last executing test programs: 9.863546113s ago: executing program 4 (id=115): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi0\x00', 0xa8802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x7, 0x40, 0x13}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x2, &(0x7f0000001900)=@string={0x2}}, {0x1f, &(0x7f00000019c0)=@string={0x1f, 0x3, "caa55aa465add4665172d446680609008d085b181d50ae78d14e9bafbb"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3, @ANYRESHEX=r2, @ANYBLOB=',\x00']) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x8000, 0x6, 0x0, 0x817}, &(0x7f00000000c0)={0x1b, 0x0, 0xfffffffffffffffc, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000, 0x4}, 0x0, 0x0, 0x0) tee(r3, r0, 0x1000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xfc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xcc, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x7], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xb, 0x4d, 0xc, 0x9, 0xa, 0xd, 0x1, 0xa, 0x10, 0xb, 0xe, 0x8, 0x8, 0x2, 0xb, 0xb], 0x1, [0x4, 0x8, 0x80, 0x2232, 0x7, 0x1, 0x1, 0x0, 0xaf, 0x0, 0x9, 0x5, 0x10, 0x2c7, 0x5, 0x6], [0x4, 0x2, 0x81, 0x3, 0xefa8, 0x3000, 0xf, 0x11ba, 0x9f, 0x0, 0x5, 0x2, 0xc0, 0x6, 0x5, 0x345]}}]}}]}, 0xfc}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 9.639492096s ago: executing program 3 (id=116): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@private0, @in6=@private2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f00000001c0)=0xe8) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r6, 0x9208, 0x1000000000) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0001d1d4192a9211c9c0e42ef80c4041e4499753613e3abf442f1724ad451553c2f1b59c82500ab040b2672c9ce7895f61b78f571499ef"], 0x2, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x1, 0x401, 0x3, 0x9, 0x1003, 0x1c82, 0x5, 0x3bb, 0x802, 0x1600, 0x5, 0x20000001, 0x2, 0xe1cb, 0x13352f60, 0x0, 0x400, 0x8, 0x6, 0x5, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={0x0, 0xffffffffffffffff, 0x8c}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.139052787s ago: executing program 1 (id=119): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async) socket(0x10, 0x3, 0x0) (async) ftruncate(0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x80015b1b, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x2) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) (async) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) (async) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f00000002c0)={0x1, r7}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 7.7995369s ago: executing program 3 (id=121): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x14, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x56, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x5, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0x1, 0x1], 0x4}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x1, 0x1, [0x7]}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x202, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000080), 0x4) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000240)={0x100, r9, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 7.370421873s ago: executing program 0 (id=122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)="90"}) 7.258972708s ago: executing program 0 (id=123): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000280)="f34f7d11cc16f930a79cb97fc2a1", 0xe}, {&(0x7f0000000dc0)="def4f404b64fd56e340856b3cdfebea6f3215e6c6a2f6835307ac41ff951cbea813c6670dcecaeca98677ada0c6fb55b642f0f74d3ae36175b1803298a66de355cacf1379033b9e23a2c2be8f9177b4d353a3b04fa087bbf4118cfe5ffbc853f7c180f7a45e3b5303e6495d27d639d2b56b88f9432f48374b43be276a96085d2913e9b9b2e4a3eb55f18ab5d3be1857b1574602eecf6a8266cb02bf12e714941b3e1d4ba20aef7eb14758822773ef97d7521b4c02de1d5a0c538ad159ad7c190", 0xc0}, {&(0x7f0000000ec0)="ac3683507b9ed5fb6389beeabe08d4c5489e38614f412c7103d0f964bd9d460fa980c7cab97ecff7cf1aaa2e273b356a542ce667c3516c6c8b32c9ee0321019d4578f72c44f271350ced3e1f1d570828a3553bb8f354e88b40cb595704566a77d3437a4e333778a936a5239b688345d97f9d", 0x72}, {&(0x7f0000000f80)="0bd9fadb477db0dc52cf9baf67f3b0ef24381b2817a3b36972c921dd10513e011d2a103a63019d80b8942eede0", 0x2d}, {0x0}, {&(0x7f0000001240)}], 0x6}, 0x4000006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0081, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315842, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x200, 0x800c0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x4, 0x5}]}, 0xc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x48882, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000800)={0x2, 0x0, {&(0x7f0000000b80)=""/239, 0xef, 0x0, 0x2, 0x2}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000001c0)={0x3, 'vlan1\x00', {0x3}, 0x7}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) 7.235261994s ago: executing program 1 (id=124): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0xbd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb, 0xb2, 0x35, 0x20, 0x545, 0x8080, 0x2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x0, 0xd2, 0x47, 0x9e}}]}}]}}, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x24, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0xb43b0e6b89d3d645, 0x3, 0xf, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x9}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x8, 0x6, 0x9, 0x40, 0xf7}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "bc4c9d4d35ef52c0305d1444755c7934"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x4, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xc}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x480a}}, {0xd8, &(0x7f0000000140)=@string={0xd8, 0x3, "338f9c80dbe23ffebacc9d2db0ae7918626fbbc5e299700d2c0ac6de950cad317da009ad916b65354d333695b874b483b305df0982554ffe1d3239792e33698ec8aef848fa17560d56ee3a31bd657338dfb10950ad4d61cb92a8b05da83c1e8efd917164cfe99be2f0e745379a8069766da0c0d1ef71f768fdca00d29e2c8190ac666b6f1f844036032c973a1616fc2ba492aafe64f0f46dc7347419c8bdbcf26eb418c972ccb63ce8d504a5002509ae25c4b50edcdb21f5de4b1c4dfbab5eac883292c3e420e8ca6831fec6ea8cb11df10b2d687b82"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x457}}]}) 5.931335723s ago: executing program 0 (id=126): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5b, 0x0, 0x0, 0x5}]}) 5.84719256s ago: executing program 0 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000980)={"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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003b64d408861a9253a127101d45feeac2aed5dc07c98f0ce03f53010203010902"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x6, 0x1, 0x1}]}, &(0x7f0000001480)='syzkaller\x00', 0x9}, 0x94) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0x1, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0x8, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x7, 0x15, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x6f, 0x9, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0xf9, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x5, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 5.609345122s ago: executing program 4 (id=129): socket$l2tp6(0xa, 0x2, 0x73) r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) fcntl$setown(r1, 0x8, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f00000ef000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r1, 0x0, 0x2000c450) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000042000701feffffff00000000017c0000040042800c00018006000600a30a00000c0b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.146979034s ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x6cc81, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r1, @ANYRES8], 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_io_uring_setup(0x4000049f, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x285, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x11c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)="1d3025e025acee929e8468ee677d37ae21fe540a55d9f993e4638a695836fb2ab58afc840a4d49c82dfa28d85b0e9ff513ef7243d76b32ad6b68e3b78076c2ddac6dadabe9036bc72470dfbadc1c4add4d6d7a61", 0x54, 0x40000000}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f0000000080)='1', 0x1) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, 0x0) memfd_secret(0xa51cd372813f45c5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x89) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) 4.913118089s ago: executing program 3 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002000921000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='mm_shrink_slab_start\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) bind$inet(r4, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800601061290390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000100)={'syz0\x00', {0x0, 0x37}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x562], [0x0, 0x4000000, 0x3, 0x609e, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x10, 0x2b, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2]}, 0x45c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010129bd7000fddbdf25310000000500330004000000050036000100000008000200", @ANYRES32=r11, @ANYBLOB="12000001000000005c70deb05ce168cfc6c5d9c93485a70cd8233de0a621559351875605bbb64a2f57f8ddc7f6397723b207314d572a4369a327d12a6d1625c9b50ba411d1237795cccdd90f672c3b23fb530c9e143137c07e01c237763f3282a71a79457ca77432d5dcae6d4eef1300a9dd6c33bbe755d33a04d01a498dcc706acf5dc6e9e5e0e642181ca7a595c2e2a3f9e2ba6507253e1b7fecb455"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x84) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000}) 4.67544977s ago: executing program 2 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10200, 0x5, 0x1000, 0x1000, &(0x7f000000a000/0x1000)=nil}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x100000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x80000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000000000000000001600000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000055090100000000209500000000000000bd9a000000000000b70200000000000085000000a0000000b7000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00'}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000006, 0x4e98d9f4000, 0x40, 0x5, 0x5479, 0x1038, 0x6, 0x0, 0x55, 0xe0e2, 0x100000002, 0x0, 0x9, 0x109, 0x6a], 0xffffffff, 0x1c7a86}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x44, 0x30, 0x48b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r6}, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r8 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r8, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) 4.652250965s ago: executing program 4 (id=136): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x3, 0x52f, 0x7fffffff, 0x401, 0x8000000000000000, 0xb3, 0x10001, 0xb1d, 0x4000000000000008, 0x7fffffff, 0x81, 0x3d9, 0x0, 0xe5, 0x9], 0x1000, 0x383fc2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001055d4401e040a40f8490000000109021200010000000009043a0000cf09a40018f5b353ca1b7905fd84c67253d0eebf7b19916477536efb09fda5a1a43905bb01008cc21f036e56e9b0849f9da1b38d438a5c99b4d463adfc669ae175d6fd39240ba4d81d69f435eecf9d3ef157708f9f67539c6d5d1e1f2bc6d6cfeebc856565518216b46a7c90530ef76f0e782385929c00000000"], 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000000)=0x4) 3.522641778s ago: executing program 2 (id=137): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r4 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r4, 0x0, 0x0, 0x1, 0x3000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fremovexattr(r5, &(0x7f0000002480)=@known='trusted.overlay.upper\x00') msgsnd(r4, &(0x7f0000000040)={0x1}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xaa}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.4034906s ago: executing program 1 (id=138): syz_open_dev$vbi(&(0x7f0000001d40), 0x0, 0x2) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x10000000004, 0x80000000, 0x200, 0x1ff}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0xc00, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f0000000380)=0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$kcm(0x11, 0xa, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0xffff2652, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 2.807121008s ago: executing program 4 (id=139): syz_usb_connect(0x2, 0x24, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = fanotify_init(0x1a, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x124) fanotify_mark(r0, 0x1, 0x4000001a, r1, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x5fb7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x5, 0x2, 0x1, 0x10, 0xff, 0xd, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0xa, 0x3, 0xc], 0x1, [0x1ff, 0xc, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x4, 0x3, 0x456, 0x6, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x614, 0x3, 0x3, 0xe3, 0xffff, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xda) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x1abc486, 0x0) setpriority(0x2, 0x0, 0x8) r3 = memfd_secret(0x80000) r4 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@empty}, {@initdev}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) ftruncate(r4, 0x51a9497) readahead(r4, 0x7, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f0000000940)=ANY=[@ANYBLOB="78010000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250f0000006c0001801400020076657468305f766972745f77696669001400020076657468315f766972745f7769666900140002006261746164765f736c6176655f3000001400020063616966300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="d8af0040", @ANYRES32=0x0, @ANYBLOB="780001801400020074696d726567307a94e3d3d6ab000008000300e3", @ANYRES32=0x0, @ANYBLOB="140002007866726d30000000000fd192d8c70dd283530d732aa20d11a3000000", @ANYRES32=r1, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000540001800800030003000000140002006d6163766c616e30000000000000000014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300010000001400020064756d6d7930000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x178}, 0x1, 0x0, 0x0, 0x24000800}, 0x800) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 2.406720877s ago: executing program 1 (id=140): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x18}}, 0x880) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x91ee, 0x1, 0x1, 0x0, 0x2, 0x80}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) io_uring_setup(0x4aec, &(0x7f0000000140)={0x0, 0x81fa, 0x82, 0x1, 0x7a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800b00010064796e73657400002000028008000440000000110900010073797a310000000008000340000000010900010073797a30000000000900020073797a3200000000140000"], 0x88}}, 0x0) 2.364037165s ago: executing program 2 (id=141): semop(0x0, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(0x0, &(0x7f00000001c0)=[{0x3, 0x5903, 0x1000}], 0x1, 0x0) 2.249378979s ago: executing program 0 (id=142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x400}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000003ac0)=0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r4, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r3, &(0x7f0000001300)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000640)="fe97", 0x2}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080), 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='ext4_discard_blocks\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) migrate_pages(0x0, 0x5, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x8) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x60001, 0x0) 2.244187066s ago: executing program 3 (id=143): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) prlimit64(r2, 0xf, &(0x7f0000000140)={0x8, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r9 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ftruncate(r9, 0x102000000) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x4) (async) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000040)=0x4) 1.632437984s ago: executing program 2 (id=144): r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000bc0)={0x0}) (async) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000002240)=""/236, 0xec, 0x4eb) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='jbd2_shrink_checkpoint_list\x00', 0xffffffffffffffff, 0x0, 0x6cf0}, 0x18) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x31) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000b00)={r1, 0x2, r0, 0x3ff}) (async, rerun: 64) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000c40)={{r0}, "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"}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pimreg\x00'}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="e4a2f2a9f1c052ebb99ee4763081e2674abf516165eaff6219c0a6a0a7c2a5d4aea813b681d6c5a7908784e2f5481afc460f0d52356e1ad9590265e355a7b467b855be18bac30388accb22f50aee7d39499e4b0e8c1860efc1ac8782c7f3d67474f15602a8076eae1da8a7c00db341b3bafca54796eacd84785fd55125557c6a51e60f8af217c15f18cf08c4ff0efdc1748f3ca58a9df7f561192fc39d078d87161aac7e6c4180b5c686a467eb3438dfa489141bcf00547cfadd95bb6fdf6279ee54f25715e9494094ecc8ab382e177c1a497473e25b7aba75e535fb818c16d774374a39c086e97ebd", 0xe9}, {&(0x7f0000000440)="74bf4ee468aada415f7fb6a008a8191d2c65b746e6c652984437e86e6eeb52a2ccd0847d019bcb36b2c3a9998176172c8893b345d8356eb3edc14613a4291ae9dfc2c4726e0f3b6980d2126d4c6801957d246c3b10aaf0744b7392489998dd84fc8c7d29fde07d293fc6e68587d575f7ea683055aa26afdb54540bf7b1235556924410547935d9c3a46610111307e108938c1d87c08bfedfabf581b9f9422e83093c01cb93e24666551639d64acb39674e840e38eab9e607cc083b8d0d7ed2b835eafbe6be63e7dcf21fb2e16c188f28d7b83828f3dd7a2510fb9295782b3d5f4f213cd14796bf3c875e4b99a49c629de58c", 0xf2}, {&(0x7f0000000180)="b4a4ef8cd0b4a49faba16b070972714677d8933d70b941cd0e0495eded382d71c6b82562430999c54e8df62712834fa2b461dbcdc161bb40153df701baa3400caf2a42ecbed3962cbad43aafe854202bf7cbe87b9525225c334e677bbde0f52e26f0b40b923b67d3ec78d5a19e1128609c1b7c8a208c229b505bad0b", 0x7c}], 0x3, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x60}}, {{&(0x7f00000005c0)=@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x27}, 0x3}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000240)="832abea4ba2051fb012a599ee5a26dc04356ccbd57d736c773202df7fd3a95009aab0b5e70d7", 0x26}, {&(0x7f0000000640)="e460cecf8914d99ddb186cf2249824100fde7f0af54e7d63b4cb8b8db75720b25449be6468ac6161ace24d4945b9592f8d84c516bece6f3e739490888cf2f644d5be257fc77176efc926cddcb686e18726b7bf03775a0afdd5898b71a4940c76c41701f5a809c075251936be8a81220d9e6779497c61b555c6c6c0c95775308c6e6513e23e9f25c327c9a249a00968", 0x8f}, {&(0x7f0000000700)="324410ec09a43a58e5f8eeb23460b3738ffa0deef2277e8f7977fd97263c32932c32173b98d3392c12a9b082b075d60c675b4ed241a3bfddab87ce38f66d2cabd85a0a9a2c68fbbde9990e864229a7df0e687399e32310a8e7a19b9e7a3ac711de25bb1765abac8622687e86111cc72c24a9208feb93dfbc60d8a6b0d70bf6f472e1d76a1c6c29f9a02c7e2378d0069198784d23d186a0b6961e70fdbe76c88d1f092fa113afe6ba1b38032cc12638c811d2959086a4296e7b4feb73cfe863879f", 0xc1}, {&(0x7f0000000800)="994ea8024fc0b931abf282b84c382fb5b9591e125ad30763d094d410b0a5920aa6a502fbcfb3722e71aedd530b18f41dccbc5e383806402f096dfc28a6e1f1423513b15ff7130f582eca943d5bf7929de230b7bea787ac", 0x57}, {&(0x7f00000002c0)='!', 0x1}, {&(0x7f0000000880)="0f4be5f3e221d0862728da12fb062958eceb7548bc8e4d3ea07b6b2c0bfb2ec38f9d39bc60a0d2d9aebfed01ff6713ab468370cd070ce549352902cc4a3402aab8cf46ee1e860ab492250d63cd78b2029207bdde787c013665069bd66f7e52dc01e48c04ccf87c5d65920a717504960a79c2416e19b25c36fa5c57c596d56c54d674a7fc454471b7706bfee9d06772c276efe56a7ca312f26ecb9fe25330c54c67962a32b087df52635103b348315629a771f4756714f47359de41bbd101c34286ac186e24a9a0122a281625dd937518", 0xd0}, {&(0x7f0000000980)="52885045146ccc5efe32a26ac9e7645c3f51efc1c4f93674de2c22a76e526731ff397e3bae9af0df55815341d2529c9ab8ba422f4b1cb8c65219230ad7d9cfc10b0d18e05a084936787a744fa5b9a2403c0e7d57a4b3d108da911ede6d63b560608503e973e2160f21c332ab", 0x6c}, {&(0x7f0000000a00)="28aa26ec04d4fc6a8ab640da2e1098abf7c47e98fe084bb8623ff7f9aac93d2adaf70b8a25b2b9157b72e2d7d9a1ae42884ce1777f4a965b00371d4e5fa0a5a52a3c2b024b6abd3d86ffa5a53ee0edba", 0x50}], 0x8, &(0x7f0000000b00)}}], 0x2, 0x44800) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r6, @ANYRES32=r7, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x24000c94}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket(0x400000000010, 0x3, 0x0) write(r8, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 1.20932561s ago: executing program 1 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000100)={0x4b29241a6eaffd29, 0x8080000, 0x401, 0x1, 0x8001}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kvm_test_age_hva\x00', r3}, 0x18) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.119902658s ago: executing program 2 (id=146): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x180}, 0x4) (async) 1.087106677s ago: executing program 4 (id=147): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x240, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000580)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000600)={0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000740)={&(0x7f0000000640)="918852cafad1f6690d7c90ffcf9c95b391459523b832dc712129d64640a91cf7d28806dc65f213af84e36a71ee79807274b90561901d90fec0e52d5be46d1b86a528d9ea641e5471c55d33f5cd2ba3d56122cb4da896c63bea19b0941f0821a4cd38d2d75729c659316c41ee8dbfdca6e96df44793ff31d6f06f167cd1458958dd895ca5ba96b9e9f5a0336dba27eff55bf47b131e851e70a4e5fbbbbafb31ba65bda704bab45733832f727de2d4115a3080384167411638f71289be836cc88d5832f5", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000940)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[{}], &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x1, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000009c0)=[r1, r2, 0x0, r3, r4, r5, r6], 0x7}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x9) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x6, &(0x7f00000000c0)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x0, 0x4008040) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1, 0x100000}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r8], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 728.369639ms ago: executing program 0 (id=148): rseq(&(0x7f00000002c0), 0x20, 0x0, 0x0) r0 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0xed96, 0x9054, 0x20000, 0x400038f}) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x2c93a000) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f00000003c0)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r4, r3, 0x0, 0x0, 0x0}, 0x30) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x20000002) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) close(0xffffffffffffffff) r8 = open(&(0x7f0000000200)='./file0\x00', 0x101020, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@getchain={0x4c, 0x66, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffff}, {0x0, 0xc}, {0xf, 0xb}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xffffff86}, {0x8, 0xb, 0x80}]}, 0x4c}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000340)={r8, r8}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x60a000, 0x0) 728.008998ms ago: executing program 2 (id=149): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x2c, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0xfc80}}, 0x0) r3 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x2, {0xa, 0x4e23, 0x57bb, @mcast2, 0x2}}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}], 0x30}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x1c, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}]}, 0x1c}], 