522482][ T7193] xt_socket: unknown flags 0x4c [ 150.565132][ T7162] netlink: 288 bytes leftover after parsing attributes in process `syz.1.310'. [ 150.912809][ T7200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 150.990375][ T7199] netlink: 10 bytes leftover after parsing attributes in process `syz.4.319'. [ 151.343894][ T30] audit: type=1400 audit(1770151143.266:370): avc: denied { create } for pid=7202 comm="syz.0.321" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.412937][ T30] audit: type=1400 audit(1770151143.308:371): avc: denied { write } for pid=7202 comm="syz.0.321" name="file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.495373][ T30] audit: type=1400 audit(1770151143.308:372): avc: denied { open } for pid=7202 comm="syz.0.321" path="/77/file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.529948][ T1206] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 151.562063][ T1206] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 151.580394][ T1206] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 151.658773][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 151.666810][ C1] lec:lec_tx_timeout: lec0 [ 151.671681][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 151.789148][ T30] audit: type=1400 audit(1770151143.717:373): avc: denied { getopt } for pid=7207 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.827167][ T1206] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 151.924050][ T1206] usb 2-1: USB disconnect, device number 6 [ 151.932322][ T30] audit: type=1400 audit(1770151143.833:374): avc: denied { append } for pid=7207 comm="syz.2.324" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 151.990594][ T7211] overlayfs: missing 'lowerdir' [ 152.082409][ T30] audit: type=1400 audit(1770151143.959:375): avc: denied { unlink } for pid=5802 comm="syz-executor" name="file0" dev="tmpfs" ino=429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.167789][ T30] audit: type=1400 audit(1770151145.166:376): avc: denied { getopt } for pid=7219 comm="syz.1.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.459365][ T793] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.640267][ T793] usb 5-1: Using ep0 maxpacket: 8 [ 154.658087][ T793] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.694395][ T793] usb 5-1: config 0 has no interfaces? [ 154.815718][ T793] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 155.259654][ T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.313435][ T793] usb 5-1: config 0 descriptor?? [ 155.458711][ T7246] overlayfs: failed to clone lowerpath [ 155.507533][ T7248] binder: 7243:7248 unknown command 0 [ 155.513078][ T7248] binder: 7243:7248 ioctl c0306201 200000000080 returned -22 [ 156.206428][ T7252] binder: 7243:7252 ioctl 40086200 200000000000 returned -22 [ 156.233488][ T7245] binder: 7243:7245 ioctl c0306201 200000000180 returned -22 [ 156.245247][ T7248] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 156.258553][ T7245] binder: 7243:7245 ioctl c0286687 200000000040 returned -22 [ 156.440255][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 156.448270][ C1] lec:lec_tx_timeout: lec0 [ 156.457609][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.451975][ T5917] usb 5-1: USB disconnect, device number 15 [ 157.932080][ T7293] overlayfs: failed to clone upperpath [ 158.602293][ T51] Bluetooth: hci0: command 0x2016 tx timeout [ 158.608964][ T7272] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.937608][ T7272] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 159.033134][ T7283] lec:lec_atm_close: lec0: Shut down! [ 159.354387][ T7272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.361985][ T7272] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 159.469609][ T7272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.475544][ T7272] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 159.530579][ T7272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.536951][ T7272] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 159.891329][ T7272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.899327][ T7272] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 160.040991][ T30] audit: type=1400 audit(1770151152.389:377): avc: denied { create } for pid=7313 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.074433][ T30] audit: type=1400 audit(1770151152.421:378): avc: denied { write } for pid=7313 comm="syz.1.350" path="socket:[14808]" dev="sockfs" ino=14808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 160.333857][ T30] audit: type=1400 audit(1770151152.704:379): avc: denied { create } for pid=7321 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.353985][ T30] audit: type=1400 audit(1770151152.736:380): avc: denied { connect } for pid=7321 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.392558][ T30] audit: type=1400 audit(1770151152.757:381): avc: denied { write } for pid=7321 comm="syz.2.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.413902][ T7324] syz_tun: entered allmulticast mode [ 160.437283][ T7324] syz_tun: left allmulticast mode [ 160.478472][ T793] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.497643][ T5856] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 160.580036][ T30] audit: type=1400 audit(1770151152.967:382): avc: denied { ioctl } for pid=7332 comm="syz.2.357" path="socket:[14829]" dev="sockfs" ino=14829 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.685323][ T793] usb 4-1: device descriptor read/64, error -71 [ 160.707166][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 160.713676][ T5856] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.724220][ T5856] usb 5-1: config 0 has no interfaces? [ 160.729884][ T5856] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.739797][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.794884][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 161.141345][ T5856] usb 5-1: config 0 descriptor?? [ 161.419517][ T793] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.471371][ T7346] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.486047][ T7346] : renamed from bond_slave_0 (while UP) [ 161.822241][ T793] usb 4-1: device descriptor read/64, error -71 [ 161.945394][ T793] usb usb4-port1: attempt power cycle [ 162.227347][ T30] audit: type=1400 audit(1770151154.689:383): avc: denied { setopt } for pid=7368 comm="syz.1.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 162.372240][ T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.488845][ T793] usb 4-1: device descriptor read/8, error -71 [ 162.638835][ T7373] overlayfs: failed to clone upperpath [ 162.697706][ T5886] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 162.717370][ T793] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.746512][ T793] usb 4-1: device descriptor read/8, error -71 [ 162.850093][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 162.850305][ T793] usb usb4-port1: unable to enumerate USB device [ 162.863867][ T5886] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 162.880891][ T5886] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.898408][ T5886] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.926856][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.937144][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.945685][ T5886] usb 2-1: Product: ã«æ’¢îŸ£â¹Šíš—迚븜ƃ볘븽ퟤ뀅앬곈霖ë…꩚è‚㖬랔茽㻈䂠䮿陀ঃè‰ì¸¥á´·ì©«ì錎䫟စ梉æ⽛蔤↦쭖쩀㌗2 [ 162.961040][ T5886] usb 2-1: Manufacturer: У [ 162.965986][ T5886] usb 2-1: SerialNumber: syz [ 163.133039][ T793] usb 5-1: USB disconnect, device number 16 [ 163.175851][ T5886] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 163.182665][ T5886] cdc_ncm 2-1:1.0: bind() failure [ 163.204325][ T30] audit: type=1400 audit(1770151155.728:384): avc: denied { write } for pid=7379 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.392990][ T793] usb 2-1: USB disconnect, device number 7 [ 163.808620][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 163.925557][ T7391] FAULT_INJECTION: forcing a failure. [ 163.925557][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 163.938410][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5150 ms [ 163.938463][ C1] lec:lec_tx_timeout: lec0 [ 163.946623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 164.164587][ T7391] CPU: 0 UID: 0 PID: 7391 Comm: syz.2.374 Not tainted syzkaller #0 PREEMPT(full) [ 164.164613][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.164623][ T7391] Call Trace: [ 164.164629][ T7391] [ 164.164636][ T7391] dump_stack_lvl+0x100/0x190 [ 164.164664][ T7391] should_fail_ex.cold+0x5/0xa [ 164.164684][ T7391] should_failslab+0xc2/0x120 [ 164.164708][ T7391] __kmalloc_cache_noprof+0x80/0x810 [ 164.164726][ T7391] ? netlbl_cipsov4_add+0x48b/0x2460 [ 164.164750][ T7391] ? __nla_validate+0x3e/0x50 [ 164.164769][ T7391] ? netlbl_cipsov4_add+0x48b/0x2460 [ 164.164789][ T7391] netlbl_cipsov4_add+0x48b/0x2460 [ 164.164812][ T7391] ? __nla_parse+0x40/0x60 [ 164.164828][ T7391] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 164.164851][ T7391] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 164.164868][ T7391] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 164.164890][ T7391] genl_family_rcv_msg_doit+0x214/0x300 [ 164.164911][ T7391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 164.164937][ T7391] ? bpf_lsm_capable+0x9/0x10 [ 164.164962][ T7391] ? security_capable+0x80/0x260 [ 164.164992][ T7391] genl_rcv_msg+0x560/0x800 [ 164.165012][ T7391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.165030][ T7391] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 164.165054][ T7391] ? __lock_acquire+0x4a5/0x2630 [ 164.165072][ T7391] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 164.165095][ T7391] netlink_rcv_skb+0x159/0x420 [ 164.165121][ T7391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 164.165139][ T7391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 