last executing test programs: 7m6.094072586s ago: executing program 3 (id=2483): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, &(0x7f0000000240)={0x77359400}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 7m5.144929914s ago: executing program 3 (id=2490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="0a62836c538027685505888cab01d3badb27983b1b13009f0c314c2cbc5fb97b619b64aa92f8b25b795ead7dc04a67258826ee5c478063fa648f2fcb25baf38444b8179101f07972bfc42ed8cac6bc8c4a73ab301568e6468ec152ff556e8912859f66742c2ee2ce8f298710a7ee1cd0ada05246c373a9ee5836f4ef707b015f428c"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000080)=0x3, 0x4) 7m4.961040553s ago: executing program 3 (id=2492): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 7m3.883255867s ago: executing program 3 (id=2495): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 7m3.794373133s ago: executing program 3 (id=2496): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r1, &(0x7f0000011440)=""/4103, 0x1007) 7m3.446609768s ago: executing program 3 (id=2497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000"], 0x0) r1 = inotify_init1(0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000540)="ad56000081000008009a8100"/23, 0x17) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='\x00', 0x288000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x6]}, {0xfe00, 0x0, 0x40, 0x5}}, 0x4, &(0x7f00000000c0), 0x0}) r3 = io_uring_setup(0x1f6a, &(0x7f0000000340)={0x0, 0xcc11, 0x40, 0x1, 0x1a9}) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f00000001c0)={0x2, 0xfffffff9, 0xffffffff, 0x0, 0x3, 0x6, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000440), 0x8, 0x408002) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) fcntl$setpipe(r3, 0x407, 0x8000000000000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xb, 'K'}, @local=@item_012={0x2, 0x2, 0x4, "d08e"}]}}, 0x0}, 0x0) 7m2.985542618s ago: executing program 32 (id=2497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000207e050e2000000000000109022400010000"], 0x0) r1 = inotify_init1(0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000540)="ad56000081000008009a8100"/23, 0x17) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000140)={r2, &(0x7f0000000000)='\x00', 0x288000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x6]}, {0xfe00, 0x0, 0x40, 0x5}}, 0x4, &(0x7f00000000c0), 0x0}) r3 = io_uring_setup(0x1f6a, &(0x7f0000000340)={0x0, 0xcc11, 0x40, 0x1, 0x1a9}) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f00000001c0)={0x2, 0xfffffff9, 0xffffffff, 0x0, 0x3, 0x6, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sg(&(0x7f0000000440), 0x8, 0x408002) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c814) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) fcntl$setpipe(r3, 0x407, 0x8000000000000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xb, 'K'}, @local=@item_012={0x2, 0x2, 0x4, "d08e"}]}}, 0x0}, 0x0) 6m18.347024435s ago: executing program 0 (id=2768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)=ANY=[], 0x0) 6m18.0490567s ago: executing program 0 (id=2772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 6m16.992012622s ago: executing program 0 (id=2782): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, '\x00', "ec094e36a7e3970f8c35c47e5804000300", "ffffffff", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6m16.805235596s ago: executing program 0 (id=2785): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x800, 0x0) 6m16.751558683s ago: executing program 0 (id=2786): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0xe, 0x93, 0x8e, 0xf, 0xf3, 0x92, 0xe, 0x10, 0x9, 0x0, 0x8, 0x7, 0x1f, 0x7}, 0xe) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m16.17082357s ago: executing program 0 (id=2791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000580)={0x40, 0x31, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x40, 0x30, 0x6b, "254c77608e1e85e56fbafa749e61a81cdc88d88df541a0c991a654ce458a631c95abd8255729b3b9a79a66a3bb6a5ed1de4e2fa51cf432255502228cf5912038fc0ef595fabc7abc41bd4b019661493e52d5d4b68b2cf5e1d980fc7e36fa65436baff01fbaa0a8e235b232"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m15.625804876s ago: executing program 33 (id=2791): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000000)={0x20, 0x9, 0x1, "f9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000580)={0x40, 0x31, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000300)={0x40, 0x30, 0x6b, "254c77608e1e85e56fbafa749e61a81cdc88d88df541a0c991a654ce458a631c95abd8255729b3b9a79a66a3bb6a5ed1de4e2fa51cf432255502228cf5912038fc0ef595fabc7abc41bd4b019661493e52d5d4b68b2cf5e1d980fc7e36fa65436baff01fbaa0a8e235b232"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m28.856807803s ago: executing program 4 (id=3266): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x5, 0x6, 0x5, 0x70bd2c, 0x25dfdbfe, {0x14, 0x0, 0xc2a4}, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x800, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf23, 0x0, &(0x7f00000014c0)="ca9bb559252828f7280f1e9d66aa3f61297e27ee1cee598c4a07dafdcd35cbe58dc20ecc4265f005a6daa4921b1ca68dd3f12459d069c4a08044e8b7837af53779ab199063234d5166e7744eb276399d052cd0e760a76bfdf196d4cb207014823352e28af53d187c448895a05938700791c9c90a8ea8cbd85ff179d8e6a799ab4603abe70b87bbc700ff6b728c0f7a658d155d6096cb21a9a7baf8069bab4e318d700960c30be5ca8f90aa1103043552cf8b6a7ab57199aa4c32c463a32e5da2f1f6b342012f64c0286c1f4ddf63d2acbd0c164d7d915ee3e552ee364e1745cc47059b95b5a050daeecf3f09b2b5f779afd0942579f1eff52485cccc1b49b9e8d6a8cfca0eb55dbdc5da133fc3e0c23a9b63bf5d8e0bca947f4dbaa3b5482b690c1e3eee6555767ecacf477927de85e22cabcb7930ba362bbe7d672102ef3ddc776c7593e38c9182af9b814f4ddc40c5fd1c352476c1f85535420443abf6e064f2099e144b1a0ae954a64e1b114ae1f6c0384e36b321209d2a42fc1d71b992e3b5efee65007c58ce4c9943f0b1caae0828d72bebedda6bd57ff2f1128de8a68cbfb8b8ba293848ba4177f468707749d87decbea303cde7bc9592602545e1447281ca94d6d08b6aad60c29809bc25f6bed7c80e6d7a74eea5f2377eed00257aa1969e19160f51dca402a7293397495e7f3df3347f260747ddcd0abbf47226b21cee04db718bf3173660431f85beb2e816d041040dd1de0dddff4942d201b6cd2fda0456aae6da036a31621606e4f7d9945e7c746b02604a54aaa16610308aa2f9e1546bfbdba943c2a52e386851b723d4f96d0ffbe3e065c7d7d672763019a50a61b2755a4c9fb8216553e06bedeb5809e31af7bb03a4a754f12ea41c50dd306fb8ce05909ba426c677ced4183a174665d5da48becec51dd9123450c76ba60228b341678f0f3b2bd1bcf440a488c785acb98f9f196195363951164215d884f97d2a6077b4e01b4a2b442b32b95db5e8d63c4bd5227e9c63ca9ed99a7fb155d13dc283af1af5363ceea55daa0afc7b8a07b6f4ffb0e230fb845ffaadc5dfe57bebf04753f88a0bd2d66d771cbff8a87882a8597e90e3259d636824a6c2b31b54da0c8383053d369f354a1f972136d3638b3bf052d33b44bde9bc2099641e29c32099fa11290b523a3824eaaa18c6270452ca757ae5eccb9f684771fb54b10ba0fa7cc9381eb1409e2aa2ea153556f254416d210f04661734386f1ff795b41955642821085d107a22712338a8ccfbd5bf5c1a8447364bd2cfe544dfefd70777f4bed14a6d2c4b5f47cc7594839da3ac6cff44e965de5007906014c137ec9b692c78b558a4ea336c7f8ae09f315360ba7bb9b578962ad601b8746d4049a373f0999ec52ab0d59fd76aaf64e2ca4c4a5f5ef915ed6e9df4600bbce1967037f2a20849c06fae29e82aeb3cfb54621d3c28bef9d8afea56c571c76868ce9d61a03d1af94c3c2f4f1b4ed2fe26012e63e8aada2ca21bf1fe7a2cdb916cc80c9847b075fa295507612417e9bf90e65330ad7ca90014cd79373152300743dfde1c3e7943f256a5e706d8030100ab66f6b9069a21703b80d70afdbe1e9d74e4bd16ec24222e45c4cbf6de6981669a8525db8d8dadb3e09c8d0bbd5bcecd138a49d8569dcea0b1867f23df8f9575147d48418f2b4bee2ce146510cb0271fa2e70ab4b749b6ceb2ba44b17e0928f5b4f42c25d7f3720f92ad13a88fdbc070b985bc8231902a3488bb0932cffdc73042425883bbb9556e790ee97e9bbcb17de3b4a935f34c87113a7d7c7dd82031c8b0213bf9fe784fc1d95f8810bf1f643c533d693ba236a5e8595064cb710f9d0c949b87fb1789135645215faeeb7f1871d7c180dfb9b9e89caf5235e634b61b80ef17d30814d2b82cee2905e9911f9b48ba3eac331628689a4767c5044303289d7f5f9fd6c4b7fbeb4cd536ca2b766769255229aad45b742ef4be8615409df469bc0c06f3ea4faf5e1f9797063b9c533e8633e9440550ae47aef2c6985ef893f3b7bda30fff5bef98162b6b6cee7ff7dce60fd1f94c2f25c7b76400f792abdbc90ab81d61a70b8a24efc2beaac8b3419714ab8ae03e2c579b319a0a2422b24de4a96151b757f0ec44b8d0f154059ee20c0f321a60fab07827b9e73b34dee388271167524de1604cccfa9f5ccd8468814589e80dd6622af0041a7e4abc7c3ea945dc8591caf61ef05b61f07b3bcc2a830b4ddd3ffaebb127d980f5f7fe86562e7c54a10dcb3f17b2fe8a1def2a463f72fc17604ec6ab1c1c789b9c53ee147c5c979d1c5ce85bd422414a32bd8b760b6c916c1dc14014dfb047287c245218fe748d6b53b51154ae871749e5bd00411b2f6131c9a44da36049d9b326f8bc1e245ce325d96497c0af51c314272af7ea8e00d7d396dae288434d463efe31446fef7fa343ddc8d8946ea061478f6efeb5b14850adc7cf0985c93acfe8bbb89d134a19db1d3a87176eebe03838bea6c87ff180606ff23aa85526909eca38f4d1e39a13f6895773a98b459ea409ff3848e505032b0e1c1b0a96982eff863e51dad6ad5d353ab60de5c9d43a82b12e26da973dae63ca9807c25a205278166a224a38945ac64ea661fbb44120a1e8697493ba38d41231fdd70117c628ec7b079ac84a7807231d52594d3ffadef5d824ac120d79b8b0d40658fe1f01bd7b92aefd2f9a1417002df418d9c92736f569872a10d1316f4c4fec336fca3d4b376a7fcbf1b65c9b1e7805d2b8205c8c3803b90f8adcba6d1621d10d7ac02849982ada2c6dfb132c8036726d9f99832f9a1b74c85dbad759a4f56c879d34099c9420cda4ae9ba91a055cb4bbb9593527596780c1f33966899f0f077e8d671d328e2afe5604c113e4371d1202390344bfa7c936a4e250db77fa065b51c0d9b10c56090af6cbf3c0cf0de32c7ec21620bc1dc145e81a8e174572e1c4974c1121706b1dbc52488ce42158c41c505fb247640b4807bf28e91ba06af969065cab2d69d988239e5276435fe67a844bb9616392238cd7d41f30cbbe910b2a29bb772ffff87423e02950b7be953566d04e1c0f5d1e6b0deaca591e1f64de6cef048af101b6eb6186b16700aec3ee5cb772867d3bd5545aa912312958b37fc6cb7dd53cd428d456a7240738510a337dba694fe26994cbe866a27868a5989df8b2817e4acb571640c6e15b2f64c5f8ab7edc4cbc21e67addcee5caca0a4cce01015f19a20fdb7f5f3de018954aae79739e3e3cb8e047b654f64192c2ebb7cdf8f48b7d518bfda5fb7b14d2d07ebad7ce33e62f791254e57708ac7c3b107cd5b235038b50f0a5d87ae2fc65a7f363ac69db0637f259a829c385d23a0c44914afec4a58543e52f443cd9a3c2fd1229c26d1392a149d172d8c16b83587a6f6e02958ee1528f621962ddb2abcd8e01f847190ff290b1b2b1269afd7766ff1a892d3c292b6e6f8773898e58235eb4e46d0b4068a345aa92e9205ff441e93b12dfc1c65ecf39af69b6ddef22f38a394c7505d8130b78b332ad4c8168b49dc0e826118b7cd96a0c5efb43c91700b69069d28cb6d17ca8b44034df41519812cb7bb4b22b1a481a97f38b6546ce844166e98251a0b921bba6da12948fea199a85ac6b8086ee5f6786510b22e2c2f255bf42212a3a978e0faceba6726e5835eb2c7574265f6c68efcb0e32228926a35697416d31906c8e39b3a957269a6d1c63ee46026a2af642246a8184a780c846e61e4462a34d38c7ea44ebaf66e81f2a7e3af71884142dec43ae9fdb7cce8c5e432787529a8058a4020fad245e4af841c31200e2bcdf652113001cd06d79e38a5c8857dea57d9bdc73d37bd07b48b6413ffe1fddd7119c13d1ae831a0cbfb26b8448218c630d7fbf32ccd2f68eb10f53bf48ca58a02e948b3a77aba6d02caab96b5c551d8de2da99e8c82ac9092d93711fd6f5473f7bba5c6ea96b2b9665f2b898c18e6a11699da1c6556d48e60e5800ae9a1968491d1e8e5e90ceaf693bb4f151ec8fdfe93bef3d41d11a1df388853a5afb58e01addbc16d8da0302e7394fb46550f26d1fa43cb82410b18910f06ef16d60e30f6e32ef8631488e29b7637b86b2ad9dc076096933fb04b237d89dc25b08d1d6125b98d8b619754290abe1fdf2fafdf4cfe7b8fa5c6656038553857b099a54a45c05d084e3f4f3b4859e41475de8b676ac4c97e59d146da94694f34b1d97a119a2dd6a2321205802bf0d55eb793f5128e14aeaa43e5da3215cdc77420be5f3b62422f2efd24f95e535d3415ddce1c0401272b021243ded28d240cea411b885e5825ab60d4809703cb3586250f22604440088a71f000701938c8b8aa6dcf4aba150306f38d6502f0c4b380801e339fb0f1e415d289642903d1a31d1f051b13a13a16b66155a49a0cc5de60b893ccbc3cde597eb5964cb180fe34338d1617fe004a4993aed5650189c17cfde75b05756e335b02854ab2c0c5b22b9a27c150b5e191e466468d0ba4d10d51a9b8f171a4bf3004df226e762041cb4fe0417e81e6f711a2e5320e9287589250e7928d1a0dbc1d5ed725fbe979e4bdb200c5daa4b2fb9e0d743da090895f150c65c3a323cdc04bcef16320d650b0869a72c7f69b3366aadf578d6e8ecfd7e9e2b68d686326c4651a57a96f1e1fcba447fcc8220efe1a3fdf1d7d235255abd964b2358009910648b00f693801c8440b7fc0fa390f045e21b1224bbf0ae8b1c9f4b3ef52b251637045db02f6ba223269bfd475bc02b0353b04dd5e8630eed360e47db8a5cad0657a08345fffe22746ad68b7a7da812c00b0d615148c80e3744a54836f169230e4a150d36dbb3abbe61822528df234a70be2d53ceb7b23bfbbcc45e6d93cd029b3e035936a2aaa1d46a035da0d5e912732c0ddd0909fec2660703ed4eb87c3811dd90bf6a0c45fadafe99167d6b953184ea3008dcf8900725c8023e9b921058e9ef30e94076d50ebacdcaee88b7420312ee5f55c8cc4b82a89cb34aa41f7966a7055165f0d53d3eef82d123a67270dbd6c94c21295e8be496825886c7296bd7658eef94d775e6a2cea0528a9741f0a1b2b342f62317b3d91f434d0ce788e2e119272d05b6621893d0e7f8178e49da1edb3a5af74c827e018858f9dc5a243c816c15c6616ff9255136bf77dcebec43e29389b257918e086e5e28c238dc6ca3ad57c193b580514fc9a1c3cf30ee12e514c45e7b84460d2ce3b709998b270b181f5a8fff8a7b65f9437916ed964ebf4408153ca9696e90eb4a6e32500fe7dda1ade058c3f9376ed417d2494a3cbeb0375d3db576cbadc05c5e97f1cd788b2dc2ec15b99b585c87259d624781a4bab19e6e72073694521030221e8fe8657ea0d28ef7133c527baf2f509f5c9bb7628d3de9d8c234a586d9feb2c815904b4c77134b9dacb6be80e8f52a2f71a365e472749a914666326fe07d7c941f67aec4c9"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) sendmmsg$inet(r4, &(0x7f00000009c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="dd8a5acd4817d8d1adb0a637df115f9bc8af7e137ffcb12d153b8e4aca54cb8069e388a92fe6b1d3998797ff80cd4ef4d0fa03a43012cd68759ca8922f239e095bdcb9ba3616192f8b58205b5f8736e5bda03ba9b9c8813cc37600002a5868c3cff065e0467619", 0x67}, {&(0x7f0000000440)="586be182bdcbd16894c06f6ef7d5bd0bdcfecf0bb62a5f07f462c3bac63eacac9bea4f8170651e11a1e5c23c2c5fe7cfe53946bec6a3817f9c6c76e803670a60223080b2b2bb18c8", 0x48}, {&(0x7f0000000640)="5615dd7d4f587b7f415c62f3fd04906c0e0d687ffa6959ce52b9aecff9bf33c9cf390b600b79f124fc6631f7bcf0cb812b355fcb1bab05516b029823b82866043d8c858fb45a9b4fa88856727b3f829b28020b20f5332e03cd10d534891198535f2c2feee5d2dccc9bad8cd112dad1bfc89e081e96c7597774c2da5a6846a7cdba423cf026d9002857051b998e9e5527ab804d577b616917dfa8c77d9d9d661bc456acc71fae37bb679e256832cbb9e3a850d0c807465dc7be5415bdbcf0000fc221cd06c4ffa6dc95d1ff02e886", 0xce}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003640)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="387a2bdc95dbcb72069213d3d11cda1bf6aabe65fc0e0196e5c083cce6107483c6833bdde3216ab342c361ac907207bf3d000d80ec2985a84d6d8022936680eca269396929188a094c0eff4e04cf6dc8340389221311fcd3b401dd47bbe267989dbd3815db1e290e57422380a6a94e75a9ed2a4e704d6923c4523334af1eb3ed8ff989a91e4d05707015cb7bdfa4ba0d1243301e42b0e027813c480270f1fbfbfcae60c08a3fac65df4d982eefa9f9c89831671541c0f5c7ca0ea0fe23fb1ccf8c1e378196fea6e65cb018363f4abc922f19685759", 0xd5}, {&(0x7f0000003500)="1739886e66d47ce5b7ab017b4eb8f0e0651ebc4e35ce3e160ebca1ef0a446e71a9159322ec6c8acc3a607f883d11184f4f592c7454611217fb62141222d20c3da2893097231b100afe2243a0fd3892a090c77fd9a832111629bacda2051e23a57b982affe8c054282ad7d2c791185e1b0eea", 0x72}, {&(0x7f0000003580)="2cdad85b8d344328e31524f6ced984f1272d03984197e654fa36653485df", 0x1e}, {&(0x7f00000035c0)="6b895b6878f84eb83ab599a7ce7ec0edea466b2c2896e1d6ddb0ee5d3ebdc9c6266f839394a0f3242e9ce459598a30db970f206dcab5a0a2347f5f264e3d9150cf6dcbc7914646d9fd3ee8a4f73de966d3b14f8377b2a144be0571273627e49cc2b74eee9f0b70508628c8939afa1219", 0x70}], 0x5}}], 0x3, 0x20008811) 4m27.554917954s ago: executing program 4 (id=3270): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) pipe(0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000304008ff6d9dadbdf2500007400", @ANYRES32=r2, @ANYBLOB="00080000075005001c0012800b0001"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m25.163521162s ago: executing program 4 (id=3275): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x2]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getegid() r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="40567641f25974b6c712b692378e", @ANYRES16=r6, @ANYBLOB="0100ffffffff000000002f0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendfile(r3, r4, 0x0, 0x201f00) 4m24.645943295s ago: executing program 4 (id=3278): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x600, 0x0, 0x4a011, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000100)=0x808c) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m23.191550815s ago: executing program 4 (id=3281): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) syz_open_dev$usbmon(0x0, 0x8b8, 0x30000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 4m20.029603621s ago: executing program 4 (id=3285): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 4m3.884666453s ago: executing program 34 (id=3285): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) memfd_create(&(0x7f0000001780)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xc7\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xbd`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x9d\x83\xcd\b\xd1\x02R\x9b7\xaf\xb7o\x01\xf9\x15\xb8KB\x04\x06\xa5\xea\x0ft\xbb\x1er\x14\xdb\xd1\xcd\xfd\x00'/146, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x441c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 31.621232838s ago: executing program 1 (id=3642): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000002c0)="c3", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x90}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 29.875543269s ago: executing program 1 (id=3643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpgrp(0xffffffffffffffff) r1 = getpgrp(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000380)={0x300a, r4}, 0x0) landlock_restrict_self(r5, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000200)='./file0\x00') link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') io_uring_setup(0x3d7d, &(0x7f0000000100)={0x0, 0xb2d0, 0x800, 0x2, 0x1f2}) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/time\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setresgid(0xee00, 0xee01, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26.502390914s ago: executing program 2 (id=3646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffff9, 0x1000000000000, 0xdc21, 