0x1}, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x20000000, @local, 0x5}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) sendto$inet6(r9, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 726.876851ms ago: executing program 1 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000b6e000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x4f, 0x0, 0xffffffffffffff35) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) syz_clone3(&(0x7f0000000080)={0x10f100, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/208, 0xffffffffffffffee, 0x0, 0x0}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000000000000005001a000600"/30], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xc1, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x10000, 0x3c4210}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r9, &(0x7f0000000740)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={r11}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r11, 0x7fff}, &(0x7f0000000400)=0x8) write(r10, &(0x7f0000000340), 0x11000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 251.937503ms ago: executing program 3 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="f7790066baa00066b86b4266ef66ba420066b8e200b8010000000f01d90f29902cbb0000c4e2b1ba8c88dd000000666666440f38826b410f7842280f072e46de3a0f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 4 (id=152): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8006, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x264e, 0x38414761, 0x1, @stepwise={0x4671f307, 0x1, 0x3, 0x2, 0xc, 0x1}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x200, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 55.912404][ T30] audit: type=1400 audit(1766681093.350:62): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.935706][ T30] audit: type=1400 audit(1766681093.380:63): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.937993][ T5800] cgroup: Unknown subsys name 'net' [ 55.965334][ T30] audit: type=1400 audit(1766681093.410:64): avc: denied { unmount } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 56.095288][ T5800] cgroup: Unknown subsys name 'cpuset' [ 56.103972][ T5800] cgroup: Unknown subsys name 'rlimit' [ 56.242328][ T30] audit: type=1400 audit(1766681093.680:65): avc: denied { setattr } for pid=5800 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.267544][ T30] audit: type=1400 audit(1766681093.690:66): avc: denied { create } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.303552][ T30] audit: type=1400 audit(1766681093.690:67): avc: denied { write } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.325138][ T30] audit: type=1400 audit(1766681093.690:68): avc: denied { read } for pid=5800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.336517][ T5802] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 56.354037][ T30] audit: type=1400 audit(1766681093.710:69): avc: denied { mounton } for pid=5800 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 56.378872][ T30] audit: type=1400 audit(1766681093.710:70): avc: denied { mount } for pid=5800 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 56.403652][ T30] audit: type=1400 audit(1766681093.800:71): avc: denied { relabelto } for pid=5802 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 57.344983][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.284043][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.294470][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.301745][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.309517][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.317489][ T5818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.326378][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.335500][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.335824][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.343008][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.350905][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.364356][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.371896][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 59.379841][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.381238][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 59.387441][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.394680][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 59.401056][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.413759][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.417211][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.423177][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.436156][ T5138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.437074][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.453443][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.460704][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.469093][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.918492][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 59.939522][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 59.998761][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 60.035453][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 60.150975][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.159009][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.166247][ T5810] bridge_slave_0: entered allmulticast mode [ 60.173110][ T5810] bridge_slave_0: entered promiscuous mode [ 60.180565][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 60.204714][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.211836][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.219283][ T5810] bridge_slave_1: entered allmulticast mode [ 60.225994][ T5810] bridge_slave_1: entered promiscuous mode [ 60.277452][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.284636][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.291697][ T5817] bridge_slave_0: entered allmulticast mode [ 60.298537][ T5817] bridge_slave_0: entered promiscuous mode [ 60.326360][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.333516][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.340583][ T5821] bridge_slave_0: entered allmulticast mode [ 60.347541][ T5821] bridge_slave_0: entered promiscuous mode [ 60.354545][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.361617][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.368966][ T5817] bridge_slave_1: entered allmulticast mode [ 60.375851][ T5817] bridge_slave_1: entered promiscuous mode [ 60.382321][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.389387][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.396524][ T5812] bridge_slave_0: entered allmulticast mode [ 60.403246][ T5812] bridge_slave_0: entered promiscuous mode [ 60.415692][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.425023][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.432087][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.439722][ T5821] bridge_slave_1: entered allmulticast mode [ 60.446442][ T5821] bridge_slave_1: entered promiscuous mode [ 60.459882][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.467082][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.474360][ T5812] bridge_slave_1: entered allmulticast mode [ 60.480957][ T5812] bridge_slave_1: entered promiscuous mode [ 60.492084][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.540785][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.573202][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.583799][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.594586][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.611673][ T5810] team0: Port device team_slave_0 added [ 60.619364][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.636879][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.646270][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.653623][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.660691][ T5815] bridge_slave_0: entered allmulticast mode [ 60.667608][ T5815] bridge_slave_0: entered promiscuous mode [ 60.675512][ T5810] team0: Port device team_slave_1 added [ 60.701580][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.708782][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.716227][ T5815] bridge_slave_1: entered allmulticast mode [ 60.722976][ T5815] bridge_slave_1: entered promiscuous mode [ 60.746122][ T5817] team0: Port device team_slave_0 added [ 60.774231][ T5821] team0: Port device team_slave_0 added [ 60.781056][ T5817] team0: Port device team_slave_1 added [ 60.788101][ T5812] team0: Port device team_slave_0 added [ 60.802124][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.809321][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.835518][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.848214][ T5821] team0: Port device team_slave_1 added [ 60.866791][ T5812] team0: Port device team_slave_1 added [ 60.874222][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.883911][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.890847][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.916867][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.949031][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.971031][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.978217][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.004199][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.028645][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.036374][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.062595][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.074158][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.081085][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.107253][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.118512][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.125480][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.151767][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.170830][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.177891][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.203812][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.218676][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.225668][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.251871][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.264059][ T5815] team0: Port device team_slave_0 added [ 61.287527][ T5815] team0: Port device team_slave_1 added [ 61.319826][ T5810] hsr_slave_0: entered promiscuous mode [ 61.326207][ T5810] hsr_slave_1: entered promiscuous mode [ 61.365363][ T5821] hsr_slave_0: entered promiscuous mode [ 61.371389][ T5821] hsr_slave_1: entered promiscuous mode [ 61.377608][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 61.383823][ T5821] Cannot create hsr debugfs directory [ 61.396855][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.403933][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.429965][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.444774][ T5817] hsr_slave_0: entered promiscuous mode [ 61.450763][ T5817] hsr_slave_1: entered promiscuous mode [ 61.456941][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 61.462646][ T5817] Cannot create hsr debugfs directory [ 61.476455][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.483783][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.509998][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.521088][ T5813] Bluetooth: hci2: command tx timeout [ 61.521100][ T5820] Bluetooth: hci4: command tx timeout [ 61.521173][ T5826] Bluetooth: hci3: command tx timeout [ 61.526823][ T5820] Bluetooth: hci1: command tx timeout [ 61.526893][ T5820] Bluetooth: hci0: command tx timeout [ 61.568695][ T5812] hsr_slave_0: entered promiscuous mode [ 61.574701][ T5812] hsr_slave_1: entered promiscuous mode [ 61.580547][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 