164.165175][ T7391] ? netlink_deliver_tap+0x1ae/0xcc0 [ 164.165197][ T7391] ? __rcu_read_unlock+0x24d/0x550 [ 164.165219][ T7391] genl_rcv+0x28/0x40 [ 164.165244][ T7391] netlink_unicast+0x5aa/0x870 [ 164.165273][ T7391] ? __pfx_netlink_unicast+0x10/0x10 [ 164.165313][ T7391] netlink_sendmsg+0x8b0/0xda0 [ 164.165342][ T7391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.165377][ T7391] ____sys_sendmsg+0xa54/0xc30 [ 164.165397][ T7391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.165418][ T7391] ? __schedule+0xff6/0x5e10 [ 164.165440][ T7391] ___sys_sendmsg+0x190/0x1e0 [ 164.165460][ T7391] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.165490][ T7391] ? find_held_lock+0x2b/0x80 [ 164.165530][ T7391] __sys_sendmsg+0x170/0x220 [ 164.165553][ T7391] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.165592][ T7391] do_syscall_64+0xc9/0xf80 [ 164.165613][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.165630][ T7391] RIP: 0033:0x7ff68339aeb9 [ 164.165645][ T7391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.165662][ T7391] RSP: 002b:00007ff684178028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.165678][ T7391] RAX: ffffffffffffffda RBX: 00007ff683615fa0 RCX: 00007ff68339aeb9 [ 164.165690][ T7391] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 164.165700][ T7391] RBP: 00007ff684178090 R08: 0000000000000000 R09: 0000000000000000 [ 164.165710][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.165720][ T7391] R13: 00007ff683616038 R14: 00007ff683615fa0 R15: 00007ffd9c6d7ea8 [ 164.165744][ T7391] [ 164.315765][ T30] audit: type=1400 audit(1770151156.883:385): avc: denied { bind } for pid=7399 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.629554][ T30] audit: type=1400 audit(1770151156.883:386): avc: denied { listen } for pid=7399 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.917257][ T30] audit: type=1400 audit(1770151156.883:387): avc: denied { connect } for pid=7399 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 164.940251][ T30] audit: type=1400 audit(1770151156.883:388): avc: denied { accept } for pid=7399 comm="syz.2.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.029331][ T7408] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 165.052955][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.063896][ T30] audit: type=1400 audit(1770151157.650:389): avc: denied { getopt } for pid=7406 comm="syz.3.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.155161][ T5870] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.182896][ T7416] netlink: 'syz.0.382': attribute type 4 has an invalid length. [ 166.192673][ T7416] netlink: 17 bytes leftover after parsing attributes in process `syz.0.382'. [ 166.307635][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 166.329609][ T5870] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.358409][ T5870] usb 5-1: config 0 has no interfaces? [ 166.363893][ T5870] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.386971][ T7409] delete_channel: no stack [ 166.403163][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.424559][ T5870] usb 5-1: config 0 descriptor?? [ 166.686037][ T7422] fuse: Bad value for 'user_id' [ 166.690996][ T7422] fuse: Bad value for 'user_id' [ 166.983825][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 167.136201][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 167.152471][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.174639][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.193666][ T5870] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 167.212916][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.233836][ T5870] usb 4-1: config 0 descriptor?? [ 167.643367][ T5870] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x2 [ 167.669543][ T5870] holtek_mouse 0003:04D9:A081.0003: unknown main item tag 0x5 [ 167.694144][ T5870] holtek_mouse 0003:04D9:A081.0003: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.3-1/input0 [ 167.823027][ T5886] usb 4-1: USB disconnect, device number 8 [ 167.849710][ T7438] netlink: 'syz.0.388': attribute type 12 has an invalid length. [ 167.890149][ T7438] netlink: 'syz.0.388': attribute type 29 has an invalid length. [ 167.916579][ T7438] netlink: 148 bytes leftover after parsing attributes in process `syz.0.388'. [ 167.960650][ T1206] usb 5-1: USB disconnect, device number 17 [ 168.172512][ T7446] pim6reg1: entered promiscuous mode [ 168.178812][ T7446] pim6reg1: entered allmulticast mode [ 168.240298][ T30] audit: type=1400 audit(1770151160.999:390): avc: denied { name_connect } for pid=7445 comm="syz.1.392" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 168.265637][ T7447] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 168.274014][ T7448] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 168.282592][ T7447] netlink: 55 bytes leftover after parsing attributes in process `syz.1.392'. [ 168.291679][ T7448] netlink: 55 bytes leftover after parsing attributes in process `syz.1.392'. [ 168.459903][ T30] audit: type=1400 audit(1770151161.230:391): avc: denied { write } for pid=7439 comm="syz.4.389" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 168.689217][ T30] audit: type=1400 audit(1770151161.450:392): avc: denied { read } for pid=7456 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.717105][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 168.725161][ C1] lec:lec_tx_timeout: lec0 [ 168.729955][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 168.733686][ T30] audit: type=1400 audit(1770151161.461:393): avc: denied { getopt } for pid=7456 comm="syz.0.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.378107][ T30] audit: type=1400 audit(1770151161.786:394): avc: denied { setopt } for pid=7460 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 169.580788][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.851010][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 169.857369][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.884107][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.894177][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.905691][ T9] usb 2-1: config 0 descriptor?? [ 169.916320][ T9] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 170.352835][ T30] audit: type=1400 audit(1770151163.225:395): avc: denied { ioctl } for pid=7489 comm="syz.0.406" path="socket:[15687]" dev="sockfs" ino=15687 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.424519][ T7495] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 171.523080][ T7501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=7501 comm=syz.3.409 [ 171.623194][ T7505] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.630079][ T9] usb 2-1: USB disconnect, device number 8 [ 172.779489][ T7518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 173.498844][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 173.506859][ C1] lec:lec_tx_timeout: lec0 [ 173.517771][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 174.124566][ T7487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.838504][ T7536] capability: warning: `syz.4.415' uses deprecated v2 capabilities in a way that may be insecure [ 175.777305][ T7551] Illegal XDP return value 2961958520 on prog (id 30) dev syz_tun, expect packet loss! [ 175.818227][ T7569] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 177.146534][ T5886] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.317930][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 177.326793][ T5886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 177.348376][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.407538][ T5886] pvrusb2: Hardware description: Terratec Grabster AV400 [ 177.426111][ T5886] pvrusb2: ********** [ 177.440494][ T5886] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 177.473342][ T5886] pvrusb2: Important functionality might not be entirely working. [ 177.541125][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'. [ 177.861315][ T5886] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 177.901291][ T5886] pvrusb2: ********** [ 177.917418][ T2332] pvrusb2: Invalid write control endpoint [ 177.942178][ T5886] usb 4-1: USB disconnect, device number 9 [ 178.099302][ T2332] pvrusb2: Invalid write control endpoint [ 178.121024][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 178.173314][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 178.175801][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 178.220404][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 178.254630][ T2332] pvrusb2: Device being rendered inoperable [ 178.263491][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.274824][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 178.287321][ T2332] pvrusb2: Attached sub-driver cx25840 [ 178.292929][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 178.292972][ C1] lec:lec_tx_timeout: lec0 [ 178.301025][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.312398][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.322585][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 178.486100][ T7553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.032632][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.440'. [ 179.048293][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 179.411611][ T30] audit: type=1400 audit(1770151172.327:396): avc: denied { bind } for pid=7617 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.652517][ T7621] xt_CT: No such helper "snmp_trap" [ 180.023241][ T5878] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 180.179588][ T5878] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 180.208836][ T7635] lec:lec_atm_close: lec0: Shut down! [ 180.212646][ T5878] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 180.240466][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.279152][ T5878] usb 4-1: Product: syz [ 180.284326][ T5878] usb 