0x0, 0x2000000f, 0x3}, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f00000002c0)) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x1c, &(0x7f0000000100)={[0x3]}, 0x8) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) clock_gettime(0x3, 0x0) chmod(0x0, 0x22) mount$tmpfs(0x0, 0x0, &(0x7f0000000280), 0x2000001, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) getegid() newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@metacopy_off}, {@redirect_dir_off}, {@verity_off}], [{@seclabel}, {@euid_gt={'euid>', r6}}]}) 23.99091725s ago: executing program 2 (id=3650): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x78, 0x2802) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000c00000008000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006f44949f71d0b4d63bfcf4b9441cb424a47195425f056338d1c600ace4d09d9ff1934ffb9373fcd1c9e79abff3f037f0a221580920ee1c5d855e9f50e5a5c7b4912f67650cfa117e1f02199d1590592d309c0173cf777f3ab2ebd4e20e38e6f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfefefffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1d0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2}, [@migrate={0x180, 0x11, [{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2b, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x1d0}}, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x1e) 23.43751216s ago: executing program 5 (id=3651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xe1}], 0x1, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x715}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000340)={{0x3, 0x0, r7, r8, r9, 0x101, 0x3}, 0x2, 0x600000000000000, 0x401, 0x2, r0, r0, 0x5}) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r3, &(0x7f0000000040)={0x30000004}) epoll_pwait(r10, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 21.571136068s ago: executing program 1 (id=3654): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0002}, {0x4, 0x9, 0x42, 0x81}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 20.106758992s ago: executing program 5 (id=3655): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60081, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x10) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24048015) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r9, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r9, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) 18.22372061s ago: executing program 1 (id=3657): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="ef29deb84dd9f4c7dcfed5a5bd190f", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fcdbdf25030000001400020070696d36726567300000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000025000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)}, 0x20000041) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = eventfd2(0xeffffffb, 0x80800) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001340)={0x8, 0x0, 0x0, r6, 0xa}) close_range(r0, 0xffffffffffffffff, 0x0) 18.150375551s ago: executing program 2 (id=3658): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000001100)=""/4112, &(0x7f0000001040)=0x1010) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz2\x00'}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$xdp(r8, 0x0, 0x5880) 17.664934045s ago: executing program 5 (id=3659): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x0, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0xfe, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r2 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) link(0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) fadvise64(r4, 0x9, 0x40000000, 0x9) 12.726926665s ago: executing program 7 (id=3665): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x81}, 0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x85}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) unshare(0x70040100) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000540)=[@increfs, @decrefs={0x40046307, 0x1}, @acquire, @dead_binder_done], 0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 11.490746129s ago: executing program 7 (id=3667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24000040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x105, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4}, 0x4c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fba735e5dc0d3d4ed36186cf0b8fda80ea75354fcabff6c16f5b3f8b232ff4b4b34d234836a5e3177bfe8d24c6c99a7a411892"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000380)="81491d2bd82a38031f98f54bc4ebfa5c92ae4f3efca522e4d4c92916", 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') 9.960391566s ago: executing program 5 (id=3668): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000140)=0x7, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x1, 0xa, "791543c9579af35c"}]}, @rr={0x7, 0xb, 0x61, [@remote, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x1, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@loopback, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x3, "96"}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x2}, {0x7, 0x12, "6aa0a400db75c9498c86b37ef5342caa"}]}]}}}}}) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r7, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x4000) ppoll(&(0x7f0000000040)=[{r7, 0x9280}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 9.867042023s ago: executing program 2 (id=3669): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x7, 0x63, 0xd4, 0x40, 0x4fc, 0x504b, 0x52c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x7, 0x20, 0x2e, "", [{{0x9, 0x4, 0x4b, 0xf, 0x0, 0x5d, 0xf9, 0xd5, 0x38}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x7, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900030008008000000002"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) syz_usb_connect$cdc_ecm(0x1, 0x8c, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0xf, 0x2, 0x40, 0xfc}, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c30}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x45, &(0x7f00000003c0)=@string={0x45, 0x3, "d0b4d9a31e9867a1f3de37334d914c00ac64c68899e87927bba60c20bdaf5b689b1d03aee29cbe24c4b779f5512ba75eefc05808e1f79fbd79e2257f9fe5ebc16d5e62"}}, {0xe7, &(0x7f0000000480)=@string={0xe7, 0x3, "580c4b627d67095f2c745d62ba8075a2f1cc94aa4085ba0526777b48ea702a031734d007bcf5b36245e7b3023c00f89ac94ed1fe4d571f68f824b6810e321061250e66f808af7aa98949119790e22986ca66ff8a212390152672043b9071b0293bc15b7793dfcb02e63052c3a34cf2ae249273dce9306d75a4146fc73dc112596b4bddd37d13098e497867e9e33a21b890907ae19718789592afb5ae2ff9ade21aae06039ecec09d1fd06abb964c01cf32b033a85839081f7f9d1a9f038b45f179cf168c0b599529252b5e0446439994f57223fdfab1e0627f2f411d8e30aab9931ee6d501"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x440a}}, {0xcf, &(0x7f00000005c0)=@string={0xcf, 0x3, "b573246625a180e56443bf3f30de8c77bd1c8ba8da01abc7d0650909e295bf1fde02568dd429d4afee991a99a020df11fd9f2a9d61ad413ea522b27c0e14051666794ab787b0fb0a838e31b3fc379620ff49221672c49f98616925523d3b13fc0a37d0c36ffbfedf58d201a159d496670f4df6b2eda3d2cecd04837b0c7b0784241ed3af4a7c77eea723107bde606e68a01dcd87134a5bca457eaa09f9e3e0571c34d48a0dc032d2d61940ec7e540bc440203be998c87a46b855d893c158ff88d2ab10815f6b919f0d4166cde3"}}]}) timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u32=&(0x7f0000000080)=0x1}}) 9.648148678s ago: executing program 7 (id=3670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {}, {0x4, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x88a}, 0x28) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r6, 0x0, 0x1000, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 8.890670386s ago: executing program 1 (id=3672): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xc, 0xfa11, 0xffffffff}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020}, 0x2020) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) lseek(r5, 0x0, 0x0) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x16a0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b0000000130a05000000000000000000000000060800034000000005740008006b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf10a57c0f5ce032b700b898e3a8391152b75b63843527aa7dae48000dd84091a7326e0b287c7"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 7.534666781s ago: executing program 7 (id=3673): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x6, 0x2, r3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x2, r3}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x40000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.071263723s ago: executing program 6 (id=3674): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, 0x0, 0x2004c800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x4, 0x1, 0x2, 0x0, 0xffff, 0x7}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$inet6(0xa, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r7, &(0x7f00000000c0), 0x28) recvmmsg(r7, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 5.228424318s ago: executing program 6 (id=3675): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000001600)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 4.864413443s ago: executing program 6 (id=3676): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0002}, {0x4, 0x9, 0x42, 0x81}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.829498012s ago: executing program 2 (id=3677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 3.344942897s ago: executing program 5 (id=3678): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 3.10700921s ago: executing program 1 (id=3679): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) io_uring_setup(0x3b45, &(0x7f00000002c0)={0x0, 0x86a1, 0x800, 0x0, 0x20000004}) sendto$inet(r2, &(0x7f0000000580)="17", 0xffffffffffffff77, 0x10008095, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"}) syz_open_pts(r1, 0x0) 2.996498232s ago: executing program 7 (id=3680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_set$pid(0x1, r0, 0x2007) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000300)=0x4, 0x12) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0xffff, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) 1.786723578s ago: executing program 6 (id=3681): socket(0x10, 0x803, 0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x5, 0x4) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) munlockall() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}], 0x1, 0x60010000, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x1, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0x4000, 0x0, 0x20002f7}) 1.101467112s ago: executing program 6 (id=3682): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c00"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) geteuid() socket(0x10, 0x3, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) getsockopt(r2, 0x401, 0x7, &(0x7f0000000340)=""/73, 0x0) 232.640755ms ago: executing program 2 (id=3683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast2}], 0x30) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000240), 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04030b005b01000000000000ff01"], 0xe) write$cgroup_int(r3, &(0x7f0000000080)=0x1, 0x12) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000020000010000000900010073797a30000000002c000000030a05000000000000000000010000000900030073797a31000000000900010073797a300000000084000000060a010400000000000000000100000008000b40000000000900010073797a30000000005c00048040000180080001006e6174003400028008000540eb0000090800014000000001080002"], 0xf8}, 0x1, 0x0, 0x0, 0x814}, 0x20000044) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) 2.984517ms ago: executing program 6 (id=3684): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x1cc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) close_range(r4, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_pts(r6, 0x80100) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f00000000c0)="a1", 0x1}], 0x1) write$char_usb(r7, &(0x7f00000001c0)="64e9", 0x2) 1.993682ms ago: executing program 5 (id=3685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x1, 0x7, 0x32315559, 0x7, 0x200, 0x5, 0x8, 0xfeedcafe, 0x1, 0x3, 0x0, 0x1}}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 7 (id=3686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/netlink\x00') syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') preadv(r4, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x109080) ioctl$MEDIA_IOC_DEVICE_INFO(r5, 0xc1007c00, &(0x7f0000000440)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3) kernel console output (not intermixed with test programs): ss `syz.4.3222'. [ 949.335418][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 949.549178][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 949.574789][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 949.598727][ T24] usb 6-1: config 0 has no interface number 0 [ 949.629311][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 949.661070][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.692517][ T24] usb 6-1: Product: syz [ 949.704434][ T24] usb 6-1: Manufacturer: syz [ 949.712758][ T24] usb 6-1: SerialNumber: syz [ 949.723763][ T24] usb 6-1: config 0 descriptor?? [ 949.781993][ T30] audit: type=1400 audit(1776856716.936:2660): avc: denied { write } for pid=17626 comm="syz.1.3226" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 949.984125][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 950.051386][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 950.696953][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 950.709941][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 950.748252][T17639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 950.870067][T17643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3229'. [ 951.083616][T17643] xt_nfacct: accounting object `syz1' does not exist [ 951.111217][T17643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17643 comm=syz.6.3229 [ 952.494053][T17666] bond2: option mode: unable to set because the bond device has slaves [ 952.559769][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 952.574267][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3235'. [ 952.587358][T17670] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3236'. [ 952.598305][T17665] bond0: left allmulticast mode [ 952.614022][T17666] netlink: 'syz.2.3235': attribute type 4 has an invalid length. [ 952.622646][T17666] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3235'. [ 952.700952][T17665] ip6gretap1: left allmulticast mode [ 952.708605][T17670] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 952.715143][T17670] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 952.764620][T17670] vhci_hcd vhci_hcd.0: Device attached [ 952.856220][T17673] vhci_hcd vhci_hcd.0: port 0 already used [ 953.218052][T17674] vhci_hcd: connection closed [ 953.221295][ T1161] vhci_hcd vhci_hcd.6: stop threads [ 953.266444][ T1161] vhci_hcd vhci_hcd.6: release socket [ 953.287445][ T1161] vhci_hcd vhci_hcd.6: disconnect device [ 953.342382][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.507225][ T30] audit: type=1326 audit(1776856720.407:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 953.669595][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 953.700089][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 953.738341][ T30] audit: type=1326 audit(1776856720.407:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 953.752791][ T24] usb 6-1: USB disconnect, device number 18 [ 953.877658][ T30] audit: type=1326 audit(1776856720.407:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 953.977333][ T30] audit: type=1326 audit(1776856720.407:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.056220][ T30] audit: type=1326 audit(1776856720.407:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.089944][T15548] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 954.135770][ T30] audit: type=1326 audit(1776856720.407:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.174083][ T30] audit: type=1326 audit(1776856720.445:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.205469][ T30] audit: type=1326 audit(1776856720.445:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.233157][ T30] audit: type=1326 audit(1776856720.482:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.2.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8b35d9c819 code=0x7ffc0000 [ 954.267404][T17694] syzkaller0: entered promiscuous mode [ 954.276383][T17694] syzkaller0: entered allmulticast mode [ 954.296293][T15548] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.309075][T15548] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 954.322214][T15548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.337472][T15548] usb 3-1: config 0 descriptor?? [ 954.355988][T15548] pwc: Askey VC010 type 2 USB webcam detected. [ 954.384323][T17694] TC_ACT_REPEAT abuse ? [ 955.476544][T15548] pwc: recv_control_msg error -32 req 02 val 2b00 [ 955.517862][T15548] pwc: recv_control_msg error -32 req 02 val 2700 [ 955.552682][T15548] pwc: recv_control_msg error -32 req 02 val 2c00 [ 955.570671][T15548] pwc: recv_control_msg error -32 req 04 val 1000 [ 955.579878][T15548] pwc: recv_control_msg error -32 req 04 val 1300 [ 955.619602][T15548] pwc: recv_control_msg error -32 req 04 val 1400 [ 955.778885][T15548] pwc: recv_control_msg error -32 req 02 val 2000 [ 956.219811][T15548] pwc: recv_control_msg error -32 req 02 val 2100 [ 956.229981][T15548] pwc: recv_control_msg error -32 req 04 val 1500 [ 956.239327][T15548] pwc: recv_control_msg error -32 req 02 val 2500 [ 956.249234][T15548] pwc: recv_control_msg error -32 req 02 val 2400 [ 956.326141][T15548] pwc: recv_control_msg error -32 req 02 val 2600 [ 956.354785][T15548] pwc: recv_control_msg error -32 req 02 val 2900 [ 956.374142][T15548] pwc: recv_control_msg error -32 req 02 val 2800 [ 956.399623][T14499] Bluetooth: hci4: link tx timeout [ 956.408766][T14499] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 956.651328][T15548] pwc: recv_control_msg error -71 req 04 val 1200 [ 956.744894][T15548] pwc: Registered as video103. [ 956.780511][T15548] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 958.408077][T15548] usb 3-1: USB disconnect, device number 57 [ 958.820328][T14499] Bluetooth: hci4: command 0x0406 tx timeout [ 960.717356][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 960.717385][ T30] audit: type=1400 audit(1776856727.183:2671): avc: denied { create } for pid=17733 comm="syz.4.