61.586506][ T5812] Cannot create hsr debugfs directory [ 61.703442][ T5815] hsr_slave_0: entered promiscuous mode [ 61.709451][ T5815] hsr_slave_1: entered promiscuous mode [ 61.715655][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 61.721360][ T5815] Cannot create hsr debugfs directory [ 61.961845][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.973496][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.988201][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.004383][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.053770][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.064314][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.086111][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.100455][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.134516][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.148549][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.171500][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.189886][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.260986][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.271026][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.280295][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.290494][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.336820][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.385718][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.401686][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.416504][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.425378][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.439309][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.458086][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.465328][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.504006][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.511138][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.527517][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.569547][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.579389][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.598232][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.605335][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.623929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.630973][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.657975][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.675693][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.682806][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.705554][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.712612][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.731174][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.764762][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.787859][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 62.787873][ T30] audit: type=1400 audit(1766681100.230:84): avc: denied { sys_module } for pid=5810 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.830199][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.880132][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.887294][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.914574][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.932284][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.939401][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.957728][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.980291][ T4227] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.987459][ T4227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.013963][ T4227] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.021082][ T4227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.058251][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.136370][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.249392][ T5810] veth0_vlan: entered promiscuous mode [ 63.279871][ T5810] veth1_vlan: entered promiscuous mode [ 63.308604][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.319186][ T5821] veth0_vlan: entered promiscuous mode [ 63.352526][ T5821] veth1_vlan: entered promiscuous mode [ 63.427291][ T5810] veth0_macvtap: entered promiscuous mode [ 63.454038][ T5810] veth1_macvtap: entered promiscuous mode [ 63.461874][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.510686][ T5821] veth0_macvtap: entered promiscuous mode [ 63.524906][ T5821] veth1_macvtap: entered promiscuous mode [ 63.540802][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.564125][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.577913][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.592971][ T5813] Bluetooth: hci3: command tx timeout [ 63.594423][ T5826] Bluetooth: hci2: command tx timeout [ 63.598761][ T5823] Bluetooth: hci4: command tx timeout [ 63.609767][ T5820] Bluetooth: hci1: command tx timeout [ 63.615814][ T5822] Bluetooth: hci0: command tx timeout [ 63.635104][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.644538][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.659086][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.666523][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.677287][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.710722][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.740173][ T3530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.756042][ T5812] veth0_vlan: entered promiscuous mode [ 63.764659][ T3530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.773667][ T3530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.795694][ T3530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.845657][ T5815] veth0_vlan: entered promiscuous mode [ 63.855564][ T5812] veth1_vlan: entered promiscuous mode [ 63.873973][ T5817] veth0_vlan: entered promiscuous mode [ 63.880125][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.888581][ T5815] veth1_vlan: entered promiscuous mode [ 63.897669][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.926975][ T5817] veth1_vlan: entered promiscuous mode [ 63.970802][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.987759][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.993745][ T5812] veth0_macvtap: entered promiscuous mode [ 64.010825][ T5815] veth0_macvtap: entered promiscuous mode [ 64.018387][ T30] audit: type=1400 audit(1766681101.460:85): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.5LQqct/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.045621][ T30] audit: type=1400 audit(1766681101.460:86): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.053090][ T5812] veth1_macvtap: entered promiscuous mode [ 64.071050][ T30] audit: type=1400 audit(1766681101.460:87): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.5LQqct/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.078969][ T5815] veth1_macvtap: entered promiscuous mode [ 64.106098][ T30] audit: type=1400 audit(1766681101.460:88): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.128001][ T30] audit: type=1400 audit(1766681101.460:89): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.5LQqct/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.157197][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.177881][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.179096][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.191521][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.217595][ T30] audit: type=1400 audit(1766681101.460:90): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/root/syzkaller.5LQqct/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.224997][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.257418][ T30] audit: type=1400 audit(1766681101.460:91): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.291061][ T30] audit: type=1400 audit(1766681101.490:92): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.296626][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.326675][ T5817] veth0_macvtap: entered promiscuous mode [ 64.332918][ T30] audit: type=1400 audit(1766681101.490:93): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="gadgetfs" ino=8193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.338470][ T5817] veth1_macvtap: entered promiscuous mode [ 64.368892][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.399437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.415475][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.424017][ T1131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.443629][ T3448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.466386][ T3448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.476931][ T3448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.495791][ T3448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.505353][ T3448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.521552][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.531583][ T3448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.569560][ T3448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622214][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.647515][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.658139][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.768063][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.777772][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263268][ T48] IPVS: starting estimator thread 0... [ 65.279004][ T4024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.291458][ T4024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.366458][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.374835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.383343][ T5935] IPVS: using max 77 ests per chain, 184800 per kthread [ 65.401987][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.414386][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.422272][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.520814][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.531284][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.592322][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.613250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.627419][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.665662][ T4024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.673166][ T5813] Bluetooth: hci3: command tx timeout [ 65.673822][ T5826] Bluetooth: hci2: command tx timeout [ 65.678902][ T5820] Bluetooth: hci1: command tx timeout [ 65.689605][ T5823] Bluetooth: hci4: command tx timeout [ 65.695717][ T5822] Bluetooth: hci0: command tx timeout [ 65.733363][ T4024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.857091][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.890736][ T5944] veth1_macvtap: left promiscuous mode [ 66.672920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.724955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.827033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.929420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 67.110144][ T5963] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 67.112959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.114958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.116049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.118743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.165879][ T5970] bridge1: entered promiscuous mode [ 67.286383][ T5973] comedi comedi3: pcm3724: I/O port conflict (0xa,16) [ 67.753379][ T5820] Bluetooth: hci0: command tx timeout [ 67.753469][ T5826] Bluetooth: hci1: command tx timeout [ 67.758813][ T5813] Bluetooth: hci3: command tx timeout [ 67.769526][ T5822] Bluetooth: hci4: command tx timeout [ 67.775093][ T5823] Bluetooth: hci2: command tx timeout [ 67.858206][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 67.858241][ T30] audit: type=1400 audit(1766681105.300:147): avc: denied { connect } for pid=5978 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.088947][ T30] audit: type=1400 audit(1766681105.340:148): avc: denied { setopt } for pid=5978 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.117492][ T30] audit: type=1400 audit(1766681105.490:149): avc: denied { ioctl } for pid=5984 comm="syz.4.13" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=7842 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.163138][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 68.171291][ T5861] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 68.362113][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.404526][ T5861] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.460943][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.479692][ T5861] usb 3-1: not running at top speed; connect to a high speed hub [ 68.495641][ T5861] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 68.523130][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 68.532215][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.543269][ T5861] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 68.592675][ T5861] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.625171][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.652342][ T5861] usb 3-1: Product: syz [ 68.662721][ T30] audit: type=1400 audit(1766681106.090:150): avc: denied { create } for pid=5999 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.686357][ T5861] usb 3-1: Manufacturer: syz [ 68.697463][ T5861] usb 3-1: SerialNumber: syz [ 68.736891][ T30] audit: type=1400 audit(1766681106.130:151): avc: denied { setopt } for pid=5999 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.790025][ T24] usb 2-1: usb_control_msg returned -32 [ 68.798412][ T30] audit: type=1400 audit(1766681106.130:152): avc: denied { create } for pid=5999 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.822885][ T24] usbtmc 2-1:16.0: can't read capabilities [ 68.861371][ T30] audit: type=1400 audit(1766681106.130:153): avc: denied { write } for pid=5999 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.883949][ T30] audit: type=1400 audit(1766681106.130:154): avc: denied { write } for pid=5999 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.916367][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.929421][ T5861] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 68.950080][ T30] audit: type=1400 audit(1766681106.390:155): avc: denied { mounton } for pid=6004 comm="syz.0.18" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 69.016751][ T6005] ======================================================= [ 69.016751][ T6005] WARNING: The mand mount option has been deprecated and [ 69.016751][ T6005] and is ignored by this kernel. Remove the mand [ 69.016751][ T6005] option from the mount to silence this warning. [ 69.016751][ T6005] ======================================================= [ 69.161680][ T6005] ocfs2: Bad value for 'barrier' [ 69.174291][ T30] audit: type=1400 audit(1766681106.450:156): avc: denied { mount } for pid=5997 comm="syz.4.16" name="/" dev="autofs" ino=7864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.198156][ T5861] usb 3-1: USB disconnect, device number 2 [ 69.208039][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.783092][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.932872][ T5813] Bluetooth: hci4: command 0x0405 tx timeout [ 70.465506][ T9] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 70.475989][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.487997][ T9] usb 3-1: config 0 descriptor?? [ 70.508498][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 70.785831][ T9] gp8psk: usb in 128 operation failed. [ 70.809250][ T9] gp8psk: usb in 137 operation failed. [ 70.826662][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 70.847411][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 70.875269][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.881713][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.881756][ T9] usb 3-1: media controller created [ 70.896345][ T5892] usb 2-1: USB disconnect, device number 2 [ 71.076297][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.120282][ T9] gp8psk_fe: Frontend attached [ 71.146224][ T9] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 71.191015][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 71.277749][ T6025] option changes via remount are deprecated (pid=6019 comm=syz.4.22) [ 71.286662][ T6025] cgroup: option or name mismatch, new: 0x0 "nofavordynmods", old: 0x0 "" [ 71.593459][ T6023] Scaler: ================= START STATUS ================= [ 71.614589][ T6023] Scaler: ================== END STATUS ================== [ 71.633263][ T9] gp8psk: usb in 138 operation failed. [ 71.648375][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 71.785285][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 71.802965][ T9] usb 3-1: USB disconnect, device number 3 [ 72.301031][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 72.919073][ T6046] autofs: Unknown parameter 'h4QG*7ɻWUtq9JakN36X[|`@qƞ RphgB\LM|' [ 73.264878][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 73.264889][ T30] audit: type=1400 audit(1766681110.360:177): avc: denied { mounton } for pid=6043 comm="syz.4.27" path="/9/file1" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.712799][ T5861] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.874865][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 73.886001][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 73.921594][ T5861] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 74.238615][ T5861] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 74.252813][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.262746][ T5861] usb 1-1: Product: syz [ 74.272601][ T5861] usb 1-1: Manufacturer: syz [ 74.282762][ T5861] usb 1-1: SerialNumber: syz [ 74.289459][ T5861] usb 1-1: config 0 descriptor?? [ 74.295096][ T6049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.306125][ T6049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.314679][ T5861] usb 1-1: ucan: probing device on interface #0 [ 74.411765][ T30] audit: type=1400 audit(1766681111.850:178): avc: denied { create } for pid=6062 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.816501][ T30] audit: type=1400 audit(1766681112.260:179): avc: denied { read } for pid=6067 comm="syz.1.33" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 74.868925][ T5861] usb 1-1: ucan: device reported invalid tx-fifo size [ 74.883810][ T5861] usb 1-1: ucan: probe failed; try to update the device firmware [ 74.979841][ T30] audit: type=1400 audit(1766681112.290:180): avc: denied { open } for pid=6067 comm="syz.1.33" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.213363][ T30] audit: type=1400 audit(1766681112.290:181): avc: denied { ioctl } for pid=6067 comm="syz.1.33" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.375445][ T30] audit: type=1400 audit(1766681112.810:182): avc: denied { read write } for pid=6075 comm="syz.1.35" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.442938][ T30] audit: type=1400 audit(1766681112.810:183): avc: denied { open } for pid=6075 comm="syz.1.35" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.530242][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.546392][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.601988][ T30] audit: type=1400 audit(1766681113.010:184): avc: denied { create } for pid=6075 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.652807][ T30] audit: type=1400 audit(1766681113.010:185): avc: denied { setopt } for pid=6075 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.741067][ T30] audit: type=1400 audit(1766681113.030:186): avc: denied { read write } for pid=6075 comm="syz.1.35" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 76.120129][ T6082] Zero length message leads to an empty skb [ 77.373327][ T5861] usb 1-1: USB disconnect, device number 2 [ 77.506061][ T6090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.318349][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 78.318364][ T30] audit: type=1400 audit(1766681115.760:193): avc: denied { read } for pid=6096 comm="syz.1.40" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.367711][ T30] audit: type=1400 audit(1766681115.760:194): avc: denied { open } for pid=6096 comm="syz.1.40" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.513732][ T30] audit: type=1400 audit(1766681115.760:195): avc: denied { ioctl } for pid=6096 comm="syz.1.40" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 79.449697][ T30] audit: type=1400 audit(1766681116.570:196): avc: denied { create } for pid=6106 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.453565][ T6114] netlink: 52 bytes leftover after parsing attributes in process `syz.0.43'. [ 79.538742][ T6110] netlink: 444 bytes leftover after parsing attributes in process `syz.4.42'. [ 79.553517][ T6114] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.561054][ T6114] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.599465][ T30] audit: type=1400 audit(1766681116.580:197): avc: denied { write } for pid=6106 comm="syz.0.43" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.761406][ T30] audit: type=1400 audit(1766681116.890:198): avc: denied { ioctl } for pid=6106 comm="syz.0.43" path="socket:[9213]" dev="sockfs" ino=9213 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.795372][ T30] audit: type=1400 audit(1766681117.116:199): avc: denied { ioctl } for pid=6101 comm="syz.4.42" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.992614][ T6115] bond1: Removing last arp target with arp_interval on [ 80.043008][ T6115] bond1: entered allmulticast mode [ 80.056428][ T6115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.077225][ T6129] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 80.123143][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.45'. [ 80.245164][ T10] cfg80211: failed to load regulatory.db [ 80.253363][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.361875][ T5952] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.408306][ T30] audit: type=1400 audit(1766681117.789:200): avc: denied { create } for pid=6131 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.446283][ T30] audit: type=1400 audit(1766681117.808:201): avc: denied { bind } for pid=6131 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.494391][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.507284][ T5861] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 80.521844][ T5952] usb 1-1: device descriptor read/64, error -71 [ 80.640478][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.648583][ T30] audit: type=1400 audit(1766681117.808:202): avc: denied { setopt } for pid=6131 comm="syz.4.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.672895][ T5861] usb 4-1: config 0 descriptor?? [ 80.692512][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 80.778359][ T5952] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 80.928041][ T5952] usb 1-1: device descriptor read/64, error -71 [ 81.036219][ T6140] syz.1.