last executing test programs: 3m15.249867399s ago: executing program 3 (id=68): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100000086dd60fec00000443a00fc0000000000000000000000000000fdff02000000000000000000000000000102009078000000006018b08800000052fe80000000000000000000000000002dfe8000000000000000000000000000aa1100000000"], 0x0) socket$inet(0x2, 0x2, 0x2) close(0xffffffffffffffff) pread64(r3, &(0x7f0000019440)=""/101, 0x65, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m12.795537108s ago: executing program 3 (id=71): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xc7b4, @remote, 0x1}, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x118) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r4, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r4, 0x0, 0x0, 0x60, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$sock(r9, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) socket$phonet_pipe(0x23, 0x5, 0x2) 3m10.440333582s ago: executing program 3 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x880, 0x0) (rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x6, &(0x7f0000001640)=0x2) (async, rerun: 64) read$FUSE(r1, &(0x7f0000001680)={0x2020}, 0x2020) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000003800)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) (async) r6 = syz_io_uring_setup(0x742e, &(0x7f0000000140)={0x0, 0xfad6, 0x2000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r9 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x541480, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r9, 0xc0044dff, &(0x7f0000000100)=0x6) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r10}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000400)={r11, 0x80, 0x5, 0x2, 0xaf7, 0x5, 0x4}) io_uring_enter(r5, 0x1b16, 0x0, 0x3a, 0x0, 0xffffffffffffffa2) 3m9.888176717s ago: executing program 3 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) getpgid(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x88000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x1000, &(0x7f0000032680)=""/4096, 0x41100, 0xbc16a17751e7d86b, '\x00', 0x0, @fallback=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x3, 0x1, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5cc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r6}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x80002, 0x0) mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3m9.39164123s ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 3m7.784224698s ago: executing program 3 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setpriority(0x1, 0x0, 0x1) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2046) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 3m6.734366525s ago: executing program 32 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x1000000}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setpriority(0x1, 0x0, 0x1) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x2046) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xd, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4604}, 0x0) 1m22.558006487s ago: executing program 0 (id=362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="0779ef96c4c488a99686e0b4646b28ab000000e1c67b796d573719bef86497d7ed5f6fa3773377bf34230d63dcfde3f5d9b700000000f6000000000000000000", @ANYRESOCT=r1, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x24044811}, 0x20000040) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x2, 0x6, 0xa000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r3 = epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x29, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001540), 0x0, 0x4048801) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x0, 0x1ff, 0x3, 0xdff8, 0x100000b, r6}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0x10000010}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8, 0xfffffffa, 0x7, 0xcff6, 0x8000, 0x9, 0x2}, 0x1c) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) close_range(r3, r7, 0x0) 1m19.291056186s ago: executing program 0 (id=376): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1m17.608216469s ago: executing program 0 (id=379): socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7b03f481d363b114ed05320b7a6c52cb74bb417284215d926edbb6474aedaa06c7a1baef720227daa28c80853b2a2d4d9494eb3a2f734f8bd6f268b959eb7d96d9276d5bc9cd075f618427dad813cb3dd07a771ee61712c7a433199fe8d18ce61fc4ac6819874ba623dd687843bd209450cf567ffb5e21302047626eca36a99c4ae2387c2ac0cafecd983028e4a19b26485f5fe1ac696f157fb2b3276ec218a56a0d71bda4b829deaf744dd276"], 0xfe33) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES16=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_pts(r4, 0x7216c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x6) pipe2(&(0x7f0000000040), 0x84800) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) splice(r8, 0x0, r7, 0x0, 0x4, 0x0) (async) splice(r8, 0x0, r7, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf2509000000060003"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r9) sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7002fedbdf251300000008000100", @ANYRES32=r10, @ANYBLOB="040013"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004040) (async) sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002abd7002fedbdf251300000008000100", @ANYRES32=r10, @ANYBLOB="040013"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004040) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dffbfb, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r12) (async) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r12) sendmsg$NLBL_CIPSOV4_C_LISTALL(r13, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r14, @ANYBLOB="00032dbd7000fddbdf250400000008000100030000007000000a0071a2000008000a00b265e200080009003cecb40e01800900dd69cb1088000a0034a9000008008fd6320a001fc80000080009002338f01d08000a006eb8000008000a00b35800001c000b8008000a00302d000008000a00b488000008000a00c0dd00"/137], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r13, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r14, @ANYBLOB="00032dbd7000fddbdf250400000008000100030000007000000a0071a2000008000a00b265e200080009003cecb40e01800900dd69cb1088000a0034a9000008008fd6320a001fc80000080009002338f01d08000a006eb8000008000a00b35800001c000b8008000a00302d000008000a00b488000008000a00c0dd00"/137], 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1m17.319295026s ago: executing program 0 (id=380): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x202, 0xce, 0xffffffffffffffff, 0x200000000000008, 0x1000000000000008, 0x2, 0x8, 0x40000000000002a, 0x80000009, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r6, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032040000ff110000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x7ffffff7}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount_setattr(r7, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r7}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="a1fb75d10a28"}, 0x10) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x8}, 0x8) syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 1m16.083260168s ago: executing program 0 (id=384): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002240)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x8}, {0x0}, &(0x7f0000002200), 0x0, 0x1f, 0x2}}], 0x48, 0x40010}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24060050) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12853b0000000040ac0524030000001c00a664dbe60001000000000904000001030000000921007b7bbea73bdea07f26430955d3f7be788c551039febb301d6584cb1ea9bd62a422fdc4aa4d238b40d2d3eb338068e27120fb4244434cc43833f2d8"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00220a0000009ba7b915a97b0fb801d51c89a76d2ec84d7f0d87492f772a5274d9863137ddd047d3905b0771960f1efe7d8cd825a579a2aa488d7f50583179b8d21a79bc79685c36d158a143a388000000d7a427e1e634271cf753969c5a1c9e077e6a4c2934a57541a1e8909fa4ea8c3f4c3862cd"], 0x0}, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) sendfile(0xffffffffffffffff, r4, 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x11, 0xffffffffffffffff, 0x3a65d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x20044080) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1m15.389327796s ago: executing program 0 (id=388): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f00000000c0)=[{r4, 0x7581}, {r2, 0x6390}], 0x2, 0x0, 0x0, 0x0) io_pgetevents(r3, 0x1, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x40010101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) 1m14.555657394s ago: executing program 33 (id=388): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) ppoll(&(0x7f00000000c0)=[{r4, 0x7581}, {r2, 0x6390}], 0x2, 0x0, 0x0, 0x0) io_pgetevents(r3, 0x1, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x0, 0x0) shutdown(r2, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x40010101, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000000)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) 11.105175568s ago: executing program 1 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000000000400, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x7, 0x1, 0x0, "73fcd4f18be0c413515512d752fb0e3a3d4cb01bc141f19260dab8707d823c68", 0x41415270}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0xe0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32,nr_inodes=g']) 10.764303426s ago: executing program 1 (id=584): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040), 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 9.712354462s ago: executing program 1 (id=590): r0 = msgget$private(0x0, 0x4) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000731006ca344903eef1538ffffffffffefffffff8e0151b3c8e64e5a94a4f9212674a303502a6b0e0ea580b94751ac258b99a723db00f391b01931b80bc2139fc29e630a03239426e23599f783f9c9c502f713e05ccd212777b7096ccce1fad426daf4f26f5972311a11f2ae2a947963cc54cffb0aabf121fc8863197bb9c70f16034c592b9b00561ad11fd2b4"], 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x5800) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000680)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @local=@item_4={0x3, 0x2, 0x8, "ee4f7cd3"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x2, 0x1800}, {0x0, 0x4, 0x1000}, {0x2, 0x2, 0x3800}, {0x4, 0x21, 0x1800}], 0x4, &(0x7f0000000080)={0x0, 0x989680}) 5.603088591s ago: executing program 2 (id=596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) 5.503839237s ago: executing program 1 (id=597): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)="58000000140019234083", 0xa}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) r5 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000000000000007fff00000000000109022d000100003807090400010203000100092100000901220500090581034000fe080109050203ff03f80061"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000280)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00092700000005235e1ae4"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) open(&(0x7f0000000080)='./cgroup/../file0/file0\x00', 0xc8000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x80284511, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_enter(r7, 0x4271, 0x576b, 0x70, &(0x7f0000000180)={[0x44]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r8 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x0, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r8, 0x6f58, 0x0, 0x0, 0x0, 0x0) syz_clone(0x401000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.479958575s ago: executing program 2 (id=598): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff0100000003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x855}, 0x40) fsopen(&(0x7f0000000080)='proc\x00', 0x1) (async) r1 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r3, 0x0, 0x7c1c, 0x8) (async) splice(r2, 0x0, r3, 0x0, 0x7c1c, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/l2cap\x00') write$eventfd(r8, &(0x7f00000001c0)=0x1ff, 0x8) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.000073098s ago: executing program 6 (id=600): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f00000006c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10af9cd970fa80895a0ab6cabf63e8c52104572f16d388de2d4fe7c4809b5dcab54b1bcb5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d7"}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r5 = memfd_secret(0x0) ftruncate(r5, 0x581) ftruncate(r5, 0x0) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x74) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r8, r6, 0x29, 0x6, 0x0, @void, @value=r8}, 0x20) ioctl$VT_SETMODE(r8, 0x5602, &(0x7f00000001c0)={0x1, 0x2e, 0x2, 0x4, 0x8001}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x40, 0x9, 0x0, 0x54}, {0x0, 0x2, 0xff}, {0x7, 0x4, 0x77, 0x4a7a}, {0x1bc, 0x7, 0x4}, {0x8, 0x0, 0xa, 0x1}]}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) 4.685829463s ago: executing program 2 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x4, 0x200, {r3}, {}, 0xfffffffc, 0x80000001}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read(r1, &(0x7f0000000300)=""/229, 0xe5) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xe, 0x3, 0x0, 0xff, "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", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8) tkill(r8, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000041}, 0x55fdb4595c3d8036) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 4.552244194s ago: executing program 5 (id=603): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000080900010073797a31000000002400048020000180070001006374000014000280080002400000000d080001400d0000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c346c442b9c62c818142812852fc65400f01cfc74424020b000000ff1c24", 0x4a}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x1ff, 0x5787bac1, 0x8, 0x2008000000000005, 0x800040068], 0xdddd1000, 0x547d1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000001000)={0x3d, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) fallocate(r0, 0x27, 0x1fb, 0x0) getitimer(0x0, &(0x7f0000000800)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 2.486569414s ago: executing program 4 (id=605): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f14010027bd7000fcdbdf250b00450075766572627376"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(r1, 0xd, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r7, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getpid() 2.484867216s ago: executing program 5 (id=606): prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x3, &(0x7f0000000000)) r0 = eventfd2(0x6, 0x80001) fcntl$getown(r0, 0x9) r1 = signalfd(r0, &(0x7f0000000040), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x11}}, './file0\x00'}) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x23280000000000, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000100)=0x5) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r4, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x33, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0x7f, @device_b, 0x4, @value, 0x8, 0x64, @broadcast, 0x4ad}}, @mesh_chsw={0x76, 0x6, {0xc, 0x0, 0x1d, 0x7}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000300)={0x0, "39967ed14abd67b06e4e5f22396a5d36"}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001300)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000001380)={0x5, 0x1, 0x4, 0x2000, 0x1000, {0x77359400}, {0x4, 0x0, 0x27, 0xfd, 0x9, 0x5, "99c7ccab"}, 0x80000000, 0x4, {0xffffffffffffffff}, 0xcd2, 0x0, r1}) (async) clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) ppoll(&(0x7f0000001400)=[{r3}, {r6, 0x9085}], 0x2, &(0x7f0000001480)={r7, r8+10000000}, &(0x7f00000014c0)={[0x2]}, 0x8) syz_open_dev$sg(&(0x7f0000001500), 0x3ff, 0x20000) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000001740)={0x13, 0x10, 0xfa00, {&(0x7f0000001540), r5, 0x2}}, 0x18) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000001780)) (async) connect$unix(r2, &(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000001840)={0x87, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x14}, @jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x508d}]}, 0x18) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000001880)={0x0, {{0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x88}}, {{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe7}}}, 0x108) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001a00)={&(0x7f00000019c0)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000001a40)={{0x6, 0x7}, 0x1, 0x6, 0x6, {0x1, 0xd0}, 0xed, 0x101}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000001cc0)={&(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0], &(0x7f0000001c80)=[0x0, 0x0], 0x4, 0x8, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000001d00)={&(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00), &(0x7f0000001b40)=[0x0], &(0x7f0000001b80)=[0x0], 0x0, 0x1, 0x9, 0x0, r10}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001d80)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7905d80bb3b6f3e5, 0x0, 0x5, 0xfffb, 0x2}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r6, {0xd}}, './file0\x00'}) ioctl$KDGKBTYPE(r11, 0x4b33, &(0x7f0000001e00)) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000001e40), &(0x7f0000001e80)=0xc) (async) ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407) (async) lsetxattr$security_capability(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), &(0x7f0000001f40)=@v2={0x2000000, [{0x8, 0x101}, {0x101, 0x388a}]}, 0x14, 0x0) 2.449846378s ago: executing program 4 (id=607): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x8, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3febdc25f5ab60c9edd680f985881a7beda9d69098c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df2ce7bef400000000ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831f0400", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xe]}}) (async, rerun: 32) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) (async, rerun: 64) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) (rerun: 64) write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x3, 0x24, 0x4, @generic}], 0x8) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$LOOP_CLR_FD(r1, 0x4c01) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r5, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x40, 0x10}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0xa3ab}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0x11}, 0x0, 0x0}) (async) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000014c0)={0x34, &(0x7f0000001240)={0x20, 0x6, 0x1, "9e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x8002) write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r7, 0x4bfb, 0x1000000000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000005cc0)='nv', 0x2) (async) sendmmsg$inet(r0, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)="ea1747ee24b86a34d6d5c2e1a5c3fa9bed5f96120d23943a47f115bec6dc08286796f83a316ba76165d3827b631e77dc07a55a6cde8915a691dd4fc768ddd8c53468317c75a269a9928b524cf62f19d7ef3c0a0b030c0d185464d4ba8418d407ef29fc1e4761bcb5a68fcd2317bbfb4eb98caa0d3e2e006a251e095ed496a5552fbf256e04000000000000009d72146c7ac03fdba4ce87cb39600feede00000000000000000000000000000616e811ea5c31696a5bc384e7f0005667214385829db5b251", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)='%', 0x1}], 0x1}}], 0x3, 0x400c0) 2.444740213s ago: executing program 5 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="6726660faeb2a13700003e262e6767660f1edf66b99e0000400f320f060f01c266b91406000066b87e00000066ba000000000f300f353e0f005a0166b8414b01df0f23d00f21f86635300000020f23f8b880068ec8", 0x55}], 0x1, 0x76, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0xc, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x6}}]}}]}, 0x3c}}, 0xd4) 2.443860385s ago: executing program 4 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r7}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) listen(0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32=r9], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x1a4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}]}}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xed, 0x20, 0x4, 0x2, 0x1, 0x1ff, 0x4, 0x2}}, {0x8, 0x2, [0x60, 0x4]}}, {{0x1c, 0x1, {0x1, 0xff, 0x3, 0x80000000, 0x1, 0x3, 0x401, 0x3}}, {0xa, 0x2, [0xfffa, 0x1a, 0x4]}}, {{0x1c, 0x1, {0x8, 0x9, 0xfffb, 0x7cfd, 0x2, 0x8507, 0x2, 0x5}}, {0xe, 0x2, [0x46c, 0x2, 0x6, 0x0, 0x9]}}, {{0x1c, 0x1, {0x6, 0x2, 0x8000, 0xdf9a, 0x1, 0x4, 0x0, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0xfff, 0x2, 0x8, 0x0, 0x4}}, {0xc, 0x2, [0xa, 0x1, 0x7, 0x5]}}, {{0x1c, 0x1, {0x91, 0xab, 0xf76d, 0x7f, 0x2, 0x10, 0x0, 0x4}}, {0xc, 0x2, [0xc1, 0x3, 0x3, 0x80]}}, {{0x1c, 0x1, {0x2, 0x69, 0x9, 0x9, 0x2, 0x9, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x7]}}]}]}, 0x1a4}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r10, 0x5016, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.434094995s ago: executing program 6 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) mq_open(&(0x7f0000000180)='.