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 961.338525][ T30] audit: type=1400 audit(1776856727.201:2672): avc: denied { ioctl } for pid=17733 comm="syz.4.3253" path="socket:[62873]" dev="sockfs" ino=62873 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 961.463397][T15548] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 961.666459][T15548] usb 3-1: Using ep0 maxpacket: 8 [ 961.693951][T15548] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 962.083162][T17750] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 963.149193][T15548] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 963.224165][T15548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 963.911993][T15548] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 963.958859][T15548] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.975108][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.049551][T15548] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 964.102097][T15548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.226723][T15548] usb 3-1: can't set config #16, error -71 [ 964.292503][T15548] usb 3-1: USB disconnect, device number 58 [ 964.780393][ T30] audit: type=1400 audit(1776856730.972:2673): avc: denied { read } for pid=17766 comm="syz.5.3264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 965.387589][T17779] netlink: 'syz.4.3266': attribute type 10 has an invalid length. [ 965.396447][T17779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3266'. [ 965.406871][T17779] bridge0: port 1(batadv0) entered blocking state [ 965.414483][T17779] bridge0: port 1(batadv0) entered disabled state [ 965.775315][ T3590] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 965.785143][ T3590] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 966.355619][T17787] siw: device registration error -23 [ 966.630259][T17793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3270'. [ 966.871158][T17795] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 967.215712][ T30] audit: type=1400 audit(1776856732.956:2674): avc: denied { relabelto } for pid=17784 comm="syz.2.3269" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 967.457149][ T30] audit: type=1400 audit(1776856732.966:2675): avc: denied { associate } for pid=17784 comm="syz.2.3269" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3195 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 968.063450][ T30] audit: type=1400 audit(1776856733.368:2676): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 968.133098][T10500] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 968.692710][T10500] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 968.807111][T10500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.839229][T10500] usb 6-1: Product: syz [ 969.141105][T10500] usb 6-1: Manufacturer: syz [ 969.155666][T10500] usb 6-1: SerialNumber: syz [ 969.178578][T10500] usb 6-1: config 0 descriptor?? [ 969.334397][T17815] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 969.372299][T17815] syzkaller0: entered promiscuous mode [ 969.386735][T17815] syzkaller0: entered allmulticast mode [ 969.635658][T10500] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 971.446009][ T30] audit: type=1400 audit(1776856737.055:2677): avc: denied { create } for pid=17824 comm="syz.6.3279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 972.928670][T10500] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 973.412176][T10500] usb 6-1: USB disconnect, device number 19 [ 973.860447][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.431705][T17848] could not allocate digest TFM handle md5 [ 974.584345][ T30] audit: type=1400 audit(1776856740.143:2678): avc: denied { ioctl } for pid=17830 comm="syz.2.3280" path="socket:[63877]" dev="sockfs" ino=63877 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 974.695545][T17859] wg1 speed is unknown, defaulting to 1000 [ 978.134561][T17909] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 981.765090][ T30] audit: type=1400 audit(1776856746.451:2679): avc: denied { relabelfrom } for pid=17919 comm="syz.1.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 982.155029][ T30] audit: type=1400 audit(1776856746.844:2680): avc: denied { relabelto } for pid=17919 comm="syz.1.3295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 984.244997][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.444676][T17960] tipc: Started in network mode [ 984.485475][T17960] tipc: Node identity 4e6ce5094006, cluster identity 4711 [ 984.601548][T17960] tipc: Enabled bearer , priority 0 [ 984.628621][T17956] tipc: Resetting bearer [ 984.936640][T17953] tipc: Disabling bearer [ 985.902285][T17977] netlink: 'syz.5.3300': attribute type 21 has an invalid length. [ 985.911264][T17977] netlink: 'syz.5.3300': attribute type 6 has an invalid length. [ 985.920507][T17977] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3300'. [ 990.246578][T18006] xt_hashlimit: size too large, truncated to 1048576 [ 990.754108][ T5885] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 990.958875][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 990.987985][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.031335][ T5885] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 991.062594][ T5885] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 991.085409][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.228639][ T5885] usb 7-1: config 0 descriptor?? [ 991.368809][T18016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.380382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.877025][T14499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 992.186645][T14499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 992.202234][T14499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 992.356452][ T30] audit: type=1400 audit(1776856756.726:2681): avc: denied { append } for pid=18021 comm="syz.5.3311" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 992.400572][T14499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 992.425245][T14499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 993.389382][ T30] audit: type=1400 audit(1776856757.128:2682): avc: denied { getopt } for pid=18027 comm="syz.2.3312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 993.987495][T18017] wg1 speed is unknown, defaulting to 1000 [ 994.083352][T18035] netlink: 'syz.5.3313': attribute type 3 has an invalid length. [ 994.394376][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.853195][T14499] Bluetooth: hci5: command tx timeout [ 994.864273][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 995.292922][ T1219] usb 7-1: USB disconnect, device number 9 [ 995.519843][ T24] usb 6-1: device descriptor read/64, error -71 [ 995.883568][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 996.150172][ T24] usb 6-1: device descriptor read/64, error -71 [ 997.037639][T14499] Bluetooth: hci5: command tx timeout [ 997.047404][ T24] usb usb6-port1: attempt power cycle [ 998.071775][T14499] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 999.020402][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3322'. [ 999.254430][T14499] Bluetooth: hci5: command tx timeout [ 1001.483031][T14499] Bluetooth: hci5: command tx timeout [ 1002.669113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.679927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.786496][ T1219] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1002.866160][T18017] chnl_net:caif_netlink_parms(): no params data found [ 1002.989069][ T1219] usb 7-1: device descriptor read/64, error -71 [ 1003.147318][T18017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.154907][T18017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.160589][ T5885] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1003.162758][T18017] bridge_slave_0: entered allmulticast mode [ 1003.178983][T18017] bridge_slave_0: entered promiscuous mode [ 1003.192288][T18017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.200103][T18017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.208415][T18017] bridge_slave_1: entered allmulticast mode [ 1003.217490][T18017] bridge_slave_1: entered promiscuous mode [ 1003.256733][ T1219] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1003.331447][T18017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.673890][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 1004.384844][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.390224][T18017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.415250][ T1219] usb 7-1: device descriptor read/64, error -71 [ 1004.450897][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1004.479123][ T5885] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1004.503323][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.574088][ T1219] usb usb7-port1: attempt power cycle [ 1004.650450][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.711033][ T5885] usb 2-1: config 0 descriptor?? [ 1004.958947][T18017] team0: Port device team_slave_0 added [ 1004.986902][T18017] team0: Port device team_slave_1 added [ 1005.019875][ T1219] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1005.069550][T18017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.106000][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.108172][T18109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.160693][T18109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.168583][ T1219] usb 7-1: device descriptor read/8, error -71 [ 1005.230424][T18017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.260817][T18017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.300203][T18017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.351257][T18017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.389783][ T5885] usbhid 2-1:0.0: can't add hid device: -71 [ 1005.399081][ T5885] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1005.426121][ T1219] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1005.438452][ T5885] usb 2-1: USB disconnect, device number 52 [ 1005.458674][ T1219] usb 7-1: device descriptor read/8, error -71 [ 1005.586646][ T1219] usb usb7-port1: unable to enumerate USB device [ 1005.684700][T18017] hsr_slave_0: entered promiscuous mode [ 1005.692160][T18017] hsr_slave_1: entered promiscuous mode [ 1005.700178][T18017] debugfs: 'hsr0' already exists in 'hsr' [ 1005.707319][T18017] Cannot create hsr debugfs directory [ 1006.740283][T18133] loop5: detected capacity change from 0 to 7 [ 1007.132971][T18133] Dev loop5: unable to read RDB block 7 [ 1007.139408][T18133] loop5: AHDI p1 [ 1007.143685][T18133] loop5: partition table partially beyond EOD, truncated [ 1007.802103][T18148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1009.530298][T18160] netlink: zone id is out of range [ 1009.556842][T18160] netlink: zone id is out of range [ 1009.579360][T18160] netlink: zone id is out of range [ 1009.588901][T18160] netlink: zone id is out of range [ 1009.594916][T18160] netlink: zone id is out of range [ 1009.600417][T18160] netlink: zone id is out of range [ 1009.605984][T18160] netlink: zone id is out of range [ 1009.611477][T18160] netlink: zone id is out of range [ 1009.617223][T18160] netlink: zone id is out of range [ 1009.622718][T18160] netlink: zone id is out of range [ 1010.761956][T18017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1010.820381][T18166] loop7: detected capacity change from 0 to 16384 [ 1010.830373][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.845643][ T30] audit: type=1400 audit(1776856774.085:2683): avc: denied { validate_trans } for pid=18159 comm="syz.6.3340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1010.869845][T18017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1010.980051][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.018948][T18017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1011.199446][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.222035][T18172] sp0: Synchronizing with TNC [ 1011.227651][T18017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1011.238422][T18017] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.274028][T18181] sp0: Found TNC [ 1011.649899][ C0] I/O error, dev loop7, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1011.661459][T18171] loop7: detected capacity change from 16384 to 0 [ 1011.674543][ C0] I/O error, dev loop7, sector 3328 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1011.779573][T18017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.963317][T18017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.999957][T18017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1012.027055][T18017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1012.169465][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.176646][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.234709][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.241905][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.424138][T18203] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1014.050616][T18017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1014.812982][T18017] veth0_vlan: entered promiscuous mode [ 1014.864546][T18017] veth1_vlan: entered promiscuous mode [ 1014.894623][ T1219] net_ratelimit: 468 callbacks suppressed [ 1014.894642][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.032574][T18017] veth0_macvtap: entered promiscuous mode [ 1015.061709][T18017] veth1_macvtap: entered promiscuous mode [ 1015.194303][T18017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.261234][T18017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.817133][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1015.829227][ T5958] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.866274][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1015.909162][ T5958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.944423][ T5958] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.954699][ T5958] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.078180][T17889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.114186][T17889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.020773][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.030076][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.305322][T18245] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1018.940435][T18250] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1019.320715][T18244] 9p: Bad value for 'wfdno' [ 1019.568537][ T5963] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1020.035404][T18263] tipc: Started in network mode [ 1020.042344][T18263] tipc: Node identity bbbbbb01, cluster identity 4711 [ 1020.174821][ T5963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.190745][ T5963] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.222883][ T5963] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1020.375783][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.395750][T18263] tipc: Enabled bearer , priority 10 [ 1020.704897][ T5963] usb 2-1: config 0 descriptor?? [ 1020.760721][ T5885] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1020.958248][T18274] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 1021.269116][ T5932] tipc: Node number set to 3149642497 [ 1021.337661][ T9] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1022.250147][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.302690][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1022.355356][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1022.571150][ T5885] usb 2-1: USB disconnect, device number 53 [ 1022.591548][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.650504][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 1023.406689][ T30] audit: type=1400 audit(1776856785.810:2684): avc: denied { execmem } for pid=18291 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1023.547517][ T30] audit: type=1400 audit(1776856785.969:2685): avc: denied { read write } for pid=18017 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.737018][ T30] audit: type=1400 audit(1776856785.997:2686): avc: denied { open } for pid=18017 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.934441][ T30] audit: type=1400 audit(1776856785.997:2687): avc: denied { ioctl } for pid=18017 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1023.960923][ T30] audit: type=1400 audit(1776856786.035:2688): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file0" dev="tmpfs" ino=3328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1023.986843][ T30] audit: type=1400 audit(1776856786.054:2689): avc: denied { create } for pid=18291 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1024.007998][ T30] audit: type=1400 audit(1776856786.054:2690): avc: denied { bind } for pid=18291 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1024.032019][ T30] audit: type=1400 audit(1776856786.054:2691): avc: denied { setopt } for pid=18291 comm="syz.1.