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.046776][ T5952] usb usb1-port1: attempt power cycle [ 81.151763][ T5861] pwc: recv_control_msg error -32 req 02 val 2b00 [ 81.213536][ T5861] pwc: recv_control_msg error -32 req 02 val 2700 [ 81.312621][ T5861] pwc: recv_control_msg error -32 req 02 val 2c00 [ 81.419767][ T5952] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 81.420160][ T5861] pwc: recv_control_msg error -32 req 04 val 1000 [ 81.533696][ T5861] pwc: recv_control_msg error -32 req 04 val 1300 [ 81.652948][ T5861] pwc: recv_control_msg error -32 req 04 val 1400 [ 81.699330][ T5861] pwc: recv_control_msg error -32 req 02 val 2000 [ 81.739986][ T5861] pwc: recv_control_msg error -32 req 02 val 2100 [ 81.811621][ T5861] pwc: recv_control_msg error -32 req 04 val 1500 [ 81.852194][ T5861] pwc: recv_control_msg error -32 req 02 val 2500 [ 81.918924][ T6030] Set syz1 is full, maxelem 65536 reached [ 81.965721][ T5952] usb 1-1: device descriptor read/8, error -71 [ 82.116593][ T5861] pwc: recv_control_msg error -71 req 02 val 2600 [ 82.129896][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 82.141364][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 82.159444][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 82.171529][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 82.223083][ T5952] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.244220][ T5952] usb 1-1: device descriptor read/8, error -71 [ 82.361641][ T5952] usb usb1-port1: unable to enumerate USB device [ 82.500125][ T5861] pwc: Registered as video103. [ 82.506836][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 82.553512][ T5861] usb 4-1: USB disconnect, device number 2 [ 82.935664][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.103424][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 83.175012][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.230464][ T24] usb 2-1: config 0 has no interfaces? [ 83.256539][ T24] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 83.289250][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.306631][ T24] usb 2-1: config 0 descriptor?? [ 83.405690][ T6180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.60'. [ 83.462039][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.526033][ T5861] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.538886][ T6163] warning: `syz.1.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.553717][ T10] usb 2-1: USB disconnect, device number 3 [ 83.643573][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 83.650481][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 83.660099][ T24] usb 3-1: config 0 has no interface number 0 [ 83.670889][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 83.680228][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.688548][ T24] usb 3-1: Product: syz [ 83.694374][ T24] usb 3-1: Manufacturer: syz [ 83.699453][ T24] usb 3-1: SerialNumber: syz [ 83.706687][ T24] usb 3-1: config 0 descriptor?? [ 83.721372][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 83.751590][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 83.758254][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 83.769771][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.784699][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.802026][ T5861] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 83.814352][ T5861] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 83.830613][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.851577][ T5861] usb 5-1: config 0 descriptor?? [ 83.860409][ T6174] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 83.941696][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 83.963969][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 84.083958][ T5813] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 84.091622][ T10] usb 5-1: USB disconnect, device number 2 [ 84.151209][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 84.200323][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 84.200339][ T30] audit: type=1400 audit(1766681121.334:218): avc: denied { setopt } for pid=6182 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.333662][ T30] audit: type=1400 audit(1766681121.465:219): avc: denied { getopt } for pid=6182 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.380993][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 84.389190][ T24] usb 3-1: USB disconnect, device number 4 [ 84.409299][ T30] audit: type=1400 audit(1766681121.475:220): avc: denied { write } for pid=6182 comm="syz.3.61" path="socket:[10318]" dev="sockfs" ino=10318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.436570][ T6194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.449795][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 84.486317][ T30] audit: type=1400 audit(1766681121.596:221): avc: denied { create } for pid=6191 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.547901][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 84.567956][ T30] audit: type=1400 audit(1766681121.596:222): avc: denied { write } for pid=6191 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.627866][ T30] audit: type=1400 audit(1766681121.596:223): avc: denied { nlmsg_write } for pid=6191 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.627887][ T24] quatech2 3-1:0.51: device disconnected [ 85.405496][ T30] audit: type=1400 audit(1766681122.466:224): avc: denied { shutdown } for pid=6219 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.453022][ T30] audit: type=1400 audit(1766681122.513:225): avc: denied { audit_read } for pid=6216 comm="syz.1.69" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.838218][ T6229] wg2 speed is unknown, defaulting to 1000 [ 86.119070][ T6229] wg2 speed is unknown, defaulting to 1000 [ 86.237670][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.296739][ T6229] wg2 speed is unknown, defaulting to 1000 [ 86.668878][ T30] audit: type=1400 audit(1766681122.691:226): avc: denied { setopt } for pid=6216 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.778469][ T30] audit: type=1400 audit(1766681122.700:227): avc: denied { write } for pid=6216 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.946873][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 86.980926][ T10] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 87.003328][ T10] usb 2-1: config 0 has no interface number 0 [ 87.033618][ T10] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 87.056197][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.071587][ T10] usb 2-1: config 0 descriptor?? [ 87.080669][ T6241] random: crng reseeded on system resumption [ 87.217424][ T10] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 87.263168][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 87.284842][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.74'. [ 87.433124][ T5989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.460513][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 88.025716][ T10] usb 2-1: USB disconnect, device number 4 [ 88.069741][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 88.086911][ T5989] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 88.097304][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.251849][ T5989] usb 5-1: Product: syz [ 88.297190][ T5989] usb 5-1: Manufacturer: syz [ 88.347255][ T5989] usb 5-1: SerialNumber: syz [ 88.467852][ T6286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 88.520401][ T5989] usb 5-1: config 0 descriptor?? [ 88.661336][ T6229] infiniband syz0: set active [ 88.668324][ T10] wg2 speed is unknown, defaulting to 1000 [ 88.710421][ T6229] infiniband syz0: added wg2 [ 88.772529][ T5989] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 88.799087][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.803477][ T6229] RDS/IB: syz0: added [ 88.812121][ T6229] smc: adding ib device syz0 with port count 1 [ 88.818768][ T6229] smc: ib device syz0 port 1 has no pnetid [ 88.826403][ T9] wg2 speed is unknown, defaulting to 1000 [ 88.949357][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.959954][ T6229] wg2 speed is unknown, defaulting to 1000 [ 89.126348][ T6298] process 'syz.0.77' launched './file0' with NULL argv: empty string added [ 89.635493][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 89.635508][ T30] audit: type=1400 audit(1766681126.423:244): avc: denied { getopt } for pid=6303 comm="syz.1.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.668022][ T6304] sctp: [Deprecated]: syz.1.79 (pid 6304) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.668022][ T6304] Use struct sctp_sack_info instead [ 89.802700][ T5989] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 89.841493][ T6307] tipc: Started in network mode [ 89.866826][ T6307] tipc: Node identity , cluster identity 4711 [ 89.880780][ T6307] tipc: Failed to set node id, please configure manually [ 89.887956][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 89.896332][ T6229] wg2 speed is unknown, defaulting to 1000 [ 90.084968][ T6229] wg2 speed is unknown, defaulting to 1000 [ 90.133277][ T5989] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 90.186114][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.496102][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.516708][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 90.547760][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.572421][ T24] usb 1-1: config 0 descriptor?? [ 90.604693][ T6229] wg2 speed is unknown, defaulting to 1000 [ 90.731590][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.902357][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 90.988217][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 91.009292][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.022071][ T5989] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 91.043620][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49607, setting to 1024 [ 91.054801][ T5989] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 91.068831][ T6229] wg2 speed is unknown, defaulting to 1000 [ 91.082608][ T5989] usb 5-1: USB disconnect, device number 3 [ 91.088591][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 91.121212][ T24] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 91.146608][ T5895] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 91.171507][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.199582][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 91.217231][ T5895] usb 2-1: config 0 descriptor?? [ 91.223238][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.234467][ T24] lenovo 0003:17EF:6047.0001: Failed to switch F7/9/11 mode: -71 [ 91.264779][ T24] lenovo 0003:17EF:6047.0001: Failed to switch middle button: -71 [ 91.277634][ T24] lenovo 0003:17EF:6047.0001: Fn-lock setting failed: -71 [ 91.285679][ T24] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 91.288459][ T9] usb 4-1: Product: syz [ 91.328842][ T24] usb 1-1: USB disconnect, device number 7 [ 91.350407][ T9] usb 4-1: Manufacturer: syz [ 91.381377][ T9] usb 4-1: SerialNumber: syz [ 91.531097][ T6332] fido_id[6332]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 91.688897][ T5895] shield 0003:0955:7214.0002: unexpected long global item [ 91.712842][ T5895] shield 0003:0955:7214.0002: Parse failed [ 91.728279][ T5895] shield 0003:0955:7214.0002: probe with driver shield failed with error -22 [ 92.124651][ T6342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.88'. [ 92.959145][ T30] audit: type=1400 audit(1766681129.529:245): avc: denied { bind } for pid=6350 comm="syz.2.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.298901][ T5952] usb 2-1: USB disconnect, device number 5 [ 93.358512][ T30] audit: type=1400 audit(1766681129.893:246): avc: denied { write } for pid=6355 comm="syz.4.90" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.563140][ T30] audit: type=1400 audit(1766681129.931:247): avc: denied { open } for pid=6355 comm="syz.4.90" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.765980][ T30] audit: type=1400 audit(1766681129.950:248): avc: denied { create } for pid=6358 comm="syz.1.