\\\xb5', 0x40, 0x40, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) syz_open_procfs$userns(r1, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1a, &(0x7f00000008c0)=';', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, 0x0, 0x0, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x4c2ad2dbab5f8b68, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x61, 0x0, 0x34, 0x63, 0x0, 0x34, 0x0, 0x0, 0x0, 0x64]}, &(0x7f0000000080)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xfeffffffffffff) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) 2.103746785s ago: executing program 2 (id=611): prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000a00), 0x5c840, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000a40)={0x0, 0x90, 0x204, 0x5, 0x9, 0x400}, &(0x7f0000000a80)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000ac0)={r2, 0x1, 0xf8eb, 0xffde, 0x3ff, 0x2}, &(0x7f0000000b00)=0x14) close_range(r0, r0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_destroy(r3) mkdir(&(0x7f0000000240)='./bus\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1400000010000000000a50000000090a010400000101000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000a1bf8b730666cf807089be580bcfd9db782074fdc5af5ea583eb1dc85fe792712c14000980100002800c000000000000000000fd6814f244242f05fe0a171ae2703c62844ea70046042552d0cbfebfc9c50636f91db2bd409adec25c66d1bcc8f64071652913bcfab24880e1c05264025ef987bdced78042749840cd56d0f49cd7ff7ed06ce307db2e5e5b5e27acedef8c738c0e"], 0x78}}, 0x0) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f00000003c0)='\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$phonet_pipe(0x23, 0x5, 0x2) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x82000000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x801, 0xe2df, 0x40000002, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) sendto$unix(r1, &(0x7f0000000c40)="63021b6442c076e70592501923c5ac8011d876a6b3c180b43260f4048d80861c3da90c3e55e0d2dd4479d46e8a781ae82885bf9cd4e3011bff36db900c6fdaabe2b0cac727b10e152a5e1e2e0cb32ca61940be4f62f98570b128a2f964378023e0336c822283b6d8ed00ff17f59e27ea75d818ef61a3a888ab93ba5ee6e81cde8c648345fd3bc4654ff6ca95a5d88a4e6051c85726eb4d9ea77be639efbd428b02c5b739d0addff4060805f251dbe93e6081ea734d06500411330bc65d229f191dd9a4c5f6e227f557370d03eea0bb8523651267147fba368633913e2b98ccb7b6ed8aa32c1f", 0xe6, 0xc000, &(0x7f0000000d40)=@file={0x1, './bus\x00'}, 0x6e) futex(&(0x7f0000000000), 0x100, 0x0, 0x0, &(0x7f0000048000), 0x0) keyctl$clear(0x7, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}], 0x0, 0x80000000, 0x0, 0x42) 2.039826917s ago: executing program 1 (id=612): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000200), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xfffffffffffffda9}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0xb3, 0xc}, 0xb, 0x1, 0x5, 0x2, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001080)=@gettaction={0xe0, 0x32, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x532a}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff8001}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="637ae918fc0c1332cf62e9b7b0ef5414967ee75fb8795d78e8b1ee7ec2ceaf7370b7d597dafd33400b27a7aaf4fdc08b4001171eab1a88595c70035115bf6a6b584a4e539d5eb82ce245c12a7fa94f429af2612295fffcfe451deb97e6e91a6a2d3d6ad9ff330d8db0fca74511008733240ada7dab75b3b13f600d994a001f5024cf2ba7f9d8e8caf4e02c0ca792bce72a55c8d1744f6efe60d60ddf", 0x9c}, {&(0x7f0000000240)="813212b0254877c1b340aea1c738a87c385490a68a19a75179f652db01a7b92fd13774394b1e2718b4ba1f39a74c1a9a256a4994", 0x34}], 0x2}}, {{&(0x7f0000000700)=@generic={0x1e, "e13d2b63902a0743088b0c3ca6ec3c8f84eaa450ff9c9fabaea1146127d84fde2c729a9f1b7697ed487c93582bdf1aaf333dfd0a85a215c3dffa6d93951c3a93f48f5e96f54fca257f2b717b782b30c22235f7d0f24168db067cba0ebd2c60d155f89ad26b14ed3f75ef683291f82ec132ea28ee5c51b3dfc1bd4665e587"}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000780)="bdbf7829c212d1273dc22c1e6b331b24cf7e72dca0c57bf6c060ee2bb9d1c745b1f49fc2ee500f80f4940b43d623fd7e3b92bca00eb422f72df120c448a9e37699519f92956452607e803a058b03ebcacea3287a824ac95aaad7afeb8e3b6a6a32a2a695f2df2b6771fa6beb8f811c7c5e1a145dfdbabd19c1e3db9fc5db0961942c61a365fa", 0x86}, {&(0x7f0000000840)="9376e946f59aa37195c2ef4dccd424fe94d86a1c9f8babaead631ed0", 0x1c}, {&(0x7f0000000880)="9fb8ee8880d701ffdc92e1654616d1e6f29f8570e149c931afdd286f67ba27316b3210a6eb105c05b94e14c4cbb1c9462f8fb5c76f37dddf20729634191f9a0e9a241360324ebb5fe069353f4e7c89f6cc01bd25ea5d95651107595ec612901f2f1c96761f7da1d86d1d78f2863bfb8216bc84facdde", 0x76}, {&(0x7f0000000900)="66587010e0d1a29e6a54ebeb4512c95ccfa0b94a47ad7f8445a9caae417b48cc8f2f1a593a9668b85770ca138b43d6d8bce79f8e93a9704b1567241ff5312935a8a25c870ffac502efe8af72c15f7545af4e1c49a31f8c740a456c0ae0a6eca80514ed45c7ae9d46ce8a6d5bac065e2965a1b111635ba4f6fc061b1dc728ad5497dd3ab1010d82c5c5cd80e655f31c5238c70b7049697b52a160a7b7510f753828b1097dfbd1f01f99eb9f0b06b313c6892d1052969149379a8efc88283cc096e45658cd56be05ec1bcc454b5adc2edfbd1241e2bb34fb367273f18ca5e95a7a57012288ca0fe122ab1c6c59275aa0ebb31c1c3ec17f24b44c56", 0xfa}, {&(0x7f0000000a00)="dc38cebde79e71b2ac76fa41ed471d03d674c53bcf34768c9ae05fcbcb2541e4dfe53471bddf2f3ab0df107d746afc99696aa41e420fdc1780fb4e4022dad46d11009550e5a9b25fbbe7327733d2573b1a00a7a88542210206bb25f01aa2813a071069e4713c6c592413207f4d1b8f085ee17e64a622a267bedb8f6692d3173f23a0b0c9f7361564c3d9253002911f0992f7507c1160847a5bb75975b05bbc51bf26bef8ceb9ea9bb1da76be8cef29", 0xaf}], 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="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"/4816], 0x12d0}}, {{&(0x7f0000000c00)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000e00)="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", 0x15f}], 0x1, &(0x7f0000003b00)}}], 0x3, 0x0) sendto$packet(r8, &(0x7f0000000200)="bada30fbc99b5400040000ea0756a85d86dd775a2c78c540624409ab09f4ac40ab420e89", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r10, &(0x7f0000001840)=[{{&(0x7f0000001180)=@file={0x0, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x880}}, {{&(0x7f0000000b00)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000027c0)="9af76f", 0x3}], 0x1, 0x0, 0x0, 0x40000}}], 0x2, 0x0) 2.018043948s ago: executing program 4 (id=613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0xfe, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.327728711s ago: executing program 6 (id=614): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2881, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2881, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4, 0x0, &(0x7f00000000c0)) mount$nfs4(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x10080, &(0x7f0000001a80)=ANY=[]) (async) mount$nfs4(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080), 0x10080, &(0x7f0000001a80)=ANY=[]) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) socket$inet6(0xa, 0x80002, 0x88) (async) r3 = socket$inet6(0xa, 0x80002, 0x88) write$tun(0xffffffffffffffff, 0x0, 0x46) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0) (async) recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x20000801) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001280)={0x3, &(0x7f0000001200)=[{0x8, 0x1000, &(0x7f0000000140)="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", 0x0, 0x1}, {0x10001, 0x3c, &(0x7f0000000040)="13b414ee7b8e1db1f2550ccec6d77093c1d8b086f9a6ba013beb8a775a65a2e5e7f111d820a023778a4d54c552921854b48d7cd9f20d027843340e66"}, {0xf9, 0xae, &(0x7f0000001140)="2cf087dbce9829d0b51f89e9d8fb1948808840f9c776295aaf72ddcd0d86610aa79a161d8c06085ad956c3c78f644beb4ad0be515815a841fade824490d583b280a531d48fa9d8e8b505c6d42fb8761d5c1e5f4316fc5ef5e5b1bc49dd8385a2d6df4c6d3f24dc601afc6ebe7aec5698b6de5a19881da53afc2aedd0c6ba8461eab23ff409074caaa7d74040fbad59cc431a48af2118799414d1cbeb12f85b6d54c1870f7d2c594fa37a5643e6ac", 0x0, 0x1}]}) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001280)={0x3, &(0x7f0000001200)=[{0x8, 0x1000, &(0x7f0000000140)="c8205d493783bcccdd14aa78f44090af95f20509fa51cf9a5cf77842353416bc96a70a5621e9253310417907c1c3d928709a9ec6df243a9a772452892e51a3eddc6589718cab6a0f58721be4e80a0e8c3f63de09332fe9ef8578ce8ce4e1d6159658e97a52d6a089b9d1c2cf0267291321133e2d6ac8b22c0f056082733901788ffe356b63408b98acbcc962b51e71a605f818a0140639f4d55aa69eefe6de32499419ce6b6e81cbcda086e1738df6c312b4fe9560de82f6e65e06e79fdd45b060784d53f0cb19fe67da638fff6b0052e28022a9fa6754d503582f71e451b55a3bcf5bc2a5af085c3d29cf1edc2b8938c5733e27b4746735ab6f503f184484cd67a92c45b7ae1f0a7c174a2d8376f9b66f673fb9223d2da6d19731b077b505f0087d63cafad8910d61c71a30e4f5845c755fd5205c728bb189bf04818fb32d7eee2929c2d3d4fca289c31f14764eebcba02c96d9fd17b6245aa6445b4dfe4ebe54da5609f95e2793fd85ba21848247a22256e145059d65475feb9065e593ec85ae3689d8045823f18a3ec6bc22692f8c3baef4f20984163112c05db15423ba19a217f2649b22d987b480e97bc3c37d341402a41cc79ee398e41f86107eeaf91b2402b2232b5afeca0a9357465a76ac70323c538e57023eb3c6c8caff6b1fb888c01a263301df13df7d67788f601c1256bfb8eb477de5ab930b09b93133ad8488ee88edf88195f38d017eb300f0c5e9207d81bb5a8391df1be962a3dec7a976ac29e06c2b5b69ef5c4fbfdefecae2546704b37ec074037d5c6cb8b2b16b7bb103b16e0455045e84cf2dc3f90be3bade07a9a8c75e2117d17e4e219b456d05b6b4ecfd76cd5cbae39338051e399bdeaee3b059e4505bc9f9838a75c7f0559b3fdd492cad032e2bd17688d9f25128bfbb5d1f4cfd68fd3ff39a15ddc7f40dc6570bf2c41f819d74936fa42da446bb63aff97c8121269385115e00830ccd5d9ad8138dfd7cf7f367279c69a7ee8978a8fd1a2f632f1cebdd860dd06b16cb805bef3c6e68a8b6cfe29aea6f902b7f1eddc6be80d8bb3b393bd3e83a230668753f4f5bebd88757b6ffb0793492ea2cbf2a71963cec1e4dd7038bd9eb076553de35754a98cbd5ab259d9047f54df2a34ac7fc592c4c8a6693af3ef2b57f30c3507f3c8f365f75246f7c5fba853bd68fddf4b47777f095b8ca6c94303e7e021150678845b0d6ed7e0d41214d96994f1ebc67bc251c2bb7980b8a61b42b6ab596eea1cfb6611324de29ecd65a4ba5a6abe5d9f7b43c1f4c0976b9dc5a358c5b8204553daa86490fd03df9e17d5e34f13e43f991f738889d1d985398ee15e889f244092103d4d38a1b85bb180fe3baa49050a43dfb6a6e42829458af8787fa0dd41c642eab51b83b34740fce104c96273934b0e82bea635ab23be614acabcd4180a2d8f668d5733c575d13c28768239fc92bf273635e90f54ef599979598bba36916b8469699ee0f49a8d5ce966d434ec0ca8ba6a887ec592cae63505710c04d5ec20350bc73537f8c45a68fbb592d0e91e062d6fc4822a7f3091b106bc33f6d0a3d627ca2ff65e9174dbdf995aef27ff3d73a8706c76c317110ed5c0bb0397816c83213e50688571201fae7b0740a6980784309d36ae0d399e2a7494212fe56112797dca82340755168fa890a1e2f983e3ce35de7534ea731e80e78309ff97a5f44faae7df5af56fad87ce7d0f3332125d1f3edd15db923e6e47e3ea285abaaf92b90818627177171ad66ce37617a4c3593d8c14ef84e21387468aae3ed138b35ff8bbbdaf00ae4f726cf55b8da5013fde352d273eaf799d0dc6f72c20a74f1fc6404060061db87e8b61d36013d87441b1114d375f9c90bfb262fe39e01840ece1cb9c7141030a3290f484ec0e73b406b3b89c2d1942e8fb9c8188fc9df5f9583d02fbec2d4cf795df2ba9445feae6b2c35aff8b98e1db2c01bd997e59d14465d284d8420d19c17560fa1345258a2ddc2dec48b403291eeeac140ed9c30a5cdb9ffb4d23f33df0443164262cf7ee98d3405db0e5499b9f93fbdfc2bc8882041e8a5c5280dbe41ccb5720a5b0ec9ee1836c60020caa9ac4862853931133ba9c910c7a1aa4ee581984dd2bbd989482b5790d32245bea57421e82a89c004c4bcfc518bd1834897081f5f3256e50818df52cf2f9082f4628e287d4bbebd6aa1644258070456a64675121e8bf47f557daf0542a0a1ff716fa45d1c4165a4befb4a5b617f3fc0242e34fe800bf53f2f3529bd427e04e5b2786ae2de0f24f5f98d29bce34332f19745d186eccc8ba0f8ed7f29c17644931d52ca1e6ef78a4f2c00a11782e57b4591a89e675b96e96f0428ebd410e8cef50c0c2bc9c5ba5ff84512a5009fc62f80ff94b11e349151fc47ca3e37ad1cd5b11a62dad30d5e27ad250eebf4ca96827d0eb983d147fcb692d9ba071418222dcbf07aefb3dda2cf150c474205e169d9e6265301be4a5d6ceaa51da4294253d075142eb91b7af41cfeeb879f3d7e27b0cb68ff1ac589e3b494de335cfa3934e8b9d6963f39076dab878502923e96c9de0e78a3b98800f9338fb19ec389144cf4d6b460695bf79dca97040127a831d222282689e1150b82109c0638477fef3a418db873506d72e8b6d92d43c05ebcce3adfd5bd5d6208ad64dcd049a1279f3515a5db8fdfa1625c3e4eab6ddf7b8ec57c45f5f8dab3d48b2d8c8cb445bd2996b9f03e5ab39a8e8a7a88708836b9f1caafe3053caf54d90e0920df8152103c288800152e236ae64c201adca760c207dddb9786eadb38c6c7f36cacd4791829798f3c0c2b6c44ec20939b30ed00653d66a74d9c8d9145c27ed7216daf2404e3a5f41a18b842eb808a4a081a4beb5e29f72610a9f432fc31bc56eb7cd515d3435a36046522f85982860e7c1cff7445a0fe5df6771863f4ac12c9b950731bc90597e9a8b824eb1b0d3a2a47cb5b68d351b5f643bb35f8b72eb27654df3058b87b5418e0cd9aaac94095431460c235990bc1be8a25c193afa0c8cebff20d958f8e4d512e4163e5daadc76bcf7d348cfa2ea48cbceb50a1fe2d56db94cb5a72211c30c5eeb59956f7f43a30eb87d610a73d6957de1e735833a583caaabd99457938f6af625b701f8e63fd0303ae083d35546e1a2045e6b40f3772ed18085bd121384c70f8ea50084a2f50171f6d4eecfcfea4be20e4aa93c7dad58f98c41bc2114d0b5bb35ac756570022761c3412afc4ca1326f4aec9d6767cd18792d25882987affa8417284c7405b586a7cf968c9df6ac5d844bde8f33f563919e73624138d68cdc94d7066cb40977c27d5019279fc32de7d10fcb9e335787a25d0646f84aa27222b0a72745173ac4ab162db7f6dd7df2b1f81dfe85f34acf4292148bdbd6fcdf47a942164fb9b1c4b4f53c2844c2c596c5bc9d2fbece6d3e1571c6d40bea146237a401d55ac999bf7eee095f303a3f43e58eb7796af617a04d73624cf56ffe17ef60f516fe1cb1c5c5df8ed7ef8024872d5841fb8d2273cc8d9d34d4f2fdd6b6914f6af2588166c76c09985e7d75fe7b59165f1c503ddd65ddca3d4b20b1593b894fd7b98452151555e0021fbd5b3dbfdef61f00a1c2f650942559e8623eced53133b22d134bdc39dec6339321b897555962e2b4ebc8d084ec416517381f259f902e470292ce05fead549d5378950f30f1b66da02ac8dbe6e9d948426975ca227f896c83ea563c0c3823f1b4fcdaea14d32d4fea471823002352e38f153b031162f85a3d841e2bbba714521bd025d6d2aebf1ac8559a7ade505a0c7dd4d51c4431514eebe16fa21fe282277d6140f573c663676150cda4b114bce10eeab7ff70c1f25862260f0f6bd1938f9596861c09f091bd1e41e8294ea1b4f06830e874f99a116e7049380efa7975708da4a5e81f826ff475123b56d480a8cf3f709f38faca347ff47bcf8170648647ae459487eea96b371d4cbeba41cff1b9a67740ea98a5f4bd20f987f2d690df05edbbc775b07735922d7e16c2fb0b5f4bf0a5453d6e64d817e3498ecde1f6e31643d6f8097171ae68f03f107b5ef8299659749d65c4fc3752e315aacaf358bd1a734ea6270c81ba65f9fb42235475555989de848ad498ea558c6e5ccdb9a7f2f9601d0bd76095aed6d9717981bd4a2a869354a6b2b37785c5878c5f024d4ba063340d98030415311cdd1f48e7446ce8d91fc803b318247d8abc789b824fd74274d7dc58bab178dff0ee6560ce51fdf62f5b7c836553b342b80cc7f3acee33eddd352b067f3aa637411d4eb676246c40597c67b9081fc384355f3eabead5c28a07ff79bfd32e7981bddaea837fdee3d6d34d0e33bc775fae82252a0e7470114ed9a9269bc807f0f7e04a437d448063c5a3f8eb828e16ffe227eabed4de2f0493adc96693b09684c3f4782116e49bbc242e4705303382b15967ed424425c13efa4943a4b24d44cb1b47f4a61c0b6f18b2958ca20d8b583043e78945c78bf21ab8e88b3275e9d4378baf41453ed1ba0b1d0a318f429b678eecb179a777782f01e77dff2853e7b469e535e0505845fc1693f2ccb9d7ca729d71c507234b451f786eadc5faa22896456457d1d4ab9bb5a2bac18a02ef7a1db9c31d750c912c75665011ff8153661412de1b0d9742d20d38406ba21a474ab09be513228ce0c658a683cdcacd6d2cde832af5961cd36d0f92a398f2b76930a520d1f3d3e9f9ff5172637c79c32a4dbd091cbcd40d434d262511a71a81ab8562295f7839725267ce05d44358aed3a20076e4574a2615b96ed7c3d32e58af9e8acaf4b86047b2875921f3d263eb8d1edcedf866b4abfc95f5c2f890b0948f5af339783c317ca8e29c4e1e90515417be029dd271559008c2875166a98dd07fd44ebc5f7ee8d01310c89d2160d12988b41d15e7ece08a12d660589830f29c9e28e3fbbcc85b9b1b4baea931073172d0d44c3d037bb05946afca74c1f87c5a7576c180aae0b63e925543b8ac2aee95ea401fcc80ac8efe8e4e669fece366963406ed99d855975ca9801dbd9b84694a2d5b6ff1a8c2226b742533417fa385ce8085514c1de77e31af233452178b754b621ab97511b06944a84bed5791cee8fd388e00ffb12974c7ba318113f246d22100d63b996a7cb6efe876d40e6f50bb01a6e36594bc3385e600fb7bf8efb35cee3bde181c88dfa2f3b7817b3ff530d0a797f47e8b601d80b3206cb734ac91c74c5c974beb29b27fbec1295651f2178bd3e23ebde4c5cd203a7e27d72b0f20102191066902a0c79fffb4aeccfcbb6866016d0b75767dd53f34bfe4156a91ebd5b4d9d2e3ff33a17e67968a64514ecdb94efe391490148cc187d548ba835d5d3af23459be4d3fec35f5004c6060b2ddaa313151cefc7dfa440666ad505e1dec1bca8df870c2dfb8a5efa295a6a1a0683e41049fe8e1b6bfe57db0939d91ef459e37f716cab5a3ffbc19cd64d5ef13919e54c58fc47c9296bcfa612da23d6981503c634c90df1abeb0b799c769c17fa461196bb16220ac9d0997b6312d57cc2a1e183e7576908a52506943108e1f81d26ac62ee0fefa005cb99ce308f3deac6f03faf554fd9b38342ad3f04691c8dbc72362d1cec0ab536324d2268f2f2aa54ab65f85e2b5923c0fe345f3dcff9b0e2d88bfc01bd15dcb010f42871dd0c0cf2f53f32049f96ddd22812bdaa5b70dfb5270651fcd1c5c2b752e174a22d882e19021c10cf0c6f7017a1cca4a6c9a113ceb2dbac673061dbc18bc5915d8e981c1940722e55e67b6e96e8", 0x0, 0x1}, {0x10001, 0x3c, &(0x7f0000000040)="13b414ee7b8e1db1f2550ccec6d77093c1d8b086f9a6ba013beb8a775a65a2e5e7f111d820a023778a4d54c552921854b48d7cd9f20d027843340e66"}, {0xf9, 0xae, &(0x7f0000001140)="2cf087dbce9829d0b51f89e9d8fb1948808840f9c776295aaf72ddcd0d86610aa79a161d8c06085ad956c3c78f644beb4ad0be515815a841fade824490d583b280a531d48fa9d8e8b505c6d42fb8761d5c1e5f4316fc5ef5e5b1bc49dd8385a2d6df4c6d3f24dc601afc6ebe7aec5698b6de5a19881da53afc2aedd0c6ba8461eab23ff409074caaa7d74040fbad59cc431a48af2118799414d1cbeb12f85b6d54c1870f7d2c594fa37a5643e6ac", 0x0, 0x1}]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto$inet(r5, &(0x7f0000000200)="67ac2960dbf834b888a8b0b37d4eacc9fe6105163ea1b370a4bbe1cd8e6ee5c07d084724e724f7c3ce2fd7a2d8bd189d82ab1aa3550b3304a8986ef6ae5e54ef8d9ea6826878f472359e3544ecc507000000000000000000000000000000f6bee8fc8f3d", 0x64, 0x841, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000200)="67ac2960dbf834b888a8b0b37d4eacc9fe6105163ea1b370a4bbe1cd8e6ee5c07d084724e724f7c3ce2fd7a2d8bd189d82ab1aa3550b3304a8986ef6ae5e54ef8d9ea6826878f472359e3544ecc507000000000000000000000000000000f6bee8fc8f3d", 0x64, 0x841, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f00000012c0)={@dev, @empty}, &(0x7f0000001300)=0x8) 1.325088681s ago: executing program 4 (id=615): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) (async) io_setup(0x7, &(0x7f0000000280)=0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2, 0x200}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffffe) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x18) (async) lremovexattr(0x0, 0x0) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x401, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x8, 0x1, 0x4, 0x0, 0x5}) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x40000000000009, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0xffffffff, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x42, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x80000000006, 0x8001, 0x7, 0x1, 0xec7, 0x3, 0xc58e, 0x3, 0x11ad, 0x0, 0x453, 0x8000, 0x100080, 0x7f, 0x9, 0x200000000001, 0x2, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x100, 0x3, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x8, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) (rerun: 32) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r8, &(0x7f0000000000)=[{&(0x7f00000002c0)='\n', 0x1}, {&(0x7f0000000140)="9f", 0x1}], 0x2) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e2a, 0x20000000, @empty, 0x1000}}, 0x3, 0x0, 0x20000, 0x0, 0x8d, 0x5, 0x3}, 0x9c) (async, rerun: 32) io_submit(r1, 0x3, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, 0x0, 