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1024.110699][ T30] audit: type=1400 audit(1776856786.054:2692): avc: denied { read } for pid=18291 comm="syz.1.3366" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1024.135624][ T30] audit: type=1400 audit(1776856786.063:2693): avc: denied { open } for pid=18291 comm="syz.1.3366" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1024.762735][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1025.339940][T18308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.191303][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.445334][ T9] usb 6-1: USB disconnect, device number 23 [ 1030.139757][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1030.139816][ T30] audit: type=1400 audit(1776856792.127:2722): avc: denied { create } for pid=18325 comm="syz.2.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1030.311214][ T5885] libceph: connect (1)[c::]:6789 error -101 [ 1030.323161][ T5885] libceph: mon0 (1)[c::]:6789 connect error [ 1030.331254][T18331] ceph: No mds server is up or the cluster is laggy [ 1030.496822][ T30] audit: type=1400 audit(1776856792.136:2723): avc: denied { create } for pid=18325 comm="syz.2.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1030.764667][ T30] audit: type=1400 audit(1776856792.576:2724): avc: denied { append } for pid=18336 comm="syz.2.3376" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1030.871719][T18341] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1031.204686][ T30] audit: type=1400 audit(1776856792.838:2725): avc: denied { create } for pid=18336 comm="syz.2.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1031.784575][ T30] audit: type=1400 audit(1776856792.848:2726): avc: denied { bind } for pid=18336 comm="syz.2.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1031.842423][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1031.925372][ T30] audit: type=1400 audit(1776856792.848:2727): avc: denied { write } for pid=18336 comm="syz.2.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1032.012359][ T30] audit: type=1400 audit(1776856793.081:2728): avc: denied { write } for pid=18336 comm="syz.2.3376" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1032.080502][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.095975][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1032.110852][ T30] audit: type=1400 audit(1776856793.203:2729): avc: denied { bind } for pid=18335 comm="syz.1.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1032.148085][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1032.161777][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.172231][ T30] audit: type=1400 audit(1776856793.203:2730): avc: denied { node_bind } for pid=18335 comm="syz.1.3375" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1032.204524][ T30] audit: type=1400 audit(1776856793.212:2731): avc: denied { connect } for pid=18335 comm="syz.1.3375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1032.303464][ T24] usb 3-1: config 0 descriptor?? [ 1032.783938][T18347] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1036.095192][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.581501][T10500] usb 3-1: USB disconnect, device number 60 [ 1036.726003][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1036.726037][ T30] audit: type=1400 audit(1776856798.313:2769): avc: denied { create } for pid=18375 comm="syz.6.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1036.779242][T18381] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1037.232314][ T30] audit: type=1400 audit(1776856798.313:2770): avc: denied { create } for pid=18375 comm="syz.6.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1037.343468][T18373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1037.431129][ T30] audit: type=1400 audit(1776856798.313:2771): avc: denied { write } for pid=18375 comm="syz.6.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1037.578677][ T30] audit: type=1400 audit(1776856798.369:2772): avc: denied { load_policy } for pid=18376 comm="syz.7.3386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1038.223827][ T30] audit: type=1400 audit(1776856798.780:2773): avc: denied { unmount } for pid=6217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1038.300796][ T30] audit: type=1400 audit(1776856798.809:2774): avc: denied { listen } for pid=18375 comm="syz.6.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1038.323679][ T30] audit: type=1400 audit(1776856798.809:2775): avc: denied { getopt } for pid=18375 comm="syz.6.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1039.140496][ T30] audit: type=1400 audit(1776856800.559:2776): avc: denied { block_suspend } for pid=18415 comm="syz.2.3389" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.420112][T18378] SELinux: failed to load policy [ 1039.621699][ T30] audit: type=1400 audit(1776856801.017:2777): avc: denied { sys_module } for pid=18415 comm="syz.2.3389" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1039.726425][ T30] audit: type=1400 audit(1776856801.073:2778): avc: denied { create } for pid=18424 comm="syz.6.3391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1040.068079][T18436] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1040.235593][T18417] wg1 speed is unknown, defaulting to 1000 [ 1041.361816][T18446] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.3395'. [ 1041.373238][T18446] netlink: Unknown conntrack attr (type=15, max=9) [ 1041.605637][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1041.627875][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1042.318008][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1042.318024][ T30] audit: type=1400 audit(1776856803.544:2785): avc: denied { create } for pid=18453 comm="syz.7.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1042.431355][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1042.439295][ T30] audit: type=1400 audit(1776856803.637:2786): avc: denied { setopt } for pid=18453 comm="syz.7.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1042.548432][ T30] audit: type=1400 audit(1776856803.750:2787): avc: denied { write } for pid=18459 comm="syz.1.3398" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1042.680974][ T5932] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1042.698769][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1042.718619][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.737182][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1042.750515][ T24] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1042.760606][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.788561][ T24] usb 7-1: config 0 descriptor?? [ 1042.916995][T18468] netlink: 'syz.5.3399': attribute type 10 has an invalid length. [ 1042.925542][T18468] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1042.944268][ T30] audit: type=1400 audit(1776856804.086:2788): avc: denied { ioctl } for pid=18464 comm="syz.5.3399" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1043.269103][ T5932] usb 8-1: config 0 has an invalid interface number: 205 but max is 0 [ 1043.287402][ T5932] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.308228][ T5932] usb 8-1: config 0 has no interface number 0 [ 1043.321822][ T5932] usb 8-1: config 0 interface 205 has no altsetting 0 [ 1043.343863][ T5932] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1043.358181][ T5932] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.369416][ T5932] usb 8-1: Product: syz [ 1043.375137][T18468] batadv0: entered promiscuous mode [ 1043.377478][ T5932] usb 8-1: Manufacturer: syz [ 1043.380788][T18468] batadv0: entered allmulticast mode [ 1043.391436][T18468] bridge0: port 3(batadv0) entered blocking state [ 1043.398766][T18468] bridge0: port 3(batadv0) entered disabled state [ 1043.436997][ T5932] usb 8-1: SerialNumber: syz [ 1043.458626][ T5932] usb 8-1: config 0 descriptor?? [ 1043.504691][ T5932] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1043.528747][ T30] audit: type=1400 audit(1776856804.667:2789): avc: denied { connect } for pid=18472 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1043.533895][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 1043.829587][ T7168] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1043.841147][ T7168] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1043.945844][ T30] audit: type=1400 audit(1776856804.667:2790): avc: denied { name_connect } for pid=18472 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1044.437015][ T30] audit: type=1400 audit(1776856804.704:2791): avc: denied { listen } for pid=18472 comm="syz.1.3400" lport=34715 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1044.483647][ T24] nintendo 0003:057E:200E.0041: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 1044.705541][ T24] nintendo 0003:057E:200E.0041: Failed charging grip handshake [ 1044.793141][ T30] audit: type=1400 audit(1776856804.704:2792): avc: denied { accept } for pid=18472 comm="syz.1.3400" lport=34715 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1044.850466][ T24] nintendo 0003:057E:200E.0041: Failed to initialize controller; ret=-110 [ 1045.105282][ T30] audit: type=1400 audit(1776856804.835:2793): avc: denied { write } for pid=18472 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1045.161457][ T5932] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1045.173770][ T5932] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1045.186076][ T5932] usb 8-1: media controller created [ 1045.196956][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1045.283410][ T30] audit: type=1400 audit(1776856804.835:2794): avc: denied { nlmsg_write } for pid=18472 comm="syz.1.3400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1045.321582][ T24] nintendo 0003:057E:200E.0041: probe - fail = -110 [ 1045.355097][ T24] nintendo 0003:057E:200E.0041: probe with driver nintendo failed with error -110 [ 1045.480219][ T5932] dvb-usb: bulk message failed: -22 (6/0) [ 1045.504950][ T5932] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1045.625947][ T5932] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input31 [ 1045.689108][ T5932] dvb-usb: schedule remote query interval to 150 msecs. [ 1045.722228][ T5932] dvb-usb: bulk message failed: -22 (3/0) [ 1045.776515][ T5932] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1045.938299][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1045.973260][ T9] dvb-usb: error while querying for an remote control event. [ 1045.987368][ T5932] usb 8-1: USB disconnect, device number 2 [ 1046.330863][ T5932] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1046.356251][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.606396][ T5829] usb 7-1: USB disconnect, device number 14 [ 1047.422802][T10562] Bluetooth: (null): Invalid header checksum [ 1047.500137][ T1161] Bluetooth: (null): Invalid header checksum [ 1047.626576][ T1161] Bluetooth: (null): Invalid header checksum [ 1048.075969][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1048.076031][ T30] audit: type=1400 audit(1776856808.896:2807): avc: denied { mount } for pid=18497 comm="syz.5.3406" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1049.356790][ T30] audit: type=1400 audit(1776856809.589:2808): avc: denied { create } for pid=18503 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1049.555496][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1049.939914][ T30] audit: type=1400 audit(1776856809.589:2809): avc: denied { connect } for pid=18503 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1050.009542][ T30] audit: type=1400 audit(1776856810.122:2810): avc: denied { nlmsg_read } for pid=18506 comm="syz.6.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1050.034831][ T30] audit: type=1400 audit(1776856810.150:2811): avc: denied { unmount } for pid=15292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1050.701122][T18521] netlink: 'syz.6.3411': attribute type 10 has an invalid length. [ 1050.709798][T18521] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1050.720178][T18521] batadv0: entered promiscuous mode [ 1050.725774][T18521] batadv0: entered allmulticast mode [ 1050.738244][T18521] bridge0: port 3(batadv0) entered blocking state [ 1050.747869][T18521] bridge0: port 3(batadv0) entered disabled state [ 1050.777842][T18521] bridge0: port 3(batadv0) entered blocking state [ 1050.784912][T18521] bridge0: port 3(batadv0) entered forwarding state [ 1050.997113][ T30] audit: type=1400 audit(1776856811.498:2812): avc: denied { append } for pid=18514 comm="syz.1.3410" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1051.022159][ T143] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1051.024478][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1051.032239][ T143] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1051.686867][ T30] audit: type=1400 audit(1776856811.816:2813): avc: denied { map } for pid=18512 comm="syz.5.3409" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1051.754368][ T30] audit: type=1400 audit(1776856811.816:2814): avc: denied { read write } for pid=18512 comm="syz.5.3409" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1051.950385][ T30] audit: type=1400 audit(1776856812.537:2815): avc: denied { create } for pid=18525 comm="syz.1.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1051.955082][ T24] usb 3-1: device descriptor read/all, error -71 [ 1053.034725][ T30] audit: type=1400 audit(1776856813.070:2816): avc: denied { setopt } for pid=18525 comm="syz.1.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1053.165238][T18536] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1053.882567][ T30] audit: type=1400 audit(1776856814.362:2817): avc: denied { ioctl } for pid=18538 comm="syz.2.3415" path="socket:[67078]" dev="sockfs" ino=67078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1054.161229][ T30] audit: type=1400 audit(1776856814.521:2818): avc: denied { read } for pid=18543 comm="syz.7.3416" dev="sockfs" ino=67085 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1055.822386][T18554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1056.217961][ T30] audit: type=1400 audit(1776856816.663:2819): avc: denied { create } for pid=18549 comm="syz.6.3419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1056.415018][T18557] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1056.448977][T18557] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1056.458976][T18557] overlayfs: failed to look up (tracing) for ino (-66) [ 1056.612352][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1057.488389][ T30] audit: type=1400 audit(1776856817.729:2820): avc: denied { mount } for pid=18549 comm="syz.6.3419" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1058.163888][ T30] audit: type=1400 audit(1776856817.729:2821): avc: denied { mounton } for pid=18549 comm="syz.6.3419" path="/121/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1058.191001][ T30] audit: type=1400 audit(1776856817.739:2822): avc: denied { mount } for pid=18549 comm="syz.6.3419" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1058.218102][ T30] audit: type=1400 audit(1776856817.776:2823): avc: denied { ioctl } for pid=18549 comm="syz.6.3419" path="socket:[67095]" dev="sockfs" ino=67095 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1058.710304][ T30] audit: type=1400 audit(1776856818.777:2824): avc: denied { read write } for pid=18558 comm="syz.5.3420" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1059.769920][ T30] audit: type=1400 audit(1776856818.777:2825): avc: denied { open } for pid=18558 comm="syz.5.3420" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1060.137011][ T30] audit: type=1400 audit(1776856819.395:2826): avc: denied { unmount } for pid=16277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1060.212515][ T30] audit: type=1400 audit(1776856819.423:2827): avc: denied { ioctl } for pid=18558 comm="syz.5.3420" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1060.467909][ T30] audit: type=1400 audit(1776856819.526:2828): avc: denied { unmount } for pid=16277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1060.577065][T18583] input: syz1 as /devices/virtual/input/input32 [ 1060.583654][T18583] input: failed to attach handler leds to device input32, error: -6 [ 1060.766989][ T30] audit: type=1400 audit(1776856819.638:2829): avc: denied { connect } for pid=18558 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.189764][ T30] audit: type=1400 audit(1776856819.657:2830): avc: denied { read } for pid=18561 comm="syz.1.3421" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1061.265039][T18592] ipvlan2: entered allmulticast mode [ 1061.297716][T18592] batadv_slave_1: entered allmulticast mode [ 1061.384628][ T30] audit: type=1400 audit(1776856819.657:2831): avc: denied { open } for pid=18561 comm="syz.1.3421" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1061.465473][T18592] batman_adv: batadv0: Adding interface: ipvlan2 [ 1061.471969][T18592] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.499599][T18592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.534299][ T30] audit: type=1400 audit(1776856819.685:2832): avc: denied { ioctl } for pid=18561 comm="syz.1.3421" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1061.571238][T18592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.594146][T18592] batman_adv: batadv0: Interface activated: ipvlan2 [ 1061.601801][ T30] audit: type=1400 audit(1776856820.153:2833): avc: denied { listen } for pid=18564 comm="syz.7.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1061.660882][ T30] audit: type=1400 audit(1776856820.312:2834): avc: denied { setopt } for pid=18558 comm="syz.5.