4-1: Manufacturer: syz [ 180.299160][ T5878] usb 4-1: SerialNumber: syz [ 180.534026][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.544979][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.564650][ T30] audit: type=1400 audit(1770151173.944:397): avc: denied { bind } for pid=7633 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.593364][ T30] audit: type=1400 audit(1770151173.944:398): avc: denied { getopt } for pid=7633 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.629668][ T5878] usb 4-1: selecting invalid altsetting 1 [ 180.638519][ T5878] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 180.638608][ T5878] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 180.731704][ T5878] usb 4-1: USB disconnect, device number 10 [ 182.254453][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.452'. [ 182.589841][ T7692] netlink: 10 bytes leftover after parsing attributes in process `syz.3.454'. [ 182.854581][ T30] audit: type=1400 audit(1770151176.349:399): avc: denied { open } for pid=7707 comm="syz.4.458" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 182.878320][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 183.061252][ T5886] usb 2-1: Using ep0 maxpacket: 32 [ 183.478769][ T5886] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 183.487052][ T5886] usb 2-1: config 0 has no interface number 0 [ 183.493195][ T5886] usb 2-1: config 0 interface 230 has no altsetting 0 [ 183.503974][ T5886] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 183.513600][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.526666][ T5886] usb 2-1: Product: syz [ 183.546836][ T5886] usb 2-1: Manufacturer: syz [ 183.551471][ T5886] usb 2-1: SerialNumber: syz [ 183.586691][ T5886] usb 2-1: config 0 descriptor?? [ 183.633760][ T5886] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 183.731028][ T5886] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 184.004766][ T30] audit: type=1400 audit(1770151177.567:400): avc: denied { create } for pid=7731 comm="syz.4.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.365149][ T30] audit: type=1400 audit(1770151177.808:401): avc: denied { setopt } for pid=7697 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.598013][ T30] audit: type=1400 audit(1770151178.175:402): avc: denied { relabelfrom } for pid=7740 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.640519][ T30] audit: type=1400 audit(1770151178.196:403): avc: denied { relabelto } for pid=7740 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.674192][ T7743] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 184.690784][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.721189][ T7743] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 184.975895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 184.983887][ C1] lec:lec_tx_timeout: lec0 [ 184.994882][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 186.244642][ T5886] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 186.293970][ T5886] usb 2-1: USB disconnect, device number 9 [ 187.014933][ T30] audit: type=1400 audit(1770151180.664:404): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 187.427613][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.436902][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.438571][ T30] audit: type=1400 audit(1770151181.157:405): avc: denied { ioctl } for pid=7789 comm="syz-executor" path="socket:[17455]" dev="sockfs" ino=17455 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.444827][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.479623][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.487773][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.487805][ T36] bridge_slave_1: left allmulticast mode [ 187.499356][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.509838][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.517100][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.528147][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.592550][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.616658][ T36] bridge_slave_1: left promiscuous mode [ 187.623966][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.683829][ T36] bridge_slave_0: left allmulticast mode [ 187.689495][ T36] bridge_slave_0: left promiscuous mode [ 187.710763][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.985889][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.998375][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.008521][ T36] bond0 (unregistering): Released all slaves [ 189.021087][ T7789] Failed to initialize the IGMP autojoin socket (err -2) [ 189.052808][ T36] : left promiscuous mode [ 189.131537][ T7770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.445444][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 189.538094][ T5815] Bluetooth: hci2: command tx timeout [ 189.751351][ T7835] netlink: 'syz.4.484': attribute type 49 has an invalid length. [ 189.766649][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 189.774670][ C1] lec:lec_tx_timeout: lec0 [ 189.779571][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.826420][ T7831] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 190.158679][ T36] hsr_slave_0: left promiscuous mode [ 190.648323][ T36] hsr_slave_1: left promiscuous mode [ 190.669513][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.719593][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.993094][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.108982][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.537933][ T5815] Bluetooth: hci2: command tx timeout [ 192.213429][ T36] team0 (unregistering): Port device team_slave_1 removed [ 192.256681][ T36] team0 (unregistering): Port device team_slave_0 removed [ 193.003066][ T7911] openvswitch: netlink: IP tunnel dst address not specified [ 193.500282][ T5815] Bluetooth: hci2: command tx timeout [ 193.517675][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.545897][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.556348][ T7789] bridge_slave_0: entered allmulticast mode [ 194.557600][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 194.565602][ C1] lec:lec_tx_timeout: lec0 [ 194.576516][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.754159][ T7789] bridge_slave_0: entered promiscuous mode [ 194.761965][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.769077][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.776293][ T7789] bridge_slave_1: entered allmulticast mode [ 195.487485][ T5815] Bluetooth: hci2: command tx timeout [ 195.498356][ T7789] bridge_slave_1: entered promiscuous mode [ 195.667895][ T7930] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 195.758418][ T7931] netlink: 'syz.1.496': attribute type 19 has an invalid length. [ 195.896542][ T7937] overlayfs: missing 'lowerdir' [ 196.843485][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.973029][ T7931] netlink: 'syz.1.496': attribute type 19 has an invalid length. [ 196.995759][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.306979][ T7789] team0: Port device team_slave_0 added [ 197.337195][ T30] audit: type=1400 audit(1770151191.551:406): avc: denied { connect } for pid=7946 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 197.378384][ T7789] team0: Port device team_slave_1 added [ 197.537830][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.561178][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.181148][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.149761][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.282602][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.332681][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.348417][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.356426][ C1] lec:lec_tx_timeout: lec0 [ 199.367368][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 199.450470][ T7971] overlayfs: missing 'lowerdir' [ 201.451685][ T7994] vivid-000: disconnect [ 201.763601][ T7789] hsr_slave_0: entered promiscuous mode [ 201.798314][ T7789] hsr_slave_1: entered promiscuous mode [ 201.951299][ T7789] debugfs: 'hsr0' already exists in 'hsr' [ 201.967407][ T7789] Cannot create hsr debugfs directory [ 202.396773][ T7993] vivid-000: reconnect [ 202.403558][ T30] audit: type=1400 audit(1770151196.476:407): avc: denied { create } for pid=7999 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 202.776884][ T30] audit: type=1400 audit(1770151197.253:408): avc: denied { watch watch_reads } for pid=8012 comm="syz.4.518" path="pipe:[4778]" dev="pipefs" ino=4778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 203.205630][ T8021] netlink: 10 bytes leftover after parsing attributes in process `syz.1.519'. [ 203.442295][ T7789] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 203.491673][ T7789] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 203.664487][ T7789] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 204.166187][ T7789] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 204.174557][ T8029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 204.519076][ T8043] overlay: Unknown parameter '/' [ 205.015313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 205.023361][ C1] lec:lec_tx_timeout: lec0 [ 205.027973][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 205.850415][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 205.885258][ T30] audit: type=1400 audit(1770151200.528:409): avc: denied { write } for pid=8048 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.982858][ T7789] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.072281][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.079447][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.139576][ T30] audit: type=1400 audit(1770151200.791:410): avc: denied { write } for pid=8054 comm="syz.1.