0x0]) 1.323851207s ago: executing program 5 (id=616): r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x149000) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x9, 0x1, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x1fc}, &(0x7f0000000480), &(0x7f0000000100)) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) (async) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) (async) r2 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), 0x0, &(0x7f0000000340), {0x2a}, 0x0, 0x0, &(0x7f0000000380)=""/215, 0x0}, 0x58) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xa010, &(0x7f00000004c0)={[{@nfs_export_on}, {@redirect_dir_on}], [{@fowner_lt}]}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) (async) sched_setscheduler(r3, 0x0, &(0x7f00000002c0)=0xa00004) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0205648, 0x0) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket(0x2, 0x80805, 0x0) 1.190398468s ago: executing program 6 (id=617): r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f00000000c0), 0x8) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000100)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x10101, 0x0) recvmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/243, 0xf3}, {&(0x7f00000003c0)=""/233, 0xe9}], 0x4}, 0x8}, {{&(0x7f0000000500)=@pppoe, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/60, 0x3c}], 0x1, &(0x7f0000000600)=""/70, 0x46}, 0x4094}, {{&(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/23, 0x17}], 0x2, &(0x7f0000001780)=""/152, 0x98}, 0x6}], 0x3, 0x12101, &(0x7f0000001900)={0x0, 0x989680}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001940), &(0x7f0000001980)=0xe) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000019c0)={0xffffffffffffffff, 0x1, 0x4000, 0xfffffffff0000000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000001a00)=0x4) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000001a40)={@multicast1, @initdev}, &(0x7f0000001a80)=0x8) mount(&(0x7f0000001ac0)=@filename='./file0\x00', &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)='hfs\x00', 0x400, &(0x7f0000001b80)='\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001bc0)={0x0, 0x3, 0x4, 0x51, 0x480a5648, 0x4}, &(0x7f0000001c00)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001c40)={0x6, 0x208, 0xf, 0x5, r6}, &(0x7f0000001c80)=0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/55, 0x37}, {&(0x7f0000001d00)=""/32, 0x20}, {&(0x7f0000001d40)=""/123, 0x7b}], 0x3, &(0x7f0000001e00)=""/136, 0x88}}], 0x1, 0x2100, &(0x7f0000001f00)={0x0, 0x989680}) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001f40), 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x44, r9, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x3b}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7d}]}, 0x44}, 0x1, 0x0, 0x0, 0xc04}, 0x20000080) syz_create_resource$binfmt(&(0x7f0000002100)='./file0\x00') ioctl$VHOST_VDPA_GET_CONFIG(r8, 0x8008af73, &(0x7f0000002140)={0x0, 0xac, ""/172}) epoll_create1(0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000002240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0xe8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000002200), {[{{@arp={@multicast2, @broadcast, 0xff000000, 0x0, 0x9, 0xd, {@mac=@local, {[0xff]}}, {@mac=@random="f362c6d77308", {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0xad, 0x7f, 0x8, 0x4, 0x8, 'syzkaller1\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x35}, @empty, 0x0, 0xff000000, 0xf, 0xb, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x101, 0xff, 0x0, 0xff]}}, 0x7, 0xfb, 0x400, 0x5, 0x7, 0xa388, 'geneve1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="c1c86f9918ed", @initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x8, 0xffffffff}}}, {{@arp={@multicast1, @remote, 0xfffffefe, 0xffffffff, 0xc, 0x0, {@empty, {[0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x101, 0x9, 0x5, 0x6, 0x8e4b, 0x6, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="e4136f460728", @empty, @dev={0xac, 0x14, 0x14, 0x37}, @local, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000026c0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002780)={'ip6_vti0\x00', &(0x7f0000002700)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x3, 0x1e, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x4, 0x1}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a80)={r8, 0xe0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0], 0x0, 0x1e, &(0x7f0000002880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000028c0), &(0x7f0000002900), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000002940)}}, 0x10) getpeername$packet(r2, &(0x7f0000002ac0)={0x11, 0x0, 0x0}, &(0x7f0000002b00)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000002e00)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x104, r10, 0x228, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) 1.161523793s ago: executing program 5 (id=618): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') socket$inet6(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x9, 0x8000000000000000}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 1.000754698s ago: executing program 2 (id=619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000007c0)="00aad6ac2e03be8983c74b87c2ebbe3caa113a9fb121c7eaba64a7a4ebc60cd3915b44053f218f036626fe3912e4758911b677cb49cc51653e950cc4604e6e25a9095681382e90f5645a4d37cb9ceb9c5f0203732230d8268aa27cbf7f8983476f3a12d5e52ad6b102542cf03c72e732140cf7a0f2f4458e325e4c3610c3b665ab13173eb5a978149e9dedb6f8cf5788e4b97341ae09a7f15838e3ad81ba8e0e999acc98b1905f80afe53c93264abf209b418235206f520f534d99e3cb76ee", 0xbf}], 0x1, 0x2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=':#^)&\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x7d) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x4000040) r7 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x42a, 0x107, 0xfffffffc, 0x25dfdbfb, {0x5, 0x7c}, [@typed={0x6, 0x1, 0x0, 0x0, @str='/\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r11, &(0x7f0000000440)) r12 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000030000000000000000000000000000000000000000000000c12bdfa800000000000000000000000000000000000000000000000000000000050000001000000001000000000000000600000000000000050000000000000006000000000000000000000000000000000000000000000000000000000000000500000003000000080000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/384]) 997.089671ms ago: executing program 6 (id=620): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400020000000000cc6c4bd606000800653a00"/28], 0x34}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x75}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x70bd26, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) 904.833899ms ago: executing program 5 (id=621): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c0000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x4010) bpf$PROG_LOAD(0x5, 0x0, 0x0) 597.593388ms ago: executing program 2 (id=622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x4008af13, &(0x7f0000000040)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async) clock_adjtime(0x0, &(0x7f00000004c0)={0x37db, 0xf423f, 0xfffffffffffffffc, 0x5d646dc, 0xfffffffffffffffa, 0x9, 0x60000000000, 0x0, 0xffffffffffffffff, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x2, 0x3, 0x40, 0x0, 0x50000000000, 0x0, 0x0, 0x1, 0x6}) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x20}]}, @restrict={0x0, 0x0, 0x0, 0x4, 0x2000}]}}, 0x0, 0x3e}, 0x28) (rerun: 64) 575.702858ms ago: executing program 6 (id=623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r3, 0x0) setpgid(0x0, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2024) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0xfff1, 0x7}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x3ff, 0x0, 0x1, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_io_uring_setup(0x88f, &(0x7f00000002c0)={0x0, 0xaede, 0x800, 0xffffffff, 0x1b2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040301, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002240)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x80, &(0x7f0000002400)=[{&(0x7f00000022c0)}], 0x1}}], 0x2, 0x48040) 456.137954ms ago: executing program 4 (id=624): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x121000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_io_uring_setup(0x151f, &(0x7f0000000400)={0x0, 0x5218, 0x800, 0x1, 0x29a}, &(0x7f0000000040), &(0x7f0000000480)) io_uring_enter(r5, 0x321c, 0x3c0b, 0x15, &(0x7f00000004c0), 0x8) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008b7a5bc13895ab71ab89b810de5cb26b36348406c9cd7cd23f38722b7a2862c87312edf63fc0bf12f6221965d97645f40474fdf0972a06302b245f5014c5b35c6b04b1d49ac9cc70b18bb603ddd76993d77b0cb1c3858a97b3df5fc4cf3c5605da1751b1cd8a8e9d666787b05a"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r7, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@empty, 0x40}, {@in=@local, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x2}, {}, {}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 0s ago: executing program 1 (id=625): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0xf, 0x80000, 0xa) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): usted_key: encrypted_key: hex blob is missing [ 175.497314][ T7194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.556639][ T7194] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.801109][ T6011] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.808863][ T30] audit: type=1400 audit(1766587480.757:411): avc: denied { getopt } for pid=7192 comm="syz.4.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.811232][ T6011] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.905772][ T6011] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.924164][ T6011] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 175.952809][ T6011] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.999752][ T6011] usb 6-1: config 0 descriptor?? [ 176.014995][ T30] audit: type=1400 audit(1766587480.977:412): avc: denied { mounton } for pid=7216 comm="syz.2.246" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 176.015037][ T7218] fuse: Unknown parameter 'G' [ 176.044275][ T5923] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 176.179842][ T30] audit: type=1400 audit(1766587481.137:413): avc: denied { mount } for pid=7216 comm="syz.2.246" name="/" dev="autofs" ino=13280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 176.274160][ T5923] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 176.327733][ T5923] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 76:94:1e:de:5f:ae [ 176.376609][ T5923] usb 5-1: USB disconnect, device number 14 [ 176.402266][ T5923] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 176.456951][ T6011] sony 0003:054C:0268.000A: item fetching failed at offset 5/7 [ 176.634829][ T6011] sony 0003:054C:0268.000A: parse failed [ 176.655556][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.672813][ T6011] sony 0003:054C:0268.000A: probe with driver sony failed with error -22 [ 176.716634][ T5923] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 176.726547][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.772388][ T5923] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 176.791326][ T7227] random: crng reseeded on system resumption [ 176.812932][ T30] audit: type=1400 audit(1766587481.767:414): avc: denied { module_request } for pid=7226 comm="syz.1.247" kmod="net-pf-35-proto-4096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 176.852853][ T5923] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 177.170715][ T5923] usb 6-1: USB disconnect, device number 8 [ 177.210000][ T30] audit: type=1400 audit(1766587482.167:415): avc: denied { bind } for pid=7238 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 177.646406][ T30] audit: type=1400 audit(1766587482.607:416): avc: denied { write } for pid=7235 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 177.868060][ T7251] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.878856][ T7251] block device autoloading is deprecated and will be removed. [ 177.972886][ T5923] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.136432][ T5923] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.182753][ T5923] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.209332][ T30] audit: type=1400 audit(1766587483.167:417): avc: denied { bind } for pid=7255 comm="syz.5.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.261163][ T5923] usb 1-1: config 1 has no interface number 1 [ 178.322816][ T30] audit: type=1400 audit(1766587483.197:418): avc: denied { name_bind } for pid=7255 comm="syz.5.251" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 178.357196][ T5923] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.382685][ T5923] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 178.394124][ T30] audit: type=1400 audit(1766587483.197:419): avc: denied { node_bind } for pid=7255 comm="syz.5.251" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 178.439497][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.452775][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.471032][ T5923] usb 1-1: Product: syz [ 178.524624][ T5923] usb 1-1: Manufacturer: syz [ 178.543400][ T5923] usb 1-1: SerialNumber: syz [ 178.795783][ T5923] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 178.876109][ T5923] usb 1-1: USB disconnect, device number 10 [ 179.334770][ T6800] udevd[6800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.614401][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 179.614417][ T30] audit: type=1400 audit(1766587484.577:422): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 179.740417][ T30] audit: type=1400 audit(1766587484.697:423): avc: denied { mounton } for pid=7290 comm="syz.1.258" path="/59/file0" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 179.796442][ T7285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.844461][ T5923] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 180.019750][ T5923] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.042565][ T5923] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.053460][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 180.053632][ T5967] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.062969][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.126397][ T5923] usb 6-1: config 0 descriptor?? [ 180.175281][ T5923] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 180.869929][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 180.886844][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 180.894706][ T5967] usb 1-1: can't read configurations, error -61 [ 180.942692][ T5895] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 181.052870][ T5967] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.135829][ T5895] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.145979][ T5895] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.159136][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 182.168712][ T5895] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 182.178809][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.189345][ T5895] usb 2-1: config 0 descriptor?? [ 182.292835][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 182.304341][ T5967] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 182.311931][ T5967] usb 1-1: can't read configurations, error -61 [ 182.333808][ T5967] usb usb1-port1: attempt power cycle [ 182.462862][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 182.506405][ T43] usb 6-1: USB disconnect, device number 9 [ 182.638390][ T5895] sony 0003:054C:0268.000B: item fetching failed at offset 5/7 [ 182.662588][ T5895] sony 0003:054C:0268.000B: parse failed [ 182.667775][ T7331] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 182.668611][ T5895] sony 0003:054C:0268.000B: probe with driver sony failed with error -22 [ 182.693764][ T5967] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.727478][ T5967] usb 1-1: device descriptor read/8, error -71 [ 182.759763][ T7331] team0: Port device dummy0 added [ 182.873919][ T30] audit: type=1400 audit(1766587487.837:424): avc: denied { ioctl } for pid=7338 comm="syz.0.269" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 182.902012][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.931955][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.029585][ T30] audit: type=1400 audit(1766587487.987:425): avc: denied { getopt } for pid=7341 comm="syz.2.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 184.114414][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 184.348297][ T5876] usb 2-1: USB disconnect, device number 11 [ 184.582830][ T5895] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 184.613178][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 184.649510][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.699174][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.732329][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.845935][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.896587][ T5895] usb 6-1: device descriptor read/64, error -71 [ 184.938331][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.128042][ T9] usb 5-1: config 0 descriptor?? [ 185.240237][ T5895] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 185.483558][ T5895] usb 6-1: device descriptor read/64, error -71 [ 185.683000][ T5895] usb usb6-port1: attempt power cycle [ 185.767448][ T7357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.272'. [ 185.796381][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.812793][ T9] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 185.824788][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.844914][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.868616][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.886497][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.911647][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.928833][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.947500][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.968986][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 185.985131][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 186.033299][ T9] microsoft 0003:045E:07DA.000C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 186.058517][ T9] microsoft 0003:045E:07DA.000C: no inputs found [ 186.065912][ T5895] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 186.084637][ T9] microsoft 0003:045E:07DA.000C: could not initialize ff, continuing anyway [ 186.096978][ T5895] usb 6-1: device descriptor read/8, error -71 [ 186.224213][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.260585][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.310277][ T9] usb 5-1: USB disconnect, device number 15 [ 186.352704][ T5895] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 186.395334][ T5895] usb 6-1: device descriptor read/8, error -71 [ 186.460607][ T7369] input: syz0 as /devices/virtual/input/input26 [ 186.529331][ T5895] usb usb6-port1: unable to enumerate USB device [ 186.612242][ T30] audit: type=1400 audit(1766587491.567:426): avc: denied { getopt } for pid=7371 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.822862][ T7385] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 187.831310][ T7385] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 187.843003][ T7385] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 188.180243][ T30] audit: type=1400 audit(1766587492.797:427): avc: denied { firmware_load } for pid=7382 comm="syz.4.280" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.287951][ T30] audit: type=1400 audit(1766587493.247:428): avc: denied { setopt } for pid=7383 comm="syz.2.