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1063.456951][T18611] loop5: detected capacity change from 0 to 7 [ 1063.475087][T18611] Dev loop5: unable to read RDB block 7 [ 1063.481467][T18611] loop5: AHDI p1 [ 1063.485767][T18611] loop5: partition table partially beyond EOD, truncated [ 1064.092920][ T5196] Dev loop5: unable to read RDB block 7 [ 1064.106995][T18614] netlink: 'syz.7.3432': attribute type 12 has an invalid length. [ 1064.118392][ T5196] loop5: AHDI p1 [ 1064.129525][ T5196] loop5: partition table partially beyond EOD, truncated [ 1064.142986][T18614] Cannot find add_set index 0 as target [ 1064.973908][T18624] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1065.084318][T18622] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.208484][T18601] SELinux: failed to load policy [ 1065.275384][T18616] delete_channel: no stack [ 1065.419242][T18632] binfmt_misc: register: failed to install interpreter file ./file0 [ 1066.092080][T18634] libceph: resolve '0..' (ret=-3): failed [ 1067.252540][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1067.252559][ T30] audit: type=1400 audit(1776856827.312:2853): avc: denied { read write } for pid=18635 comm="syz.2.3439" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1067.315198][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.417959][ T30] audit: type=1400 audit(1776856827.312:2854): avc: denied { open } for pid=18635 comm="syz.2.3439" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1069.624895][ T30] audit: type=1400 audit(1776856830.073:2855): avc: denied { create } for pid=18643 comm="syz.7.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1070.482927][ T5932] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1070.489282][ T30] audit: type=1400 audit(1776856830.073:2856): avc: denied { create } for pid=18643 comm="syz.7.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1070.664340][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 1070.758052][ T5932] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1070.782062][ T5932] usb 6-1: config 0 has no interface number 0 [ 1070.799178][ T5932] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.884150][T18656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1071.172308][ T5932] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.363166][ T5932] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1071.374744][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.497633][ T5963] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1071.942668][ T30] audit: type=1400 audit(1776856832.253:2857): avc: denied { setopt } for pid=18661 comm="syz.6.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1071.968662][ T5963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.973511][ T5932] usb 6-1: config 0 descriptor?? [ 1072.158376][ T30] audit: type=1400 audit(1776856832.309:2858): avc: denied { map } for pid=18661 comm="syz.6.3446" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1072.190022][T18665] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1072.200509][T18665] netlink: Unknown conntrack attr (type=15, max=9) [ 1072.207953][ T5963] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1072.221894][ T5963] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1072.231194][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.243600][ T5963] usb 8-1: config 0 descriptor?? [ 1072.274972][ T30] audit: type=1400 audit(1776856832.309:2859): avc: denied { execute } for pid=18661 comm="syz.6.3446" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1072.445064][T18671] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 1072.453644][T18671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1072.898112][ T5932] usbhid 6-1:0.1: can't add hid device: -71 [ 1072.907348][ T5932] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1072.937550][ T5932] usb 6-1: USB disconnect, device number 24 [ 1075.161693][ T5963] usb 8-1: USB disconnect, device number 3 [ 1076.141211][ T30] audit: type=1400 audit(1776856835.725:2860): avc: denied { bind } for pid=18679 comm="syz.1.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1077.000775][T18690] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18690 comm=syz.1.3451 [ 1077.016476][ T30] audit: type=1400 audit(1776856836.707:2861): avc: denied { ioctl } for pid=18679 comm="syz.1.3451" path="socket:[67861]" dev="sockfs" ino=67861 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1077.129937][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.302967][ T30] audit: type=1400 audit(1776856837.512:2862): avc: denied { ioctl } for pid=18694 comm="syz.7.3454" path="socket:[67428]" dev="sockfs" ino=67428 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1078.646191][T18686] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1078.652735][T18686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.661231][T18686] vhci_hcd vhci_hcd.0: Device attached [ 1078.837574][ T30] audit: type=1400 audit(1776856837.512:2863): avc: denied { write } for pid=18694 comm="syz.7.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1078.864510][T18689] vhci_hcd: connection closed [ 1078.912019][ T7168] vhci_hcd vhci_hcd.1: stop threads [ 1078.993938][ T7168] vhci_hcd vhci_hcd.1: release socket [ 1079.045003][ T7168] vhci_hcd vhci_hcd.1: disconnect device [ 1079.168063][ T5963] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 1079.228387][ T30] audit: type=1400 audit(1776856839.075:2864): avc: denied { create } for pid=18706 comm="syz.5.3465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1079.566874][T18717] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1080.412154][ T30] audit: type=1400 audit(1776856840.179:2865): avc: denied { create } for pid=18719 comm="syz.7.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1080.830787][ T30] audit: type=1400 audit(1776856840.554:2866): avc: denied { shutdown } for pid=18719 comm="syz.7.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1080.853435][ T30] audit: type=1400 audit(1776856840.554:2867): avc: denied { write } for pid=18719 comm="syz.7.3459" path="socket:[67470]" dev="sockfs" ino=67470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1081.093627][T18726] wg1 speed is unknown, defaulting to 1000 [ 1081.594949][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.609080][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1081.794152][T18718] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1083.093002][T18738] xt_hashlimit: size too large, truncated to 1048576 [ 1083.105623][ T30] audit: type=1400 audit(1776856842.631:2868): avc: denied { name_bind } for pid=18731 comm="syz.7.3460" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1083.472407][ T30] audit: type=1400 audit(1776856842.631:2869): avc: denied { node_bind } for pid=18731 comm="syz.7.3460" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1084.644140][ T5963] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1084.708208][T10500] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1084.996526][T10500] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.020756][T10500] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.132742][ T30] audit: type=1400 audit(1776856844.559:2870): avc: denied { ioctl } for pid=18754 comm="syz.6.3466" path="/dev/sg0" dev="devtmpfs" ino=797 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1085.245174][T10500] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1085.361086][T10500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1085.406542][ T30] audit: type=1400 audit(1776856844.559:2871): avc: denied { getopt } for pid=18754 comm="syz.6.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1085.427859][T10500] usb 6-1: SerialNumber: syz [ 1085.435045][ T30] audit: type=1400 audit(1776856844.568:2872): avc: denied { name_connect } for pid=18754 comm="syz.6.3466" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1085.460763][ T30] audit: type=1400 audit(1776856844.568:2873): avc: denied { setopt } for pid=18754 comm="syz.6.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1085.486722][ T30] audit: type=1400 audit(1776856844.577:2874): avc: denied { connect } for pid=18754 comm="syz.6.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1086.414678][T18766] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1086.424279][T18766] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1086.435967][T18766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1087.340548][T18767] Can't find ip_set type h [ 1087.695704][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.840666][T10500] usb 6-1: 0:2 : does not exist [ 1087.923757][T10500] usb 6-1: unit 149 not found! [ 1088.086252][T18776] binder: 18771:18776 ioctl 400c620e 0 returned -14 [ 1088.105191][T18776] IPv6: NLM_F_CREATE should be specified when creating new route [ 1088.306498][ T5829] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1088.604330][ T30] audit: type=1400 audit(1776856847.357:2875): avc: denied { write } for pid=18771 comm="syz.6.3470" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1089.438167][T10500] usb 6-1: USB disconnect, device number 25 [ 1089.445920][ T30] audit: type=1400 audit(1776856847.956:2876): avc: denied { mount } for pid=18774 comm="syz.5.3471" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1089.557156][T14499] Bluetooth: hci4: command 0x0406 tx timeout [ 1089.568872][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 1089.614856][ T5829] usb 3-1: config 0 has no interfaces? [ 1089.669793][ T5829] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1089.751444][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.762691][T18106] udevd[18106]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1089.972308][ T5829] usb 3-1: Product: syz [ 1089.977072][ T5829] usb 3-1: Manufacturer: syz [ 1089.984355][ T5829] usb 3-1: SerialNumber: syz [ 1090.003042][ T5829] usb 3-1: config 0 descriptor?? [ 1090.101438][T18785] overlayfs: missing 'lowerdir' [ 1090.243333][ T30] audit: type=1400 audit(1776856849.378:2877): avc: denied { create } for pid=18782 comm="syz.5.3473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1090.724893][T18762] batman_adv: batadv0: Adding interface: macvtap1 [ 1091.792737][T18762] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.842912][T18762] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1091.866789][T18773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.900702][T18773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.913615][ T30] audit: type=1400 audit(1776856850.932:2878): avc: denied { mount } for pid=18795 comm="syz.1.3475" name="/" dev="autofs" ino=68648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1092.678885][ T30] audit: type=1400 audit(1776856851.661:2879): avc: denied { read write } for pid=18799 comm="syz.6.3476" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1093.188475][ T30] audit: type=1400 audit(1776856851.671:2880): avc: denied { open } for pid=18799 comm="syz.6.3476" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1093.342306][ T30] audit: type=1400 audit(1776856851.671:2881): avc: denied { map } for pid=18799 comm="syz.6.3476" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1093.398775][ T30] audit: type=1400 audit(1776856851.671:2882): avc: denied { execute } for pid=18799 comm="syz.6.3476" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1094.154892][ T30] audit: type=1400 audit(1776856852.672:2883): avc: denied { mount } for pid=18802 comm="syz.5.3477" name="/" dev="ramfs" ino=68676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1095.316440][ T30] audit: type=1400 audit(1776856854.113:2884): avc: denied { write } for pid=18811 comm="syz.6.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1095.681667][ T30] audit: type=1400 audit(1776856854.113:2885): avc: denied { ioctl } for pid=18811 comm="syz.6.3479" path="socket:[68695]" dev="sockfs" ino=68695 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1096.121333][T18820] netlink: 'syz.1.3480': attribute type 6 has an invalid length. [ 1096.134101][T18820] netlink: 'syz.1.3480': attribute type 6 has an invalid length. [ 1096.674786][ T24] usb 3-1: USB disconnect, device number 63 [ 1096.801963][T18827] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1096.933005][T18828] overlayfs: missing 'lowerdir' [ 1097.655521][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.888284][ T5885] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1098.349060][ T30] audit: type=1400 audit(1776856856.967:2886): avc: denied { write } for pid=18837 comm="syz.2.3484" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1098.407640][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.561969][ T5885] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.584968][ T5885] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1098.853967][T18848] siw: device registration error -23 [ 1099.557262][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.587119][ T5885] usb 7-1: config 0 descriptor?? [ 1100.597470][ T5885] usb 7-1: can't set config #0, error -71 [ 1100.744319][ T5885] usb 7-1: USB disconnect, device number 15 [ 1101.116147][T18861] loop5: detected capacity change from 0 to 7 [ 1101.173013][T18861] Dev loop5: unable to read RDB block 7 [ 1101.179166][T18861] loop5: AHDI p1 [ 1101.183310][T18861] loop5: partition table partially beyond EOD, truncated [ 1101.196374][T18862] netlink: 'syz.6.3487': attribute type 10 has an invalid length. [ 1101.204939][T18862] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3487'. [ 1103.839949][ T30] audit: type=1400 audit(1776856862.105:2887): avc: denied { bind } for pid=18872 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1104.730913][ T30] audit: type=1400 audit(1776856862.348:2888): avc: denied { ioctl } for pid=18872 comm="syz.2.3492" path="socket:[68827]" dev="sockfs" ino=68827 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1106.222378][ T30] audit: type=1400 audit(1776856864.295:2889): avc: denied { execute_no_trans } for pid=18886 comm="syz.6.3494" path="/140/file1" dev="tmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1107.145181][ T30] audit: type=1400 audit(1776856865.081:2890): avc: denied { search } for pid=18885 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.169472][ T5885] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1107.205165][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1107.239587][T18902] netlink: 'syz.6.3498': attribute type 1 has an invalid length. [ 1107.338725][ T5885] usb 6-1: device descriptor read/64, error -71 [ 1107.407006][ T30] audit: type=1400 audit(1776856865.090:2891): avc: denied { search } for pid=18885 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.551550][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3498'. [ 1107.602966][T18902] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1107.612805][ T5885] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1107.720930][T18906] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1107.818313][ T5885] usb 6-1: device descriptor read/64, error -71 [ 1107.906097][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.919467][ T1219] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1107.971346][ T5885] usb usb6-port1: attempt power cycle [ 1108.003068][T18906] bond3 (unregistering): Released all slaves [ 1108.133488][ T1219] usb 7-1: Using ep0 maxpacket: 16 [ 1108.194462][ T1219] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.264987][ T1219] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1108.360709][ T1219] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 4 [ 1108.391485][ T5885] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1108.435550][ T1219] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.477476][ T5885] usb 6-1: device descriptor read/8, error -71 [ 1108.531230][ T1219] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1108.581667][ T1219] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1108.621175][ T1219] usb 7-1: Manufacturer: syz [ 1108.663973][ T1219] usb 7-1: config 0 descriptor?? [ 1108.759488][ T5885] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1108.793625][ T5885] usb 6-1: device descriptor read/8, error -71 [ 1108.944313][ T5885] usb usb6-port1: unable to enumerate USB device [ 1109.257694][ T30] audit: type=1400 audit(1776856865.090:2892): avc: denied { search } for pid=18885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.283393][ T30] audit: type=1400 audit(1776856865.090:2893): avc: denied { search } for pid=18885 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.309520][ T30] audit: type=1400 audit(1776856865.118:2894): avc: denied { read open } for pid=18896 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.336759][ T30] audit: type=1400 audit(1776856865.118:2895): avc: denied { getattr } for pid=18896 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.364246][ T30] audit: type=1400 audit(1776856865.128:2896): avc: denied { getattr } for pid=18896 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1109.520466][ T1219] rc_core: IR keymap rc-hauppauge not found [ 1109.532893][ T30] audit: type=1400 audit(1776856865.277:2897): avc: denied { setopt } for pid=18899 comm="syz.6.