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.152971][ T8057] binder: BINDER_SET_CONTEXT_MGR already set [ 206.169784][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.176887][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.206957][ T8057] binder: 8056:8057 ioctl 4018620d 200000004a80 returned -16 [ 207.382591][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 208.162001][ T8075] overlay: Unknown parameter '/' [ 209.202781][ T7789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.677345][ T8092] vivid-000: disconnect [ 209.806066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.814130][ C1] lec:lec_tx_timeout: lec0 [ 209.818916][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 210.046371][ T8087] vivid-000: reconnect [ 210.633730][ T7789] veth0_vlan: entered promiscuous mode [ 210.681752][ T7789] veth1_vlan: entered promiscuous mode [ 210.931034][ T7789] veth0_macvtap: entered promiscuous mode [ 211.005384][ T7789] veth1_macvtap: entered promiscuous mode [ 212.204443][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.271756][ T7789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.309018][ T7789] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 212.371073][ T7789] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 212.420725][ T7789] wireguard: wg0: Could not create IPv4 socket [ 212.448377][ T7789] wireguard: wg1: Could not create IPv4 socket [ 212.469046][ T7789] wireguard: wg2: Could not create IPv4 socket [ 213.492345][ T8128] overlay: Unknown parameter '/' [ 214.587289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.595338][ C1] lec:lec_tx_timeout: lec0 [ 214.606123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 214.842983][ T8139] netlink: 56 bytes leftover after parsing attributes in process `syz.1.547'. [ 215.057715][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.072118][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.082757][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.090593][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.098124][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.101720][ T5917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.137088][ T8146] Failed to initialize the IGMP autojoin socket (err -2) [ 215.645784][ T8161] bond1: (slave bond_slave_1): Device is not our slave [ 215.652705][ T8161] bond1: option active_slave: invalid value (bond_slave_1) [ 215.839374][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 215.848097][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 215.866739][ T5917] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.892464][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.902756][ T8161] bond1 (unregistering): Released all slaves [ 216.033281][ T5917] usb 4-1: config 0 descriptor?? [ 216.318921][ T5917] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 216.377776][ T30] audit: type=1400 audit(1770151211.542:411): avc: denied { connect } for pid=8168 comm="syz.4.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 216.473349][ T30] audit: type=1400 audit(1770151211.542:412): avc: denied { setopt } for pid=8172 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 217.045649][ T5815] Bluetooth: hci2: command tx timeout [ 217.892680][ T5886] usb 4-1: USB disconnect, device number 11 [ 218.119683][ T8146] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 218.139497][ T8146] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 218.180872][ T8146] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 218.226745][ T8146] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 218.340392][ T5886] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 218.492512][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 218.506464][ T5886] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 218.553169][ T5886] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 218.589216][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 218.597405][ T5886] usb 4-1: Product: syz [ 218.608352][ T8216] 9p: Bad value for 'rfdno' [ 218.640643][ T8216] netlink: 64 bytes leftover after parsing attributes in process `syz.0.560'. [ 218.645276][ T5886] usb 4-1: Manufacturer: syz [ 218.669518][ T5886] usb 4-1: SerialNumber: syz [ 218.687468][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 218.693327][ T5886] usb 4-1: config 0 descriptor?? [ 218.722125][ T8202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.741651][ T5886] hub 4-1:0.0: bad descriptor, ignoring hub [ 218.756498][ T5886] hub 4-1:0.0: probe with driver hub failed with error -5 [ 219.083331][ T5815] Bluetooth: hci2: command tx timeout [ 219.382698][ T8226] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 219.440642][ T8226] usb 4-1: device reset changed ep0 maxpacket size! [ 219.575830][ T5886] usb 4-1: USB disconnect, device number 12 [ 219.730742][ T5886] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 219.892732][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 219.901886][ T8146] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 219.976097][ T8146] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 220.049368][ T8146] wireguard: wg0: Could not create IPv4 socket [ 220.062195][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 220.080418][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 220.093099][ T8146] wireguard: wg1: Could not create IPv4 socket [ 220.103766][ T5886] usb 4-1: can't read configurations, error -71 [ 220.119203][ T8146] wireguard: wg2: Could not create IPv4 socket [ 220.244889][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 220.252938][ C1] lec:lec_tx_timeout: lec0 [ 220.257569][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.708119][ T8262] syz.4.564 uses obsolete (PF_INET,SOCK_PACKET) [ 221.629800][ T8282] netlink: 'syz.3.569': attribute type 23 has an invalid length. [ 222.573092][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.573'. [ 222.607193][ T8302] netlink: 72 bytes leftover after parsing attributes in process `syz.4.573'. [ 224.044318][ T8330] Failed to initialize the IGMP autojoin socket (err -2) [ 224.092955][ T30] audit: type=1400 audit(1770151219.647:413): avc: denied { read } for pid=8327 comm="syz.3.576" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 224.363002][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.372472][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.380772][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.418116][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.434591][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.479274][ T8338] Failed to initialize the IGMP autojoin socket (err -2) [ 224.748923][ T30] audit: type=1400 audit(1770151220.330:414): avc: denied { search } for pid=8355 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.789894][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.580'. [ 224.844990][ T30] audit: type=1400 audit(1770151220.361:415): avc: denied { search } for pid=8355 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.943399][ T30] audit: type=1400 audit(1770151220.361:416): avc: denied { search } for pid=8355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.026264][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 225.034262][ C1] lec:lec_tx_timeout: lec0 [ 225.038898][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.047084][ T30] audit: type=1400 audit(1770151220.361:417): avc: denied { search } for pid=8355 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.117734][ T30] audit: type=1400 audit(1770151220.382:418): avc: denied { create } for pid=8349 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.162653][ T30] audit: type=1400 audit(1770151220.382:419): avc: denied { create } for pid=8349 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 225.213558][ T30] audit: type=1400 audit(1770151220.382:420): avc: denied { create } for pid=8349 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.280699][ T30] audit: type=1400 audit(1770151220.382:421): avc: denied { write } for pid=8349 comm="syz.3.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.365238][ T30] audit: type=1400 audit(1770151220.466:422): avc: denied { read } for pid=8356 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 225.414009][ T8373] fuse: Bad value for 'rootmode' [ 225.759793][ T5886] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.912763][ T5886] usb 2-1: Using ep0 maxpacket: 16 [ 225.929168][ T5886] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 225.938868][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.941023][ T5878] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 225.954954][ T5886] usb 2-1: Product: syz [ 225.963568][ T5886] usb 2-1: Manufacturer: syz [ 226.001101][ T5886] usb 2-1: SerialNumber: syz [ 226.023516][ T5886] r8152-cfgselector 2-1: Unknown version 0x0000 [ 226.041407][ T5886] r8152-cfgselector 2-1: config 0 descriptor?? [ 226.155708][ T5878] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 226.173968][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.198167][ T8338] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 226.206416][ T5878] usb 5-1: Product: syz [ 226.218484][ T5878] usb 5-1: Manufacturer: syz [ 226.230665][ T8338] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 226.237862][ T5878] usb 5-1: SerialNumber: syz [ 226.251075][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 226.269202][ T5878] usb 5-1: config 0 descriptor?? [ 226.280786][ T8338] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 226.299363][ T5878] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 018 [ 226.321347][ T8338] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 226.417714][ T5815] Bluetooth: hci2: command tx timeout [ 226.480975][ T8373] tmpfs: Bad value for 'nr_inodes' [ 226.495973][ T5856] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 226.546238][ T8389] input: syz0 as /devices/virtual/input/input8 [ 226.560391][ T8389] input: failed to attach handler leds to device input8, error: -6 [ 