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.677083][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'. [ 189.661895][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.284'. [ 189.713729][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 189.995955][ T9] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.172717][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 191.179271][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 191.202715][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 191.208728][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 191.233927][ T9] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.250870][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.260859][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 192.272831][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.287094][ T9] usb 3-1: config 0 descriptor?? [ 194.302002][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.308424][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.450988][ T9] usb 3-1: can't set config #0, error -71 [ 195.472034][ T9] usb 3-1: USB disconnect, device number 17 [ 196.074212][ T30] audit: type=1400 audit(1766587501.027:429): avc: denied { map } for pid=7433 comm="syz.0.289" path="socket:[14620]" dev="sockfs" ino=14620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.193142][ T30] audit: type=1400 audit(1766587501.027:430): avc: denied { read accept } for pid=7433 comm="syz.0.289" path="socket:[14620]" dev="sockfs" ino=14620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.273480][ T30] audit: type=1400 audit(1766587501.217:431): avc: denied { create } for pid=7440 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 196.308135][ T30] audit: type=1400 audit(1766587501.267:432): avc: denied { sys_admin } for pid=7440 comm="syz.1.290" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 196.365696][ T30] audit: type=1400 audit(1766587501.307:433): avc: denied { mount } for pid=7440 comm="syz.1.290" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.392719][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 196.402204][ T7425] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 196.554372][ T7425] usb 1-1: device descriptor read/64, error -71 [ 196.584574][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.629466][ T9] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 196.667437][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 196.702220][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.846574][ T7425] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 196.965096][ T9] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 196.980440][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input27 [ 197.062686][ T7425] usb 1-1: device descriptor read/64, error -71 [ 197.154616][ T7451] random: crng reseeded on system resumption [ 197.183004][ T7425] usb usb1-port1: attempt power cycle [ 197.310904][ T30] audit: type=1400 audit(1766587502.167:434): avc: denied { bind } for pid=7449 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.376775][ T30] audit: type=1400 audit(1766587502.197:435): avc: denied { connect } for pid=7449 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.446177][ T30] audit: type=1400 audit(1766587502.207:436): avc: denied { write } for pid=7449 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 197.585219][ T9] input: failed to attach handler kbd to device input27, error: -5 [ 197.652705][ T7425] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 198.210463][ T7425] usb 1-1: device descriptor read/8, error -71 [ 198.324681][ T9] usb 3-1: USB disconnect, device number 18 [ 198.452698][ T7425] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 198.494448][ T7425] usb 1-1: device descriptor read/8, error -71 [ 198.615284][ T30] audit: type=1400 audit(1766587503.547:437): avc: denied { create } for pid=7469 comm="syz.5.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 198.620373][ T7425] usb usb1-port1: unable to enumerate USB device [ 198.685166][ T7475] [U] [ 198.687950][ T7475] [U] [ 198.690615][ T7475] [U] [ 198.693275][ T7475] [U] [ 198.696890][ T7475] [U] [ 198.699606][ T7475] [U] [ 198.702305][ T7475] [U] [ 198.704998][ T7475] [U] [ 198.708914][ T7475] [U] [ 198.711626][ T7475] [U] [ 198.714328][ T7475] [U] [ 198.717025][ T7475] [U] [ 198.720288][ T7475] [U] [ 198.722994][ T7475] [U] [ 198.725692][ T7475] [U] [ 198.728392][ T7475] [U] [ 198.733064][ T7475] [U] [ 198.735793][ T7475] [U] [ 198.738486][ T7475] [U] [ 198.741170][ T7475] [U] [ 198.745411][ T7475] [U] [ 198.748116][ T7475] [U] [ 198.750892][ T7475] [U] [ 198.753578][ T7475] [U] [ 198.761548][ T7475] [U] [ 198.764266][ T7475] [U] [ 198.766971][ T7475] [U] [ 198.769669][ T7475] [U] [ 198.772645][ T7475] [U] [ 198.775349][ T7475] [U] [ 198.778041][ T7475] [U] [ 198.780724][ T7475] [U] [ 198.783912][ T7475] [U] [ 198.786619][ T7475] [U] [ 198.789295][ T7475] [U] [ 198.791963][ T7475] [U] [ 198.794828][ T7475] [U] [ 198.797505][ T7475] [U] [ 198.800171][ T7475] [U] [ 198.802853][ T7475] [U] [ 198.805663][ T7475] [U] [ 198.808332][ T7475] [U] [ 198.810994][ T7475] [U] [ 198.813663][ T7475] [U] [ 198.816479][ T7475] [U] [ 198.819155][ T7475] [U] [ 198.821828][ T7475] [U] [ 198.824495][ T7475] [U] [ 198.827296][ T7475] [U] [ 198.829964][ T7475] [U] [ 198.832638][ T7475] [U] [ 198.835303][ T7475] [U] [ 198.838070][ T7475] [U] [ 198.840745][ T7475] [U] [ 198.843406][ T7475] [U] [ 198.846067][ T7475] [U] [ 198.848889][ T7475] [U] [ 198.851561][ T7475] [U] [ 198.854224][ T7475] [U] [ 198.856886][ T7475] [U] [ 198.863992][ T7475] [U] [ 198.866681][ T7475] [U] [ 198.869346][ T7475] [U] [ 198.872007][ T7475] [U] [ 198.874831][ T7475] [U] [ 198.877510][ T7475] [U] [ 198.880169][ T7475] [U] [ 198.882850][ T7475] [U] [ 198.885651][ T7475] [U] [ 198.888327][ T7475] [U] [ 198.890991][ T7475] [U] [ 198.893653][ T7475] [U] [ 198.896448][ T7475] [U] [ 198.899126][ T7475] [U] [ 198.901798][ T7475] [U] [ 198.904464][ T7475] [U] [ 198.907237][ T7475] [U] [ 198.909912][ T7475] [U] [ 198.912572][ T7475] [U] [ 198.915236][ T7475] [U] [ 198.917977][ T7475] [U] [ 198.920649][ T7475] [U] [ 198.923311][ T7475] [U] [ 198.925975][ T7475] [U] [ 198.928707][ T7475] [U] [ 198.931377][ T7475] [U] [ 198.934041][ T7475] [U] [ 198.936702][ T7475] [U] [ 198.939543][ T7475] [U] [ 198.942216][ T7475] [U] [ 198.944881][ T7475] [U] [ 198.947543][ T7475] [U] [ 198.950329][ T7475] [U] [ 198.953004][ T7475] [U] [ 198.955668][ T7475] [U] [ 198.958330][ T7475] [U] [ 199.113601][ T7475] [U] [ 199.116311][ T7475] [U] [ 199.118979][ T7475] [U] [ 199.121639][ T7475] [U] [ 199.124832][ T7475] [U] [ 199.127540][ T7475] [U] [ 199.130250][ T7475] [U] [ 199.132945][ T7475] [U] [ 199.137313][ T7475] [U] [ 199.140028][ T7475] [U] [ 199.142727][ T7475] [U] [ 199.145429][ T7475] [U] [ 199.149354][ T7475] [U] [ 199.152064][ T7475] [U] [ 199.154769][ T7475] [U] [ 199.157464][ T7475] [U] [ 199.165100][ T7475] [U] [ 199.167824][ T7475] [U] [ 199.170526][ T7475] [U] [ 199.173224][ T7475] [U] [ 199.177912][ T7475] [U] [ 199.180626][ T7475] [U] [ 199.183319][ T7475] [U] [ 199.186016][ T7475] [U] [ 199.190361][ T7475] [U] [ 199.193065][ T7475] [U] [ 199.195768][ T7475] [U] [ 199.198466][ T7475] [U] [ 199.202337][ T7475] [U] [ 199.205050][ T7475] [U] [ 199.207757][ T7475] [U] [ 199.387206][ T7473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 199.467828][ T30] audit: type=1400 audit(1766587504.427:438): avc: denied { create } for pid=7479 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.676262][ T7469] [U] [ 199.703618][ T6395] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 199.874382][ T6395] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.896835][ T6395] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.914165][ T6395] usb 1-1: config 0 interface 0 has no altsetting 0 [ 199.931758][ T6395] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 199.940985][ T6395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.090334][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.144018][ T6395] usb 1-1: config 0 descriptor?? [ 200.181766][ T7494] netlink: 'syz.5.302': attribute type 11 has an invalid length. [ 200.610287][ T7493] team0: Port device batadv1 added [ 200.781520][ T7496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.832504][ T6395] sony 0003:054C:0268.000D: item fetching failed at offset 5/7 [ 200.841043][ T6395] sony 0003:054C:0268.000D: parse failed [ 200.847440][ T6395] sony 0003:054C:0268.000D: probe with driver sony failed with error -22 [ 201.165518][ T7481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.453684][ T7481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.964598][ T9] usb 1-1: USB disconnect, device number 19 [ 202.101181][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 202.101198][ T30] audit: type=1400 audit(1766587507.057:441): avc: denied { mount } for pid=7508 comm="syz.5.306" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 202.171338][ T30] audit: type=1400 audit(1766587507.097:442): avc: denied { mounton } for pid=7508 comm="syz.5.306" path="/34/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 202.385683][ T30] audit: type=1400 audit(1766587507.347:443): avc: denied { unmount } for pid=6402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 203.148179][ T7521] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 203.263125][ T30] audit: type=1400 audit(1766587508.227:444): avc: denied { name_bind } for pid=7520 comm="syz.0.310" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 203.375420][ T7525] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 203.442768][ T7525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.531833][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.311'. [ 203.567625][ T7529] bond2: (slave geneve3): making interface the new active one [ 203.584236][ T7529] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 203.783508][ T7525] bond2: entered promiscuous mode [ 203.785661][ T30] audit: type=1400 audit(1766587508.747:445): avc: denied { accept } for pid=7524 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.788612][ T7525] geneve3: entered promiscuous mode [ 204.142965][ T30] audit: type=1400 audit(1766587509.107:446): avc: denied { getopt } for pid=7530 comm="syz.0.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 205.577218][ T30] audit: type=1400 audit(1766587510.537:447): avc: denied { setopt } for pid=7545 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 205.969359][ T7557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 206.012798][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 206.079210][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 206.202818][ T9] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 206.501609][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.547925][ T30] audit: type=1400 audit(1766587511.507:448): avc: denied { remount } for pid=7564 comm="syz.5.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 206.573509][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 206.598500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 206.654588][ T76] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.672833][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 206.695175][ T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.721985][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 206.752679][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 206.752711][ T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.762338][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.771025][ T9] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 206.863934][ T76] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.873560][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.893089][ T9] usb 3-1: Product: syz [ 206.897283][ T9] usb 3-1: Manufacturer: syz [ 206.901870][ T9] usb 3-1: SerialNumber: syz [ 206.983289][ T9] usb 3-1: config 0 descriptor?? [ 206.991466][ T7558] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.031381][ T9] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 207.324347][ T30] audit: type=1400 audit(1766587512.287:449): avc: denied { ioctl } for pid=7555 comm="syz.2.320" path="socket:[14835]" dev="sockfs" ino=14835 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.402071][ T30] audit: type=1400 audit(1766587512.337:450): avc: denied { write } for pid=7570 comm="syz.0.324" path="socket:[14839]" dev="sockfs" ino=14839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.506384][ T6997] usb 3-1: USB disconnect, device number 19 [ 207.804424][ T30] audit: type=1400 audit(1766587512.757:451): avc: denied { ioctl } for pid=7574 comm="syz.5.325" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 208.719127][ T7591] evm: overlay not supported [ 208.783142][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 208.803587][ T7592] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.327' sets config #31 [ 209.153006][ T7424] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.497842][ T7611] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 209.632687][ T7424] usb 3-1: Using ep0 maxpacket: 8 [ 209.640013][ T7424] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.664374][ T7424] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 209.687326][ T7424] usb 3-1: config 8 has no interface number 0 [ 209.695165][ T7424] usb 3-1: config 8 interface 255 has no altsetting 0 [ 209.711913][ T7424] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 209.732666][ T7424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.740759][ T7424] usb 3-1: Product: syz [ 209.752667][ T7424] usb 3-1: Manufacturer: syz [ 209.762796][ T7424] usb 3-1: SerialNumber: syz [ 209.984747][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 210.031885][ T7424] catc 3-1:8.255: Can't set altsetting 1. [ 210.041922][ T7424] catc 3-1:8.255: probe with driver catc failed with error -5 [ 210.072513][ T7424] usb 3-1: USB disconnect, device number 20 [ 210.137450][ T30] audit: type=1400 audit(1766587515.097:452): avc: denied { append } for pid=7604 comm="syz.5.330" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.582884][ T6997] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 210.619135][ T30] audit: type=1400 audit(1766587515.577:453): avc: denied { bind } for pid=7626 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.649559][ T30] audit: type=1400 audit(1766587515.597:454): avc: denied { write } for pid=7626 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.768605][ T7628] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 210.783767][ T30] audit: type=1400 audit(1766587515.747:455): avc: denied { open } for pid=7626 comm="syz.1.336" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 210.860481][ T6997] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 210.917286][ T6997] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 210.930307][ T6997] usb 1-1: Product: syz [ 210.948388][ T6997] usb 1-1: Manufacturer: syz [ 210.956580][ T30] audit: type=1400 audit(1766587515.917:456): avc: denied { watch watch_reads } for pid=7632 comm="syz.2.338" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 210.980533][ T6997] usb 1-1: SerialNumber: syz [ 210.998231][ T6997] usb 1-1: config 0 descriptor?? [ 211.017248][ T6997] ch341 1-1:0.0: ch341-uart converter detected [ 211.071674][ T30] audit: type=1400 audit(1766587516.027:457): avc: denied { lock } for pid=7640 comm="syz.5.339" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 211.512702][ T7424] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.663482][ T7424] usb 5-1: device descriptor read/64, error -71 [ 211.667001][ T7654] fuse: Bad value for 'fd' [ 212.272697][ T7424] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.310421][ T6997] ch341-uart ttyUSB0: break control not supported, using simulated break [ 212.320566][ T6997] usb 1-1: ch341-uart converter now attached to ttyUSB0 [ 212.412689][ T7424] usb 5-1: device descriptor read/64, error -71 [ 212.534778][ T7424] usb usb5-port1: attempt power cycle [ 212.769167][ T7668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=7668 comm=syz.5.345 [ 212.825813][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 212.902882][ T7424] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.173464][ T7424] usb 5-1: device descriptor read/8, error -71 [ 213.253014][ T9] usb 3-1: device descriptor read/64, error -71 [ 213.363750][ T6997] usb 1-1: USB disconnect, device number 20 [ 213.391177][ T6997] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 214.409209][ T7424] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 214.435455][ T6997] ch341 1-1:0.0: device disconnected [ 214.472690][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 214.504092][ T7424] usb 5-1: device descriptor read/8, error -71 [ 214.622040][ T7424] usb usb5-port1: unable to enumerate USB device [ 214.632693][ T9] usb 3-1: device descriptor read/64, error -71 [ 214.763284][ T9] usb usb3-port1: attempt power cycle [ 215.921894][ T30] audit: type=1400 audit(1766587520.877:458): avc: denied { setopt } for pid=7690 comm="syz.2.354" laddr=fe80::10 lport=40206 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 216.491613][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.353'. [ 216.555502][ T30] audit: type=1400 audit(1766587521.417:459): avc: denied { ioctl } for pid=7689 comm="syz.5.353" path="socket:[16358]" dev="sockfs" ino=16358 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.693834][ T30] audit: type=1400 audit(1766587521.447:460): avc: denied { bind } for pid=7689 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 216.732844][ T7425] IPVS: starting estimator thread 0... [ 216.842897][ T7701] IPVS: using max 38 ests per chain, 91200 per kthread [ 216.853143][ T9] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 216.918979][ T7696] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 216.948945][ T30] audit: type=1400 audit(1766587521.907:461): avc: denied { append } for pid=7697 comm="syz.4.356" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 217.021739][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 217.063148][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 217.069874][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.103738][ T30] audit: type=1400 audit(1766587522.067:462): avc: denied { write } for pid=7697 comm="syz.4.356" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 217.129398][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.146937][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 217.160006][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 217.172525][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.182147][ T9] usb 3-1: config 0 descriptor?? [ 217.502722][ T7424] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 218.369304][ T7424] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.397175][ T9] hid_parser_main: 1 callbacks suppressed [ 218.397175][ T7424] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.397194][ T9] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 218.404881][ T7424] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.428976][ T9] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 218.534468][ T7424] usb 6-1: Product: syz [ 218.571058][ T7424] usb 6-1: Manufacturer: syz [ 218.578305][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000E/input/input28 [ 218.592700][ T7424] usb 6-1: SerialNumber: syz [ 218.706010][ T9] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 218.747905][ T30] audit: type=1400 audit(1766587523.707:463): avc: denied { getopt } for pid=7722 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.790837][ T7727] ntfs3(md0): try to read out of volume at offset 0x0 [ 218.812971][ T9] usb 3-1: USB disconnect, device number 24 [ 218.864551][ T30] audit: type=1400 audit(1766587523.727:464): avc: denied { setopt } for pid=7722 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.935079][ T5827] udevd[5827]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 218.984247][ T30] audit: type=1400 audit(1766587523.827:465): avc: denied { write } for pid=7725 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 219.064456][ T30] audit: type=1400 audit(1766587524.027:466): avc: denied { write } for pid=7732 comm="syz.4.365" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 219.186134][ T7730] fido_id[7730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 219.230295][ T7736] xt_l2tp: missing protocol rule (udp|l2tpip) [ 220.078265][ T30] audit: type=1400 audit(1766587525.037:467): avc: denied { write } for pid=7711 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 220.407592][ T7424] cdc_ncm 6-1:1.0: bind() failure [ 220.564325][ T7424] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 220.576415][ T7424] usb 6-1: USB disconnect, device number 14 [ 221.101984][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 221.102001][ T30] audit: type=1400 audit(1766587526.057:470): avc: denied { mount } for pid=7756 comm="syz.4.372" name="/" dev="ramfs" ino=16630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 221.196762][ T30] audit: type=1400 audit(1766587526.157:471): avc: denied { mounton } for pid=7756 comm="syz.4.372" path="/file0" dev="ramfs" ino=16631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 221.252093][ T7757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=7757 comm=syz.4.372 [ 221.265062][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 221.454250][ T30] audit: type=1326 audit(1766587526.417:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 221.512926][ T30] audit: type=1326 audit(1766587526.437:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 221.561784][ T30] audit: type=1326 audit(1766587526.437:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 221.628716][ T5967] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 221.650953][ T30] audit: type=1326 audit(1766587526.437:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 221.818938][ T30] audit: type=1326 audit(1766587526.447:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 221.894625][ T5967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 221.955863][ T5967] usb 6-1: New USB device found, idVendor=046d, idProduct=c903, bcdDevice= 0.e9 [ 221.965274][ T30] audit: type=1326 audit(1766587526.447:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 222.011231][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.022071][ T5967] usb 6-1: config 0 descriptor?? [ 222.622291][ T30] audit: type=1326 audit(1766587526.447:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 222.793260][ T30] audit: type=1326 audit(1766587526.447:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53ee18f749 code=0x7ffc0000 [ 223.011823][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 223.062721][ T7425] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 223.222714][ T7425] usb 3-1: Using ep0 maxpacket: 8 [ 223.235995][ T7425] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 223.255511][ T7425] usb 3-1: config 0 has no interface number 0 [ 223.266756][ T7425] usb 3-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 223.293993][ T7425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.302238][ T7425] usb 3-1: Product: syz [ 223.323143][ T7425] usb 3-1: Manufacturer: syz [ 223.332234][ T5967] usbhid 6-1:0.0: can't add hid device: -71 [ 223.342408][ T5967] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 223.353819][ T7425] usb 3-1: SerialNumber: syz [ 223.374188][ T7425] usb 3-1: config 0 descriptor?? [ 223.376027][ T5967] usb 6-1: USB disconnect, device number 15 [ 223.442698][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.578292][ T7789] netlink: 64 bytes leftover after parsing attributes in process `syz.0.379'. [ 223.612939][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 223.618170][ T7425] msi2500 3-1:0.246: Registered as swradio24 [ 223.629618][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 223.650182][ T7425] msi2500 3-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 223.664411][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 223.700246][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.716366][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.754798][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.773928][ T9] usb 2-1: Product: syz [ 223.778125][ T9] usb 2-1: Manufacturer: syz [ 223.787149][ T9] usb 2-1: SerialNumber: syz [ 223.854870][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.401076][ T9] cdc_ncm 2-1:1.0: bind() failure [ 224.426525][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 224.442504][ T9] cdc_ncm 2-1:1.1: bind() failure [ 224.852557][ T9] usb 2-1: USB disconnect, device number 12 [ 225.119138][ T9] usb 3-1: USB disconnect, device number 25 [ 226.174986][ T7812] loop8: detected capacity change from 0 to 1 [ 226.186421][ T7812] Dev loop8: unable to read RDB block 1 [ 226.192138][ T7812] loop8: unable to read partition table [ 226.353941][ T7812] loop8: partition table beyond EOD, truncated [ 226.392870][ T5967] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 226.463901][ T7812] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 226.739297][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 226.751206][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.771773][ T5967] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 226.784223][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.792827][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 226.803445][ T5967] usb 5-1: config 0 descriptor?? [ 226.889348][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.898945][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.907065][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.915388][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.923981][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.999982][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.009844][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.040965][ T9] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 227.050300][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.093643][ T9] usb 6-1: config 0 descriptor?? [ 227.530396][ T9] waterforce 0003:1044:7A4D.000F: item fetching failed at offset 0/1 [ 227.564883][ T9] waterforce 0003:1044:7A4D.000F: hid parse failed with -22 [ 227.588903][ T9] waterforce 0003:1044:7A4D.000F: probe with driver waterforce failed with error -22 [ 227.731951][ T9] usb 6-1: USB disconnect, device number 16 [ 228.623410][ T7425] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 228.793178][ T7425] usb 6-1: Using ep0 maxpacket: 8 [ 228.815017][ T7425] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 228.823418][ T7425] usb 6-1: config 0 has no interface number 0 [ 228.829590][ T7425] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.847535][ T7425] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 228.868032][ T7425] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 228.886639][ T7425] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.931666][ T7425] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 228.940892][ T7425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.956633][ T7425] usb 6-1: Product: syz [ 228.962275][ T7425] usb 6-1: Manufacturer: syz [ 228.968142][ T7425] usb 6-1: SerialNumber: syz [ 228.973260][ T5830] Bluetooth: hci2: command tx timeout [ 229.006778][ T7425] usb 6-1: config 0 descriptor?? [ 229.239396][ T7425] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 229.436486][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 229.436503][ T30] audit: type=1400 audit(1766587534.397:494): avc: denied { watch watch_reads } for pid=7830 comm="syz.5.392" path="/proc/213/map_files" dev="proc" ino=16852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 229.499973][ T7425] usb 6-1: USB disconnect, device number 17 [ 229.508181][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 229.531255][ T5967] usbhid 5-1:0.0: can't add hid device: -71 [ 229.549336][ T5967] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.867226][ T5967] usb 5-1: USB disconnect, device number 20 [ 230.136117][ T7823] chnl_net:caif_netlink_parms(): no params data found [ 231.064514][ T5830] Bluetooth: hci2: command tx timeout [ 231.473211][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.480459][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.493091][ T7823] bridge_slave_0: entered allmulticast mode [ 231.513695][ T7823] bridge_slave_0: entered promiscuous mode [ 231.533826][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.550339][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.570453][ T7823] bridge_slave_1: entered allmulticast mode [ 231.593392][ T7823] bridge_slave_1: entered promiscuous mode [ 232.048458][ T7823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.085788][ T7823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.593414][ T30] audit: type=1400 audit(1766587537.547:495): avc: denied { accept } for pid=7882 comm="syz.1.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 232.626065][ T7823] team0: Port device team_slave_0 added [ 232.633169][ T30] audit: type=1400 audit(1766587537.547:496): avc: denied { accept } for pid=7882 comm="syz.1.407" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 232.637751][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.1.407'. [ 232.796015][ T6997] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 232.798523][ T7823] team0: Port device team_slave_1 added [ 233.033944][ T6997] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.062739][ T6997] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 233.076930][ T6997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.097698][ T6997] usb 6-1: config 0 descriptor?? [ 233.120513][ T6997] pwc: Askey VC010 type 2 USB webcam detected. [ 233.130896][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.138054][ T5830] Bluetooth: hci2: command tx timeout [ 233.143338][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.294567][ T7823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.306776][ T7823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.323622][ T7823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.361173][ T7823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.364988][ T30] audit: type=1400 audit(1766587538.327:497): avc: denied { bind } for pid=7892 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 233.604467][ T6997] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.613980][ T6997] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.623231][ T6997] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.706647][ T6997] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.713951][ T6997] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.723024][ T6997] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.731013][ T7903] Cannot find set identified by id 65534 to match [ 233.749854][ T6997] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.770637][ T6997] pwc: recv_control_msg error -32 req 02 val 2100 [ 233.779484][ T6997] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.814254][ T7823] hsr_slave_0: entered promiscuous mode [ 233.833745][ T7823] hsr_slave_1: entered promiscuous mode [ 233.841611][ T7823] debugfs: 'hsr0' already exists in 'hsr' [ 233.847786][ T7823] Cannot create hsr debugfs directory [ 233.867852][ T6997] pwc: recv_control_msg error -71 req 02 val 2500 [ 233.875835][ T6997] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.882749][ T6997] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.890752][ T6997] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.893827][ T7905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.898152][ T6997] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.955504][ T7905] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 233.955716][ T6997] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.972173][ T6997] pwc: recv_control_msg error -71 req 04 val 1200 [ 234.004164][ T7905] overlay: filesystem on ./bus not supported as upperdir [ 234.015829][ T30] audit: type=1400 audit(1766587538.957:498): avc: denied { relabelto } for pid=7904 comm="syz.2.411" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 234.052755][ T6997] pwc: Registered as video103. [ 234.059517][ T6997] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 234.133069][ T6997] usb 6-1: USB disconnect, device number 18 [ 234.148707][ T30] audit: type=1400 audit(1766587538.957:499): avc: denied { associate } for pid=7904 comm="syz.2.411" name="file1" dev="tmpfs" ino=446 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:v4l_device_t:s0" [ 234.420907][ T30] audit: type=1400 audit(1766587538.967:500): avc: denied { mounton } for pid=7904 comm="syz.2.411" path="/81/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 234.484492][ T30] audit: type=1400 audit(1766587538.967:501): avc: denied { mounton } for pid=7904 comm="syz.2.411" path="/81/bus" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 234.560449][ T30] audit: type=1400 audit(1766587539.357:502): avc: denied { rmdir } for pid=5811 comm="syz-executor" name="file1" dev="tmpfs" ino=446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:v4l_device_t:s0" [ 235.183906][ T30] audit: type=1400 audit(1766587540.147:503): avc: denied { setopt } for pid=7914 comm="syz.5.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 235.213377][ T5830] Bluetooth: hci2: command tx timeout [ 235.256042][ T7917] omfs: Invalid superblock (0) [ 235.305902][ T7823] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.346060][ T7823] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.379396][ T7823] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.407300][ T7823] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.422706][ T7425] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 235.502694][ T6997] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 235.591632][ T7425] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 235.599562][ T6719] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 235.613418][ T7425] usb 6-1: can't read configurations, error -61 [ 235.647890][ T7823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.667225][ T6997] usb 3-1: Using ep0 maxpacket: 16 [ 235.676415][ T6997] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 235.699106][ T6997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.707606][ T6997] usb 3-1: Product: syz [ 235.712399][ T6997] usb 3-1: Manufacturer: syz [ 235.714768][ T7823] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.717155][ T6997] usb 3-1: SerialNumber: syz [ 235.732113][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.739280][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.758629][ T6997] usb 3-1: config 0 descriptor?? [ 235.766876][ T6997] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 235.776192][ T7425] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 235.777800][ T6997] usb 3-1: Detected FT-X [ 235.792770][ T6719] usb 2-1: Using ep0 maxpacket: 8 [ 235.793447][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.799811][ T6719] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 235.805078][ T6320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.858647][ T6719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.872747][ T6719] usb 2-1: config 0 has no interface number 0 [ 235.878908][ T6719] usb 2-1: config 0 interface 52 has no altsetting 0 [ 235.893456][ T6719] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 235.902526][ T6719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.945423][ T6719] usb 2-1: config 0 descriptor?? [ 235.979693][ T7425] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 235.990625][ T7425] usb 6-1: can't read configurations, error -61 [ 235.999571][ T6997] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 236.032080][ T7425] usb usb6-port1: attempt power cycle [ 236.042534][ T6997] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 236.061863][ T6997] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 236.073641][ T6997] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 236.124146][ T6997] usb 3-1: USB disconnect, device number 26 [ 236.165047][ T6997] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 236.192262][ T6997] ftdi_sio 3-1:0.0: device disconnected [ 236.372835][ T7425] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 236.374159][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.393212][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.413500][ T7425] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 236.421098][ T7425] usb 6-1: can't read configurations, error -61 [ 236.437365][ T7823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.583749][ T7425] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 236.612320][ T6719] usb 2-1: USB disconnect, device number 13 [ 236.774376][ T7425] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 236.789045][ T7425] usb 6-1: can't read configurations, error -61 [ 236.798089][ T7425] usb usb6-port1: unable to enumerate USB device [ 236.878567][ T30] audit: type=1400 audit(1766587541.837:504): avc: denied { accept } for pid=7943 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 236.958257][ T7823] veth0_vlan: entered promiscuous mode [ 236.968870][ T7823] veth1_vlan: entered promiscuous mode [ 237.041683][ T7823] veth0_macvtap: entered promiscuous mode [ 237.051226][ T7823] veth1_macvtap: entered promiscuous mode [ 237.068244][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.079972][ T7823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.118367][ T6320] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.129158][ T6320] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.146532][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 237.164985][ T6320] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.203158][ T6320] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.315694][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.344335][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.398541][ T6320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.410569][ T6320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.434294][ T30] audit: type=1400 audit(1766587542.397:505): avc: denied { mounton } for pid=7823 comm="syz-executor" path="/root/syzkaller.5jr33J/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 237.491301][ T30] audit: type=1400 audit(1766587542.427:506): avc: denied { mounton } for pid=7823 comm="syz-executor" path="/root/syzkaller.5jr33J/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 237.586436][ T30] audit: type=1400 audit(1766587542.447:507): avc: denied { mounton } for pid=7823 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 238.028340][ T7971] netlink: 9 bytes leftover after parsing attributes in process `syz.2.419'. [ 238.028538][ T7971] 0·: renamed from hsr0 (while UP) [ 238.054370][ T7971] 0·: entered allmulticast mode [ 238.132710][ T7971] hsr_slave_0: entered allmulticast mode [ 238.132731][ T7971] hsr_slave_1: entered allmulticast mode [ 238.133198][ T7971] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 238.452723][ T6719] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 238.645026][ T6719] usb 7-1: not running at top speed; connect to a high speed hub [ 238.660821][ T6719] usb 7-1: config 3 has an invalid interface number: 61 but max is 0 [ 238.679592][ T6719] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 238.720968][ T7886] Set syz1 is full, maxelem 65536 reached [ 238.724264][ T6719] usb 7-1: config 3 has no interface number 0 [ 238.738357][ T6719] usb 7-1: config 3 interface 61 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.755729][ T6719] usb 7-1: config 3 interface 61 has no altsetting 0 [ 238.782851][ T5895] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 238.793818][ T6719] usb 7-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 238.812088][ T6719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.827529][ T6719] usb 7-1: Product: syz [ 238.831837][ T6719] usb 7-1: Manufacturer: syz [ 238.837382][ T6719] usb 7-1: SerialNumber: syz [ 238.847179][ T7987] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 238.984549][ T5895] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.997073][ T5895] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.012677][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 239.021399][ T5895] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 239.033782][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.070064][ T6719] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.111337][ T5895] usb 2-1: config 0 descriptor?? [ 239.174569][ T6719] snd-usb-audio 7-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 239.194541][ T6719] usb 7-1: USB disconnect, device number 2 [ 239.211889][ T6800] udevd[6800]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.61/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.294925][ T7997] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 239.412751][ T6997] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 239.421553][ T8002] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8002 comm=syz.2.431 [ 239.614973][ T5895] sony 0003:054C:0268.0010: item fetching failed at offset 5/7 [ 239.624450][ T5895] sony 0003:054C:0268.0010: parse failed [ 239.630171][ T5895] sony 0003:054C:0268.0010: probe with driver sony failed with error -22 [ 239.662969][ T6997] usb 6-1: Using ep0 maxpacket: 8 [ 240.108237][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.149552][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.158165][ T6997] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 240.171237][ T6997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.297371][ T6997] pvrusb2: Hardware description: Terratec Grabster AV400 [ 240.305123][ T6997] pvrusb2: ********** [ 240.309245][ T6997] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 240.414661][ T6997] pvrusb2: Important functionality might not be entirely working. [ 240.422843][ T6997] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 240.435053][ T6997] pvrusb2: ********** [ 240.499568][ T2342] pvrusb2: Invalid write control endpoint [ 240.597535][ T30] audit: type=1400 audit(1766587545.557:508): avc: denied { create } for pid=8013 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.722748][ T30] audit: type=1400 audit(1766587545.627:509): avc: denied { getopt } for pid=8013 comm="syz.6.