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1109.554533][ T30] audit: type=1400 audit(1776856865.287:2898): avc: denied { bind } for pid=18899 comm="syz.6.3498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1109.599673][ T1219] Registered IR keymap rc-empty [ 1109.690167][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1109.725485][ T30] audit: type=1400 audit(1776856865.352:2899): avc: denied { read } for pid=18903 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1109.750600][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1109.850431][ T1219] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1109.997531][ T30] audit: type=1400 audit(1776856865.352:2900): avc: denied { open } for pid=18903 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1886 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1110.203630][ T1219] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input34 [ 1110.227288][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1110.231124][ T30] audit: type=1400 audit(1776856865.474:2901): avc: denied { connect } for pid=18900 comm="syz.2.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1110.256432][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1110.277758][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1110.299188][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1110.515153][T18933] loop5: detected capacity change from 0 to 7 [ 1110.572293][T18933] Dev loop5: unable to read RDB block 7 [ 1110.578455][T18933] loop5: AHDI p1 [ 1110.584093][T18933] loop5: partition table partially beyond EOD, truncated [ 1110.598421][T18934] netlink: 'syz.2.3501': attribute type 10 has an invalid length. [ 1110.606933][T18934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1111.348918][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.453157][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.485603][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.517658][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.564601][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.613712][ T1219] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1111.633609][T18936] input: syz0 as /devices/virtual/input/input35 [ 1111.657894][ T1219] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1111.702797][ T1219] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1111.756816][ T1219] usb 7-1: USB disconnect, device number 16 [ 1111.784251][ T5885] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1111.969961][ T5885] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1111.993743][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1112.017475][ T5885] usb 6-1: Product: syz [ 1112.036093][ T5885] usb 6-1: SerialNumber: syz [ 1112.076688][T18936] ALSA: mixer_oss: invalid OSS volume 'VOLU' [ 1112.111368][ T5885] usb 6-1: config 0 descriptor?? [ 1112.371185][ T5885] usb 6-1: USB disconnect, device number 30 [ 1112.401626][T18937] dvmrp1: entered allmulticast mode [ 1112.449029][T18937] dvmrp1: left allmulticast mode [ 1113.023828][ T5885] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1113.825691][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 1114.109086][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.182128][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.204198][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.225044][ T5885] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1114.251340][T17896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.261679][ T1219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.270526][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.290564][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.439092][ T5885] usb 2-1: config 0 descriptor?? [ 1114.876628][T18963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1115.929619][ T5885] nintendo 0003:057E:200E.0042: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 1116.071935][ T5885] nintendo 0003:057E:200E.0042: Failed charging grip handshake [ 1116.124235][ T5885] nintendo 0003:057E:200E.0042: Failed to initialize controller; ret=-110 [ 1116.159090][ T5885] nintendo 0003:057E:200E.0042: probe - fail = -110 [ 1116.220735][ T5885] nintendo 0003:057E:200E.0042: probe with driver nintendo failed with error -110 [ 1116.411452][ T5885] usb 2-1: USB disconnect, device number 54 [ 1116.474465][T18970] fido_id[18970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1119.432544][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1119.432573][ T30] audit: type=1400 audit(1776856876.703:2910): avc: denied { ioctl } for pid=18987 comm="syz.1.3515" path="socket:[69172]" dev="sockfs" ino=69172 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1119.659779][ T30] audit: type=1400 audit(1776856876.881:2911): avc: denied { append } for pid=18987 comm="syz.1.3515" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1120.069990][T18998] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1120.100689][ T30] audit: type=1400 audit(1776856877.302:2912): avc: denied { write } for pid=18993 comm="syz.2.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1121.903956][ T5885] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1122.568604][T19012] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1122.594869][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3520'. [ 1122.604998][T19012] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1123.005868][ T5932] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1123.436241][T19020] wg1 speed is unknown, defaulting to 1000 [ 1123.722706][T19021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.732974][T19021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.095503][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.107342][ T30] audit: type=1400 audit(1776856880.391:2913): avc: denied { connect } for pid=19010 comm="syz.1.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1124.139085][ T5932] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1124.150376][ T5932] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1124.277317][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.298401][ T5932] usb 6-1: config 0 descriptor?? [ 1124.319219][ T5932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.097128][ T30] audit: type=1400 audit(1776856882.880:2914): avc: denied { bind } for pid=19015 comm="syz.5.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1126.544586][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1126.569488][ T5885] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1126.588543][ T5885] usb 2-1: can't read configurations, error -71 [ 1126.687684][ T30] audit: type=1400 audit(1776856882.880:2915): avc: denied { name_bind } for pid=19015 comm="syz.5.3523" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1126.711608][ T30] audit: type=1400 audit(1776856882.880:2916): avc: denied { node_bind } for pid=19015 comm="syz.5.3523" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1127.218482][T19041] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1129.104569][T14560] Bluetooth: hci5: command 0x0406 tx timeout [ 1129.169030][ T5932] usb 6-1: USB disconnect, device number 31 [ 1129.386099][ T30] audit: type=1400 audit(1776856886.005:2917): avc: denied { create } for pid=19047 comm="syz.5.3532" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1130.328383][T10500] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1130.336533][ T30] audit: type=1400 audit(1776856886.539:2918): avc: denied { setattr } for pid=19047 comm="syz.5.3532" name="file0" dev="tmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1130.732889][T10500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.745282][T10500] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.764718][T10500] usb 7-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 1130.790910][T10500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.823814][T19064] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1130.941741][T10500] usb 7-1: config 0 descriptor?? [ 1130.982928][ T30] audit: type=1400 audit(1776856887.493:2919): avc: denied { bind } for pid=19058 comm="syz.5.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1131.111340][ T30] audit: type=1400 audit(1776856887.493:2920): avc: denied { name_bind } for pid=19058 comm="syz.5.3533" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1131.230215][ T30] audit: type=1400 audit(1776856887.493:2921): avc: denied { node_bind } for pid=19058 comm="syz.5.3533" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1131.537330][T10500] hid (null): invalid report_count 43684 [ 1131.557220][T10500] hid (null): global environment stack underflow [ 1131.824876][ T30] audit: type=1800 audit(1776856888.167:2922): pid=19070 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3535" name="file0" dev="overlay" ino=190 res=0 errno=0 [ 1132.435815][T10500] hid_parser_main: 27 callbacks suppressed [ 1132.435852][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.534456][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.554040][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.578048][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.625498][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.648641][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.824530][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.838096][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.864170][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1132.983754][T19074] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1133.016929][T19074] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1133.177340][ T30] audit: type=1400 audit(1776856889.524:2923): avc: denied { getopt } for pid=19071 comm="syz.7.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1133.234507][T10500] hid-generic 0003:0B05:1AFE.0043: unknown main item tag 0x0 [ 1133.268724][T10500] hid-generic 0003:0B05:1AFE.0043: invalid report_count 43684 [ 1133.308844][T10500] hid-generic 0003:0B05:1AFE.0043: item 0 2 1 9 parsing failed [ 1133.317246][ T5932] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1133.412440][T10500] hid-generic 0003:0B05:1AFE.0043: probe with driver hid-generic failed with error -22 [ 1133.635180][T10500] usb 7-1: USB disconnect, device number 17 [ 1133.642789][ T5932] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1133.698203][ T5932] usb 2-1: config 0 has no interface number 0 [ 1134.726891][ T5932] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1134.739137][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.747497][ T5932] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1135.031909][ T30] audit: type=1400 audit(1776856891.283:2924): avc: denied { getopt } for pid=19076 comm="syz.6.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1135.131963][ T5932] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1136.203100][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3539'. [ 1136.212760][T19092] IPv6: NLM_F_CREATE should be specified when creating new route [ 1137.347444][T19099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1137.357155][T19099] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1137.370033][T19099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1140.325833][T19115] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1141.082299][ T5932] usb 2-1: string descriptor 0 read error: -32 [ 1141.121277][ T5932] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1141.158357][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1141.201962][ T5932] usb 2-1: config 0 descriptor?? [ 1141.216344][ T5829] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1141.249473][ T5932] usb 2-1: can't set config #0, error -32 [ 1141.341776][T14413] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1141.411714][T19121] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1141.423965][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.457924][ T5829] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1141.520075][T19124] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1141.648937][ T5829] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1141.658686][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.683919][T14413] usb 7-1: Using ep0 maxpacket: 32 [ 1141.690865][ T5829] usb 3-1: config 0 descriptor?? [ 1141.698817][T14413] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1141.790779][T14413] usb 7-1: config 0 has no interface number 0 [ 1141.819328][ T5829] usb 2-1: USB disconnect, device number 57 [ 1141.852883][T14413] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.894671][T14413] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1141.954659][T14413] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1141.976720][T14413] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1142.005917][ T1219] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1142.015518][T14413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.152276][T19129] trusted_key: encrypted_key: insufficient parameters specified [ 1142.168464][ T30] audit: type=1400 audit(1776856897.984:2925): avc: denied { setopt } for pid=19126 comm="syz.1.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1142.565766][ T1219] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.576707][T14413] usb 7-1: Product: syz [ 1142.599697][T14413] usb 7-1: Manufacturer: syz [ 1142.618683][ T1219] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1142.628447][T14413] usb 7-1: SerialNumber: syz [ 1142.646811][T14413] usb 7-1: config 0 descriptor?? [ 1142.672069][ T1219] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1142.752538][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.801097][ T1219] usb 6-1: config 0 descriptor?? [ 1143.072096][ T1219] usb 6-1: can't set config #0, error -71 [ 1143.147013][ T1219] usb 6-1: USB disconnect, device number 32 [ 1143.148800][ T5885] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1143.182030][T14413] appletouch 7-1:0.85: Failed to read mode from device. [ 1143.192378][T14413] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1143.451352][ T5885] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1143.461520][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.483726][ T5885] usb 2-1: Product: syz [ 1143.507567][ T5885] usb 2-1: Manufacturer: syz [ 1143.518817][ T5885] usb 2-1: SerialNumber: syz [ 1143.529763][T14413] usb 7-1: USB disconnect, device number 18 [ 1143.544517][ T5885] usb 2-1: config 0 descriptor?? [ 1144.559533][ T5885] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1144.622642][ T5932] usb 3-1: USB disconnect, device number 64 [ 1144.660830][T19131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.709136][T19131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.978885][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.010026][T19142] kAFS: unable to lookup cell '' [ 1145.040621][ T30] audit: type=1400 audit(1776856900.660:2926): avc: denied { ioctl } for pid=19136 comm="syz.2.3551" path="socket:[69731]" dev="sockfs" ino=69731 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1145.477460][ T5885] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1146.046567][ T5885] sq905c 2-1:0.0: Reading version command failed [ 1146.053031][ T5885] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1146.063381][ T5885] usb 2-1: USB disconnect, device number 58 [ 1146.508398][ T30] audit: type=1400 audit(1776856902.036:2927): avc: denied { listen } for pid=19152 comm="syz.7.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1147.247962][ T30] audit: type=1400 audit(1776856902.036:2928): avc: denied { accept } for pid=19152 comm="syz.7.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1147.270561][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1147.281096][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1147.302651][T19028] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1147.313167][T19028] CPU: 0 UID: 0 PID: 19028 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1147.313201][T19028] Tainted: [L]=SOFTLOCKUP [ 1147.313209][T19028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1147.313222][T19028] Workqueue: hci5 hci_rx_work [ 1147.313255][T19028] Call Trace: [ 1147.313261][T19028] [ 1147.313269][T19028] dump_stack_lvl+0x100/0x190 [ 1147.313294][T19028] sysfs_warn_dup.cold+0x1c/0x28 [ 1147.313322][T19028] sysfs_create_dir_ns+0x24b/0x2b0 [ 1147.313346][T19028] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1147.313367][T19028] ? find_held_lock+0x2b/0x80 [ 1147.313388][T19028] ? kobject_add_internal+0x25f/0x930 [ 1147.313409][T19028] ? kobject_add_internal+0x25f/0x930 [ 1147.313432][T19028] ? do_raw_spin_unlock+0x145/0x1e0 [ 1147.313462][T19028] kobject_add_internal+0x2c8/0x930 [ 1147.313485][T19028] kobject_add+0x16a/0x1e0 [ 1147.313504][T19028] ? __pfx_kobject_add+0x10/0x10 [ 1147.313521][T19028] ? class_to_subsys+0x10f/0x150 [ 1147.313544][T19028] ? kobject_put+0xb9/0x640 [ 1147.313572][T19028] ? _raw_spin_unlock+0x28/0x50 [ 1147.313601][T19028] device_add+0x294/0x1950 [ 1147.313620][T19028] ? __pfx_dev_set_name+0x10/0x10 [ 1147.313640][T19028] ? __pfx_device_add+0x10/0x10 [ 1147.313659][T19028] ? mgmt_send_event_skb+0x2fb/0x460 [ 1147.313693][T19028] hci_conn_add_sysfs+0x1a3/0x260 [ 1147.313725][T19028] le_conn_complete_evt+0x11eb/0x1f60 [ 1147.313760][T19028] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1147.313794][T19028] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1147.313822][T19028] ? skb_pull_data+0x15f/0x1e0 [ 1147.313847][T19028] hci_le_meta_evt+0x34a/0x5f0 [ 1147.313877][T19028] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1147.313910][T19028] hci_event_packet+0x51c/0xcd0 [ 1147.313942][T19028] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1147.313970][T19028] ? __pfx_hci_event_packet+0x10/0x10 [ 1147.313999][T19028] ? kcov_remote_start+0x374/0x660 [ 1147.314022][T19028] ? lockdep_hardirqs_on+0x78/0x100 [ 1147.314056][T19028] hci_rx_work+0x451/0xfc0 [ 1147.314093][T19028] process_one_work+0xa0e/0x1980 [ 1147.314130][T19028] ? __pfx_process_one_work+0x10/0x10 [ 1147.314164][T19028] ? __pfx_hci_rx_work+0x10/0x10 [ 1147.314195][T19028] worker_thread+0x5ef/0xe50 [ 1147.314227][T19028] ? __pfx_worker_thread+0x10/0x10 [ 1147.314252][T19028] ? kthread+0x13a/0x450 [ 1147.314271][T19028] ? __pfx_worker_thread+0x10/0x10 [ 1147.314294][T19028] kthread+0x370/0x450 [ 1147.314313][T19028] ? __pfx_kthread+0x10/0x10 [ 1147.314338][T19028] ret_from_fork+0x72b/0xd50 [ 1147.314364][T19028] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.314388][T19028] ? __switch_to+0x800/0x1100 [ 1147.314416][T19028] ? __pfx_kthread+0x10/0x10 [ 1147.314440][T19028] ret_from_fork_asm+0x1a/0x30 [ 1147.314479][T19028] [ 1147.314519][T19028] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1147.611557][T19028] Bluetooth: hci5: failed to register connection device [ 1147.711546][ T30] audit: type=1400 audit(1776856902.129:2929): avc: denied { getopt } for pid=19154 comm="syz.6.