226.688511][ T5878] (null): failure setting delay to 10us [ 226.710687][ T5878] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 226.750408][ T5878] usb 5-1: USB disconnect, device number 18 [ 227.176170][ T8427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 227.666412][ T5912] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 227.781116][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.889346][ T8444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.933988][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.957497][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.981590][ T8338] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 227.999243][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.016961][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.026500][ T8338] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 228.042706][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.058257][ T8338] wireguard: wg0: Could not create IPv4 socket [ 228.065735][ T5912] usb 2-1: config 0 descriptor?? [ 228.077854][ T8338] wireguard: wg1: Could not create IPv4 socket [ 228.094977][ T8338] wireguard: wg2: Could not create IPv4 socket [ 228.504911][ T5912] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x6 [ 228.555203][ T5912] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 228.901567][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 228.901645][ T30] audit: type=1400 audit(1770151224.697:497): avc: denied { firmware_load } for pid=8432 comm="syz.1.592" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 229.052330][ T8478] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 229.091227][ T30] audit: type=1400 audit(1770151224.855:498): avc: denied { read } for pid=8475 comm="syz.3.601" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.138592][ T8478] bond1: entered promiscuous mode [ 229.162094][ T8478] bond1: entered allmulticast mode [ 229.171718][ T8478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.179655][ T30] audit: type=1400 audit(1770151224.855:499): avc: denied { open } for pid=8475 comm="syz.3.601" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.210800][ T8484] erspan1: entered allmulticast mode [ 229.319873][ T30] audit: type=1400 audit(1770151224.855:500): avc: denied { create } for pid=8475 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.386920][ T30] audit: type=1400 audit(1770151224.855:501): avc: denied { ioctl } for pid=8475 comm="syz.3.601" path="socket:[21118]" dev="sockfs" ino=21118 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 229.461180][ T30] audit: type=1400 audit(1770151225.065:502): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 229.486347][ T30] audit: type=1400 audit(1770151225.233:503): avc: denied { read } for pid=8498 comm="syz.3.604" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.519665][ T30] audit: type=1400 audit(1770151225.233:504): avc: denied { open } for pid=8498 comm="syz.3.604" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.546753][ T30] audit: type=1400 audit(1770151225.233:505): avc: denied { append } for pid=8498 comm="syz.3.604" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.590422][ T30] audit: type=1400 audit(1770151225.233:506): avc: denied { ioctl } for pid=8498 comm="syz.3.604" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 229.807436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 229.815458][ C1] lec:lec_tx_timeout: lec0 [ 229.820028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 230.217983][ T5917] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 230.241977][ T8480] syz.1.592 (8480) used greatest stack depth: 17960 bytes left [ 231.096544][ T8524] 9p: Bad value for 'rfdno' [ 231.476735][ T8532] syzkaller0: entered promiscuous mode [ 231.500913][ T8532] syzkaller0: entered allmulticast mode [ 231.573856][ T5912] usb 2-1: USB disconnect, device number 11 [ 232.423663][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.433949][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.442809][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.450817][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.458554][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.417520][ T51] Bluetooth: hci2: command tx timeout [ 234.440595][ T8571] Failed to initialize the IGMP autojoin socket (err -2) [ 234.500064][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 234.500080][ T30] audit: type=1400 audit(1770151230.577:520): avc: denied { write } for pid=8613 comm="syz.3.617" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 234.589213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 234.597243][ C1] lec:lec_tx_timeout: lec0 [ 234.605865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 234.716670][ T8624] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 234.758017][ T8624] bond1: entered promiscuous mode [ 234.763481][ T8624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.848078][ T30] audit: type=1400 audit(1770151230.934:521): avc: denied { create } for pid=8622 comm="syz.1.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 234.990577][ T30] audit: type=1400 audit(1770151231.091:522): avc: denied { ioctl } for pid=8631 comm="syz.1.620" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 236.178333][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.625'. [ 236.188279][ T30] audit: type=1400 audit(1770151232.068:523): avc: denied { create } for pid=8648 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.404527][ T30] audit: type=1400 audit(1770151232.320:524): avc: denied { setopt } for pid=8648 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 236.405362][ T51] Bluetooth: hci2: command tx timeout [ 236.584705][ T8571] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 236.610280][ T8571] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 236.663638][ T8571] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 236.793066][ T8571] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 237.539275][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.547366][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.556720][ T30] audit: type=1400 audit(1770151233.758:525): avc: denied { ioctl } for pid=8671 comm="syz.1.627" path="socket:[22540]" dev="sockfs" ino=22540 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 238.048175][ T8685] Invalid logical block size (1792) [ 238.387986][ T51] Bluetooth: hci2: command tx timeout [ 238.951875][ T5878] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 239.122618][ T5878] usb 5-1: Using ep0 maxpacket: 16 [ 239.148300][ T5878] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 239.186913][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.208821][ T5878] usb 5-1: Product: syz [ 239.213028][ T5878] usb 5-1: Manufacturer: syz [ 239.217619][ T5878] usb 5-1: SerialNumber: syz [ 239.259241][ T30] audit: type=1400 audit(1770151235.522:526): avc: denied { create } for pid=8705 comm="syz.3.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 239.311241][ T5878] usb 5-1: config 0 descriptor?? [ 239.335360][ T30] audit: type=1400 audit(1770151235.522:527): avc: denied { ioctl } for pid=8705 comm="syz.3.632" path="socket:[21703]" dev="sockfs" ino=21703 ioctlcmd=0x61d0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 239.336683][ T5878] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 239.742211][ T8571] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.764362][ T8712] lec:lec_atm_close: lec0: Shut down! [ 239.826007][ T8693] tipc: Started in network mode [ 239.867858][ T5878] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 239.875961][ T8693] tipc: Node identity 72096ab69dd7, cluster identity 4711 [ 239.937605][ T8693] tipc: Enabled bearer , priority 10 [ 240.008875][ T8571] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 240.058700][ T8730] syzkaller0: entered promiscuous mode [ 240.064158][ T8730] syzkaller0: entered allmulticast mode [ 240.094284][ T8571] wireguard: wg0: Could not create IPv4 socket [ 240.107354][ T8571] wireguard: wg1: Could not create IPv4 socket [ 240.146878][ T8693] tipc: Resetting bearer [ 240.450677][ T51] Bluetooth: hci2: command tx timeout [ 240.456168][ T30] audit: type=1400 audit(1770151236.824:528): avc: denied { create } for pid=8738 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.471060][ T8571] wireguard: wg2: Could not create IPv4 socket [ 240.484739][ T30] audit: type=1400 audit(1770151236.834:529): avc: denied { getopt } for pid=8738 comm="syz.3.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.112896][ T8750] vivid-000: disconnect [ 241.167496][ T8731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.168059][ T30] audit: type=1400 audit(1770151237.527:530): avc: denied { create } for pid=8692 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.195450][ T8731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.237936][ T30] audit: type=1400 audit(1770151237.569:531): avc: denied { write } for pid=8692 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 241.307072][ T793] tipc: Node number set to 4024330934 [ 241.551321][ T5912] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.565646][ T30] audit: type=1400 audit(1770151237.947:532): avc: denied { map } for pid=8755 comm="syz.0.640" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 241.688562][ T30] audit: type=1400 audit(1770151237.947:533): avc: denied { read } for pid=8755 comm="syz.0.640" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 241.728178][ T8749] vivid-000: reconnect [ 241.732682][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 241.742957][ T5912] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 241.769646][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.835368][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.864895][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 241.884201][ T5912] usb 2-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.00 [ 241.905813][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.917989][ T5912] usb 2-1: config 0 descriptor?? [ 242.149678][ T30] audit: type=1400 audit(1770151238.598:534): avc: denied { create } for pid=8753 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.188381][ T30] audit: type=1400 audit(1770151238.598:535): avc: denied { setopt } for pid=8753 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.224488][ T8730] tipc: Resetting bearer [ 242.348122][ T5912] wacom 0003:056A:0097.0005: item fetching failed at offset 1/5 [ 242.374176][ T8730] tipc: Disabling bearer [ 242.399873][ T5912] wacom 0003:056A:0097.0005: parse failed [ 242.405699][ T5912] wacom 0003:056A:0097.0005: probe with driver wacom failed with error -22 [ 242.477629][ T5912] usb 5-1: USB disconnect, device number 19 [ 242.543955][ T5917] usb 2-1: USB disconnect, device number 12 [ 242.616429][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 242.616484][ T30] audit: type=1400 audit(1770151239.092:536): avc: denied { create } for pid=8789 comm="syz.3.