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 240.945289][ T30] audit: type=1400 audit(1766587545.907:510): avc: denied { bind } for pid=8005 comm="syz.4.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.001974][ T2342] pvrusb2: Invalid write control endpoint [ 241.073466][ T8022] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 241.484041][ T30] audit: type=1400 audit(1766587546.177:511): avc: denied { rename } for pid=8017 comm="syz.2.435" name="#10" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 241.549593][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 241.560722][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 241.588569][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 241.601223][ T2342] pvrusb2: Device being rendered inoperable [ 241.614418][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 241.623510][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 241.820971][ T8026] binder: 8024:8026 ioctl c0306201 0 returned -14 [ 242.092206][ T2342] pvrusb2: Attached sub-driver cx25840 [ 242.177455][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 242.311296][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 242.416633][ T30] audit: type=1400 audit(1766587546.637:512): avc: denied { listen } for pid=8024 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.443654][ T30] audit: type=1400 audit(1766587546.637:513): avc: denied { accept } for pid=8024 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 242.555933][ T30] audit: type=1400 audit(1766587547.517:514): avc: denied { getopt } for pid=8030 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.567308][ T6719] usb 2-1: USB disconnect, device number 14 [ 243.566401][ T30] audit: type=1400 audit(1766587548.527:515): avc: denied { read } for pid=8048 comm="syz.4.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 243.672406][ T30] audit: type=1400 audit(1766587548.627:516): avc: denied { write } for pid=8048 comm="syz.4.442" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 243.762364][ T8042] block nbd6: NBD_DISCONNECT [ 243.792657][ T5819] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 243.936638][ T6997] usb 6-1: USB disconnect, device number 23 [ 244.054878][ T5819] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.068962][ T30] audit: type=1400 audit(1766587549.027:517): avc: denied { getopt } for pid=8053 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 244.109278][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.129677][ T5819] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.254205][ T5819] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.277411][ T8062] fuseblk: Bad value for 'group_id' [ 244.282827][ T8062] fuseblk: Bad value for 'group_id' [ 244.345050][ T5819] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.354558][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.364861][ T5819] usb 2-1: Product: syz [ 244.369176][ T5819] usb 2-1: Manufacturer: syz [ 244.610467][ T8074] netlink: 72 bytes leftover after parsing attributes in process `syz.4.447'. [ 244.998706][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 245.119384][ T5819] cdc_wdm 2-1:1.0: skipping garbage [ 245.218407][ T5819] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 245.252232][ T5819] cdc_wdm 2-1:1.0: Unknown control protocol [ 245.312875][ T8071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input31 [ 245.433667][ T5819] usb 2-1: USB disconnect, device number 15 [ 245.501750][ T8079] ======================================================= [ 245.501750][ T8079] WARNING: The mand mount option has been deprecated and [ 245.501750][ T8079] and is ignored by this kernel. Remove the mand [ 245.501750][ T8079] option from the mount to silence this warning. [ 245.501750][ T8079] ======================================================= [ 245.710605][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 245.710616][ T30] audit: type=1400 audit(1766587550.667:520): avc: denied { unmount } for pid=6402 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 245.787461][ T30] audit: type=1400 audit(1766587550.747:521): avc: denied { read write } for pid=8092 comm="syz.4.452" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 245.813393][ T30] audit: type=1400 audit(1766587550.747:522): avc: denied { open } for pid=8092 comm="syz.4.452" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 245.815208][ T8094] vlan2: entered allmulticast mode [ 245.884313][ T8094] dummy0: entered allmulticast mode [ 247.146257][ T8094] vlan2: entered allmulticast mode [ 247.241154][ T8103] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 248.112426][ T7425] IPVS: starting estimator thread 0... [ 248.224300][ T8112] IPVS: using max 62 ests per chain, 148800 per kthread [ 248.224991][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 248.952823][ T7425] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 249.133908][ T5922] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 249.142792][ T7425] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 249.201298][ T7425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.220404][ T7425] usb 3-1: Product: syz [ 249.225124][ T7425] usb 3-1: Manufacturer: syz [ 249.232707][ T7425] usb 3-1: SerialNumber: syz [ 249.243864][ T7425] usb 3-1: config 0 descriptor?? [ 249.260186][ T8137] x_tables: unsorted underflow at hook 3 [ 249.285895][ T8137] netlink: 512 bytes leftover after parsing attributes in process `syz.6.465'. [ 249.295441][ T30] audit: type=1400 audit(1766587554.247:523): avc: denied { mount } for pid=8135 comm="syz.6.465" name="/" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 249.295812][ T7425] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 027 [ 249.364185][ T5922] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 249.387535][ T5922] usb 5-1: config 0 has no interface number 1 [ 249.395919][ T30] audit: type=1400 audit(1766587554.247:524): avc: denied { search } for pid=8135 comm="syz.6.465" name="/" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.419002][ T8142] syzkaller0: entered promiscuous mode [ 249.426339][ T5922] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 249.444736][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.453192][ T8142] syzkaller0: entered allmulticast mode [ 249.469154][ T5922] usb 5-1: config 0 descriptor?? [ 249.475568][ T30] audit: type=1400 audit(1766587554.297:525): avc: denied { ioctl } for pid=8135 comm="syz.6.465" path="socket:[18998]" dev="sockfs" ino=18998 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 250.154405][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.193542][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.232080][ T7425] i2c i2c-1: connected i2c-tiny-usb device [ 250.432681][ T7425] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 250.442738][ T10] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 250.450274][ T5922] usb 3-1: USB disconnect, device number 27 [ 250.723039][ T7425] usb 7-1: Using ep0 maxpacket: 32 [ 250.729613][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 250.740679][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.757406][ T7425] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 250.768122][ T7425] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 250.789667][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 250.806550][ T7425] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 250.822435][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.835154][ T7425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.851952][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.865085][ T7425] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 250.885870][ T7425] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 250.906110][ T10] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 250.921098][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.937898][ T7425] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 250.972827][ T10] usb 6-1: Product: syz [ 250.985102][ T10] usb 6-1: Manufacturer: syz [ 250.999363][ T7425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.033884][ T10] usb 6-1: SerialNumber: syz [ 251.100712][ T7425] usb 7-1: config 0 descriptor?? [ 251.251380][ T10] usb 6-1: config 0 descriptor?? [ 251.372017][ T8166] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd2": -EINTR [ 251.502909][ T5819] usb 5-1: USB disconnect, device number 21 [ 251.554199][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 251.606015][ T7425] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 251.762171][ T30] audit: type=1400 audit(1766587556.717:526): avc: denied { write } for pid=8153 comm="syz.5.469" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 251.808990][ T7425] usb 6-1: USB disconnect, device number 24 [ 251.972540][ T30] audit: type=1400 audit(1766587556.717:527): avc: denied { open } for pid=8153 comm="syz.5.469" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 252.037787][ T30] audit: type=1400 audit(1766587556.797:528): avc: denied { read write } for pid=8155 comm="syz.6.470" name="lp0" dev="devtmpfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 252.143688][ T30] audit: type=1400 audit(1766587556.797:529): avc: denied { open } for pid=8155 comm="syz.6.470" path="/dev/usb/lp0" dev="devtmpfs" ino=3108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 252.236225][ T10] usb 7-1: USB disconnect, device number 3 [ 252.247949][ T10] usblp0: removed [ 252.355311][ T8186] devpts: Bad value for 'max' [ 252.432876][ T5895] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 252.602745][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 252.610818][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.625087][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.636073][ T5895] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 252.645567][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 252.653723][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.669516][ T5895] usb 3-1: config 0 descriptor?? [ 252.813562][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 252.831562][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 252.874612][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 252.916302][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 252.960069][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 252.977555][ T10] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 252.986978][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.003398][ T10] usb 6-1: Product: syz [ 253.414972][ T10] usb 6-1: Manufacturer: syz [ 253.921856][ T10] usb 6-1: SerialNumber: syz [ 253.937388][ T10] usb 6-1: config 0 descriptor?? [ 253.987552][ T30] audit: type=1400 audit(1766587558.937:530): avc: denied { read } for pid=8181 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.261000][ T10] usb 6-1: USB disconnect, device number 25 [ 254.812775][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 254.984661][ T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 255.001990][ T10] usb 5-1: config 0 has no interface number 0 [ 255.008277][ T10] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 255.021947][ T10] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 255.035804][ T10] usb 5-1: config 0 interface 255 has no altsetting 0 [ 255.046949][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 255.064655][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.079905][ T10] usb 5-1: config 0 descriptor?? [ 255.088468][ T10] cp210x 5-1:0.255: cp210x converter detected [ 255.142708][ T5819] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 255.216869][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 255.232750][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 255.252543][ T5895] usb 3-1: USB disconnect, device number 28 [ 255.292119][ T10] cp210x 5-1:0.255: failed to get vendor val 0x370b size 1: -71 [ 255.301108][ T5819] usb 6-1: Using ep0 maxpacket: 32 [ 255.308373][ T10] cp210x 5-1:0.255: querying part number failed [ 255.320980][ T5819] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.333648][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 255.355777][ T10] usb 5-1: USB disconnect, device number 22 [ 255.365487][ T5819] usb 6-1: config 0 has no interface number 0 [ 255.371693][ T5819] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.374655][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.568853][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582738][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.628653][ T10] cp210x 5-1:0.255: device disconnected [ 255.654681][ T5819] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.903045][ T5895] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 256.104523][ T5895] usb 2-1: config 5 has an invalid interface number: 88 but max is 0 [ 256.176630][ T5895] usb 2-1: config 5 has no interface number 0 [ 256.186076][ T5895] usb 2-1: config 5 interface 88 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 256.200370][ T5895] usb 2-1: config 5 interface 88 altsetting 0 endpoint 0x9 has invalid maxpacket 1584, setting to 64 [ 256.242712][ T5895] usb 2-1: config 5 interface 88 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 256.277585][ T5819] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 256.305352][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.306058][ T5895] usb 2-1: New USB device found, idVendor=deee, idProduct=0302, bcdDevice=76.72 [ 256.323464][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 256.376675][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.396697][ T8229] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.460325][ T5819] usb 6-1: config 0 descriptor?? [ 256.937517][ T8221] netlink: 7718 bytes leftover after parsing attributes in process `syz.5.483'. [ 256.951522][ T8250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.973108][ T5895] usb 2-1: string descriptor 0 read error: -71 [ 256.981162][ T5895] ftdi_sio 2-1:5.88: FTDI USB Serial Device converter detected [ 256.988648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.014111][ T5895] ftdi_sio ttyUSB0: unknown device type: 0x7672 [ 257.022023][ T8250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.032835][ T10] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 257.032868][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.035193][ T10] usb 5-1: config 0 descriptor?? [ 257.043301][ T5895] usb 2-1: USB disconnect, device number 16 [ 257.068868][ T5895] ftdi_sio 2-1:5.88: device disconnected [ 257.082029][ T5819] usbhid 6-1:0.1: can't add hid device: -71 [ 257.108481][ T5819] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 257.167288][ T5819] usb 6-1: USB disconnect, device number 26 [ 257.434776][ T5895] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 257.445464][ T10] gembird 0003:11FF:3331.0011: unknown main item tag 0x0 [ 257.462169][ T10] gembird 0003:11FF:3331.0011: unknown main item tag 0x0 [ 257.473627][ T10] gembird 0003:11FF:3331.0011: unknown main item tag 0x0 [ 257.481041][ T10] gembird 0003:11FF:3331.0011: unknown main item tag 0x0 [ 257.489399][ T10] gembird 0003:11FF:3331.0011: unknown main item tag 0x0 [ 257.500752][ T10] gembird 0003:11FF:3331.0011: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0 [ 257.633107][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 257.641202][ T5895] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 257.652984][ T30] audit: type=1400 audit(1766587562.607:531): avc: denied { connect } for pid=8238 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.674366][ T5819] usb 5-1: USB disconnect, device number 23 [ 257.683930][ T5895] usb 3-1: config 0 has no interface number 0 [ 257.698424][ T8260] fido_id[8260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 257.753881][ T5895] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 257.763574][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.771587][ T5895] usb 3-1: Product: syz [ 257.792651][ T5895] usb 3-1: Manufacturer: syz [ 257.808607][ T5895] usb 3-1: SerialNumber: syz [ 257.845451][ T5895] usb 3-1: config 0 descriptor?? [ 257.873936][ T5895] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 258.096426][ T5895] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 258.120691][ T5895] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 258.153336][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 258.482839][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 258.555241][ T5895] usb 3-1: USB disconnect, device number 29 [ 258.584363][ T10] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.594947][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 258.611446][ T10] usb 2-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.639676][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 258.650873][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.664966][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 258.676612][ T5895] quatech2 3-1:0.51: device disconnected [ 258.683048][ T8272] netlink: 220 bytes leftover after parsing attributes in process `syz.4.496'. [ 258.709407][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.773250][ T10] usb 2-1: config 0 descriptor?? [ 258.870922][ T30] audit: type=1400 audit(1766587563.827:532): avc: denied { write } for pid=8271 comm="syz.4.496" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 258.946472][ T30] audit: type=1400 audit(1766587563.857:533): avc: denied { open } for pid=8271 