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.851613][ T30] audit: type=1400 audit(1766681130.183:249): avc: denied { create } for pid=6363 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.275766][ T30] audit: type=1400 audit(1766681130.183:250): avc: denied { setopt } for pid=6363 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.367176][ T30] audit: type=1400 audit(1766681130.492:251): avc: denied { create } for pid=6369 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.684432][ T30] audit: type=1400 audit(1766681130.492:252): avc: denied { getopt } for pid=6369 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.708404][ T30] audit: type=1400 audit(1766681130.876:253): avc: denied { create } for pid=6374 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.837816][ T6375] netlink: 'syz.0.95': attribute type 2 has an invalid length. [ 94.854780][ T9] mdc800 4-1:39.0: probe fails -> wrong Number of Configuration [ 94.871894][ T9] usb 4-1: USB disconnect, device number 3 [ 94.934117][ T6380] netlink: 6 bytes leftover after parsing attributes in process `syz.1.96'. [ 94.984364][ T6386] capability: warning: `syz.4.90' uses deprecated v2 capabilities in a way that may be insecure [ 94.995778][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 94.995792][ T30] audit: type=1400 audit(1766681131.437:256): avc: denied { ioctl } for pid=6355 comm="syz.4.90" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.037839][ T6380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.082628][ T30] audit: type=1400 audit(1766681131.512:257): avc: denied { create } for pid=6379 comm="syz.1.96" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.114034][ T30] audit: type=1400 audit(1766681131.521:258): avc: denied { read append } for pid=6379 comm="syz.1.96" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.147203][ T30] audit: type=1400 audit(1766681131.521:259): avc: denied { open } for pid=6379 comm="syz.1.96" path="/26/file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.210716][ T5952] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.371229][ T5989] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.414120][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 95.447910][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.462195][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.473867][ T5952] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.514955][ T5952] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 95.524255][ T5952] usb 1-1: Manufacturer: syz [ 95.553169][ T5952] usb 1-1: config 0 descriptor?? [ 95.571017][ T5989] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 95.579753][ T5989] usb 2-1: config 0 has no interface number 0 [ 95.589975][ T5989] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 95.602445][ T5989] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.621243][ T5989] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 95.633858][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.633941][ T9] usb 4-1: config 8 has an invalid interface number: 8 but max is 1 [ 95.633963][ T5989] usb 2-1: Product: syz [ 95.642695][ T9] usb 4-1: config 8 has an invalid interface number: 8 but max is 1 [ 95.650335][ T5989] usb 2-1: Manufacturer: syz [ 95.655415][ T30] audit: type=1400 audit(1766681132.054:260): avc: denied { write } for pid=6395 comm="syz.4.101" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.665694][ T5989] usb 2-1: SerialNumber: syz [ 95.687139][ T9] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 95.687164][ T9] usb 4-1: config 8 has no interface number 0 [ 95.687216][ T9] usb 4-1: config 8 interface 8 has no altsetting 1 [ 95.687982][ T30] audit: type=1400 audit(1766681132.073:261): avc: denied { create } for pid=6395 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.735524][ T30] audit: type=1400 audit(1766681132.073:262): avc: denied { setopt } for pid=6395 comm="syz.4.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.747231][ T5989] usb 2-1: config 0 descriptor?? [ 95.763224][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 95.772553][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.781378][ T6389] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 95.787948][ T9] usb 4-1: Product: syz [ 95.797422][ T9] usb 4-1: Manufacturer: syz [ 95.812441][ T9] usb 4-1: SerialNumber: syz [ 95.819352][ T5989] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 95.845916][ T5989] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 95.888113][ T30] audit: type=1400 audit(1766681132.269:263): avc: denied { create } for pid=6398 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 96.245426][ T30] audit: type=1400 audit(1766681132.606:264): avc: denied { mounton } for pid=6387 comm="syz.3.100" path="/13/file0" dev="tmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.540792][ T5952] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 96.698460][ T5952] usb 2-1: USB disconnect, device number 6 [ 97.011881][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 97.314013][ T5952] cyberjack 2-1:0.69: device disconnected [ 97.358439][ T30] audit: type=1400 audit(1766681133.644:265): avc: denied { unlink } for pid=5812 comm="syz-executor" name="file0" dev="tmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.476390][ T5922] usb 1-1: USB disconnect, device number 8 [ 98.615621][ T9] qmi_wwan 4-1:8.8: probe with driver qmi_wwan failed with error -22 [ 98.641628][ T6414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.104'. [ 98.676434][ T9] usb 4-1: USB disconnect, device number 4 [ 98.792046][ T5952] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.095704][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 99.131502][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.173936][ T5952] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 99.193953][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.227014][ T5952] usb 3-1: config 0 descriptor?? [ 99.424196][ T5922] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 99.436772][ T6448] syz.3.113 uses obsolete (PF_INET,SOCK_PACKET) [ 99.616981][ T5922] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.657610][ T5922] usb 1-1: config 0 has no interfaces? [ 99.663841][ T5922] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 99.674325][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.688087][ T5922] usb 1-1: config 0 descriptor?? [ 99.707366][ T5952] smartjoyplus 0003:0B43:0003.0004: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.2-1/input0 [ 99.745215][ T5952] smartjoyplus 0003:0B43:0003.0004: Force feedback for SmartJoy PLUS PS2/USB adapter [ 100.429305][ T5952] usb 3-1: USB disconnect, device number 5 [ 100.453794][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 100.453807][ T30] audit: type=1400 audit(1766681136.544:272): avc: denied { write } for pid=6431 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.618841][ T30] audit: type=1400 audit(1766681136.694:273): avc: denied { mount } for pid=6465 comm="syz.1.117" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 100.805475][ T30] audit: type=1400 audit(1766681136.871:274): avc: denied { read } for pid=6460 comm="syz.3.116" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.949358][ T6469] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 101.219499][ T30] audit: type=1400 audit(1766681136.871:275): avc: denied { open } for pid=6460 comm="syz.3.116" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.243176][ T30] audit: type=1400 audit(1766681136.900:276): avc: denied { ioctl } for pid=6460 comm="syz.3.116" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.268226][ T30] audit: type=1400 audit(1766681136.965:277): avc: denied { watch } for pid=6465 comm="syz.1.117" path="/29/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 101.301966][ T30] audit: type=1400 audit(1766681136.965:278): avc: denied { watch_sb watch_reads } for pid=6465 comm="syz.1.117" path="/29/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 101.371805][ T30] audit: type=1400 audit(1766681137.002:279): avc: denied { append } for pid=6460 comm="syz.3.116" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.491118][ T30] audit: type=1400 audit(1766681137.517:280): avc: denied { read write } for pid=6456 comm="syz.4.115" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.519900][ T6458] 9p: Bad value for 'rfdno' [ 101.625761][ T30] audit: type=1400 audit(1766681137.517:281): avc: denied { open } for pid=6456 comm="syz.4.115" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.941130][ T6482] wg2 speed is unknown, defaulting to 1000 [ 101.957335][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.148845][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 102.156846][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 102.165294][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.175662][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.185766][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.196682][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.209977][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 102.219867][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.255798][ T5989] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 102.384316][ T5922] usb 1-1: USB disconnect, device number 9 [ 102.455709][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 102.462011][ T6483] netlink: 'syz.1.119': attribute type 1 has an invalid length. [ 102.470287][ T6483] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.482520][ T10] usbtmc 2-1:16.0: can't read capabilities [ 102.503709][ T5989] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.537103][ T5989] usb 4-1: not running at top speed; connect to a high speed hub [ 102.575575][ T5989] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 102.582899][ T10] usb 2-1: USB disconnect, device number 7 [ 102.627297][ T5989] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 102.766981][ T5989] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.922155][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.930282][ T5989] usb 4-1: Product: syz [ 102.934509][ T5989] usb 4-1: Manufacturer: syz [ 102.939137][ T5989] usb 4-1: SerialNumber: syz [ 103.101573][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.758878][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 103.766743][ T10] usb 2-1: config 0 has an invalid interface number: 216 but max is 0 [ 103.775738][ T10] usb 2-1: config 0 has no interface number 0 [ 103.783951][ T10] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 103.793493][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.801943][ T10] usb 2-1: Product: syz [ 103.816468][ T10] usb 2-1: Manufacturer: syz [ 103.831376][ T10] usb 2-1: SerialNumber: syz [ 103.862912][ T5989] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 103.864154][ T10] usb 2-1: config 0 descriptor?? [ 104.116136][ T5989] usb 4-1: USB disconnect, device number 5 [ 104.451068][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.466974][ T6518] netlink: 'syz.4.129': attribute type 12 has an invalid length. [ 104.481708][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.618656][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 104.624198][ T10] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 104.824122][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 104.835388][ T10] usb 1-1: can't read configurations, error -61 [ 104.993000][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 105.202670][ T6543] mmap: syz.4.136 (6543) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 105.235727][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.259830][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 105.265917][ T10] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 105.275039][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.282940][ T10] usb 1-1: can't read configurations, error -61 [ 105.289923][ T10] usb usb1-port1: attempt power cycle [ 105.398811][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 105.405148][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.415267][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 