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1148.483340][ T30] audit: type=1400 audit(1776856903.888:2930): avc: denied { read write } for pid=19161 comm="syz.1.3556" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1148.512309][ T30] audit: type=1400 audit(1776856903.917:2931): avc: denied { open } for pid=19161 comm="syz.1.3556" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1148.529693][T10500] libceph: connect (1)[c::]:6789 error -101 [ 1148.592931][ T30] audit: type=1400 audit(1776856903.991:2932): avc: denied { ioctl } for pid=19161 comm="syz.1.3556" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1148.622852][T19169] bridge0: port 4(dummy0) entered disabled state [ 1148.642598][T10500] libceph: mon0 (1)[c::]:6789 connect error [ 1148.732517][T19170] ceph: No mds server is up or the cluster is laggy [ 1150.607395][T19195] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1151.440560][T14413] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1151.999745][T14413] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.312973][T14413] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1152.363060][T14413] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1152.405637][T14413] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.456060][T14413] usb 8-1: config 0 descriptor?? [ 1152.544461][ T30] audit: type=1400 audit(1776856907.688:2933): avc: denied { read } for pid=19212 comm="syz.5.3565" path="socket:[70928]" dev="sockfs" ino=70928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1152.702447][ T30] audit: type=1400 audit(1776856907.716:2934): avc: denied { write } for pid=19210 comm="syz.2.3566" path="socket:[70929]" dev="sockfs" ino=70929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1152.871605][T10500] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1152.952211][T14413] usb 8-1: can't set config #0, error -71 [ 1152.998574][T14413] usb 8-1: USB disconnect, device number 4 [ 1153.053448][T10500] usb 7-1: Using ep0 maxpacket: 16 [ 1153.072908][T10500] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1153.114870][T10500] usb 7-1: config 0 has no interface number 0 [ 1153.153572][T10500] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.217338][T10500] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.278612][T10500] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1153.364372][T10500] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.912314][T10500] usb 7-1: config 0 descriptor?? [ 1154.164748][T19028] Bluetooth: hci5: command 0x0406 tx timeout [ 1155.614451][ T30] audit: type=1400 audit(1776856910.055:2935): avc: denied { sqpoll } for pid=19228 comm="syz.7.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1155.640808][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.231651][T19240] siw: device registration error -23 [ 1159.103324][T19241] uprobe: syz.5.3570:19241 failed to unregister, leaking uprobe [ 1159.219075][T10500] uclogic 0003:28BD:0071.0044: failed retrieving string descriptor #100: -71 [ 1159.250148][T10500] uclogic 0003:28BD:0071.0044: failed retrieving pen parameters: -71 [ 1159.271424][T10500] uclogic 0003:28BD:0071.0044: pen probing failed: -71 [ 1159.307922][T10500] uclogic 0003:28BD:0071.0044: failed probing parameters: -71 [ 1159.583371][T10500] uclogic 0003:28BD:0071.0044: probe with driver uclogic failed with error -71 [ 1159.625486][T10500] usb 7-1: USB disconnect, device number 19 [ 1161.342612][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3572'. [ 1161.437116][T19256] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1163.841211][ T30] audit: type=1400 audit(1776856918.253:2936): avc: denied { create } for pid=19271 comm="syz.6.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1164.056917][ T30] audit: type=1400 audit(1776856918.290:2937): avc: denied { ioctl } for pid=19271 comm="syz.6.3580" path="socket:[71052]" dev="sockfs" ino=71052 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1164.232349][ T30] audit: type=1400 audit(1776856918.318:2938): avc: denied { read write } for pid=19271 comm="syz.6.3580" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1164.649145][ T30] audit: type=1400 audit(1776856918.318:2939): avc: denied { open } for pid=19271 comm="syz.6.3580" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1165.353831][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1166.550990][ T30] audit: type=1400 audit(1776856920.798:2940): avc: denied { ioctl } for pid=19301 comm="syz.2.3586" path="socket:[71122]" dev="sockfs" ino=71122 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1166.637800][T19304] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1166.656561][T19304] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1168.715265][T19318] wg1 speed is unknown, defaulting to 1000 [ 1169.944069][ T30] audit: type=1400 audit(1776856923.840:2941): avc: denied { create } for pid=19314 comm="syz.6.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1171.193621][ T30] audit: type=1400 audit(1776856925.140:2942): avc: denied { bind } for pid=19327 comm="syz.5.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1171.543961][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1171.752961][T19337] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1171.762371][T19337] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1171.775441][T19337] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1172.047071][T19338] loop5: detected capacity change from 0 to 7 [ 1172.111622][T19339] netlink: 'syz.1.3595': attribute type 10 has an invalid length. [ 1172.120467][T19339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1172.434143][T19338] Dev loop5: unable to read RDB block 7 [ 1172.440275][T19338] loop5: AHDI p1 [ 1172.444237][T19338] loop5: partition table partially beyond EOD, truncated [ 1172.503474][ T30] audit: type=1400 audit(1776856925.683:2943): avc: denied { firmware_load } for pid=19329 comm="syz.7.3594" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1172.539602][T19334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1173.989774][T19350] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1175.758143][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.867549][ T30] audit: type=1400 audit(1776856929.436:2944): avc: denied { ioctl } for pid=19342 comm="syz.5.3598" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1176.455959][ T30] audit: type=1400 audit(1776856930.053:2945): avc: denied { write } for pid=19359 comm="syz.7.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1176.663884][ T30] audit: type=1400 audit(1776856930.063:2946): avc: denied { ioctl } for pid=19340 comm="syz.1.3596" path="socket:[71296]" dev="sockfs" ino=71296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1177.249721][ T30] audit: type=1400 audit(1776856930.110:2947): avc: denied { connect } for pid=19359 comm="syz.7.3601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1178.145949][T17886] Bluetooth: hci3: Frame reassembly failed (-84) [ 1180.313218][T19028] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1181.492302][ T5885] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1182.685726][T19407] wg1 speed is unknown, defaulting to 1000 [ 1182.790298][T19404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.799758][T19404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.108928][ T30] audit: type=1400 audit(1776856935.809:2948): avc: denied { read } for pid=19389 comm="syz.6.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1183.659530][T17321] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1183.763943][ T30] audit: type=1400 audit(1776856936.903:2949): avc: denied { watch watch_reads } for pid=19413 comm="syz.1.3613" path="/712" dev="tmpfs" ino=3749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1183.883924][T17893] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.352255][T17893] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.433286][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1184.477138][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1184.501423][T17893] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1184.517826][ T5885] usb 7-1: can't read configurations, error -71 [ 1185.245266][ T30] audit: type=1400 audit(1776856937.970:2950): avc: denied { write } for pid=19423 comm="syz.7.3615" name="001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1185.408033][T14560] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1185.949513][T15547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.020701][ T5885] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1186.644641][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 1186.716883][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.734246][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.926258][ T5885] usb 7-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1186.966064][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.163783][ T5885] usb 7-1: config 0 descriptor?? [ 1187.354036][T19446] No control pipe specified [ 1187.515235][ T30] audit: type=1400 audit(1776856940.272:2951): avc: denied { read } for pid=19443 comm="syz.2.3620" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1188.085309][ T30] audit: type=1400 audit(1776856940.272:2952): avc: denied { open } for pid=19443 comm="syz.2.3620" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1188.142532][T19435] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.190257][ T30] audit: type=1400 audit(1776856940.413:2953): avc: denied { ioctl } for pid=19443 comm="syz.2.3620" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1188.577919][ T5885] nintendo 0003:057E:200E.0045: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.6-1/input0 [ 1188.728493][ T5885] nintendo 0003:057E:200E.0045: Failed charging grip handshake [ 1188.739534][ T5885] nintendo 0003:057E:200E.0045: Failed to initialize controller; ret=-110 [ 1189.151600][ T5885] nintendo 0003:057E:200E.0045: probe - fail = -110 [ 1189.167964][ T5885] nintendo 0003:057E:200E.0045: probe with driver nintendo failed with error -110 [ 1189.226641][T19449] could not allocate digest TFM handle sha224-generic [ 1189.290971][ T5885] usb 7-1: USB disconnect, device number 21 [ 1189.489168][ T30] audit: type=1400 audit(1776856942.256:2954): avc: denied { read write } for pid=19456 comm="syz.7.3622" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1189.576559][T15547] hid_parser_main: 175 callbacks suppressed [ 1189.576593][T15547] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 1189.636797][T15547] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1189.742310][ T30] audit: type=1400 audit(1776856942.256:2955): avc: denied { open } for pid=19456 comm="syz.7.3622" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1189.767666][T14560] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1189.778216][T14560] Bluetooth: hci1: Injecting HCI hardware error event [ 1189.805121][T19028] Bluetooth: hci1: hardware error 0x00 [ 1190.052495][ T30] audit: type=1400 audit(1776856942.275:2956): avc: denied { ioctl } for pid=19456 comm="syz.7.3622" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x9408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1190.606858][T19435] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.456896][T19435] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.062701][T19435] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.196648][T19028] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1192.266878][T19480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1192.607231][T17321] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.664891][T17321] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.878488][T17321] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1193.456409][ T1161] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.987323][T19511] wg1 speed is unknown, defaulting to 1000 [ 1196.150285][T19512] 9p: Bad value for 'wfdno' [ 1196.324834][T19510] Mount JFS Failure: -22 [ 1196.332123][T19510] jfs_mount failed w/return code = -22 [ 1196.377171][T15547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.091468][ T30] audit: type=1400 audit(1776856949.265:2957): avc: denied { read } for pid=19506 comm="syz.5.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1197.332204][T19529] netlink: 7076 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1198.050391][T17321] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.626026][ T30] audit: type=1400 audit(1776856950.781:2958): avc: denied { mount } for pid=19535 comm="syz.1.3637" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1198.842067][T19539] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3637'. [ 1198.851860][T19539] netlink: 'syz.1.3637': attribute type 2 has an invalid length. [ 1199.930456][ T30] audit: type=1400 audit(1776856952.026:2959): avc: denied { connect } for pid=19533 comm="syz.6.3638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1202.325977][ T30] audit: type=1400 audit(1776856954.272:2960): avc: denied { unmount } for pid=6217 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1202.360476][T17321] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.823033][ T30] audit: type=1400 audit(1776856954.730:2961): avc: denied { name_bind } for pid=19556 comm="syz.1.3642" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1204.456071][T17321] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.859827][T15547] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1205.053774][T15547] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1205.080563][T15547] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.113655][T17321] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1205.127291][T15547] usb 6-1: config 0 has no interface number 0 [ 1205.149866][T17321] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.180354][T15547] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1205.205350][T15547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.247551][T15547] usb 6-1: Product: syz [ 1205.260712][T15547] usb 6-1: Manufacturer: syz [ 1205.271243][T15547] usb 6-1: SerialNumber: syz [ 1205.295140][T15547] usb 6-1: config 0 descriptor?? [ 1206.588207][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1207.353991][T15547] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22 [ 1207.359177][T15547] usb 6-1: USB disconnect, device number 33 [ 1207.405037][T19570] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3645'. [ 1209.293836][ T30] audit: type=1400 audit(1776856960.785:2962): avc: denied { read } for pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1210.114078][ T30] audit: type=1400 audit(1776856961.562:2963): avc: denied { read write } for pid=19595 comm="syz.1.3643" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1210.574124][ T30] audit: type=1400 audit(1776856961.562:2964): avc: denied { open } for pid=19595 comm="syz.1.3643" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1210.677661][ T30] audit: type=1400 audit(1776856962.020:2965): avc: denied { read write } for pid=19599 comm="syz.2.3650" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1210.708138][T19604] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1210.736144][T19604] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1211.275448][ T30] audit: type=1400 audit(1776856962.020:2966): avc: denied { open } for pid=19599 comm="syz.2.3650" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1211.305912][ T30] audit: type=1400 audit(1776856962.067:2967): avc: denied { write } for pid=19599 comm="syz.2.3650" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1211.360192][ T30] audit: type=1800 audit(1776856962.310:2968): pid=19611 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.3651" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 1211.417250][T19597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1211.475222][T19597] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1211.960575][T19597] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1211.986113][T17321] bridge0: port 3(batadv0) entered disabled state [ 1212.009376][T19597] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1212.073732][T19597] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1212.084140][T17321] bridge_slave_1: left allmulticast mode [ 1212.123774][T17321] bridge_slave_1: left promiscuous mode [ 1212.154684][T17321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.179703][T19597] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1212.268052][T17321] bridge_slave_0: left allmulticast mode [ 1212.312150][T17321] bridge_slave_0: left promiscuous mode [ 1212.342805][T17321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.532157][ T1219] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1212.549027][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.556493][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.820633][ T1219] usb 6-1: Using ep0 maxpacket: 8 [ 1212.829266][ T1219] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1213.228020][ T1219] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1213.253448][ T1219] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1213.527849][T19633] netlink: 'syz.6.3653': attribute type 15 has an invalid length. [ 1213.537199][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3653'. [ 1213.600898][T19028] Bluetooth: hci2: command 0x0406 tx timeout [ 1213.676247][ T1219] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.761474][ T1219] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1213.772200][ T1219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.893266][ T1219] usb 6-1: usb_control_msg returned -71 [ 1213.928742][ T1219] usbtmc 6-1:16.0: can't read capabilities [ 1214.005879][ T1219] usb 6-1: USB disconnect, device number 34 [ 1214.192581][T14560] Bluetooth: hci4: command 0x0406 tx timeout [ 1214.192581][T19028] Bluetooth: hci5: command 0x0406 tx timeout [ 1214.448860][ T30] audit: type=1400 audit(1776856965.623:2969): avc: denied { mount } for pid=19639 comm="syz.5.3655" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1215.880727][T19028] Bluetooth: hci2: command 0x0406 tx timeout [ 1216.165444][T17321] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1216.194323][T17321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1216.214692][T17321] bond0 (unregistering): Released all slaves [ 1216.331038][ T30] audit: type=1400 audit(1776856967.373:2970): avc: denied { unmount } for pid=15292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1216.400014][T19028] Bluetooth: hci5: command 0x0406 tx timeout [ 1216.426504][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1216.598044][T17321] : left promiscuous mode [ 1216.653275][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.801538][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.818360][T14413] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.613165][T19028] Bluetooth: hci5: command 0x0406 tx timeout [ 1219.266103][T17321] tipc: Disabling bearer [ 1219.297717][T17321] tipc: Left network mode [ 1219.901410][T19692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1220.878074][T19690] ceph: No mds server is up or the cluster is laggy [ 1220.904227][ T30] audit: type=1400 audit(1776856970.723:2971): avc: denied { ioctl } for pid=19687 comm="syz.6.3663" path="socket:[73266]" dev="sockfs" ino=73266 ioctlcmd=0x52d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1220.906762][T17321] IPVS: stopping backup sync thread 9508 ... [ 1222.648620][T17321] batman_adv: batadv0: Removing interface: macvtap1 [ 1223.488134][T17886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.499140][T15547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1223.960819][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1225.091516][T19723] libceph: resolve '0..' (ret=-3): failed [ 1225.173181][ T5885] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1225.299477][ T30] audit: type=1400 audit(1776856975.711:2972): avc: denied { execute } for pid=19715 comm="syz.5.3668" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1225.345748][ T5885] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1225.364559][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.461258][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1225.549505][ T30] audit: type=1400 audit(1776856976.001:2973): avc: denied { setopt } for pid=19733 comm="syz.1.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1225.655633][ T5885] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1225.701870][ T5885] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1225.866839][T19739] bridge0: port 4(erspan0) entered blocking state [ 1225.873576][T19739] bridge0: port 4(erspan0) entered disabled state [ 1225.880564][T19739] erspan0: entered allmulticast mode [ 1226.180386][T19739] erspan0: entered promiscuous mode [ 1226.192791][T19739] bridge0: port 4(erspan0) entered blocking state [ 1226.199466][T19739] bridge0: port 4(erspan0) entered forwarding state [ 1226.249918][ T5885] usb 3-1: Manufacturer: syz [ 1226.373750][ T5885] usb 3-1: config 0 descriptor?? [ 1226.415608][ T5885] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1226.636709][T19721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.833464][T19721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.932387][T19751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.943345][T19751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.978730][ T30] audit: type=1400 audit(1776856978.275:2974): avc: denied { wake_alarm } for pid=19718 comm="syz.2.3669" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1228.371743][ T30] audit: type=1400 audit(1776856978.631:2975): avc: denied { read } for pid=19750 comm="syz.6.3674" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1228.821257][ T5492] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1229.151888][ T24] usb 3-1: USB disconnect, device number 65 [ 1229.259633][T17321] hsr_slave_0: left promiscuous mode [ 1229.273988][T17321] hsr_slave_1: left promiscuous mode [ 1229.304907][T17321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.479077][T17321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1229.643975][T19762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1230.328421][ T5957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.353176][ T30] audit: type=1400 audit(1776856980.343:2976): avc: denied { connect } for pid=19760 comm="syz.2.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1230.390745][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.406841][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1230.458855][T17321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.473529][T17321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.553926][T17321] batman_adv: batadv0: Interface deactivated: macsec1 [ 1230.566670][T17321] batman_adv: batadv0: Removing interface: macsec1 [ 1230.761339][T17321] veth1_macvtap: left promiscuous mode [ 1230.799440][T17321] veth1_vlan: left promiscuous mode [ 1232.425365][T19805] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1232.993519][T17321] team0 (unregistering): Port device team_slave_1 removed [ 1233.011828][T17321] team0 (unregistering): Port device team_slave_0 removed [ 1233.090395][ T1161] smc: removing ib device syz2 [ 1233.430481][T19811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.578149][T19811] syz.6.3682 (19811): drop_caches: 2 [ 1233.729302][ T5492] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1233.755370][T15547] syz2: Port: 1 Link DOWN [ 1234.127545][T19818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1235.198342][ T30] audit: type=1400 audit(1776856984.910:2977): avc: denied { mount } for pid=19819 comm="syz.6.3684" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1235.619321][ T30] audit: type=1400 audit(1776856984.919:2978): avc: denied { open } for pid=19819 comm="syz.6.3684" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1349.601336][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1349.608361][ C0] rcu: 1-...!: (9 ticks this GP) idle=f1b4/1/0x4000000000000000 softirq=104825/104827 fqs=11 [ 1349.620050][ C0] rcu: (detected by 0, t=10505 jiffies, g=106301, q=198 ncpus=2) [ 1349.627864][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1349.627894][ C1] NMI backtrace for cpu 1 [ 1349.627911][ C1] CPU: 1 UID: 0 PID: 19820 Comm: syz.7.3686 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.627931][ C1] Tainted: [L]=SOFTLOCKUP [ 1349.627936][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1349.627944][ C1] RIP: 0010:do_raw_spin_unlock+0x40/0x1e0 [ 1349.627976][ C1] Code: 83 c7 04 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 82 01 00 00 81 7b 04 ad 4e ad de <0f> 85 3f 01 00 00 be 04 00 00 00 48 89 df e8 0d 86 91 00 48 89 da [ 1349.627991][ C1] RSP: 0018:ffffc90000a08da8 EFLAGS: 00000046 [ 1349.628003][ C1] RAX: 0000000000000007 RBX: ffff888079d0d2a8 RCX: ffffc90000a08d8c [ 1349.628013][ C1] RDX: 0000000000000000 RSI: ffffffff8df34f43 RDI: ffff888079d0d2ac [ 1349.628021][ C1] RBP: ffff888054a6d400 R08: 0000000000000001 R09: 0000000000000000 [ 1349.628030][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 18a8ac06ed536fcf [ 1349.628039][ C1] R13: 18a8ac06ed536fcf R14: 0000000000000000 R15: ffff888054a6dc00 [ 1349.628049][ C1] FS: 0000555557250500(0000) GS:ffff8881243db000(0000) knlGS:0000000000000000 [ 1349.628063][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1349.628073][ C1] CR2: 0000200001000000 CR3: 00000000a1e41000 CR4: 00000000003526f0 [ 1349.628082][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 1349.628090][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1349.628099][ C1] Call Trace: [ 1349.628106][ C1] [ 1349.628114][ C1] _raw_spin_unlock+0x1e/0x50 [ 1349.628132][ C1] advance_sched+0x62b/0xc80 [ 1349.628155][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 1349.628173][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1349.628191][ C1] __hrtimer_run_queues+0x470/0xa00 [ 1349.628216][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1349.628235][ C1] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 1349.628255][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1349.628274][ C1] [ 1349.628278][ C1] [ 1349.628283][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1349.628298][ C1] RIP: 0010:finish_task_switch.isra.0+0x2d3/0x1010 [ 1349.628314][ C1] Code: 2f 0a 00 00 41 c7 87 e0 0d 00 00 00 00 00 00 e9 0f 04 00 00 49 8d 7f 48 e8 7a 7e c7 09 e8 b5 8b 3b 00 fb 48 8d bb a8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1349.628326][ C1] RSP: 0018:ffffc9000367f930 EFLAGS: 00000206 [ 1349.628337][ C1] RAX: 000000000000195f RBX: ffff8880568b4a00 RCX: 0000000000000000 [ 1349.628346][ C1] RDX: 0000000000000000 RSI: ffffffff8df5a478 RDI: ffff8880568b60a8 [ 1349.628355][ C1] RBP: ffffc9000367f988 R08: 0000000000000001 R09: 0000000000000000 [ 1349.628363][ C1] R10: 0000000000000001 R11: ffffffff81d62fc2 R12: ffff888035474a00 [ 1349.628372][ C1] R13: 0000000000000001 R14: ffffffff90dc56e4 R15: ffff8880b853b240 [ 1349.628383][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 1349.628404][ C1] __schedule+0x10f1/0x6820 [ 1349.628428][ C1] ? __pfx___schedule+0x10/0x10 [ 1349.628447][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1349.628461][ C1] preempt_schedule_common+0x42/0xc0 [ 1349.628479][ C1] preempt_schedule_thunk+0x16/0x30 [ 1349.628495][ C1] try_to_wake_up+0x5f6/0x1900 [ 1349.628509][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 1349.628523][ C1] ? find_held_lock+0x2b/0x80 [ 1349.628536][ C1] ? futex_wake+0x456/0x530 [ 1349.628551][ C1] wake_up_q+0xa1/0x130 [ 1349.628563][ C1] futex_wake+0x460/0x530 [ 1349.628578][ C1] ? __pfx_futex_wake+0x10/0x10 [ 1349.628594][ C1] ? taprio_dequeue+0x166/0x5f0 [ 1349.628613][ C1] do_futex+0x32b/0x350 [ 1349.628632][ C1] ? __pfx_do_futex+0x10/0x10 [ 1349.628650][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1349.628670][ C1] __x64_sys_futex+0x34f/0x4d0 [ 1349.628690][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1349.628710][ C1] ? rcu_is_watching+0x12/0xc0 [ 1349.628731][ C1] do_syscall_64+0x10b/0xf80 [ 1349.628750][ C1] ? clear_bhb_loop+0x40/0x90 [ 1349.628766][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.628779][ C1] RIP: 0033:0x7fe7dc79c819 [ 1349.628793][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.628805][ C1] RSP: 002b:00007fff2b10e128 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1349.628817][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7dc79c819 [ 1349.628826][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe7dca15fa8 [ 1349.628835][ C1] RBP: 00000000000000f1 R08: 0000000000000001 R09: 0000000000000000 [ 1349.628843][ C1] R10: 00007fe7dca15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1349.628852][ C1] R13: 00007fe7dca15fac R14: 00007fe7dca15fa8 R15: 00007fe7dca15fa0 [ 1349.628866][ C1] [ 1349.628888][ C0] rcu: rcu_preempt kthread starved for 10450 jiffies! g106301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1350.102711][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1350.112676][ C0] rcu: RCU grace-period kthread stack dump: [ 1350.118551][ C0] task:rcu_preempt state:R running task stack:27080 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1350.132032][ C0] Call Trace: [ 1350.135301][ C0] [ 1350.138230][ C0] __schedule+0x10e9/0x6820 [ 1350.142929][ C0] ? __pfx___schedule+0x10/0x10 [ 1350.147774][ C0] ? find_held_lock+0x2b/0x80 [ 1350.152441][ C0] ? schedule+0x2bf/0x390 [ 1350.156772][ C0] schedule+0xdd/0x390 [ 1350.160834][ C0] schedule_timeout+0x127/0x280 [ 1350.165693][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1350.171086][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1350.176388][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1350.182192][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1350.187657][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1350.192442][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1350.197741][ C0] ? prepare_to_swait_event+0xae/0x4a0 [ 1350.203214][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1350.208178][ C0] ? rcu_is_watching+0x12/0xc0 [ 1350.212949][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1350.218767][ C0] rcu_gp_kthread+0x179/0x230 [ 1350.223443][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1350.228653][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1350.234562][ C0] ? __kthread_parkme+0x18c/0x230 [ 1350.239594][ C0] ? kthread+0x13a/0x450 [ 1350.243831][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1350.249026][ C0] kthread+0x370/0x450 [ 1350.253089][ C0] ? __pfx_kthread+0x10/0x10 [ 1350.257673][ C0] ret_from_fork+0x72b/0xd50 [ 1350.262268][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1350.267372][ C0] ? __switch_to+0x800/0x1100 [ 1350.272050][ C0] ? __pfx_kthread+0x10/0x10 [ 1350.276633][ C0] ret_from_fork_asm+0x1a/0x30 [ 1350.281407][ C0] [ 1350.284413][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1350.290727][ C0] CPU: 0 UID: 0 PID: 19562 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.301233][ C0] Tainted: [L]=SOFTLOCKUP [ 1350.305551][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1350.315602][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 1350.322292][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 09 80 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 1350.341912][ C0] RSP: 0000:ffffc900034ef888 EFLAGS: 00000293 [ 1350.347984][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fcfafd [ 1350.355959][ C0] RDX: ffff88801ffc2500 RSI: ffffffff81fcfad7 RDI: ffff88801ffc2500 [ 1350.363937][ C0] RBP: ffff8880b8540f40 R08: 0000000000000005 R09: 0000000000000000 [ 1350.371896][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1350.379852][ C0] R13: ffffed10170a81e9 R14: 0000000000000001 R15: ffff8880b843c5c0 [ 1350.387809][ C0] FS: 00007fb2555bb880(0000) GS:ffff8881242db000(0000) knlGS:0000000000000000 [ 1350.396730][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1350.403305][ C0] CR2: 000055c4ec05bfe8 CR3: 000000002656d000 CR4: 00000000003526f0 [ 1350.411284][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 1350.419242][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1350.427199][ C0] Call Trace: [ 1350.430469][ C0] [ 1350.433396][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1350.438764][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1350.443962][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1350.450288][ C0] ? lock_acquire+0x1b1/0x370 [ 1350.454958][ C0] ? rcu_is_watching+0x12/0xc0 [ 1350.459721][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1350.464909][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 1350.470272][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1350.475380][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1350.480485][ C0] ? page_table_check_clear+0x47e/0x8f0 [ 1350.486024][ C0] ? __page_table_check_pte_clear+0xa9/0x100 [ 1350.491993][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1350.497532][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 1350.502460][ C0] ptep_clear_flush+0x148/0x170 [ 1350.507301][ C0] do_wp_page+0x12a4/0x4350 [ 1350.511804][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1350.516647][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1350.522027][ C0] __handle_mm_fault+0x1ab6/0x2a00 [ 1350.527138][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 1350.532419][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1350.537875][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 1350.543085][ C0] handle_mm_fault+0x36d/0xa20 [ 1350.547853][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 1350.552982][ C0] exc_page_fault+0x6f/0xd0 [ 1350.557481][ C0] asm_exc_page_fault+0x26/0x30 [ 1350.562333][ C0] RIP: 0033:0x7fb2556b5db7 [ 1350.566738][ C0] Code: 00 00 00 41 55 48 89 d0 49 89 fd 41 54 49 89 f4 53 4c 89 c3 48 83 ec 10 48 39 4f 60 0f 84 c1 00 00 00 42 f6 44 01 08 01 74 59 <48> 83 61 08 fe 48 3d ff 03 00 00 76 69 49 8b 55 70 49 8d 75 60 48 [ 1350.586332][ C0] RSP: 002b:00007ffe853757f0 EFLAGS: 00010202 [ 1350.592388][ C0] RAX: 0000000000006010 RBX: 00000000000001f0 RCX: 000055c4ec05bfe0 [ 1350.600344][ C0] RDX: 0000000000006010 RSI: 000055c4ec055fd0 RDI: 00007fb2557f1ac0 [ 1350.608301][ C0] RBP: 00007fb2557f1ac0 R08: 00000000000001f0 R09: 0000000000000000 [ 1350.616257][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c4ec055fd0 [ 1350.624217][ C0] R13: 00007fb2557f1ac0 R14: 00000000000001f0 R15: 00007fb2557f1ac0 [ 1350.632188][ C0]