comm="syz.4.496" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 259.892741][ T6997] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 259.893830][ T10] sony 0003:054C:0268.0012: item fetching failed at offset 5/7 [ 259.929028][ T10] sony 0003:054C:0268.0012: parse failed [ 259.942748][ T10] sony 0003:054C:0268.0012: probe with driver sony failed with error -22 [ 259.962721][ T7425] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 260.064505][ T6997] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.074733][ T6997] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.088646][ T6997] usb 6-1: config 0 interface 0 has no altsetting 0 [ 260.103006][ T6997] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 260.147991][ T7425] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.182792][ T7425] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.216471][ T7425] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.234570][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.253078][ T7425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.263093][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.297998][ T8285] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 260.322071][ T7425] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 260.485184][ T6997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.512683][ T6997] usb 6-1: config 0 descriptor?? [ 261.477681][ T8292] capability: warning: `syz.2.499' uses 32-bit capabilities (legacy support in use) [ 261.906743][ T6719] usb 3-1: USB disconnect, device number 30 [ 261.980513][ T7425] usb 2-1: USB disconnect, device number 17 [ 261.994157][ T6997] sony 0003:054C:0268.0013: item fetching failed at offset 5/7 [ 262.035871][ T6997] sony 0003:054C:0268.0013: parse failed [ 262.041726][ T6997] sony 0003:054C:0268.0013: probe with driver sony failed with error -22 [ 262.192712][ T5967] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 262.206262][ T8279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.224250][ T8279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.353148][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 262.365715][ T5967] usb 5-1: config 252 has an invalid interface number: 32 but max is 0 [ 262.374701][ T5967] usb 5-1: config 252 has no interface number 0 [ 262.375207][ T6719] usb 6-1: USB disconnect, device number 27 [ 262.381055][ T5967] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 262.406271][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.478029][ T5967] pvrusb2: Hardware description: Terratec Grabster AV400 [ 262.492214][ T5967] pvrusb2: ********** [ 262.498237][ T5967] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 262.509312][ T5967] pvrusb2: Important functionality might not be entirely working. [ 262.520172][ T5967] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 262.532032][ T5967] pvrusb2: ********** [ 262.592893][ T6997] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 262.679881][ T2342] pvrusb2: Invalid write control endpoint [ 262.745615][ T6997] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 262.748406][ T2342] pvrusb2: Invalid write control endpoint [ 262.765081][ T6997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 262.776438][ T6997] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.782657][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 262.785991][ T6997] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.805516][ T6997] usb 7-1: Product: syz [ 262.806144][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 262.809743][ T6997] usb 7-1: Manufacturer: syz [ 262.822415][ T6997] usb 7-1: SerialNumber: syz [ 262.840614][ T6997] usb 7-1: config 0 descriptor?? [ 262.842679][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 262.854878][ T6997] usb 7-1: selecting invalid altsetting 0 [ 262.870584][ T2342] pvrusb2: Device being rendered inoperable [ 262.882504][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 262.900649][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 262.917669][ T2342] pvrusb2: Attached sub-driver cx25840 [ 262.932827][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 262.960343][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 263.071233][ T8305] 9p: Bad value for 'rfdno' [ 263.379756][ T30] audit: type=1400 audit(1766587568.277:534): avc: denied { create } for pid=8308 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.452429][ T6997] usb 5-1: USB disconnect, device number 24 [ 264.118737][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.508'. [ 264.132075][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.508'. [ 264.141372][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.508'. [ 264.968107][ T7425] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 265.207783][ T7425] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 265.270414][ T7425] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.283665][ T7425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.311117][ T7425] usb 3-1: Product: syz [ 265.325860][ T7425] usb 3-1: Manufacturer: syz [ 265.370201][ T7425] usb 3-1: SerialNumber: syz [ 265.395785][ T8342] mmap: syz.1.513 (8342): VmData 37597184 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. [ 265.884730][ T7425] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 265.890756][ T7425] cdc_ncm 3-1:1.0: bind() failure [ 265.907445][ T7425] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 265.916751][ T7425] cdc_ncm 3-1:1.1: bind() failure [ 266.143040][ T6719] usb 7-1: USB disconnect, device number 4 [ 266.387622][ T30] audit: type=1400 audit(1766587571.347:535): avc: denied { sqpoll } for pid=8348 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 267.463084][ T30] audit: type=1400 audit(1766587572.427:536): avc: denied { mounton } for pid=8364 comm="syz.1.518" path="/proc/400/task" dev="proc" ino=19546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 267.540005][ T30] audit: type=1400 audit(1766587572.447:537): avc: denied { bind } for pid=8364 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.598025][ T30] audit: type=1400 audit(1766587572.477:538): avc: denied { ioctl } for pid=8362 comm="syz.4.517" path="socket:[19371]" dev="sockfs" ino=19371 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 267.659005][ T8370] syzkaller0: entered promiscuous mode [ 267.686628][ T8370] syzkaller0: entered allmulticast mode [ 267.715677][ T8371] tipc: Started in network mode [ 267.728367][ T8371] tipc: Node identity 3604234d21a2, cluster identity 4711 [ 267.742364][ T7425] usb 3-1: USB disconnect, device number 31 [ 267.787807][ T8371] tipc: Enabled bearer , priority 0 [ 267.936046][ T30] audit: type=1400 audit(1766587572.897:539): avc: denied { bind } for pid=8378 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.957199][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.521'. [ 268.247517][ T8362] tipc: Resetting bearer [ 269.350440][ T6800] udevd[6800]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 271.114632][ T30] audit: type=1400 audit(1766587576.077:540): avc: denied { mount } for pid=8400 comm="syz.2.525" name="/" dev="rpc_pipefs" ino=20495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 271.172732][ T30] audit: type=1400 audit(1766587576.107:541): avc: denied { ioctl } for pid=8400 comm="syz.2.525" path="socket:[19656]" dev="sockfs" ino=19656 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.028321][ T8410] netlink: 'syz.6.527': attribute type 3 has an invalid length. [ 274.990441][ T8437] Bluetooth: hci5: Frame reassembly failed (-84) [ 275.186262][ T337] Bluetooth: hci5: Frame reassembly failed (-84) [ 275.196979][ T337] Bluetooth: hci5: Frame reassembly failed (-84) [ 275.504520][ T30] audit: type=1326 audit(1766587580.467:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.550032][ T30] audit: type=1326 audit(1766587580.487:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.589743][ T30] audit: type=1326 audit(1766587580.487:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.637214][ T30] audit: type=1326 audit(1766587580.487:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.677837][ T30] audit: type=1326 audit(1766587580.487:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.745078][ T30] audit: type=1326 audit(1766587580.487:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.913133][ T30] audit: type=1326 audit(1766587580.487:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 275.952776][ T30] audit: type=1326 audit(1766587580.487:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372278f749 code=0x7ffc0000 [ 276.123184][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 276.123200][ T30] audit: type=1326 audit(1766587581.087:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.210727][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 276.221272][ T30] audit: type=1326 audit(1766587581.087:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.258761][ T30] audit: type=1326 audit(1766587581.087:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.335453][ T30] audit: type=1326 audit(1766587581.087:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.409904][ T30] audit: type=1326 audit(1766587581.087:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.441861][ T30] audit: type=1326 audit(1766587581.087:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.465620][ T30] audit: type=1326 audit(1766587581.087:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.490033][ T30] audit: type=1326 audit(1766587581.087:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.514099][ T30] audit: type=1326 audit(1766587581.087:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.567412][ T30] audit: type=1326 audit(1766587581.087:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8439 comm="syz.5.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37227c2005 code=0x7ffc0000 [ 276.650945][ T8451] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 277.143204][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 278.422074][ T8362] tipc: Disabling bearer [ 278.467000][ T6011] tipc: Node number set to 396763981 [ 278.519722][ T8451] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 278.854295][ T8468] binder: 8464:8468 ioctl c0306201 200000000280 returned -14 [ 278.864022][ T8474] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 278.947578][ T8474] futex_wake_op: syz.4.541 tries to shift op by -1; fix this program [ 279.952988][ T6011] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 280.140703][ T6011] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.167781][ T6011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.301642][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 280.319645][ T6011] usb 3-1: Product: syz [ 280.333564][ T6011] usb 3-1: Manufacturer: syz [ 280.351599][ T6011] usb 3-1: SerialNumber: syz [ 280.381132][ T6011] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.417231][ T5967] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.472680][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 280.482565][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.507133][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.556143][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.568648][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.589743][ T10] usb 7-1: Product: syz [ 280.599410][ T10] usb 7-1: Manufacturer: syz [ 280.615083][ T10] usb 7-1: SerialNumber: syz [ 281.175074][ T8515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.188223][ T8515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.442755][ T5895] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 281.541797][ T5967] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 281.552588][ T5967] ath9k_htc: Failed to initialize the device [ 281.615365][ T5895] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 281.632064][ T5895] usb 6-1: config 0 has no interface number 0 [ 281.664234][ T5895] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 281.678037][ T5967] usb 3-1: ath9k_htc: USB layer deinitialized [ 281.705600][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.728108][ T5895] usb 6-1: Product: syz [ 281.756879][ T5895] usb 6-1: Manufacturer: syz [ 281.777474][ T5895] usb 6-1: SerialNumber: syz [ 281.795134][ T5895] usb 6-1: config 0 descriptor?? [ 283.154144][ T6719] usb 3-1: USB disconnect, device number 32 [ 283.440946][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.553'. [ 284.513261][ T8532] trusted_key: encrypted_key: insufficient parameters specified [ 284.604649][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 284.604668][ T30] audit: type=1400 audit(1766587589.567:723): avc: denied { write } for pid=8535 comm="syz.1.558" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 284.692834][ T5967] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 284.854144][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.882723][ T5967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.892590][ T5967] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a14, bcdDevice= 0.00 [ 284.897282][ T10] usb 7-1: cannot find UAC_HEADER [ 284.911460][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.979803][ T5967] usb 5-1: config 0 descriptor?? [ 285.088364][ T6719] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 285.366472][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 285.495897][ T30] audit: type=1400 audit(1766587590.387:724): avc: denied { ioctl } for pid=8529 comm="syz.4.555" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 285.636758][ T10] usb 7-1: USB disconnect, device number 5 [ 285.662863][ T6719] usb 3-1: Using ep0 maxpacket: 8 [ 285.674584][ T5895] usb 6-1: USB disconnect, device number 28 [ 285.702367][ T6719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.734617][ T30] audit: type=1400 audit(1766587590.407:725): avc: denied { module_request } for pid=8552 comm="syz.6.562" kmod="netdev-pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 285.748106][ T6800] udevd[6800]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.757132][ T30] audit: type=1400 audit(1766587590.607:726): avc: denied { prog_load } for pid=8529 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 285.802707][ T6719] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 285.820085][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 285.828068][ T5967] hid-corsair-void 0003:1B1C:0A14.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:0a14] on usb-dummy_hcd.4-1/input0 [ 285.866532][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 285.982243][ T6719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 286.049459][ T5967] usb 5-1: USB disconnect, device number 25 [ 286.052742][ T6719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 286.097093][ T6719] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.103492][ T30] audit: type=1400 audit(1766587590.607:727): avc: denied { bpf } for pid=8529 comm="syz.4.555" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 286.113965][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.152109][ T8558] ceph: No mds server is up or the cluster is laggy [ 286.162924][ T6011] hid-corsair-void 0003:1B1C:0A14.0014: failed to request firmware (reason: -19) [ 286.204710][ T6719] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 286.206474][ T6011] libceph: connect (1)[c::]:6789 error -101 [ 286.224766][ T6719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 286.232862][ T6011] libceph: mon0 (1)[c::]:6789 connect error [ 286.240759][ T30] audit: type=1400 audit(1766587590.607:728): avc: denied { create } for pid=8550 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.261301][ T6719] usb 3-1: Product: syz [ 286.272216][ T6719] usb 3-1: Manufacturer: syz [ 286.293191][ T8563] fido_id[8563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 286.312083][ T30] audit: type=1400 audit(1766587590.627:729): avc: denied { setopt } for pid=8550 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.339192][ T30] audit: type=1400 audit(1766587590.787:730): avc: denied { read write } for pid=5812 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.348057][ T6719] usb 3-1: SerialNumber: syz [ 286.404725][ T30] audit: type=1400 audit(1766587590.787:731): avc: denied { open } for pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.416744][ T6719] usb 3-1: config 0 descriptor?? [ 286.449515][ T30] audit: type=1400 audit(1766587590.787:732): avc: denied { ioctl } for pid=5812 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 286.683344][ T6719] radio-si470x 3-1:0.0: DeviceID=0xdf7c ChipID=0xa500 [ 287.202967][ T6719] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 287.218882][ T6719] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 287.256996][ T6719] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 288.831560][ T8613] vivid-001: ================= START STATUS ================= [ 288.842192][ T8613] vivid-001: Radio HW Seek Mode: Bounded [ 288.848346][ T8613] vivid-001: Radio Programmable HW Seek: false [ 288.854623][ T8613] vivid-001: RDS Rx I/O Mode: Block I/O [ 288.860250][ T8613] vivid-001: Generate RBDS Instead of RDS: false [ 288.867268][ T8613] vivid-001: RDS Reception: true [ 288.872287][ T8613] vivid-001: RDS Program Type: 0 inactive [ 288.878135][ T8613] vivid-001: RDS PS Name: inactive [ 288.883449][ T8613] vivid-001: RDS Radio Text: inactive [ 288.890086][ T8613] vivid-001: RDS Traffic Announcement: false inactive [ 288.897046][ T8613] vivid-001: RDS Traffic Program: false inactive [ 288.903421][ T8613] vivid-001: RDS Music: false inactive [ 288.908874][ T8613] vivid-001: ================== END STATUS ================== [ 289.703575][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 289.703592][ T30] audit: type=1400 audit(1766587594.667:815): avc: denied { create } for pid=8617 comm="syz.6.