105.424329][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.433681][ T9] usb 4-1: config 0 descriptor?? [ 105.444330][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 105.527163][ T5989] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.655482][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 105.668592][ T6531] netlink: 'syz.3.132': attribute type 2 has an invalid length. [ 105.677339][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 105.683085][ T10] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 105.687909][ T6531] 9: entered promiscuous mode [ 105.692564][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 105.705130][ T10] usb 1-1: can't read configurations, error -61 [ 105.714075][ T5989] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 105.724153][ T5989] usb 5-1: config 0 has no interface number 0 [ 105.730687][ T5989] usb 5-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 105.741646][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.848699][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 105.849499][ T5989] usb 5-1: config 0 descriptor?? [ 105.857595][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 105.857607][ T30] audit: type=1400 audit(1766681141.577:306): avc: denied { read } for pid=6530 comm="syz.3.132" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.927923][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 106.012002][ T5989] gspca_main: spca500-2.14.0 probing 041e:400a [ 106.082366][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 106.121794][ T10] usb 1-1: too many configurations: 254, using maximum allowed: 8 [ 106.255571][ T5922] usb 2-1: USB disconnect, device number 8 [ 106.263983][ T10] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 106.277397][ T10] usb 1-1: can't read configurations, error -61 [ 106.304868][ T5989] usb 5-1: USB disconnect, device number 4 [ 106.323828][ T10] usb usb1-port1: unable to enumerate USB device [ 106.346464][ T30] audit: type=1400 audit(1766681142.054:307): avc: denied { connect } for pid=6547 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 106.425006][ T5172] bcm5974 4-1:0.0: could not read from device [ 106.455753][ T9] usb 4-1: USB disconnect, device number 6 [ 106.465480][ T5172] bcm5974 4-1:0.0: could not read from device [ 106.994474][ T30] audit: type=1400 audit(1766681142.662:308): avc: denied { watch } for pid=6555 comm="syz.4.139" path="/33" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.039778][ T30] audit: type=1400 audit(1766681143.232:309): avc: denied { map } for pid=6564 comm="syz.3.143" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.147165][ T30] audit: type=1400 audit(1766681143.335:310): avc: denied { ioctl } for pid=6559 comm="syz.1.140" path="socket:[11395]" dev="sockfs" ino=11395 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.296202][ T30] audit: type=1400 audit(1766681143.747:311): avc: denied { name_bind } for pid=6565 comm="syz.0.142" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.552833][ T30] audit: type=1400 audit(1766681143.747:312): avc: denied { node_bind } for pid=6565 comm="syz.0.142" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 108.610389][ T6580] kvm: apic: phys broadcast and lowest prio [ 108.712702][ T30] audit: type=1400 audit(1766681143.747:313): avc: denied { listen } for pid=6565 comm="syz.0.142" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.891130][ T30] audit: type=1400 audit(1766681144.158:314): avc: denied { ioctl } for pid=6564 comm="syz.3.143" path="socket:[11471]" dev="sockfs" ino=11471 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.951424][ T30] audit: type=1326 audit(1766681144.430:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6582 comm="syz.4.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f178ed8f749 code=0x0 [ 109.001241][ T6595] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1d pfn:0x4dbbc [ 109.017345][ T6595] memcg:ffff888140460d40 [ 109.022041][ T6595] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 109.142884][ T6595] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 109.335706][ T6595] raw: 000000000000001d 0000000000000000 00000001ffffffff ffff888140460d40 [ 109.366133][ T6595] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 109.387756][ T6595] page_owner tracks the page as allocated [ 109.414826][ T6595] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6595, tgid 6588 (syz.0.148), ts 109001222098, free_ts 108976822823 [ 109.459610][ T6595] post_alloc_hook+0x1af/0x220 [ 109.465060][ T6595] get_page_from_freelist+0xd0b/0x31a0 [ 109.470772][ T6595] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 109.477258][ T6595] alloc_pages_mpol+0x1fb/0x550 [ 109.490343][ T6595] folio_alloc_noprof+0x20/0x2d0 [ 109.496537][ T6595] filemap_alloc_folio_noprof.part.0+0x39d/0x470 [ 109.503315][ T6595] filemap_alloc_folio_noprof+0x5e/0x80 [ 109.509354][ T6595] page_cache_ra_order+0x571/0xed0 [ 109.514582][ T6595] filemap_fault+0x16ac/0x29d0 [ 109.520868][ T6595] __do_fault+0x10d/0x490 [ 109.536296][ T6595] do_fault+0xae4/0x1ad0 [ 109.547658][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 109.560778][ T6595] __handle_mm_fault+0x1919/0x2bb0 [ 109.560964][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 109.568446][ T6595] handle_mm_fault+0x3fe/0xad0 [ 109.595309][ T6595] __get_user_pages+0x54e/0x3590 [ 109.600553][ T6595] populate_vma_page_range+0x267/0x3f0 [ 109.606137][ T6595] __mm_populate+0x1d8/0x380 [ 109.610794][ T6595] page last free pid 6589 tgid 6588 stack trace: [ 109.628219][ T6595] free_unref_folios+0xa22/0x1610 [ 109.630948][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 109.638893][ T6595] folios_put_refs+0x4be/0x750 [ 109.657229][ T6595] truncate_inode_pages_range+0x326/0xe40 [ 109.673289][ T6595] set_blocksize+0x2b8/0x500 [ 109.684663][ T6595] blkdev_bszset+0x19b/0x240 [ 109.697688][ T6595] blkdev_ioctl+0x2ef/0x6e0 [ 109.704972][ T6594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6594 comm=syz.1.150 [ 109.720320][ T6595] __x64_sys_ioctl+0x18e/0x210 [ 109.725169][ T6595] do_syscall_64+0xcd/0xf80 [ 109.730066][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.736138][ T6595] ------------[ cut here ]------------ [ 109.741906][ T6595] kernel BUG at mm/filemap.c:858! [ 109.750855][ T6595] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 109.757297][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.0.148 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.768055][ T6595] Tainted: [L]=SOFTLOCKUP [ 109.772361][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.782387][ T6595] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 109.788341][ T6595] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 109.807919][ T6595] RSP: 0018:ffffc90003e5f490 EFLAGS: 00010246 [ 109.813958][ T6595] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90005383000 [ 109.821911][ T6595] RDX: 0000000000080000 RSI: ffffffff81f84f78 RDI: ffff8880260cce04 [ 109.829852][ T6595] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 109.837795][ T6595] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000004 [ 109.845737][ T6595] R13: ffffea000136ef00 R14: 0000000000000000 R15: 0000000000000000 [ 109.853679][ T6595] FS: 00007fc6059d56c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 109.862582][ T6595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.869139][ T6595] CR2: 0000200000fe9008 CR3: 00000000777ee000 CR4: 00000000003526f0 [ 109.877094][ T6595] Call Trace: [ 109.880345][ T6595] [ 109.883249][ T6595] ? __pfx___filemap_add_folio+0x10/0x10 [ 109.888857][ T6595] filemap_add_folio+0x19a/0x610 [ 109.893765][ T6595] ? __lock_acquire+0x436/0x2890 [ 109.898687][ T6595] ? __pfx_filemap_add_folio+0x10/0x10 [ 109.904113][ T6595] ? __pfx_filemap_get_entry+0x10/0x10 [ 109.909553][ T6595] page_cache_ra_order+0x637/0xed0 [ 109.914655][ T6595] filemap_fault+0x16ac/0x29d0 [ 109.919390][ T6595] ? __pfx_filemap_fault+0x10/0x10 [ 109.924472][ T6595] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.929908][ T6595] __do_fault+0x10d/0x490 [ 109.934210][ T6595] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.939639][ T6595] do_fault+0xae4/0x1ad0 [ 109.943864][ T6595] ? __pfx_filemap_map_pages+0x10/0x10 [ 109.949291][ T6595] __handle_mm_fault+0x1919/0x2bb0 [ 109.954379][ T6595] ? __pfx___handle_mm_fault+0x10/0x10 [ 109.959818][ T6595] handle_mm_fault+0x3fe/0xad0 [ 109.964559][ T6595] __get_user_pages+0x54e/0x3590 [ 109.969486][ T6595] ? __pfx___get_user_pages+0x10/0x10 [ 109.974840][ T6595] populate_vma_page_range+0x267/0x3f0 [ 109.980293][ T6595] ? __pfx_populate_vma_page_range+0x10/0x10 [ 109.986284][ T6595] ? __pfx_find_vma_intersection+0x10/0x10 [ 109.992083][ T6595] ? do_mmap+0x69c/0x1210 [ 109.996400][ T6595] __mm_populate+0x1d8/0x380 [ 110.000981][ T6595] ? __pfx___mm_populate+0x10/0x10 [ 110.006071][ T6595] ? up_write+0x282/0x4e0 [ 110.010376][ T6595] vm_mmap_pgoff+0x37f/0x470 [ 110.014941][ T6595] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 110.020024][ T6595] ? __fget_files+0x20e/0x3c0 [ 110.024680][ T6595] ksys_mmap_pgoff+0x32c/0x5c0 [ 110.029418][ T6595] __x64_sys_mmap+0x125/0x190 [ 110.034068][ T6595] do_syscall_64+0xcd/0xf80 [ 110.038545][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.044407][ T6595] RIP: 0033:0x7fc60778f749 [ 110.048790][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.068367][ T6595] RSP: 002b:00007fc6059d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 110.076752][ T6595] RAX: ffffffffffffffda RBX: 00007fc6079e6090 RCX: 00007fc60778f749 [ 110.084696][ T6595] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 110.092638][ T6595] RBP: 00007fc607813f91 R08: 0000000000000004 R09: 000000002c93a000 [ 110.100587][ T6595] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 110.108527][ T6595] R13: 00007fc6079e6128 R14: 00007fc6079e6090 R15: 00007ffd1f3e8d98 [ 110.116472][ T6595] [ 110.119461][ T6595] Modules linked in: [ 110.123864][ T6595] ---[ end trace 0000000000000000 ]--- [ 110.167683][ T6595] RIP: 0010:__filemap_add_folio+0xf29/0x11b0 [ 110.173747][ T6595] Code: 97 c6 ff 48 c7 c6 80 ed 99 8b 4c 89 ef e8 0f 74 11 00 90 0f 0b e8 07 97 c6 ff 48 c7 c6 e0 ed 99 8b 4c 89 ef e8 f8 73 11 00 90 <0f> 0b e8 f0 96 c6 ff 90 0f 0b 90 e9 1c fc ff ff e8 e2 96 c6 ff 48 [ 110.185152][ T6607] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 110.195059][ T6595] RSP: 0018:ffffc90003e5f490 EFLAGS: 00010246 [ 110.199933][ T6607] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.207163][ T6594] kvm: pic: non byte read [ 110.215192][ T6595] [ 110.219737][ T6594] kvm: pic: level sensitive irq not supported [ 110.220382][ T6594] kvm: pic: non byte read [ 110.221208][ T6595] RAX: 0000000000080000 RBX: 0000000000000000 RCX: ffffc90005383000 [ 110.226682][ T6594] kvm: pic: level sensitive irq not supported [ 110.230794][ T6595] RDX: 0000000000080000 RSI: ffffffff81f84f78 RDI: ffff8880260cce04 [ 110.239157][ T6607] vhci_hcd vhci_hcd.0: Device attached [ 110.245152][ T6595] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 110.266812][ T6595] R10: ffffffff9088b4d7 R11: 0000000000000000 R12: 0000000000000004 [ 110.266930][ T6594] kvm: pic: non byte read [ 110.275182][ T6595] R13: ffffea000136ef00 R14: 0000000000000000 R15: 0000000000000000 [ 110.287408][ T6595] FS: 00007fc6059d56c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 110.289419][ T6594] kvm: pic: level sensitive irq not supported [ 110.298979][ T6595] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.304368][ T6594] kvm: pic: non byte read [ 110.305433][ T6595] CR2: 0000200000011000 CR3: 00000000777ee000 CR4: 00000000003526f0 [ 110.312050][ T6594] kvm: pic: level sensitive irq not supported [ 110.316700][ T6595] Kernel panic - not syncing: Fatal exception [ 110.324309][ T6595] Kernel Offset: disabled