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.645711][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 242.666365][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 242.679065][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 242.689529][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.751415][ T8791] Failed to initialize the IGMP autojoin socket (err -2) [ 242.913538][ T793] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 243.267014][ T793] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 243.276377][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.284339][ T793] usb 4-1: Product: syz [ 243.288561][ T793] usb 4-1: Manufacturer: syz [ 243.293124][ T793] usb 4-1: SerialNumber: syz [ 243.526310][ T8817] loop8: detected capacity change from 0 to 7 [ 243.765287][ T8817] Dev loop8: unable to read RDB block 7 [ 243.771033][ T8817] loop8: unable to read partition table [ 243.776737][ T8817] loop8: partition table beyond EOD, truncated [ 243.782979][ T8817] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 243.829289][ T793] usb 4-1: config 0 descriptor?? [ 244.517504][ T5912] usb 4-1: USB disconnect, device number 15 [ 244.629721][ T51] Bluetooth: hci2: command tx timeout [ 244.856653][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 244.864641][ C1] lec:lec_tx_timeout: lec0 [ 244.875582][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 245.775904][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 245.777023][ T30] audit: type=1400 audit(1770151242.399:549): avc: denied { mount } for pid=8831 comm="syz.1.649" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 245.780920][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 245.948394][ T30] audit: type=1400 audit(1770151242.588:550): avc: denied { read } for pid=8831 comm="syz.1.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 246.677036][ T51] Bluetooth: hci2: command tx timeout [ 246.942331][ T30] audit: type=1400 audit(1770151243.554:551): avc: denied { create } for pid=8848 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 247.192067][ T793] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 247.403254][ T30] audit: type=1400 audit(1770151244.037:552): avc: denied { read } for pid=8839 comm="syz.4.650" name="sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.706830][ T793] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 247.724446][ T30] audit: type=1400 audit(1770151244.037:553): avc: denied { open } for pid=8839 comm="syz.4.650" path="/dev/sg0" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 247.750862][ T8858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=8858 comm=syz.0.654 [ 247.793865][ T793] usb 4-1: config 0 has no interface number 0 [ 247.829322][ T793] usb 4-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 248.005196][ T30] audit: type=1400 audit(1770151244.047:554): avc: denied { ioctl } for pid=8839 comm="syz.4.650" path="/dev/sg0" dev="devtmpfs" ino=767 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 248.010314][ T8791] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 248.030473][ T793] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 248.030502][ T793] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 248.030521][ T793] usb 4-1: config 0 interface 200 has no altsetting 0 [ 248.032165][ T793] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 248.522451][ T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.530832][ T793] usb 4-1: Product: syz [ 248.535104][ T793] usb 4-1: Manufacturer: syz [ 248.540125][ T793] usb 4-1: SerialNumber: syz [ 248.562458][ T793] usb 4-1: config 0 descriptor?? [ 248.597860][ T51] Bluetooth: hci2: command tx timeout [ 248.607541][ T30] audit: type=1400 audit(1770151245.391:555): avc: denied { mount } for pid=8866 comm="syz.4.656" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 248.620819][ T8868] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 248.632944][ T30] audit: type=1400 audit(1770151245.391:556): avc: denied { mounton } for pid=8866 comm="syz.4.656" path="/122/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 248.797895][ T30] audit: type=1400 audit(1770151245.486:557): avc: denied { mount } for pid=8866 comm="syz.4.656" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 249.037264][ T8791] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 249.091986][ T8791] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 249.331387][ T8791] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 249.365477][ T30] audit: type=1400 audit(1770151246.158:558): avc: denied { create } for pid=8866 comm="syz.4.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.510285][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.517234][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.656604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 249.664658][ C1] lec:lec_tx_timeout: lec0 [ 249.669270][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 250.124643][ T793] usb 4-1: USB disconnect, device number 16 [ 250.571205][ T51] Bluetooth: hci2: command tx timeout [ 250.577109][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 250.577147][ T30] audit: type=1400 audit(1770151247.449:567): avc: denied { write } for pid=8904 comm="syz.1.663" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 250.662073][ T30] audit: type=1400 audit(1770151247.544:568): avc: denied { write } for pid=8904 comm="syz.1.663" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 250.801957][ T8918] netlink: 16 bytes leftover after parsing attributes in process `syz.4.666'. [ 250.847770][ T30] audit: type=1400 audit(1770151247.733:569): avc: denied { create } for pid=8921 comm="syz.0.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.971393][ T5912] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 251.080802][ T8932] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 251.241760][ T8932] team0: Port device dummy0 added [ 251.304594][ T793] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 251.523805][ T793] usb 2-1: config 213 has an invalid interface number: 74 but max is 0 [ 251.600316][ T793] usb 2-1: config 213 has no interface number 0 [ 251.601574][ T5912] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 251.620620][ T5912] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 251.631777][ T5912] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 251.639677][ T793] usb 2-1: config 213 interface 74 has no altsetting 0 [ 251.661913][ T8791] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 251.679958][ T793] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 251.694427][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.695740][ T5912] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.712428][ T8791] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 251.737739][ T793] usb 2-1: Product: syz [ 251.744948][ T8791] wireguard: wg0: Could not create IPv4 socket [ 251.752296][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 251.753378][ T793] usb 2-1: Manufacturer: syz [ 251.771183][ T5912] usb 4-1: SerialNumber: syz [ 251.776577][ T8791] wireguard: wg1: Could not create IPv4 socket [ 251.805722][ T8791] wireguard: wg2: Could not create IPv4 socket [ 251.818071][ T793] usb 2-1: SerialNumber: syz [ 251.855401][ T30] audit: type=1400 audit(1770151248.793:570): avc: denied { create } for pid=8939 comm="syz.4.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.908980][ T30] audit: type=1400 audit(1770151248.846:571): avc: denied { read } for pid=8939 comm="syz.4.