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.814868][ T6997] usb 3-1: USB disconnect, device number 33 [ 290.073294][ T30] audit: type=1400 audit(1766587595.037:816): avc: denied { mount } for pid=8629 comm="syz.1.581" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 290.075797][ T8631] tmpfs: Bad value for 'nr_inodes' [ 290.121968][ T30] audit: type=1400 audit(1766587595.037:817): avc: denied { remount } for pid=8629 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 290.158338][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.6.582'. [ 290.183116][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.582'. [ 290.197460][ T30] audit: type=1400 audit(1766587595.077:818): avc: denied { create } for pid=8630 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 290.238257][ T30] audit: type=1400 audit(1766587595.117:819): avc: denied { sys_admin } for pid=8630 comm="syz.4.583" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 290.271809][ T30] audit: type=1400 audit(1766587595.187:820): avc: denied { create } for pid=8630 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.375134][ T30] audit: type=1400 audit(1766587595.197:821): avc: denied { associate } for pid=8637 comm="syz.4.583" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 290.459259][ T30] audit: type=1400 audit(1766587595.197:822): avc: denied { ioctl } for pid=8630 comm="syz.4.583" path="socket:[20069]" dev="sockfs" ino=20069 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 290.592764][ T6997] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 290.673502][ T30] audit: type=1400 audit(1766587595.197:823): avc: denied { ioctl } for pid=8630 comm="syz.4.583" path="socket:[20073]" dev="sockfs" ino=20073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.699823][ T30] audit: type=1400 audit(1766587595.197:824): avc: denied { setopt } for pid=8630 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.225859][ T6997] usb 3-1: config 2 has an invalid descriptor of length 55, skipping remainder of the config [ 291.241465][ T6997] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 291.266406][ T6997] usb 3-1: New USB device found, idVendor=04d8, idProduct=0e83, bcdDevice=da.47 [ 291.306641][ T6997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.340287][ T8663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8663 comm=syz.4.589 [ 291.363188][ T6997] usb 3-1: Product: syz [ 291.367439][ T6997] usb 3-1: Manufacturer: syz [ 291.375210][ T6997] usb 3-1: SerialNumber: syz [ 291.404100][ T8663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8663 comm=syz.4.589 [ 292.422703][ T6011] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 292.942694][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 292.982719][ T6011] usb 2-1: Using ep0 maxpacket: 16 [ 292.990775][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.002403][ T6011] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.022757][ T6011] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.037688][ T6011] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.046943][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.065457][ T6011] usb 2-1: config 0 descriptor?? [ 293.112801][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 293.119547][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.139617][ T10] usb 7-1: config 0 has no interface number 0 [ 293.161122][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 293.185743][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.201123][ T10] usb 7-1: Product: syz [ 293.209513][ T10] usb 7-1: Manufacturer: syz [ 293.220236][ T10] usb 7-1: SerialNumber: syz [ 293.234171][ T10] usb 7-1: config 0 descriptor?? [ 293.256361][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 293.576898][ T6997] usb 3-1: USB disconnect, device number 34 [ 293.616005][ T6011] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 293.628739][ T6011] microsoft 0003:045E:07DA.0015: no inputs found [ 293.635686][ T6011] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 293.802742][ T7425] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 294.850156][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 294.850173][ T30] audit: type=1400 audit(1766587599.027:846): avc: denied { read write } for pid=8668 comm="syz.6.592" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.012733][ T7425] usb 6-1: Using ep0 maxpacket: 8 [ 295.038448][ T7425] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 295.073117][ T30] audit: type=1400 audit(1766587599.027:847): avc: denied { ioctl open } for pid=8668 comm="syz.6.592" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 295.127070][ T7425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 295.443223][ T7425] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 189 [ 295.454745][ T7425] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 295.464267][ T7425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 295.472537][ T7425] usb 6-1: SerialNumber: syz [ 295.480104][ T6997] usb 2-1: USB disconnect, device number 18 [ 295.501140][ T7425] usb 6-1: config 0 descriptor?? [ 295.510206][ T8676] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 295.532924][ T8676] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 295.612448][ T8697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.598'. [ 295.624958][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 295.637157][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 295.651029][ T30] audit: type=1400 audit(1766587600.607:848): avc: denied { setopt } for pid=8695 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.676575][ T8697] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 295.684556][ T8696] netlink: 'syz.2.598': attribute type 8 has an invalid length. [ 295.692264][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 295.701718][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 295.718149][ T8697] bond0: entered promiscuous mode [ 295.723293][ T8697] bond_slave_0: entered promiscuous mode [ 295.731776][ T8697] bond_slave_1: entered promiscuous mode [ 295.742151][ T8697] gretap0: entered promiscuous mode [ 295.788968][ T30] audit: type=1400 audit(1766587600.747:849): avc: denied { execute } for pid=8675 comm="syz.5.593" path="/96/memory.stat" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 295.837689][ T7425] usb 6-1: USB disconnect, device number 29 [ 295.859251][ T8697] debugfs: 'hsr0' already exists in 'hsr' [ 295.976129][ T10] usb 7-1: qt2_attach - failed to power on unit: -71 [ 295.982070][ T8697] Cannot create hsr debugfs directory [ 295.984102][ T10] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 295.989871][ T8697] hsr0: entered promiscuous mode [ 296.032744][ T6997] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 296.075028][ T10] usb 7-1: USB disconnect, device number 6 [ 296.097432][ T5825] udevd[5825]: setting mode of /dev/bus/usb/007/006 to 020664 failed: No such file or directory [ 296.109197][ T5825] udevd[5825]: setting owner of /dev/bus/usb/007/006 to uid=0, gid=0 failed: No such file or directory [ 296.162725][ T6997] usb 2-1: device descriptor read/64, error -71 [ 296.247601][ T30] audit: type=1400 audit(1766587601.167:850): avc: denied { read } for pid=8706 comm="syz.6.600" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.271312][ T30] audit: type=1400 audit(1766587601.167:851): avc: denied { open } for pid=8706 comm="syz.6.600" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.296082][ T30] audit: type=1400 audit(1766587601.167:852): avc: denied { ioctl } for pid=8706 comm="syz.6.600" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 296.422778][ T6997] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 296.474275][ T30] audit: type=1400 audit(1766587601.167:853): avc: denied { set_context_mgr } for pid=8706 comm="syz.6.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 296.504179][ T30] audit: type=1400 audit(1766587601.177:854): avc: denied { mount } for pid=8706 comm="syz.6.600" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 296.652860][ T6997] usb 2-1: device descriptor read/64, error -71 [ 297.232708][ T30] audit: type=1400 audit(1766587601.547:855): avc: denied { name_bind } for pid=8710 comm="syz.4.601" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 297.383007][ T6997] usb usb2-port1: attempt power cycle [ 297.670833][ T8727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.605'. [ 297.786193][ T8728] overlayfs: failed to clone upperpath [ 298.204020][ T6997] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 298.229222][ T6997] usb 2-1: device descriptor read/8, error -71 [ 298.495842][ T6997] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 298.535011][ T6997] usb 2-1: device descriptor read/8, error -71 [ 298.744185][ T8748] ceph: No mds server is up or the cluster is laggy [ 298.753382][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 298.762974][ T6997] usb usb2-port1: unable to enumerate USB device [ 298.814419][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 299.098622][ T8761] random: crng reseeded on system resumption [ 299.939466][ T8765] syzkaller0: entered promiscuous mode [ 299.953873][ T8779] futex_wake_op: syz.4.615 tries to shift op by -1; fix this program [ 299.965676][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 299.965693][ T30] audit: type=1400 audit(1766587604.927:872): avc: denied { read write } for pid=8792 comm="syz.5.618" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 299.986924][ T8765] syzkaller0: entered allmulticast mode [ 300.025691][ T30] audit: type=1400 audit(1766587604.927:873): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 300.049075][ T8765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.612'. [ 300.105377][ T30] audit: type=1400 audit(1766587604.957:874): avc: denied { open } for pid=8792 comm="syz.5.618" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 300.223069][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.620'. [ 300.239100][ T30] audit: type=1400 audit(1766587605.067:875): avc: denied { create } for pid=8764 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.245525][ T8802] netlink: 'syz.5.621': attribute type 10 has an invalid length. [ 300.295013][ T30] audit: type=1400 audit(1766587605.067:876): avc: denied { bind } for pid=8764 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.334257][ T30] audit: type=1400 audit(1766587605.067:877): avc: denied { write } for pid=8764 comm="syz.1.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.361750][ T30] audit: type=1400 audit(1766587605.177:878): avc: denied { setopt } for pid=8799 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.367750][ T8802] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.473946][ T30] audit: type=1400 audit(1766587605.177:879): avc: denied { create } for pid=8799 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.669866][ T30] audit: type=1400 audit(1766587605.177:880): avc: denied { getopt } for pid=8799 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.796968][ T30] audit: type=1400 audit(1766587605.197:881): avc: denied { create } for pid=8801 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 405.829107][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 405.836141][ C1] rcu: 0-...!: (1 GPs behind) idle=9c1c/1/0x4000000000000000 softirq=38524/38525 fqs=3 [ 405.846842][ C1] rcu: (detected by 1, t=10502 jiffies, g=28629, q=561 ncpus=2) [ 405.854561][ C1] Sending NMI from CPU 1 to CPUs 0: [ 405.854607][ C0] NMI backtrace for cpu 0 [ 405.854641][ C0] CPU: 0 UID: 0 PID: 5186 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 405.854668][ C0] Tainted: [L]=SOFTLOCKUP [ 405.854674][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.854689][ C0] RIP: 0010:check_preemption_disabled+0x25/0xe0 [ 405.854725][ C0] Code: 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d d5 91 3a 08 65 8b 05 ca 91 3a 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d <41> 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea 48 89 fd 65 48 8b 05 8a [ 405.854743][ C0] RSP: 0018:ffffc90000007e18 EFLAGS: 00000082 [ 405.854758][ C0] RAX: 0000000000000000 RBX: ffff8880b8428540 RCX: ffffffff81aac8f6 [ 405.854770][ C0] RDX: ffff888020aa0000 RSI: ffffffff8bf2b380 RDI: ffffffff8bf2b3c0 [ 405.854783][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 405.854794][ C0] R10: 0000000000000001 R11: ffff888020aa0b30 R12: ffff8880b8428440 [ 405.854807][ C0] R13: 0000000000000001 R14: ffff88807917c300 R15: 0000000000000001 [ 405.854818][ C0] FS: 00007f75aec04880(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 405.854837][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.854849][ C0] CR2: 0000000000000000 CR3: 00000000206f2000 CR4: 00000000003526f0 [ 405.854861][ C0] Call Trace: [ 405.854868][ C0] [ 405.854876][ C0] rcu_is_watching+0x12/0xc0 [ 405.854895][ C0] __hrtimer_run_queues+0x9bf/0xc40 [ 405.854928][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 405.854955][ C0] ? read_tsc+0x9/0x20 [ 405.854983][ C0] ? rcu_is_watching+0x12/0xc0 [ 405.855001][ C0] hrtimer_interrupt+0x397/0x8e0 [ 405.855025][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 405.855050][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 405.855074][ C0] [ 405.855079][ C0] [ 405.855086][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.855107][ C0] RIP: 0010:bpf_bprintf_prepare+0x3c1/0x13f0 [ 405.855126][ C0] Code: be e0 ff 31 ff 89 ee e8 3d b8 e0 ff 40 84 ed 0f 88 9a 01 00 00 e8 ef bd e0 ff 89 ee bf 25 00 00 00 41 8d 5d 01 e8 1f b8 e0 ff <40> 80 fd 25 0f 85 49 03 00 00 e8 d0 bd e0 ff 48 63 eb 4c 01 f5 48 [ 405.855144][ C0] RSP: 0018:ffffc90003d4f7f0 EFLAGS: 00000293 [ 405.855158][ C0] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff81de2891 [ 405.855170][ C0] RDX: ffff888020aa0000 RSI: 0000000000000025 RDI: 0000000000000001 [ 405.855182][ C0] RBP: 0000000000000070 R08: 0000000000000001 R09: 0000000000000025 [ 405.855193][ C0] R10: 0000000000000070 R11: ffff888020aa0b30 R12: ffffc90003d4fa10 [ 405.855205][ C0] R13: 0000000000000002 R14: ffffc90003d4fa10 R15: dffffc0000000000 [ 405.855221][ C0] ? bpf_bprintf_prepare+0x3c1/0x13f0 [ 405.855245][ C0] ? bpf_trace_run2+0x26b/0x5c0 [ 405.855266][ C0] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 405.855285][ C0] ? bpf_trace_run2+0x2ab/0x5c0 [ 405.855309][ C0] ? bpf_trace_run2+0x3f9/0x5c0 [ 405.855329][ C0] bpf_trace_printk+0xda/0x190 [ 405.855347][ C0] ? __pfx_bpf_trace_printk+0x10/0x10 [ 405.855368][ C0] ? bpf_trace_run2+0x3f9/0x5c0 [ 405.855393][ C0] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 405.855409][ C0] bpf_trace_run2+0x239/0x5c0 [ 405.855431][ C0] ? __pfx_bpf_trace_run2+0x10/0x10 [ 405.855457][ C0] ? __lock_acquire+0x436/0x2890 [ 405.855481][ C0] __bpf_trace_contention_begin+0xc9/0x110 [ 405.855505][ C0] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 405.855529][ C0] ? lock_acquire+0x179/0x330 [ 405.855551][ C0] ? __pfx___might_resched+0x10/0x10 [ 405.855570][ C0] trace_contention_begin+0xc1/0x110 [ 405.855593][ C0] __mutex_lock+0x1b7/0x1ca0 [ 405.855616][ C0] ? kernfs_unlink_open_file+0x6a/0x4b0 [ 405.855646][ C0] ? kernfs_unlink_open_file+0x6a/0x4b0 [ 405.855675][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 405.855702][ C0] ? kernfs_fop_read_iter+0x41e/0x610 [ 405.855736][ C0] ? kernfs_unlink_open_file+0x6a/0x4b0 [ 405.855763][ C0] ? __pfx_locks_remove_file+0x10/0x10 [ 405.855791][ C0] kernfs_unlink_open_file+0x6a/0x4b0 [ 405.855820][ C0] kernfs_fop_release+0xe9/0x1e0 [ 405.855848][ C0] ? __pfx_kernfs_fop_release+0x10/0x10 [ 405.855874][ C0] __fput+0x402/0xb70 [ 405.855894][ C0] fput_close_sync+0x118/0x260 [ 405.855913][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 405.855931][ C0] ? dnotify_flush+0x79/0x4c0 [ 405.855955][ C0] __x64_sys_close+0x8b/0x120 [ 405.855973][ C0] do_syscall_64+0xcd/0xf80 [ 405.855997][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.856016][ C0] RIP: 0033:0x7f75ae515a67 [ 405.856031][ C0] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 405.856049][ C0] RSP: 002b:00007ffc2d3bc168 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 405.856065][ C0] RAX: ffffffffffffffda RBX: 00005614c72465c0 RCX: 00007f75ae515a67 [ 405.856078][ C0] RDX: 00007f75ae5efea0 RSI: 00005614c7263a50 RDI: 000000000000000c [ 405.856090][ C0] RBP: 00007f75ae5efff0 R08: 0000000000000000 R09: 0000000000000000 [ 405.856101][ C0] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 405.856112][ C0] R13: 3d45505954564544 R14: 3d5845444e494649 R15: 3d454d414e564544 [ 405.856133][ C0] [ 405.856596][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g28629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 406.376553][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 406.386524][ C1] rcu: RCU grace-period kthread stack dump: [ 406.392405][ C1] task:rcu_preempt state:R running task stack:28064 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 406.405913][ C1] Call Trace: [ 406.409180][ C1] [ 406.412108][ C1] ? __schedule+0x10b9/0x6150 [ 406.416785][ C1] __schedule+0x1139/0x6150 [ 406.421289][ C1] ? __lock_acquire+0x436/0x2890 [ 406.426228][ C1] ? __mod_timer+0x8f2/0xd30 [ 406.430827][ C1] ? __pfx___schedule+0x10/0x10 [ 406.435671][ C1] ? find_held_lock+0x2b/0x80 [ 406.440363][ C1] ? schedule+0x2d7/0x3a0 [ 406.444707][ C1] schedule+0xe7/0x3a0 [ 406.448786][ C1] schedule_timeout+0x123/0x290 [ 406.453641][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 406.459013][ C1] ? __pfx_process_timeout+0x10/0x10 [ 406.464318][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 406.470122][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 406.475584][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 406.480369][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 406.485664][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.490864][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 406.495797][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 406.500657][ C1] rcu_gp_kthread+0x26d/0x380 [ 406.505335][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.510532][ C1] ? rcu_is_watching+0x12/0xc0 [ 406.515289][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 406.520487][ C1] ? __kthread_parkme+0x19e/0x250 [ 406.525507][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 406.530705][ C1] kthread+0x3c5/0x780 [ 406.534772][ C1] ? __pfx_kthread+0x10/0x10 [ 406.539359][ C1] ? rcu_is_watching+0x12/0xc0 [ 406.544117][ C1] ? __pfx_kthread+0x10/0x10 [ 406.548705][ C1] ret_from_fork+0x983/0xb10 [ 406.553293][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 406.558407][ C1] ? __switch_to+0x7af/0x10d0 [ 406.563087][ C1] ? __pfx_kthread+0x10/0x10 [ 406.567674][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.572454][ C1] [ 406.575463][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 406.581775][ C1] CPU: 1 UID: 0 PID: 8814 Comm: syz.6.623 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.592707][ C1] Tainted: [L]=SOFTLOCKUP [ 406.597019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.607064][ C1] RIP: 0010:smp_call_function_many_cond+0xdfd/0x15e0 [ 406.613741][ C1] Code: 57 48 8b 54 24 10 4c 89 74 24 10 49 89 d5 48 89 d5 48 89 54 24 18 49 c1 ed 03 83 e5 07 4d 01 e5 83 c5 03 e8 35 5b 0c 00 f3 90 <41> 0f b6 45 00 40 38 c5 7c 08 84 c0 0f 85 b6 05 00 00 8b 43 08 31 [ 406.633343][ C1] RSP: 0000:ffffc90004117720 EFLAGS: 00000246 [ 406.639406][ C1] RAX: 0000000000080000 RBX: ffff8880b84431e0 RCX: ffffc9000f0fe000 [ 406.647373][ C1] RDX: 0000000000080000 RSI: ffffffff81b28b3b RDI: 0000000000000005 [ 406.655354][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 406.663316][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 406.671280][ C1] R13: ffffed101708863d R14: 0000000000000001 R15: 0000000000000000 [ 406.679245][ C1] FS: 00007ff92b3a96c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 406.688170][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.694750][ C1] CR2: 0000000000000000 CR3: 00000000499ac000 CR4: 00000000003526f0 [ 406.702713][ C1] Call Trace: [ 406.705981][ C1] [ 406.708907][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 406.714113][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 406.720444][ C1] ? ldt_dup_context+0x1a2/0x300 [ 406.725392][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 406.730589][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 406.735707][ C1] flush_tlb_mm_range+0x2f0/0x12c0 [ 406.740823][ C1] ? find_held_lock+0x2b/0x80 [ 406.745506][ C1] ? dup_mmap+0xcea/0x20e0 [ 406.749926][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 406.755467][ C1] ? up_write+0x282/0x4e0 [ 406.759799][ C1] dup_mmap+0xd04/0x20e0 [ 406.764053][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 406.768750][ C1] copy_process+0x3b9f/0x7430 [ 406.773431][ C1] ? __pfx___futex_wait+0x10/0x10 [ 406.778465][ C1] ? __pfx_copy_process+0x10/0x10 [ 406.783494][ C1] ? find_held_lock+0x2b/0x80 [ 406.791663][ C1] ? futex_private_hash_put+0x160/0x1b0 [ 406.797230][ C1] kernel_clone+0xfc/0x910 [ 406.801649][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 406.806697][ C1] __do_sys_clone+0xce/0x120 [ 406.811300][ C1] ? __pfx___do_sys_clone+0x10/0x10 [ 406.816499][ C1] ? mntput_no_expire+0xd8/0x220 [ 406.821449][ C1] ? xfd_validate_state+0x61/0x180 [ 406.826553][ C1] ? __pfx___x64_sys_chdir+0x10/0x10 [ 406.831852][ C1] do_syscall_64+0xcd/0xf80 [ 406.836360][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.842262][ C1] RIP: 0033:0x7ff92a58f749 [ 406.846669][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.866274][ C1] RSP: 002b:00007ff92b3a8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 406.874708][ C1] RAX: ffffffffffffffda RBX: 00007ff92a7e5fa0 RCX: 00007ff92a58f749 [ 406.882688][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 406.890663][ C1] RBP: 00007ff92a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 406.898629][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 406.906590][ C1] R13: 00007ff92a7e6038 R14: 00007ff92a7e5fa0 R15: 00007ffd270d9d28 [ 406.914587][ C1]