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.960817][ T30] audit: type=1400 audit(1770151248.846:572): avc: denied { append } for pid=8939 comm="syz.4.670" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.077242][ T793] usb 2-1: USB disconnect, device number 13 [ 252.147605][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.249876][ T8946] vxcan1: entered promiscuous mode [ 252.267687][ T8946] team0: Device vxcan1 is of different type [ 252.342797][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 252.365886][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 252.383109][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.391706][ T9] usb 5-1: Product: syz [ 252.395980][ T9] usb 5-1: Manufacturer: syz [ 252.400690][ T9] usb 5-1: SerialNumber: syz [ 252.648799][ T9] usb 5-1: USB disconnect, device number 20 [ 252.793878][ T8966] netlink: 'syz.1.673': attribute type 1 has an invalid length. [ 252.822302][ T8966] bond2: entered promiscuous mode [ 252.827693][ T8966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.839660][ T30] audit: type=1400 audit(1770151249.832:573): avc: denied { write } for pid=8965 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 252.942878][ T30] audit: type=1400 audit(1770151249.937:574): avc: denied { bind } for pid=8965 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.367329][ T30] audit: type=1400 audit(1770151250.294:575): avc: denied { watch watch_reads } for pid=8968 comm="syz.0.674" path="/180" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 253.437108][ T5912] usb 4-1: USB disconnect, device number 17 [ 254.335273][ T8996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.349455][ T5912] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 254.438365][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 254.446376][ C1] lec:lec_tx_timeout: lec0 [ 254.450972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 254.860001][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 254.868032][ T30] audit: type=1400 audit(1770151251.880:576): avc: denied { ioctl } for pid=8998 comm="syz.1.679" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23187 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 255.083755][ T5912] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 255.114922][ T5912] usb 5-1: config 0 has an invalid interface number: 150 but max is 64 [ 255.361523][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.393745][ T5912] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 255.417252][ T5912] usb 5-1: config 0 has no interface number 0 [ 255.456472][ T5912] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.475141][ T5912] usb 5-1: config 0 interface 150 has no altsetting 0 [ 255.482124][ T9004] netlink: 'syz.3.680': attribute type 29 has an invalid length. [ 255.503474][ T5912] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 255.518318][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.537565][ T5912] usb 5-1: config 0 descriptor?? [ 255.605386][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 255.605402][ T30] audit: type=1400 audit(1770151252.730:578): avc: denied { write } for pid=9001 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.635079][ T9004] netlink: 548 bytes leftover after parsing attributes in process `syz.3.680'. [ 255.732519][ T30] audit: type=1400 audit(1770151252.730:579): avc: denied { nlmsg_write } for pid=9001 comm="syz.3.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 257.483036][ T5856] usb 5-1: USB disconnect, device number 21 [ 257.645412][ T9077] 9p: Bad value for 'rfdno' [ 258.157732][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.174018][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.182421][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.194145][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.201562][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.268906][ T9090] Failed to initialize the IGMP autojoin socket (err -2) [ 258.724955][ T9107] syzkaller0: entered promiscuous mode [ 258.730453][ T9107] syzkaller0: entered allmulticast mode [ 258.789387][ T9104] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 259.219623][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 259.227681][ C1] lec:lec_tx_timeout: lec0 [ 259.232277][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 260.189550][ T5815] Bluetooth: hci2: command tx timeout [ 261.524714][ T30] audit: type=1400 audit(1770151258.914:580): avc: denied { append } for pid=9134 comm="syz.1.689" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 261.557158][ T9137] overlayfs: failed to resolve './file1': -2 [ 261.826803][ T9145] lo speed is unknown, defaulting to 1000 [ 261.833286][ T9145] lo speed is unknown, defaulting to 1000 [ 261.848817][ T9145] lo speed is unknown, defaulting to 1000 [ 261.875613][ T9145] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.897080][ T9145] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 261.945494][ T9146] netlink: 408 bytes leftover after parsing attributes in process `syz.3.690'. [ 262.067460][ T9145] lo speed is unknown, defaulting to 1000 [ 262.082309][ T9145] lo speed is unknown, defaulting to 1000 [ 262.097448][ T9145] lo speed is unknown, defaulting to 1000 [ 262.112260][ T9145] lo speed is unknown, defaulting to 1000 [ 262.153548][ T5815] Bluetooth: hci2: command tx timeout [ 262.186740][ T30] audit: type=1400 audit(1770151259.261:581): avc: denied { write } for pid=9138 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.475716][ T9090] netdevsim netdevsim5 netdevsim0: renamed from eth5 [ 262.523024][ T9090] netdevsim netdevsim5 netdevsim1: renamed from eth6 [ 262.552196][ T9090] netdevsim netdevsim5 netdevsim2: renamed from eth7 [ 262.576098][ T9090] netdevsim netdevsim5 netdevsim3: renamed from eth8 [ 262.781625][ T5917] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 262.925985][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 262.940088][ T9167] bridge: RTM_NEWNEIGH with invalid ether address [ 262.959085][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 262.959102][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 262.963578][ T5917] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 263.015777][ T5917] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.021646][ T9165] bridge: RTM_NEWNEIGH with invalid ether address [ 263.036124][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.055100][ T5917] usb 4-1: Product: syz [ 263.069986][ T5917] usb 4-1: Manufacturer: syz [ 263.088502][ T5917] usb 4-1: SerialNumber: syz [ 263.099499][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 263.132387][ T5917] usb 4-1: config 0 descriptor?? [ 263.144341][ T9152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 263.151856][ T9167] bridge: RTM_NEWNEIGH with invalid ether address [ 263.160851][ T5917] hub 4-1:0.0: bad descriptor, ignoring hub [ 263.177852][ T5917] hub 4-1:0.0: probe with driver hub failed with error -5 [ 263.234469][ T9173] tipc: Enabling of bearer rejected, failed to enable media [ 263.291765][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 263.747998][ T5804] usb 4-1: USB disconnect, device number 18 [ 263.808098][ T30] audit: type=1400 audit(1770151261.319:582): avc: denied { create } for pid=9187 comm="syz.0.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 263.859884][ T9191] fuse: Bad value for 'fd' [ 264.001269][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 264.009295][ C1] lec:lec_tx_timeout: lec0 [ 264.014861][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 264.145138][ T5815] Bluetooth: hci2: command tx timeout [ 264.191602][ T1206] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 264.391543][ T30] audit: type=1400 audit(1770151261.907:583): avc: denied { execute } for pid=9187 comm="syz.0.697" path="/188/hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=1012 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 264.448962][ T1206] usb 2-1: Using ep0 maxpacket: 16 [ 264.466525][ T1206] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 264.479651][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.494270][ T1206] usb 2-1: Product: syz [ 264.514108][ T1206] usb 2-1: Manufacturer: syz [ 264.530672][ T1206] usb 2-1: SerialNumber: syz [ 264.557734][ T1206] r8152-cfgselector 2-1: Unknown version 0x0000 [ 264.565005][ T1206] r8152-cfgselector 2-1: config 0 descriptor?? [ 264.771029][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 264.994896][ T9191] tmpfs: Bad value for 'nr_inodes' [ 265.021789][ T1206] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 265.392532][ T9090] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 265.463850][ T9090] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 265.554683][ T9090] wireguard: wg0: Could not create IPv4 socket [ 265.612538][ T9090] wireguard: wg1: Could not create IPv4 socket [ 265.624599][ T30] audit: type=1400 audit(1770151263.250:584): avc: denied { mount } for pid=9216 comm="syz.1.701" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 265.625640][ T9217] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 265.668302][ T9090] wireguard: wg2: Could not create IPv4 socket [ 265.714766][ T30] audit: type=1400 audit(1770151263.250:585): avc: denied { mounton } for pid=9216 comm="syz.1.701" path="/132/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 265.887264][ T9224] FAULT_INJECTION: forcing a failure. [ 265.887264][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 265.915524][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.4.702 Not tainted syzkaller #0 PREEMPT(full) [ 265.915549][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.915560][ T9224] Call Trace: [ 265.915566][ T9224] [ 265.915572][ T9224] dump_stack_lvl+0x100/0x190 [ 265.915599][ T9224] should_fail_ex.cold+0x5/0xa [ 265.915620][ T9224] should_failslab+0xc2/0x120 [ 265.915643][ T9224] __kmalloc_node_track_caller_noprof+0xf9/0x9d0 [ 265.915666][ T9224] ? sidtab_sid2str_get+0x17a/0x670 [ 265.915691][ T9224] ? kmemdup_noprof+0x29/0x60 [ 265.915711][ T9224] kmemdup_noprof+0x29/0x60 [ 265.915730][ T9224] sidtab_sid2str_get+0x17a/0x670 [ 265.915751][ T9224] security_sid_to_context_core+0x35a/0x6d0 [ 265.915769][ T9224] ? avc_audit_post_callback+0x115/0x8b0 [ 265.915792][ T9224] avc_audit_post_callback+0x1aa/0x8b0 [ 265.915815][ T9224] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 265.915835][ T9224] ? skb_put+0x138/0x180 [ 265.915852][ T9224] ? audit_log_n_string+0x256/0x550 [ 265.915882][ T9224] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 265.915903][ T9224] common_lsm_audit+0x23f/0x2b0 [ 265.915923][ T9224] ? __pfx_common_lsm_audit+0x10/0x10 [ 265.915940][ T9224] ? find_held_lock+0x2b/0x80 [ 265.915964][ T9224] ? avc_update_node.isra.0+0x573/0xb90 [ 265.915989][ T9224] slow_avc_audit+0x186/0x210 [ 265.916010][ T9224] ? __pfx_slow_avc_audit+0x10/0x10 [ 265.916038][ T9224] ? find_held_lock+0x2b/0x80 [ 265.916056][ T9224] ? avc_has_extended_perms+0x33a/0x1080 [ 265.916076][ T9224] ? avc_has_extended_perms+0x33a/0x1080 [ 265.916101][ T9224] avc_has_extended_perms+0x9b7/0x1080 [ 265.916129][ T9224] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 265.916150][ T9224] ? lockdep_hardirqs_on+0x78/0x100 [ 265.916169][ T9224] ? find_held_lock+0x2b/0x80 [ 265.916188][ T9224] ? tomoyo_path_number_perm+0x28f/0x580 [ 265.916217][ T9224] ? tomoyo_path_number_perm+0x188/0x580 [ 265.916260][ T9224] ioctl_has_perm.constprop.0.isra.0+0x376/0x540 [ 265.916282][ T9224] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 265.916318][ T9224] ? selinux_file_ioctl+0x139/0x290 [ 265.916334][ T9224] selinux_file_ioctl+0x139/0x290 [ 265.916352][ T9224] security_file_ioctl+0xfb/0x230 [ 265.916369][ T9224] __x64_sys_ioctl+0xb7/0x210 [ 265.916386][ T9224] do_syscall_64+0xc9/0xf80 [ 265.916411][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.916427][ T9224] RIP: 0033:0x7f9466d9aeb9 [ 265.916441][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.916456][ T9224] RSP: 002b:00007f9464ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.916472][ T9224] RAX: ffffffffffffffda RBX: 00007f9467016090 RCX: 00007f9466d9aeb9 [ 265.916484][ T9224] RDX: 00002000000008c0 RSI: 0000000000008922 RDI: 0000000000000005 [ 265.916494][ T9224] RBP: 00007f9464ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.916503][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.916512][ T9224] R13: 00007f9467016128 R14: 00007f9467016090 R15: 00007ffec57d5888 [ 265.916537][ T9224] [ 265.918727][ T9224] team_slave_1: mtu greater than device maximum [ 265.919409][ T30] audit: type=1400 audit(1770151263.534:586): avc: denied { ioctl } for pid=9220 comm="syz.4.702" path="socket:[23989]" dev="sockfs" ino=23989 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tsid=148 tclass=pppox_socket permissive=1 [ 266.115499][ C0] ------------[ cut here ]------------ [ 266.198779][ T9224] team0: Device team_slave_1 failed to change mtu [ 266.202100][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 266.202126][ C0] WARNING: kernel/workqueue.c:2251 at __queue_work+0xcbb/0x10f0, CPU#0: swapper/0/0 [ 266.277551][ C0] Modules linked in: [ 266.281595][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 266.290508][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 266.300542][ C0] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 266.305901][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d 95 f5 eb 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 e2 b0 38 00 90 0f 0b 90 e9 ff f5 [ 266.325494][ C0] RSP: 0018:ffffc90000007bf0 EFLAGS: 00010046 [ 266.331541][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100f770151 [ 266.339491][ C0] RDX: ffff888029048178 RSI: ffffffff8a6e1520 RDI: ffffffff90ba4040 [ 266.347440][ C0] RBP: ffff88807bb80a70 R08: 0000000000000005 R09: 0000000000000000 [ 266.355390][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888029048000 [ 266.363341][ C0] R13: 1ffff92000000f8f R14: ffffffff81ce5bb0 R15: 0000000000000001 [ 266.371292][ C0] FS: 0000000000000000(0000) GS:ffff8881245db000(0000) knlGS:0000000000000000 [ 266.380203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.386776][ C0] CR2: 00007f9464ff5ff8 CR3: 000000000e392000 CR4: 00000000003526f0 [ 266.394727][ C0] Call Trace: [ 266.397988][ C0] [ 266.400812][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.405999][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 266.411792][ C0] call_timer_fn+0x19a/0x590 [ 266.416368][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.421470][ C0] ? __run_timers+0x560/0xac0 [ 266.426126][ C0] ? __run_timers+0x560/0xac0 [ 266.430785][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 266.436572][ C0] __run_timers+0x570/0xac0 [ 266.441058][ C0] ? __pfx___run_timers+0x10/0x10 [ 266.446075][ C0] run_timer_base+0x114/0x190 [ 266.450729][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 266.455907][ C0] ? rcu_is_watching+0x12/0xc0 [ 266.460654][ C0] run_timer_softirq+0x1a/0x50 [ 266.465400][ C0] handle_softirqs+0x1ea/0x910 [ 266.470170][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.475456][ C0] __irq_exit_rcu+0xef/0x150 [ 266.480031][ C0] irq_exit_rcu+0x9/0x30 [ 266.484259][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 266.489873][ C0] [ 266.492783][ C0] [ 266.495695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.501657][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 266.507272][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ac 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 266.526859][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 266.532905][ C0] RAX: 0000000000df8a4d RBX: ffffffff8e297ac0 RCX: ffffffff8b76d4b5 [ 266.540858][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45b4f RDI: ffffffff8bfa3620 [ 266.548809][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 266.556758][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 266.564707][ C0] R13: 0000000000000000 R14: ffffffff90b749d0 R15: 0000000000000000 [ 266.572664][ C0] ? ct_kernel_exit+0x125/0x180 [ 266.577502][ C0] default_idle+0x9/0x10 [ 266.581725][ C0] default_idle_call+0x6c/0xb0 [ 266.586473][ C0] do_idle+0x35b/0x4b0 [ 266.590530][ C0] ? __pfx_do_idle+0x10/0x10 [ 266.595108][ C0] cpu_startup_entry+0x4f/0x60 [ 266.599859][ C0] rest_init+0x251/0x260 [ 266.604084][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 266.609613][ C0] start_kernel+0x47a/0x480 [ 266.614095][ C0] x86_64_start_reservations+0x24/0x30 [ 266.619536][ C0] x86_64_start_kernel+0x122/0x130 [ 266.624630][ C0] common_startup_64+0x13e/0x148 [ 266.629564][ C0] [ 266.632562][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.639823][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 266.648734][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 266.658769][ C0] Call Trace: [ 266.662026][ C0] [ 266.664848][ C0] dump_stack_lvl+0x100/0x190 [ 266.669509][ C0] vpanic+0x20d/0x630 [ 266.673472][ C0] panic+0xd1/0xd1 [ 266.677169][ C0] ? __pfx_panic+0x10/0x10 [ 266.681570][ C0] ? check_panic_on_warn+0x1f/0x90 [ 266.686663][ C0] check_panic_on_warn.cold+0x19/0x34 [ 266.692014][ C0] ? __queue_work+0xcbb/0x10f0 [ 266.696757][ C0] __warn.cold+0x191/0x2f8 [ 266.701156][ C0] __report_bug+0x296/0x3d0 [ 266.705637][ C0] ? __queue_work+0xcbb/0x10f0 [ 266.710384][ C0] ? __pfx___report_bug+0x10/0x10 [ 266.715383][ C0] ? cpu_startup_entry+0x4f/0x60 [ 266.720305][ C0] ? rest_init+0x251/0x260 [ 266.724704][ C0] ? start_kernel+0x47a/0x480 [ 266.729361][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 266.734642][ C0] ? look_up_lock_class+0x64/0x120 [ 266.739747][ C0] report_bug_entry+0xe1/0x290 [ 266.744490][ C0] ? __queue_work+0xcbf/0x10f0 [ 266.749236][ C0] handle_bug+0x1c9/0x2a0 [ 266.753553][ C0] exc_invalid_op+0x17/0x50 [ 266.758042][ C0] asm_exc_invalid_op+0x1a/0x20 [ 266.762872][ C0] RIP: 0010:__queue_work+0xcbf/0x10f0 [ 266.768226][ C0] Code: 00 00 00 fc ff df 49 8d 94 24 78 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 15 04 00 00 48 8d 3d 95 f5 eb 0e 48 8b 75 18 <67> 48 0f b9 3a e9 77 f7 ff ff e8 e2 b0 38 00 90 0f 0b 90 e9 ff f5 [ 266.787814][ C0] RSP: 0018:ffffc90000007bf0 EFLAGS: 00010046 [ 266.793860][ C0] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100f770151 [ 266.801809][ C0] RDX: ffff888029048178 RSI: ffffffff8a6e1520 RDI: ffffffff90ba4040 [ 266.809762][ C0] RBP: ffff88807bb80a70 R08: 0000000000000005 R09: 0000000000000000 [ 266.817713][ C0] R10: 0000000000000100 R11: 0000000000000000 R12: ffff888029048000 [ 266.825666][ C0] R13: 1ffff92000000f8f R14: ffffffff81ce5bb0 R15: 0000000000000001 [ 266.833618][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 266.839415][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 266.844688][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.849885][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 266.855693][ C0] call_timer_fn+0x19a/0x590 [ 266.860273][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 266.865377][ C0] ? __run_timers+0x560/0xac0 [ 266.870034][ C0] ? __run_timers+0x560/0xac0 [ 266.874693][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 266.880480][ C0] __run_timers+0x570/0xac0 [ 266.884967][ C0] ? __pfx___run_timers+0x10/0x10 [ 266.889982][ C0] run_timer_base+0x114/0x190 [ 266.894637][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 266.899814][ C0] ? rcu_is_watching+0x12/0xc0 [ 266.904562][ C0] run_timer_softirq+0x1a/0x50 [ 266.909302][ C0] handle_softirqs+0x1ea/0x910 [ 266.914054][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 266.919328][ C0] __irq_exit_rcu+0xef/0x150 [ 266.923902][ C0] irq_exit_rcu+0x9/0x30 [ 266.928130][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 266.933745][ C0] [ 266.936655][ C0] [ 266.939566][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.945529][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 266.951141][ C0] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 ac 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 266.970729][ C0] RSP: 0018:ffffffff8e207e00 EFLAGS: 00000246 [ 266.976782][ C0] RAX: 0000000000df8a4d RBX: ffffffff8e297ac0 RCX: ffffffff8b76d4b5 [ 266.984732][ C0] RDX: 0000000000000000 RSI: ffffffff8dc45b4f RDI: ffffffff8bfa3620 [ 266.992686][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708673d [ 267.000634][ C0] R10: ffff8880b84339eb R11: 0000000000000000 R12: fffffbfff1c52f58 [ 267.008585][ C0] R13: 0000000000000000 R14: ffffffff90b749d0 R15: 0000000000000000 [ 267.016539][ C0] ? ct_kernel_exit+0x125/0x180 [ 267.021375][ C0] default_idle+0x9/0x10 [ 267.025604][ C0] default_idle_call+0x6c/0xb0 [ 267.030349][ C0] do_idle+0x35b/0x4b0 [ 267.034403][ C0] ? __pfx_do_idle+0x10/0x10 [ 267.038981][ C0] cpu_startup_entry+0x4f/0x60 [ 267.043728][ C0] rest_init+0x251/0x260 [ 267.047961][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 267.053489][ C0] start_kernel+0x47a/0x480 [ 267.057972][ C0] x86_64_start_reservations+0x24/0x30 [ 267.063410][ C0] x86_64_start_kernel+0x122/0x130 [ 267.068502][ C0] common_startup_64+0x13e/0x148 [ 267.073437][ C0] [ 267.076706][ C0] Kernel Offset: disabled [ 267.081004][ C0] Rebooting in 86400 seconds..